<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="117">
<package pkgid="bdb47141f73ee845f8e8650ed4af293995e705c5" name="SL_enable_serialconsole-1152" arch="noarch"><version epoch="0" ver="3.1" rel="4"/></package>
<package pkgid="9222412958628b8b63c56887c2b29c67137d0e79" name="SL_enable_serialconsole-192" arch="noarch"><version epoch="0" ver="3.1" rel="4"/></package>
<package pkgid="efb07dae6eeaf58d9b498ce0fa9a9fa8263d9dc2" name="SL_enable_serialconsole" arch="noarch"><version epoch="0" ver="3.1" rel="4"/></package>
<package pkgid="0aa7b40bce0b3d411a3c8d19134658914b45c726" name="SL_enable_serialconsole-384" arch="noarch"><version epoch="0" ver="3.1" rel="4"/></package>
<package pkgid="dea98a7214498b00d2154e7c045fab732a2daabd" name="SL_enable_serialconsole-96" arch="noarch"><version epoch="0" ver="3.1" rel="4"/></package>
<package pkgid="5e6119d75b498777708c5116ec027d4bf01d66b0" name="dropit" arch="x86_64"><version epoch="0" ver="1.2" rel="1"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.2-1" date="1143590400">- Initial spec file</changelog></package>
<package pkgid="86d949b743081b8f8c92442bdfec8c37de122c9a" name="dropit-debuginfo" arch="x86_64"><version epoch="0" ver="1.2" rel="1"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.2-1" date="1143590400">- Initial spec file</changelog></package>
<package pkgid="b9af4f6869b1b2d56f6cb533c8c83f4139db9191" name="tidy" arch="x86_64"><version epoch="0" ver="2005.9.1" rel="1"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.1.5-1" date="1141430400">- Initial spec file</changelog></package>
<package pkgid="fc1df31828ba037a3d70d0ed9ea93aa987abd25d" name="acl" arch="x86_64"><version epoch="0" ver="2.2.23" rel="1"/></package>
<package pkgid="55dbd757ea4df081fbb6e6ca91225b8525d0916a" name="attr" arch="x86_64"><version epoch="0" ver="2.4.16" rel="1"/></package>
<package pkgid="46ac8ca53a62afabe14fef41407987f93bade067" name="dmapi" arch="x86_64"><version epoch="0" ver="2.2.0" rel="1"/></package>
<package pkgid="c0afbfbcf469f1aa6d4533992755f6ca7f37d9df" name="dmapi-devel" arch="x86_64"><version epoch="0" ver="2.2.0" rel="1"/></package>
<package pkgid="44e05263d03379abf2463460b10295d487509905" name="kernel" arch="ia32e"><version epoch="0" ver="2.4.21" rel="32.0.1.EL.XFS"/><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1117101600">- added SGI XFS patch set</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.0.1.EL" date="1116237600">- prevent shared memory lock/unlock w/o permissions (Dave Anderson)
- prevent mlock() resource limit bypass w/shm locking (Ernie Petrides)
- fix data corruption from pte_clear() races on &gt;4GB x86's (Larry Woodman)
- fix arg/env access in ELF core dumping and /proc reads (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.EL" date="1113559200">- fix data corruption w/ext3 xattr on 64-bit arches (Jason Baron)
- validate LCP frame lengths in PPP async handling (Dave Miller)
- enable forcedeth net driver builds in x86 configs (Jim Paradis)
- isolate IP fragment queues among various callers (Dave Miller)
- prevent busy inodes for symlinks after unmounts (Don Howard)
- revise PCI device ids extending ICH7 support (John Linville)
- work around broken xw4300 BIOS AHCI BAR setup (John Linville)
- add protocol validation in net bluetooth driver (John Linville)
- enable software watchdog timer in s390,x configs (Jan Glauber)
- fix data corruption w/uselib() on bad ELF libs (Ernie Petrides)
- add USB tablet init delay in wacom_probe() (Kristian Høgsberg)
- prevent core dumps with non-readable ELF interps (Dave Anderson)
- add maxevents validation in epoll_wait() handling (Ernie Petrides)
- add len validation in /dev/random poolsize sysctl (Ernie Petrides)
- correct size of ia64 syscall table initialization (Jason Baron)
- correct x86_64 user-mode i/o port validation (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-31.EL" date="1110448800">- fix missing ppc64 netdump/diskdump symbols (Nobuhiro Tachino)
- prevent ia64 unwind from traversing off stack (Jason Baron)
- disable 3w-9xxx driver builds on ppc64 (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-30.EL" date="1110362400">- fix obscure oops in tty init_dev() handling (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-29.EL" date="1109844000">- incorporate urgent late-breaking SATA fixes (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-28.EL" date="1109152800">- add more USB device support to visor driver (Pete Zaitcev)
- implement clustered APIC support for x86_64 (Larry Woodman)
- constrain x86 MSR writes based on cpu model (Jason Baron)
- increase max superbh size for performance (Stephen Tweedie)
- add locking to prevent oops in md_seq_show() (Doug Ledford)
- restore missing ia64 panic_on_oops handling (Tatsuo Uchida)
- implement Ethernet PCI quirk for HP xw9300 (Jim Paradis)
- revert NFS flock() avoidance to -27.7.EL (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.17.EL" date="1108980000">- rework NFS flock() avoidance w/FS_WANT_FLOCK for GFS (Ken Preslan)
- prevent inode corruption from delete/lookup races (Wendy Cheng)
- preserve registers for ia64 16-byte atomic ops (Geoff Gustafson)
- update SCSI whitelist for LSI/HP/STK/EMC devices (Tom Coughlan)
- disable vary_io in ips driver to avoid ctlr hangs (Tom Coughlan)
- correct handling of 2-TB device partitions (Peter Martuccelli)
- update support for ia64 perfmon facility (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.16.EL" date="1108720800">- implement diskdump support for SATA piix/promise (Nobuhiro Tachino)
- correct /proc/mtrr size values on EM64T platforms (Larry Woodman)
- restore page permissions after writes from ptrace() (Don Howard)
- fix /proc parent pids from multi-threaded forks (Ernie Petrides)
- enable software watchdog timer support on s390,x (Jan Glauber)
- update tg3 network driver to version 3.22RH (John Linville)
- incorporate 3w-9xxx driver version 2.24.00.011fw (Adam Manthei)
- correct ending boundary check in filemap_sync() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.15.EL" date="1108548000">- add e100 driver PCI device ids for ICH7 support (John Linville)
- restore obsolete but ignored e100 module params (John Linville)
- implement user-mode (gdb) access to ia64 gate page (Jason Baron)
- fix x86_64 FPU IP and DP values in SIGFPE context (Larry Woodman)
- add qla2200 module parameter to use NVRAM RIO val (Tom Coughlan)
- update 3w-xxxx driver to 1.02.00.037 w/.033 backup (Adam Manthei)
- fix crashes in video Firewire (ieee1394) driver (Bastien Nocera)
- prevent info leaks into ext3 journal disk blocks (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.14.EL" date="1108461600">- enhance AIO performance over NFS w/FS_AIO_SYNC hook (Steve Dickson)
- defer e100_tx_timeout() work from interrupt context (John Linville)
- correct IPV6 DST entry release to prevent route leak (Dave Miller)
- ignore MTU updates from invalid IPV6 ndisc packets (Dave Miller)
- add relevant PCI device ids to extend ICH7 support (John Linville)
- reduce system pauses during heavy page laundering (Larry Woodman)
- fix audit logging of paths w/predicate filter usage (Neil Horman)
- enable building of unsupported fusion isense module (Adam Manthei)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.13.EL" date="1108375200">- increase dxfer size limit for ppc64 SG_IO ioctl32 (David Howells)
- eliminate tty line discipline usage/switching races (Jason Baron)
- fix autofs recognition of ghosted direct map updates (Jeff Moyer)
- fix sg driver race between cmd completion and close (Tom Coughlan)
- prevent e100 data corruption from v.3.0.27-k2 update (John Linville)
- upgrade SATA support (core, libata, new/old drivers) (John Linville)
- implement diskdump support for sym53c8xx adapter (Yuichi Nagahama)
- add USB support for Wacom Cintiq/Intuos3 tablets (Kristian Høgsberg)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.12.EL" date="1107943200">- update e100 network driver to version 3.3.6-k2 (John Linville)
- correct cpu id macro for dual-core Opteron support (Jim Paradis)
- add "numa=off" message on x86_64 OOM kills w/NUMA (Larry Woodman)
- improve user/system timer tick accounting on s390,x (Pete Zaitcev)
- prevent EAGAIN errs from interrupted TCP recv() calls (Dave Miller)
- update cciss disk driver to version v2.4.54.RH1 (Adam Manthei)
- eliminate diskdump cpu id from frozen list (Nobuhiro Tachino)
- fix user-space access bug in USB vicam ioctl (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.11.EL" date="1107424800">- incorporate Emulex driver ioctl module version 1.0.13 (Tom Coughlan)
- eliminate potential call_lock deadlock with diskdump (Tatsuo Uchida)
- fix potential kiobuf_lock deadlock in free_kiovec() (Larry Woodman)
- add L2 cache descriptor for EM64T Irwindale processor (Neil Horman)
- prevent mmap() syscalls from choosing NULL mappings (Rik van Riel)
- include bounce buffer pages in show_mem() output (Larry Woodman)
- add I2C driver support for ICH5 in i2c-i801.c (John Linville)
- correct parport_pc errors on insmod failures (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.10.EL" date="1106906400">- fix futex_wait() race condition that allowed app hang (Ingo Molnar)
- add/correct write barrier placement in timer routines (David Howells)
- add x86_64 NMI switch support to debug kernel hangs (Yuichi Nagahama)
- restore CIV/LVI offset operation in i810_audio driver (John Linville)
- update e1000 network driver to version 5.6.10.1-k2 (John Linville)
- prevent bogus BUG_ON during multi-threaded core dump (Roland McGrath)
- fix x86_64 crash in huge_page_release() w/SHM_HUGETLB (Larry Woodman)
- fix possible mem corruption from /proc/kcore access (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.9.EL" date="1106647200">- fix core dumping over NFS mounts with "intr" option (Roland McGrath)
- prevent multi-threaded app hang from sys_wait4() race (Ingo Molnar)
- restore e1000 support for Intel PCI device id 1014 (John Linville)
- add ac97 quirk entries for HP xw6000/xw6200/xw8000 (John Linville)
- update b44 network driver to upstream version 0.95 (John Linville)
- revert NFS silly-delete and rpciod-hang patches (Steve Dickson)
- fix panics while backing up LVM snapshots (Heinz Mauelshagen)
- fix oops in redirect_target() on DHCP refresh (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.8.EL" date="1105696800">- rework ia64 INIT switch stacks for clean tracebacks (Tatsuo Uchida)
- fix USB raced timeout errors and ohci_complete_add() (Pete Zaitcev)
- add O_DIRECT handling in LVM driver handling (Heinz Mauelshagen)
- downgrade wait4() SIGCHLD/SIG_IGN warning message (Ingo Molnar)
- eliminate potential VMA list races with do_brk() (Dave Anderson)
- ignore ICMP Source Quench messages in tcp_v4_err() (Dave Miller)
- prevent VMA overlap crashes in insert_vm_struct() (Jason Baron)
- move flock() avoidance from NFS up to F/S layer (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.7.EL" date="1105437600">- fix 32-compat alt-stack signal handling on x86_64 (Geoff Gustafson)
- add initialization of ppc64 EEH error buffer size (David Howells)
- make ppc64 xmon work properly with Power5 console (David Howells)
- prevent infinite sync loop from NFS ESTALE writes (Steve Dickson)
- update 8139too network driver w/recent 2.4 fixes (John Linville)
- avoid netfilter oops when ip_conntrack is unloaded (Dave Miller)
- fix potential rpciod hangs during NFS sillydelete (Steve Dickson)
- avoid "No locks available" errors w/flock() on NFS (Ken Preslan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.6.EL" date="1104919200">- fix x86 phys proc ids for non-clustered APIC systems (Geoff Gustafson)
- return EINVAL on e100/e1000 rx-mini/rx-jumbo settings (John Linville)
- fix i810_audio regression from modified ICH6 PCI ids (John Linville)
- prevent race conditions in add_wait_queue_cond() macros (Jeff Moyer)
- fix FAT32 file system corruption w/writing 8M files (Alexander Viro)
- fix derivation/presentation of PHB unit ids on ppc64 (David Howells)
- close OpenFirmware stdin device at boot on ppc64 (David Woodhouse)
- fix 32-bit-compat regression in CMSG validations (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.5.EL" date="1103796000">- add "CommitLimit" data to /proc/meminfo output (Frank Hirtz)
- allow autofs to expire mounts on ppc64 arch (Jeff Moyer)
- add 3c59x EEPROM_RESET for 3c900 Boomerang (John Linville)
- ignore PTE mapping status in page_anon() (Larry Woodman)
- fix SIOCGIFHWADDR handling for zero addr_len (Dave Miller)
- add netdump support for x86_64, ia64, ppc64 (Dave Anderson)
- correct overcommit accounting on fork failure (Frank Hirtz)
- raise default ia64/ia32e swiotlb size to 64M (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.4.EL" date="1103709600">- add network CMSG validation checks (Dave Miller)
- fix data struct leak in ip_options_get() (Dave Miller)
- fix IGMP vulnerabilities in ip[6]_mc_source() (Dave Miller)
- fix e_phnum binfmt_elf loader vulnerability (Dave Anderson)
- clean x86_64 32-bit-compat syscall numbers (Jim Paradis)
- prevent ia64 floating point reg val leakage (Jason Baron)
- add USB io_edgeport driver size check (Peter Martuccelli)
- enable softirq deferral for x86_64 arch (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.3.EL" date="1102586400">- add data/param length sanity checks in smbfs (Alexander Viro)
- prevent /proc/&lt;PID&gt;/cmdline env data disclosure (Dave Anderson)
- make tulip_stop_rxtx() wait for DMA termination (John Linville)
- fix mm_stat regression introduced in -20.13.EL (Rik van Riel)
- correct return value from vlan_dev_change_mtu() (John Linville)
- serialize datagram read w/appropriate semaphore (Dave Miller)
- fix keyboard regression introduced in -24.EL (Peter Martuccelli)
- enable mmap/mprotect PROT_EXEC for legacy apps (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-26.2.EL" date="1101722400">- fix USB problems with keyboards and ia64 oopses (Pete Zaitcev)
- add i810 PCI IDs for nforce3/CK804 audio devices (Jim Paradis)
- fix ppc64 viodasd driver dev naming/limit bugs (David Howells)
- prevent tg3 fiber link bounces w/auto-negotiation (Dave Miller)
- add ac97 quirk handling for i810_audio driver (John Linville)
- prevent incorrect OOM killing with iscsi usage (Larry Woodman)
- create kiobuf cache to reduce lowmem contention (Larry Woodman)
- fix yet another binfmt_elf loader vulnerability (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.1.EL" date="1100512800">- (this is the first build for RHEL 3 Update 5)
- implement open() recovery from NFS ESTALE errors (Neil Horman)
- clean up warnings from lpfc and lpfc_703 Makefiles (Tom Coughlan)
- fix nessus-induced kernel panic with auditing (Peter Martuccelli)
- update 3c59x driver to LK1.1.18 and fix reset bug (John Linville)
- fix ext3 O_DIRECT bug in orphan list handling (Stephen Tweedie)
- flush cached dirty pages on NFS reads w/O_DIRECT (Steve Dickson)
- allow ia64 kernel unaligned access msg suppression (Neil Horman)
- correct test for performing buffer-head reclaim (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.EL" date="1100253600">- fix binfmt_elf loader vulnerabilities (Jim Paradis, Dave Anderson)
- limit kernel data struct slabs to single-page allocs (Larry Woodman)
- update Emulex driver to 7.1.14 (backup still 7.0.3) (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-24.EL" date="1100080800">- fix several ppc64 problems with signal catching (David Woodhouse)
- fix several bugs in /proc/ppc64/lparcfg driver (David Howells)
- fix possible diskdump hangs w/megaraid2 driver (Tatsuo Uchida)
- add support for IBM EM64T-based Groucho blade (Peter Martuccelli)
- fix regression in USB BIOS-&gt;kernel hand-off support (Pete Zaitcev)
- fix regression in ia64 kernel stack unwind handling (Don Howard)
- fix regression w/agpgart support of i8xx chipsets (Larry Woodman)
- add support for BLKSSZGET ioctl in cciss driver (Tom Coughlan)
- disable iSCSI builds in ppc64 and s390* configs (Tom Coughlan)
- update Emulex driver to 7.1.13 (backup still 7.0.3) (Tom Coughlan)
- correct SCSI whitelist for Chaparral FR1422 devices (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-23.EL" date="1098957600">- prevent kswapd from getting stuck in prune_icache() (Larry Woodman)
- fix ppc64 single-stepping into signal handlers (David Woodhouse)
- fix corruption from user stack expansion races (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-22.EL" date="1098093600">- prevent add/removal races in SCSI open handling (Doug Ledford)
- fix U3 agpgart regression with Intel i8xx chipsets (Dave Jones)
- update SCSI whitelist for IBM 1722/1724 devices (Tom Coughlan)
- correct TSS descriptor limit checking for x86_64 (Jim Paradis)
- add nforce3/CK804 device support and fix ACPI bug (Jim Paradis)
- add support for "forcedeth" net driver version 0.28 (Jim Paradis)
- enable diskdump support in amd64/ia32e configs (Nobuhiro Tachino)
- restore/improve linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- add missing page_cache_release() in launder_page() (Larry Woodman)
- update Emulex driver to 7.1.11 (backup still 7.0.3) (Tom Coughlan)
- add new USB ids to support latest Wacom tablets (Kristian Høgsberg)
- remove drivers/net/tun.o from unsupported list (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-21.EL" date="1096538400">- fix potential PTE race in do_anonymous_page() (Rik van Riel)
- add "Committed_AS" data to /proc/meminfo output (Frank Hirtz)
- revise DMA zone paging thresholds for x86_64 (Larry Woodman)
- prevent /proc/scsi/scsi oops during probes (David Woodhouse)
- avoid kswapd hangs via free_more_memory() hooks (Rik van Riel)
- update megaraid2 driver to 2.10.8.2 w/2.10.6 backup (Adam Manthei)
- fix do_notify_parent() panic from ptrace death race (Roland McGrath)
- fix large core file support on 64-bit architectures (Dave Anderson)
- enable tux on ia64 and increase max tux threads to 16 (Ingo Molnar)
- fix ia64/s390,x single-stepping w/signal handlers (David Woodhouse)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.14.EL" date="1096452000">- fix hang in SCSI starvation management code (David Howells)
- update SCSI whitelist for NETAPP LUN devices (Wendy Cheng)
- fix s390 cio handling during ESS fail-overs (Pete Zaitcev)
- update Emulex driver to 7.1.8 w/7.0.3 backup (Tom Coughlan)
- update Qlogic driver to 7.01.01 w/7.00.03 backup (Tom Coughlan)
- correct unlock/free order in proc_lookupfd() (Ernie Petrides)
- use ACPI for PCI interrupt routing on ia32e (Jim Paradis)
- allow cpus to boot w/APIC IDs &gt; 8 on ia32e (Jim Paradis)
- fix pid allocation when pid_max &gt; 32768 (Ernie Petrides)
- fix regs in multi-threaded ia64 core dumps (Keiichi Mori)
- enable sym53c8xx driver for ppc64 iSeries (David Howells)
- fix ac97 depmod errors w/hugemem configs (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.13.EL" date="1096365600">- fix aic79xx_osm.h/3c59x.c changes in prior rev (Tachino/Linville)
- allow for larger nfsd block sizes on some archs (Steve Dickson)
- fix possible aacraid driver panic in aac_info() (Tom Coughlan)
- fix xdr argsize check to handle writes &gt;= 2^31 (Steve Dickson)
- update e1000 network driver to version 5.3.19-k2 (John Linville)
- apply several cciss driver fixes (to 2.4.52.RH2) (Adam Manthei)
- fix x86_64 versions of cpu capability test macros (Jim Paradis)
- fix ppc64 HPTE memory corruption race condition (Rik van Riel)
- add sys_epoll support on s390,x (Stephen Tweedie, Pete Zaitcev)
- prevent keyboard.c warnings from mouse clicks (Norm Murray)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.12.EL" date="1096279200">- improve slab cache page reaping heuristics (Larry Woodman)
- implement diskdump support for x86_64 arch (Nobuhiro Tachino)
- add ia64 INIT trigger switch support for debugging (Tatsuo Uchida)
- fix several problems in handling of AIO on pipes (Jeff Moyer)
- update fixes for LTP read02 test hangs with tmpfs (Alexander Viro)
- fix x86_64 single-stepping out of signal handlers (Jim Paradis)
- increase size of ppc64 RTAS error log buffer (David Howells)
- increase max possible kNFSD lockd cookie size (Steve Dickson)
- backport 3c59x fixes for mii-tool problems w/10Mb (John Linville)
- incorporate Cisco's iscsi_sfnet initiator driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.11.EL" date="1095933600">- implement diskdump support for megaraid2 adapter (Tatsuo Uchida)
- update ips driver to version 7.10.18 w/7.00.15 backup (Tom Coughlan)
- correct max page aging interval boundary in kscand() (Larry Woodman)
- add ppc64 support for ptrace() with PT_SINGLESTEP (David Woodhouse)
- update e100 network driver to version 3.0.27-k2 (John Linville)
- fix LTP read02 test hangs when tmpfs is in use (Alexander Viro)
- get proc_dir_entry reference in proc_lookup() (Alexander Viro)
- add exports of several AIO-related interfaces (Larry Woodman)
- reduce swapping during excessive pagecache use (Larry Woodman)
- implement statfs64() syscall on x86 for NFS use (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.10.EL" date="1095847200">- implement early USB hand-off (BIOS-&gt;kernel) support (Pete Zaitcev)
- fix stack pointer calculation in x86 show() handling (Jeff Moyer)
- prevent interference between flock/POSIX lock types (Frank Hirtz)
- update pcnet32 network driver to version 1.30c (John Linville)
- add export of block_commit_write() f/s interface (Larry Woodman)
- implement diskdump support for dpt_i2o adapter (Tatsuo Uchida)
- update mptfusion driver to version 2.05.16.02 (Adam Manthei)
- move disk_dump_notifier_list to diskdumplib.c (Nobuhiro Tachino)
- update s390 zfcp driver to revision 5.31.2.11+ (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.9.EL" date="1095674400">- fix occasional ibmvscsic driver insmod crash (David Howells)
- disable linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- prevent double slashes in symlink auditing (Peter Martuccelli)
- fix overzealous compat32 setsockopt conversions (David Woodhouse)
- backport tulip driver fixes from upstream 2.4.28 (John Linville)
- update tg3 network driver to version 3.10RH (John Linville)
- implement sysctl to force igmp protocol versions (Neil Horman)
- add diskdump performance improvement info (Nobuhiro Tachino)
- fix s390 iucv lost connections and ping hangs (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.8.EL" date="1095588000">- prevent diskdump deadlock in case of die() recursion (Tatsuo Uchida)
- add x86/x86_64 support for ptrace() w/PT_SINGLESTEP (Roland McGrath)
- fix x86/x86_64 single-stepping into signal handlers (Roland McGrath)
- increase x86 value for MAX_MP_BUSSES definition to 260 (Ingo Molnar)
- eliminate ia64 potential for scheduler runq deadlock (Larry Woodman)
- add support for /proc/sys/kernel/mem_nmi_panic sysctl (Dave Anderson)
- prevent keyboard-initiated sysrq hangs in handle_sysrq() (Jeff Moyer)
- fix intermittent netdump hangs from cpu-frozen messages (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.7.EL" date="1095415200">- fix premature OOM killing change added in prior rev (Larry Woodman)
- backport vlan driver fixes from upstream 2.4.28-rc1 (John Linville)
- add _sb_findmap symbol export in s390/s390x kernels (Pete Zaitcev)
- add ppc64 support for 32-bit sendfile64() syscall (David Howells)
- fix 32-bit IPC_INFO shmctl() syscalls for ppc64 (David Howells)
- upgrade libata/SATA support to current 2.4 bits (John Linville)
- avoid USB device resets of shared/busy interfaces (Pete Zaitcev)
- fix miscellaneous problems in ppc64 icom driver (David Howells)
- fix ip_queue_maxlen sysctl for ip[6]_queue modules (Neil Horman)
- add module parm for max entries in NFS_ACL replies (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.6.EL" date="1095156000">- prevent OOM killer from kicking in prematurely (Larry Woodman)
- avoid NMI watchdog crashes during sysrq-m usage (Wendy Cheng)
- add auditing support for ia64 clone2 syscall (Peter Martuccelli)
- correct sign of auditing error codes for ia64 (Peter Martuccelli)
- implement ia64 auditing 32-bit-disable sysctl (Peter Martuccelli)
- fix ia64 faults w/stale VHPT-generated TLB entries (Dave Anderson)
- fix invalid x86_64 checksums for multicast packets (Mike Gahagan)
- fix incorrect blocking bug inside wakeup_kswapd() (Larry Woodman)
- validate appropriate media type in DVD drives (Doug Ledford)
- reduce s390 stack usage in qeth/qdio drivers (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.5.EL" date="1094810400">- prevent scenarios that lead to hang of kswapd (Larry Woodman)
- add locking for access to /proc/bus/usb/devices (Pete Zaitcev)
- correct x86 rescheduling to handle apm=power-off (Ingo Molnar)
- fix OOM killer locking and mm referencing holes (Larry Woodman)
- pin ia64 mapping for idle proc stack during boot (Larry Woodman)
- fix warning throttle for amd64 stack overflow check (Neil Horman)
- fix content lengths when using tux gzip compression (Ingo Molnar)
- add auditing support for pread/pwrite syscalls (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.4.EL" date="1094724000">- prevent bogus data in /proc/scsi/ibmvscsi/* (David Howells)
- update tg3 network driver to version 3.9RH (John Linville)
- improve ramfs memory alloc w/scarce highmem (Larry Woodman)
- correct several values in /proc/ppc64/lparcfg (David Howells)
- allow dirty page rebalancing under mem pressure (Rik van Riel)
- prevent memory leak in scsi_build_commandblocks() (Doug Ledford)
- fix potential kswapd deadlock w/disk quota usage (Larry Woodman)
- increase MAX_IO_APICS from 8 to 32 for x86_64 arch (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.3.EL" date="1094205600">- fix various error path bugs in bcm5820 driver (John Linville)
- validate addresses used with /dev/kmem accesses (Neil Horman)
- eliminate IPSEC tunnel leaks when using IPComp (Dave Miller)
- add auditing support for utimes() syscalls (Peter Martuccelli)
- prevent netconsole freeze w/cable dis-/re-connect (Jeff Moyer)
- correct reboot_cpu validation for "reboot=s&lt;n&gt;" (Doug Ledford)
- fix mem/irq clean-up in olympic tokenring driver (Neil Horman)
- update network bonding driver to version 2.6.0 (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.2.EL" date="1094032800">- add maps/rlimits output with print-fatal-signals=2 (Ingo Molnar)
- backport ac97 sound support from upstream 2.4.27 (John Linville)
- eliminate kernel stack data leaks from USB drivers (Mark Cox)
- fix interrupt status mask in AMD PCnet32 driver (David Howells)
- fix module loading problems in ibmvscsic driver (David Howells)
- fix x86 shared runq mapping when ACPI data is bad (Bernd Schmidt)
- disable enhanced error handling on PCI-ISA bridges (David Howells)
- add memory-mapped i/o support to i810_audio driver (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.1.EL" date="1093860000">- (this is the first build for RHEL 3 Update 4)
- backport r8169 network driver changes from 2.4 (John Linville)
- update i810_audio sound driver to version 1.01 (John Linville)
- convert USB UHCI driver warning to debug message (Pete Zaitcev)
- backport 2.6 PROT_GROWSDOWN/UP mprotect() support (Jakub Jelinek)
- lower ppc64 console logging level of RTAS messages (David Howells)
- fix ppc64 handling of "smt-emabled=off" boot option (David Howells)
- correct socket sndbuf accounting w/IP_MULTICAST_LOOP (Neil Horman)
- reduce x86_64 user stack start randomization to 16K (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.EL" date="1092823200">- change TARGET_CPUS on x86_64 to include all on-line cpus (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-19.EL" date="1092304800">- fix possible races/overflows in file offset handling (Alexander Viro)
- correct logging of boot progress messages on Power5 (David Howells)
- extend ppc64 EEH support for other types of devices (David Howells)
- fix ibmveth driver to properly shut down and restart (David Howells)
- fix several races and overflows in ppc64 RTAS driver (David Howells)
- backport "acpi=noirq" support to work around Nocona hangs (Don Howard)
- conditionalize pbn_hp_diva to fix serial driver oops (Matthew Galgoci)
- add amd64 GART entry guard mappings for PCI mis-prefetch (Jim Paradis)
- upgrade SATA support again to resolve several problems (Jeff Garzik)
- qualify ia32e IRQ affinity disable with BIOS flag check (Jim Paradis)
- fix eeh_check_failure() on ppc64 to be interrupt safe (David Howells)
- correct ppc64 EEH macros to use appropriate data size (David Howells)
- fix x86/ia64 no-wait handling in smp_call_function() (Larry Woodman)
- fix "Filter target 0x203 not known ..." audit msgs (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-18.EL" date="1090404000">- prevent s390 mlock hangs with follow_page() rework (Ernie Petrides)
- fix Power5 initialization and handling of RAS IRQs (David Howells)
- fix ppc64 viocons driver deadlocks with printk() (David Howells)
- apply eh_timeout, netdump, cli fixes in diskdump (Tatsuo Uchida)
- add skip_mapped_pages tuning for page eviction (Stephen Tweedie)
- fix initrd's effect on ppc64 mem_end calculation (David Howells)
- allow HT support on ppc64 systems with single cpu (David Howells)
- backport v2.0.8 aic7xxx driver h/w support for Dell (Tom Coughlan)
- correct ppc64 device node searching in hvsi driver (David Howells)
- fix KMI compat problem w/pgprot_t in x86 NX support (Jim Paradis)
- resurrect mptfusion driver backup version 2.05.05 (Tom Coughlan)
- disable IRQ affinity setting on some ia32e systems (Jim Paradis)
- update SCSI whitelist for Dot Hill SANnet/StorEdge (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-17.EL" date="1089280800">- account for zone holes in big hash table allocator (Stephen Tweedie)
- prevent reserved stack space overflow of mmap_top (Ernie Petrides)
- fix USB crash in scan_async() with EHCI hardware (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-16.EL" date="1088848800">- enable exec-shield and add x86 NX support (Ingo Molnar, Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.19.EL" date="1088762400">- add owner check in inode_change_ok() for gid changes (Ernie Petrides)
- fix race in finish_task_switch() between wakeup/exit (Ernie Petrides)
- remove Samsung CD-ROM SN-124 from IDE DMA blacklist (Tom Coughlan)
- update e1000 network driver to version 5.2.52-k3 (John Linville)
- add auditing support for semtimedop syscalls (Peter Martuccelli)
- fix tasklet and locking bugs in Power5 hvsi driver (David Howells)
- fix megaraid2 handling of TUR cmds with SCSI CD-ROM (Adam Manthei)
- update SCSI whitelist for HP NS E1200-160 router (Tom Coughlan)
- prevent x86 read_ldt() from reading beyond kmap (Ernie Petrides)
- force single loadable segment in ia64 kernels (Jakub Jelinek)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.18.EL" date="1088157600">- implement ia64 work-around for TLB fetch timeout MCA (Larry Woodman)
- fix Power3 interrupt initialization in ppc64 setup (David Howells)
- correct info msg, prevent double panic in diskdump (Tatsuo Uchida)
- defend against NULL "mm" ptrs in page_referenced() (Rik van Riel)
- fix miscellaneous audit subsystem problems (Peter Martuccelli)
- prevent crash with tux CGI execution on x86_64 (Ingo Molnar)
- add installer info to SATA sx8 block driver (Jeff Garzik)
- turn on vary_io flag in SCSI ips driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.17.EL" date="1087984800">- allocate big system hash tables w/bootmem allocator (David Howells)
- prevent loading aic7xxx_old when aic7xxx is in use (Doug Ledford)
- implement stat() recovery from NFS ESTALE errors (Steve Dickson)
- fix raw/O_DIRECT i/o bug with unmapped pages (Stephen Tweedie)
- correct another locking hole in RAID1 handling (Doug Ledford)
- fix __x86_64__ conditional in megaraid2.c driver (Adam Manthei)
- fix unresolved symbols on ia64 in cciss driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.16.EL" date="1087898400">- make NFS sillydelete wait for unlink completion (Steve Dickson)
- prevent EIO w/concurrent O_DIRECT+buffered i/o (Stephen Tweedie)
- upgrade SATA support (core, libata, and drivers) (Jeff Garzik)
- implement futex() FUTEX_CMP_REQUEUE op (Al Viro, Pete Zaitcev)
- update b44 network driver to version 0.93 (John Linville)
- avoid unix_stream_sendmsg() ENOBUFS errors (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.15.EL" date="1087812000">- improve SCSI mid-layer error handling w/sdev_retry_q (Doug Ledford)
- eliminate rw-semaphore races between waiter/wakeup (David Howells)
- add locking and fix accounting bug in RAID1 handling (Doug Ledford)
- backport Carmel sx8.c driver from upstream 2.4 base (John Linville)
- rename ppc64-squadrons-* patches to ppc64-power5-* (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.14.EL" date="1087639200">- introduce support for IBM Squadrons/Power5 systems (David Howells)
- update aacraid driver to 1.1.5-2339 w/1.1.2 backup (Adam Manthei)
- allow sys_remap_file_pages() on unlocked ramfs VMAs (Larry Woodman)
- fix diskdump hangs during resets with aic79xx driver (Tatsuo Uchida)
- fix possible data corruption when using SHM_HUGETLB (Larry Woodman)
- set QLogic HbaApiNode proc file permissions to 0600 (Tom Coughlan)
- add IRQ blocking/restoring in add_gendisk/del_gendisk (Jeff Needle)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.13.EL" date="1087466400">- fix problem causing PCI bus 255 to be missing on ia64 (Ben Woodard)
- make nfs_statfs() recognize/handle fs size overflows (Steve Dickson)
- update QLogic driver to 7.00.03-RH1 w/6.07.02 backup (Tom Coughlan)
- allow procfs to utilize more dynamic inode numbers (David Howells)
- prevent inappropriate "unexpected IO-APIC" messages (Ernie Petrides)
- avoid lost dirty page bits in s390/s390x VM handling (Pete Zaitcev)
- fix ACPI SCI interrupt defaults and add kernel params (Jim Paradis)
- fix user-space access bugs in acpi/airo/decnet/sound (Alexander Viro)
- remove drivers/net/starfire.o from unsupported list (Ernie Petrides)
- fix mm_struct mem leak in copy_process() error path (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.12.EL" date="1087293600">- correct s390/s390x tests for PT_AUDITED flag (Peter Martuccelli)
- update e100 network driver to version 2.3.43-k1 (John Linville)
- update megaraid2 driver to 2.10.6 w/2.10.1.1 backup (Adam Manthei)
- add x86_64 auditing support for 32-bit-compat (Peter Martuccelli)
- fix ia64 unwind handling for UNW_INSN_SETNAT_MEMSTK (Jason Baron)
- update cciss driver to v2.4.52 for several fixes (Tom Coughlan)
- fix variable block mode tape handling in st driver (Tom Coughlan)
- incorporate latest Emulex fibre channel driver (Tom Coughlan)
- fix USB EHCI problem with BIOS-to-host handoff (Pete Zaitcev)
- update SCSI whitelist for DDN/Xyratex/SanDisk/CBOX3 (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.11.EL" date="1087207200">- upgrade to latest autofs4, remove from unsupported list (Jeff Moyer)
- fix memory corruption bug in audit driver code (Peter Martuccelli)
- store adjusted KSP value in ia64 diskdump support (Tatsuo Uchida)
- update e1000 network driver to version 5.2.52-k1 (John Linville)
- update ips driver to version 7.00.15 w/6.11.07 backup (Adam Manthei)
- implement USB device interlock between ioctls/SCSI-ops (Pete Zaitcev)
- update tg3 driver to version 3.6RH for upcoming chipsets (Dave Miller)
- downgrade several PCI cache line size debugging messages (Jim Paradis)
- correct x86_64 32-bit-compat support for AIO syscalls (Jeff Moyer)
- prevent FPU exception handling hangs on x86/x86_64 (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.10.EL" date="1086948000">- give wait.func highest priority in wake_up_filtered() (Larry Woodman)
- reduce system time when using sys_remap_file_pages() (Larry Woodman)
- enable CONFIG_SOFT_WATCHDOG module for ppc64 configs (David Howells)
- improve page allocation to avoid unnecessary swapping (Rik van Riel)
- implement diskdump support for ia64 with mptfusion (Tatsuo Uchida)
- disable native ia32 support for ia64 Montecito cpus (Jason Baron)
- save/restore P4/ia32e perf registers for oprofile (Will Cohen)
- fix oprofile ESCR_SET_EVENT_SELECT() event mask (Will Cohen)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.9.EL" date="1086775200">- update s390 zcrypt driver to version 1.2.1 (Pete Zaitcev)
- update network tg3 driver to version 3.5RH (Dave Miller)
- eliminate separate ia32e oprofile processor id (Will Cohen)
- update SCSI whitelist for IBM 2105/2145 devs (Doug Ledford)
- avoid EAGAIN errors on blocking UDP sockets (Steve Dickson)
- avoid putting locked inodes on dirty list (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.8.EL" date="1086688800">- decouple NFS O_DIRECT handling for performance gain (Steve Dickson)
- export page_is_ram() interface for amd64/ia32e arch (Jim Paradis)
- enable CONFIG_SCSI_SATA_* options in x86_64 configs (Jim Paradis)
- update mptfusion driver to 2.05.16 w/2.05.11.03 backup (Adam Manthei)
- fix nopage_sequential_readahead() and filemap_sync() (Larry Woodman)
- fix USB EHCI driver to avoid Squadrons install oops (Pete Zaitcev)
- add x86 NMI trigger switch support for debugging (Yuichi Nagahama)
- add dmi_blacklist[] entry for "Intel NA440BX DP" (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.7.EL" date="1086602400">- apply some minor scsi_dump_status() format tweaks (Doug Ledford)
- implement SCSI support for dynamic add (hot plug) (Doug Ledford)
- upgrade lvm driver logic to version 1.0.8-2 (Heinz Mauelshagen)
- fix x86_64 definition for inlined ffs() function (Jim Paradis)
- preserve VM_MAYEXEC for executable stack support (Jim Paradis)
- add extra SLBIEs for ppc64 Power5 DD2.0 errata (David Howells)
- add ppc64 32-bit compat for TIOCGICOUNT/MIWAIT (David Howells)
- hold file struct ref when removing POSIX locks (Steve Dickson)
- fix window scaling bug in tcp_ack_update_window() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.6.EL" date="1086343200">- make fsync() flush all pending NFS updates to disk (Steve Dickson)
- complete ia64 support for multiple I/O port spaces (Larry Woodman)
- fix sending of IP broadcast frames with TTL of zero (Neil Horman)
- prevent context switch storms under high VM loads (Larry Woodman)
- fix sigaltstack() errors w/JVM on hugemem kernels (Roland McGrath)
- add locking and improve output in scsi_dump_status() (Doug Ledford)
- add size boundary checking in scsi_resize_dma_pool() (Doug Ledford)
- fix SCSI request struct leak on command init failures (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.5.EL" date="1084528800">- overhaul ia64 SAL/MCA subsystem (Ben Woodard)
- enable x86_64 32-bit UID support (Jim Paradis)
- add initial diskdump support (Nobuhiro Tachino)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.4.EL" date="1084356000">- reduce chance of "VFS: Busy inodes after unmount." errs (Steve Dickson)
- convert "uaddr2" arg ptr in s390x futex() compat syscall (Pete Zaitcev)
- add ppc64 32-bit compat handler for PE_LOCKED_COPY ioctl (David Howells)
- update s390 dasd driver with several recent bug fixes (Pete Zaitcev)
- fix amd64 NUMA node scanning for Northbridge systems (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.3.EL" date="1084183200">- prevent exp_stopfodrop() oops during cluster failover (Steve Dickson)
- make nfs_file_commit() always flush the entire file (Steve Dickson)
- fix pcnet32 driver's MAC address selection on ppc64 (Julie DeWandel)
- backport /dev/random driver fixes for missed wakeups (Mark DeWandel)
- fix hang w/SoundBlaster 16-bit sampling w/odd count (Ernie Petrides)
- make s390 tape driver specify GPL module license type (Pete Zaitcev)
- correct buffer len value in ppc64 pSeries ipr driver (David Howells)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.2.EL" date="1083664800">- enable booting on 8-way Opteron systems (Jim Paradis)
- fix 32-bit-compat truncate64() on x86_64 (Jim Paradis)
- correct promiscuous mode counter handling (Dave Miller)
- support 128-GB ia64 systems w/HP zx1 chipset (Larry Woodman)
- add export of sys_ioctl() global symbol on s390x (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.1.EL" date="1083578400">- (this is the first build for RHEL 3 Update 3)
- reenable/fix linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- clean up file locks when NFS clients receive signals (Steve Dickson)
- complete ia64-specific LAuS syscall auditing support (Mark DeWandel)
- prevent NULL pointer dereference in page_referenced() (Rik van Riel)
- fix max sectors argument in lvm_snapshot_alloc() (Heinz Mauelshagen)
- allow AGP bus scanning to execute for all architectures (John Dennis)
- fix page_referenced() rss limit checks w/unmapped pages (Rik van Riel)
- correct locking and cr/lf problems in usbserial driver (Pete Zaitcev)
- add /proc/cpuinfo support for new ppc64 processors (Julie DeWandel)
- fix sense data handling on certain SCSI cmd retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.EL" date="1082541600">- fix clobbering of /proc/cpuinfo vendor_id on x86_64 (Jim Paradis)
- correct MCAST_MSFILTER/IP_MSFILTER size checking (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-14.EL" date="1081936800">- disable linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- prevent symlink buffer overflow in ISO-9660 fs (Ernie Petrides)
- check for skb overrun in IPV4/IPV6 IGMP handling (Dave Miller)
- fix possible hang in rebalance_laundry_zone() (Larry Woodman)
- correct zone_wired[] initialization for NUMA (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-13.EL" date="1081332000">- fix several critical libata bugs (Jeff Garzik)
- correct IPSEC XFRM policy ref counting (Dave Miller)
- add amd64/ia32e parsing for "acpi=off" arg (Jim Paradis)
- update tg3 driver to v3.1 for several fixes (Dave Miller)
- fix SCSI whitelist for Hitachi/HP DFx00, Apple Xserve (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-12.EL" date="1080295200">- add USB support for Handspring Treo 600 PDA syncing (Matthew Galgoci)
- clear state for CPEs during ia64 MCA SAL error logging (Ben Woodard)
- prevent DMA resource leak in QLogic driver error path (Tom Coughlan)
- change default QLogic driver device queue depth to 64 (Tom Coughlan)
- replace fabricated cciss drive geometry w/ENXIO error (Tom Coughlan)
- update SCSI whitelist for HP SureStore/StorageWorks (Tom Coughlan)
- disable CONFIG_ACPI_DEBUG in amd64/ia32e configs (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-11.EL" date="1078740000">- add yet another Intel ICH6 SATA PCI id (Jeff Garzik)
- fix ref counting in copy_process() error path (Larry Woodman)
- remove ia64 support for /proc/bus/mckinley/bitmap (Jason Baron)
- correct depmod versioning for unsupported modules (Ernie Petrides)
- prevent data corruption in ia32e phys_proc_id[] info (Larry Woodman)
- change default value for inactive_clean_percent to 30 (Larry Woodman)
- enable improved version of s390 on-demand timer patch (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-10.EL" date="1078221600">- incorporate late-breaking libata fixes (Jeff Garzik)
- enable amd64 syscall for tux support (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.17.EL" date="1078135200">- reduce s390 idle overhead with on-demand timer patch (Pete Zaitcev)
- complete ia64 NPTL support for 32-bit-EL executables (Jason Baron)
- add several ia64 syscall table entries for 32-bit-EL (Jason Baron)
- upgrade libata/SATA support, delete ich5-sata.patch (Jeff Garzik)
- check for mremap/vmtruncate race in move_one_page() (Jason Baron)
- prevent ia64 NaT-bit corruption during sig catching (Jason Baron)
- fix amd64 get_mtrr() parsing error with &gt;4GB memory (Jim Paradis)
- change amd64 default behavior to avoid TSC timer use (Jim Paradis)
- force s390utils upgrade to prevent zipl seg fault (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.16.EL" date="1078048800">- restore varyio capability in mptfusion driver update (Adam Manthei)
- enhance SCSI mid-layer queuing for indefinite retries (Doug Ledford)
- add ia64 reg reloads for 32-bit-EL strace -f support (Jason Baron)
- fix ia64 core dump support for 32-bit-EL executables (Jason Baron)
- add SCSI whitelist devs with BLIST_RETRY_ABORTED_CMD (Doug Ledford)
- remove stack-in-interpreter check in binfmt_elf.c (Julie DeWandel)
- clear all flags in exec_usermodehelper() for kmod (Alexander Viro)
- fix aacraid command completion (rq corruption) bugs (Tom Coughlan)
- correct cciss_proc_tape_report() type in flags decl (Tom Coughlan)
- enable USB-2.0-hub-based mice/keyboards to function (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.15.EL" date="1077962400">- fix amd64 oprofile linkage problem in ia32e support (Ernie Petrides)
- update ips driver to version 6.11.07 w/6.10.52 backup (Tom Coughlan)
- add size checks to DRM ATI r128 driver ioctl handling (John Dennis)
- avoid megaraid2 irq_disable calls for mem-mapped ctlrs (Tom Coughlan)
- upgrade firmware imbedded in QLogic driver to 3.02.24 (Tom Coughlan)
- correct ia64 memory accounting in overcommit mode 2 (Larry Woodman)
- implement softirq deferral to limit kernel stack depth (Ingo Molnar)
- reduce kernel stack usage in a couple of tux functions (Ingo Molnar)
- fix shared extended attribute ref counting in ext3 (Stephen Tweedie)
- clear SCSI sense data buffer between eh retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.14.EL" date="1077789600">- add .RH1 suffix to cciss driver version v2.4.50 (Tom Coughlan)
- implement initial LAuS syscall auditing support (Mark DeWandel)
- introduce GFS enablers for locking and sendfile ops (Ken Preslan)
- update QLogic driver to 6.07.01 w/6.06.00b11 backup (Tom Coughlan)
- improve netdump reliability w/asynchronous IPI param (Jeff Moyer)
- add ICH6 DSP audio support to i810_audio driver (Jeff Garzik)
- apply SCSI whitelist updates for several devices (Tom Coughlan)
- fix odd byte tape i/o handling in sym53c8xx driver (Tom Coughlan)
- correct minimum nfsd version that supports acls (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.13.EL" date="1077703200">- allow concurrent NFS direct i/o to same file if !append (Steve Dickson)
- introduce support for new Intel 64-bit ia32e processor (Larry Woodman)
- update mptfusion driver to 2.05.11.03 w/2.05.05 backup (Adam Manthei)
- remove fs/binfmt_misc.o from linux-modules-unsupported (Jason Baron)
- fix ia64 predicate register use in sig trampoline code (Jason Baron)
- add oprofile cpu type recognition for ia32e processor (Will Cohen)
- update e1000 network driver to version 5.2.30.1-k1 (Jeff Garzik)
- add more Intel PCI ids to match upstream 2.4 (Jeff Garzik)
- add ICH6 PATA support, PCI ids, irq routing (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.12.EL" date="1077530400">- add deferred page freeing for intr-context unmap_kvec() (Jeff Moyer)
- update megaraid2 driver to v2.10.1.1 w/v2.00.9 backup (Tom Coughlan)
- fix ppc64 pte hash table locking to avoid deadlocks (Julie DeWandel)
- fix ia64 data TLB init to prevent random boot-up hangs (Jason Baron)
- fix ia64 RNat register corruption with alt sig stacks (Jason Baron)
- allow smaller ia64 sig stacks in ia32 emulation layer (Jason Baron)
- backport ncpfs fixes to eliminate var-length arrays (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.11.EL" date="1077271200">- backport cisco aironet driver from 2.6.3-rc4 (Matthew Galgoci)
- update tg3 driver to v2.7 to fix status reg handling (Dave Miller)
- correct lost jiffies logic for x440/5 cyclone timer (Bernd Schmidt)
- fix open() error clean-up for unsupported O_DIRECT (Stephen Tweedie)
- prevent ia64 crashes when unmapping hugetlb pages (Jason Baron)
- add ppc64 processor support for future PPC970+ (Julie DeWandel)
- rework ppc64 32-bit-compat iptables support (Julie DeWandel)
- fix func ptr test in ethtool_set_ringparam() (Jeff Garzik)
- disable linux-2.4.21-scsi-affine-queue.patch (Doug Ledford)
- improve scsi_allow_ghost_devices description (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.10.EL" date="1077098400">- fix amd64 iommu bug causing data corruption on &gt;4GB systems (Jim Paradis)
- return EINVAL for unsupported ioctl32 syscalls on ppc64 (Julie DeWandel)
- remove incorrect BUG() call in __remove_inode_page() (Stephen Tweedie)
- fix s390 ctc driver problem causing build system hangs (Pete Zaitcev)
- fix s390 qeth driver error path to reset write_busy (Pete Zaitcev)
- update s390 zfcp driver to fix miscellaneous bugs (Pete Zaitcev)
- apply upstream nfs fixes for acl error handling (Steve Dickson)
- prevent kernel stack data leak via /dev/rtc (Ernie Petrides)
- allow AIO operations on sockets for non-inet (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.9.EL" date="1076925600">- restore genksyms_smp_prefix setting for non-x86 builds (Ernie Petrides)
- display/log memory stats whenever there's an OOM kill (Larry Woodman)
- update tg3 driver to v2.6, the latest upstream version (Jeff Garzik)
- update net bonding driver to v2.4.1, latest upstream (Jeff Garzik)
- fix irq, mem, printk, strtol bugs in cciss driver (Tom Coughlan)
- wait for board ready after hot add, cciss driver (Tom Coughlan)
- enable cciss adapter prefetch for x86 platforms (Tom Coughlan)
- add preserve_arg0 handling for ia32 emulation (Larry Woodman)
- fix ppc64 compat support for quota syscall (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.8.EL" date="1076580000">- remove Power-Blade-specific def for USB TEAC floppy (Julie DeWandel)
- fix s390 crash in iucv driver on connection shutdown (Pete Zaitcev)
- fix ia64 ACPI parsing for multinode IDE devs on x455 (Jim Paradis)
- fix amd64 core dumping of multithreaded 32-bit apps (Jim Paradis)
- fix s390 oprofile conditional and zero top addr bits (Will Cohen)
- add ipr driver v1.0.3 for IBM's PPC RAID adapters (Tom Coughlan)
- add {alloc,free}_netdev(), list macro, tg3 PCI ids (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.7.EL" date="1076407200">- restrict /proc/tty/driver directory access to root (Jeff Moyer)
- allow non-standard usr/sys VM splits at 2G/2G, 1G/3G (Ingo Molnar)
- extend existing ppc64 RTAS firmware flash interface (Mark DeWandel)
- fix ppc64 version of strncpy() to zero-pad buffers (Julie DeWandel)
- fix s390/x version of strncpy() to zero-pad buffers (Pete Zaitcev)
- fix generic version of strncpy() to zero-pad buffers (Jim Paradis)
- improve ppc64 segment table entry replacement logic (Julie DeWandel)
- correct type/cast of "len" in ppc64/kernel/nvram.c (Julie DeWandel)
- implement new ppc64 RTAS system call interface (Julie DeWandel)
- increase x86 RSDT table limit in ACPI parsing (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.6.EL" date="1076320800">- fix more usb-storage bugs for Power Blade support (Julie DeWandel)
- remove extra inactive_clean_pages-- in reclaim_page() (Larry Woodman)
- return proper error codes for do_munmap() failure in mremap (Dave Jones)
- fix binfmt_elf.c problems for apps with huge bss regions (Julie DeWandel)
- update cciss driver to v2.4.50 for Smart Array 6i support (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.5.EL" date="1075975200">- prevent netdump progress output from filling up log_buf (Jeff Moyer)
- add ppc64 RAS hook at end of panic() processing (Julie DeWandel)
- correct source IP address in ICMP error message (Dave Miller)
- fix smp deadlock with pdeath_signal posting (Roland McGrath)
- add ppc64 support for /proc/ppc64/lparcfg (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.4.EL" date="1075888800">- update nfsd mode-with-acls fix for upstream conformance (Steve Dickson)
- rework usb-storage locking to avoid hangs on disconnect (Pete Zaitcev)
- fix mmio alignment error in olympic token ring driver (Julie DeWandel)
- prevent tux logger-thread shutdown problems on ppc64 (Ingo Molnar)
- add ppc64 AltiVec chip support for Power Blades (Julie DeWandel)
- eliminate multi-threaded coredump hang potential (Ingo Molnar)
- fix ppc64 segfaults with tasks &gt; 2GB in size (Julie DeWandel)
- fix usb-storage memory-allocation/iowait deadlock (Alan Cox)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.3.EL" date="1075716000">- add amd64 support for PT_GNU_STACK with exec shield (Jim Paradis)
- fix s390 raid1 sync problem w/writes at end of dev (Pete Zaitcev)
- update s390 zcrypt driver to version 1.1.4 (Pete Zaitcev)
- fix output of large /proc/pid/statm values (Mark DeWandel)
- fix output of large /proc/partitions values (Mark DeWandel)
- enable ppc64 support for JS20 Power Blades (Julie DeWandel)
- fix kernel stack memory leak on fork failures (Dave Anderson)
- fix ipv6 packet quoting problem in icmpv6_send() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.2.EL" date="1075370400">- apply Intel's x86 microcode loader update (Jim Paradis)
- enhance PCI multifunction support for ppc64 (Julie DeWandel)
- fix nfsd returning bad mode bits when acls set (Steve Dickson)
- prevent unkillable zombies from detached NPTL threads (Ingo Molnar)
- avoid missing scsi disks in /proc/partitions on detach (Jason Baron)
- correct pte calculation inside zeromap_pte_range() loop (Ben Woodard)
- add inline function PDE() to help driver backporting (Matthew Galgoci)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.1.EL" date="1074679200">- (this is the first build for RHEL 3 Update 2)
- relocate various pieces of the "undo" patch (Patch Review Committee)
- rename s390 zcrypt and zfcp driver patches (Pete Zaitcev)
- add LKML discussion to COPYING.modules (Arjan van de Ven)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.EL" date="1073556000">- fix race condition between thread creation and signals (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-8.EL" date="1073469600">- fix amd64 eflags masking in 32-bit emulation of ptrace (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-7.EL" date="1073383200">- fix numerous ppc64 problems with /proc access (Julie DeWandel)
- allow user core files larger than 2GB in size (Dave Anderson)
- add ia64 support for Crestone Peak AGP bridges (John Dennis)
- fix unaligned kernel accesses in nfs_readdir() (Steve Dickson)
- add new_len/new_addr checks in do_mremap() (Ernie Petrides)
- fix nfs O_DIRECT corruption with &gt;4GB files (Steve Dickson)
- enable bus scan for AGP ctlrs on amd64 systems (John Dennis)
- limit PCI-alloc'ed physaddrs to 4GB on HP ia64 (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-6.EL" date="1070877600">- fix ppc64 firmware updates (Julie DeWandel)
- fix sync wakeup problem (Ingo Molnar)
- add ia64 cyclone support (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-5.EL" date="1070272800">- undo rejected patches (Stephen Tweedie, Arjan van de Ven, Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.20.EL" date="1069840800">- enable NUMA support in amd64 smp configs (Jim Paradis)
- prevent oopses with tux in OOM scenarios (Ingo Molnar)
- apply several ipv6 multicast bug fixes (Dave Miller)
- assign retval in copy_process() error path (Ingo Molnar)
- add lseek-in-/proc support for s390x "ps" (Pete Zaitcev)
- redefine zone_is_highmem() for Celestica (Dave Anderson)
- fix unresolved symbols in amd64 modules (Bill Nottingham)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.19.EL" date="1069754400">- fix tg3 rx_pending limit for BCM5705/BCM5782 chips (Jeff Garzik)
- reset page error flag prior to read of new contents (Jeff Moyer)
- enable CONFIG_HOTPLUG_PCI option for ia64 configs (Doug Ledford)
- fix inactive laundry list race in ramfs_writepage() (Dave Anderson)
- avoid out_of_memory() for wired pages when there's lomem (Dave Anderson)
- conditionalize ppc64 machdep_calls change for KMI compat (Ernie Petrides)
- limit anon/cache pages scanned in refill_inactive_zone() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.18.EL" date="1069668000">- create old version (rev. 5.64) of cmpci sound driver (Tom Coughlan)
- remove ac97.o, ad1848.o, cs4232.o from unsupported (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.17.EL" date="1069063200">- fix missing use of __GFP_HIGHMEM flag in pte_alloc_one() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.16.EL" date="1068890400">- rework scsi mid-layer queuing logic to fix error handling (Doug Ledford)
- fix pci_dma_sync_sg() scatterlist arg in megaraid2 driver (Tom Coughlan)
- move more-ptes-in-rmap-pte-chain logic to its own patch (Ernie Petrides)
- tag uses of __GENKSYMS__ with KMI/ABI compat comment (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.15.EL" date="1068804000">- fix MD multipath bugs causing crashes during fail-overs (Doug Ledford)
- add chain_ptep_t and revert pte_addr_t for KMI compat (Ernie Petrides)
- restore sub-timer-tick time-of-day granularity for ia64 (Jason Baron)
- modify agpgart and drm drivers for ia64 HP ZX1 support (John Dennis)
- fix ia64 32-bit emulation for several stat-related calls (Jason Baron)
- enable amd64 use of new ips driver w/config separation (Tom Coughlan)
- update e100 network driver to version 2.3.30-k1 (Jeff Garzik)
- update e1000 network driver to version 5.2.20-k1 (Jeff Garzik)
- apply scsi whitelist updates for IBM/CNSi/NEC devices (Tom Coughlan)
- reenable varyio for aic7xxx driver (hangs were unrelated) (Jeff Moyer)
- conditionalize NVIDIA_NFORCE3 to restore KMI compat (Ernie Petrides)
- prevent two ext3 panics on corrupted filesystems (Stephen Tweedie)
- apply two minor fixes to ppc64 RAS nvram reading (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.14.EL" date="1068717600">- update ServeRAID (ips) driver to version 6.10.52 (Tom Coughlan)
- configure xmon on by default in ppc64 configs (Julie DeWandel)
- create initial s390 zcrypt driver, version 1.1.2 (Pete Zaitcev)
- remove zfcp driver from linux-modules-unsupported (Pete Zaitcev)
- revise ppc64 reliability/serviceability support (Julie DeWandel)
- reduce kernel stack usage inside nfs_readdir() (Steve Dickson)
- add gameport dependency to cmpci driver config (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.13.EL" date="1068631200">- reduce UDP retransmissions and fix slow reads for NFS (Steve Dickson)
- implement wired page lists for better ramfs handling (Larry Woodman)
- fix vfork deadlock when child process causes core dump (Ingo Molnar)
- enhance AltSysRq-M output and fix deadlock potential (Larry Woodman)
- update cmpci sound driver for some HP IPF workstations (Tom Coughlan)
- correct tq_struct struct initialization in tg3 driver (Jeff Garzik)
- fix NFS file attribute inconsistency after rename (Steve Dickson)
- prevent ia64 machine checks w/sysreport on Olympia (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.12.EL" date="1068544800">- redesign refill_inactive_zone() for smarter deactivation (Larry Woodman)
- improve page deactivation scalability w/delayed laundering (Larry Woodman)
- rework locking and timer usage in s390 ctc network driver (Pete Zaitcev)
- allow xmon to be enabled at boot-time for ppc64 debugging (Julie DeWandel)
- reverse kscand's order of anon/cache active list traversal (Larry Woodman)
- force in-lining of br_read/write_lock/unlock routines (Julie DeWandel)
- fix mistaken fall-through cases in s390 chandev driver (Pete Zaitcev)
- make a few exported symbols available to OpenGFS (Stephen Tweedie)
- fix ld/st ordering bug causing lost signal wakeups (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.11.EL" date="1068112800">- make profile=X imply nmi_watchdog=1 and fix NMI w/d bugs (Ernie Petrides)
- add lock init in scsi_get_host_dev() to fix shutdown hang (Doug Ledford)
- enable distributed interrupts by default on ppc64 iSeries (Julie DeWandel)
- improve amd64 reporting of machine check errors (Jim Paradis)
- fix disabling of autonegotiation in tg3 driver (Dave Miller)
- add image name to s390 ioctl32 debug message (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.10.EL" date="1068026400">- fix file lock ownership by NPTL threads to be process-wide (Ernie Petrides)
- upgrade megaraid driver to version 1.18k and fix isr/fw sync (Tom Coughlan)
- upgrade megaraid2 driver to version 2.00.9 and enable varyio (Tom Coughlan)
- improve scsi mlqueue handling to enable BUSY/QUEUE_FULL fix (Doug Ledford)
- correct reporting of i/o errors in ppc64 viodasd driver (Julie DeWandel)
- update acenic driver to handle enabling of jumbo frame mode (Jeff Moyer)
- fix i386 PAGE_NONE bits to prevent get_user_page() hang (Roland McGrath)
- fix ia64 show_mem() handler to use efi_memmap_walk() call (Dave Anderson)
- replace spaces in slabinfo entry name for async poll table (Matt Wilson)
- fix race condition in buffer-head memory footprint patch (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.9.EL" date="1067940000">- improve spec file robustness in %post/%preun stanzas (Florian La Roche)
- add s390x iovec length checking for 32-bit reads/writes (Matt Wilson)
- use highmem for pte/ramfs page allocation w/__GFP_WIRED (Larry Woodman)
- upgrade oprofile support with bug fixes and enhancements (Will Cohen)
- fix infinite recursion in SCSI mid-layer post-processing (Jeff Moyer)
- introduce no-auto-start-on-add handling for SCSI blacklist (Jeff Moyer)
- enable s390 support for blk stats handling for iostat -x (Pete Zaitcev)
- fix LVS timer-related hang from ip_vs_conn_expire() bug (Ernie Petrides)
- correct module init in cpqarray driver to fix insmod crash (Tom Coughlan)
- incorporate ESB PATA support and fix a pirq_routers PCI id (Jeff Garzik)
- fix nfs async write deadlock potential w/nfs_writepage() (Steve Dickson)
- fix SCSI error handling for BUSY queue status messages (Doug Ledford)
- improve ppc64 32-bit ioctl support for use by ethtool (Julie DeWandel)
- add missing unlock in ip_mc_del_src() to fix IGMP deadlock (Dave Miller)
- change ppc64 reporting of floppy capacity to be 1.44 MB (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.8.EL" date="1067421600">- fix up various problems on Nforce3-based amd64 systems (Jim Paradis)
- double number of pte addrs in rmap pte_chain structs (Larry Woodman)
- restrict slab size for kernel data structs to 2 pages (Larry Woodman)
- clean up obsolete quicklist usage for ppc64 pte pages [rejected]
- prevent readdirplus from returning hidden mount points (Steve Dickson)
- prevent lockd deadlocks caused by export table locking (Steve Dickson)
- eliminate use of parallel task_struct init macro on ia64 [rejected]
- fix broken s390x overflow checks with 32-bit F_GETLK use (Matt Wilson)
- fix SCSI errors with "mt stoptions" and IDE tape drives (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.7.EL" date="1067162400">- fix bad checksumming interaction between e100 and bridge (Jeff Garzik)
- prevent system hang by OOM killing when overcommitted (Larry Woodman)
- un-inline ext3 error function to reduce stack usage (Stephen Tweedie)
- fix several ppc64 problems with interrupt handling (Julie DeWandel)
- correct amd64 identification in /dev/oprofile/cpu_type (Jim Paradis)
- move fput() call in do_tty_hangup() to avoid oops w/kon (Alexander Viro)
- eliminate creation of never-used task_struct slab cache (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.6.EL" date="1066903200">- reduce buffer-head memory footprint from read-only files (Ingo Molnar)
- update qeth driver for reduced stack usage and bug fixes (Pete Zaitcev)
- fix s390 qeth driver again to allow tcpdump to function (Pete Zaitcev)
- add exec_mmap() locking to prevent vma lookup races (Ernie Petrides)
- rework RPC slot allocation for further NFS improvements (Steve Dickson)
- reduce frequency of RPC retransmits during NFS writes (Steve Dickson)
- make generic/ext3 file system write handling 64-bit clean (Jeff Moyer)
- allow SMP scheduling rebalancing to occur every 200 msecs (Ingo Molnar)
- prevent races during IPC semaphore set and msg queue removal (Ingo Molnar)
- fix ACPI handling to identify trigger/polarity of PCI IRQs (Jim Paradis)
- correct amd64/ia64 acpi_disabled decls for post-boot access (Jeff Moyer)
- update ppc64 viocons driver with several bug fixes (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.5.EL" date="1066298400">- move fix for PPR use in sym53c8xx driver to its own patch (Ernie Petrides)
- correct pids exported by msgctl/semctl/shmctl/fcntl calls (Ulrich Drepper)
- apply s390 lcs driver wait queue init and locking updates (Pete Zaitcev)
- enable dummy network driver use in generic s390 config file (Pete Zaitcev)
- add missing ptrace hooks for exec and vfork-done events (Bill Nottingham)
- fix SMP timer race that triggered BUG_ON() in add_timer() (Ingo Molnar)
- fix several bogus ipvs boundary checks in ftp module [rejected]
- fix vfsmount queuing in attach_mnt() for CLONE_NEWNS [rejected]
- add net_device check to prevent oops in pppoe driver [rejected]
- fix memory leak in symlink error path of /proc driver [rejected]
- fix overflow in v1_disk2mem_dqblk() quota calculation [rejected]
- increase ppc64 ramdisk size to 8192k in p/iSeries configs (Jeremy Katz)
- lower amd64 TASK_UNMAPPED_32 to increase avail address space (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.4.EL" date="1066039200">- fix ppc64 stack pointer alignment in user signal handlers (Jakub Jelinek)
- increase amd64 exception stack size to 4k to avoid overflow (Jim Paradis)
- fix ppc64 interrupt rate accounting for vmstat and /proc (Julie DeWandel)
- extend amd64 NMI watchdog timeouts to tolerate bad 2nd cpu (Jim Paradis)
- allow s390 dasd driver to use noop elevator module (Pete Zaitcev)
- add free_irq() in error path of olympic token ring driver (Matt Wilson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.3.EL" date="1065866400">- make pid fields in ucred structures hold tgid values (Ulrich Drepper)
- prevent ppc64 iSeries virtual console writes &gt; 4k (Julie DeWandel)
- control ia64 unaligned access messages with new sysctl (Jeff Moyer)
- correct SCSI data direction on cmd to spin up disks (Pete Zaitcev)
- add do_brk() TASK_SIZE and address space wrap checks (Arjan van de Ven)
- limit PPR use in sym53c8xx driver for ppc64 Zapata drives (Doug Ledford)
- list ac97.o, ad1848.o, and cs4232.o modules as unsupported (Jeff Moyer)
- clean up conditional compilation in s390 zfcp driver (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.2.EL" date="1065693600">- identify whether i686 or athlon config in oops output (Arjan van de Ven)
- remove warning in reclaim_page() unmapped page path (Ernie Petrides)
- fix several lvm error handling paths causing memory leaks [rejected]
- correct i386 smp shutdown logic when netdump is enabled (Jeff Moyer)
- fix amd64 potential data leaks on FPU save/restore errors (Jim Paradis)
- prevent aic7xxx chip resets leading to PCI parity errors (Tom Coughlan)
- remove ia64 user tty warning on unaligned accesses (Arjan van de Ven)
- fix ppc64 /proc file buf overruns in viodasd driver (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.1.EL" date="1065607200">- (this is the first build for RHEL 3 Update 1)
- avoid m/ctime update for pipe writes on r/o file systems (Stephen Tweedie)
- prevent theoretical ext3 fs corruption in ext3_read_inode (Stephen Tweedie)
- enable AGRESSIVE_IDLE_STEAL to improve scheduler balancing (Ingo Molnar)
- fix potential ppc64 lock-up on ioctl32 un/reregistering (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.EL" date="1065175200">- extend ppc64 scsi timeout values for Zapata DVD-ROM drives (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-3.EL" date="1063965600">- make sure to release viotape op structure after use (Julie DeWandel)
- disable pgd/pmd quicklists on ppc64 (Mark DeWandel)
- temporarily disable aio on sockets (Jeff Moyer)
- correctly refile inodes to make them reclaimable (Harald Hoyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-2.EL" date="1063792800">- S390: update zfcp and cio drivers (Pete Zaitcev)
- IA64: add extra check to virtual mem_map (Larry Woodman, Dave Anderson)
- initialise local variables in ide-tape &amp; ide-scsi
- cap qla2200 tcq depth to 255
- switch version number scheme to kernel-2.4.21-N.EL</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063706400">- PPC64: invalidate evicted sbl entries in the erat (Julie DeWandel)
- increase ethernet tx_queue_len to 1000 (David Miller)
- in udp_{v6_}flush_pending_frames, reset up-&gt;len too (David Miller)
- S390: CMS reserved minidisk detection (Pete Zaitcev)
- call recount_segments() on a different occasion (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063620000">- really disable exec-shield (Roland McGrath)
- reduce stack randomisation, disable brk randomisation (Ingo Molnar)
- make e1000 driver 64 bit clean (Julie DeWandel)
- minor aio corner case error condition fix (Jeff Moyer)
- AMD64: more lenient check for call workaround (Ernie Petrides)
- PPC64: disable CONFIG_XMON (Mark DeWandel)
- S390: fix CCW slab selection (Pete Zaitcev)
- fix two-disk combined mode sata (Jeff Garzik)
- move buslogic scsi driver to supported, for vmware only (Tom Coughlan)
- change viocons message from KERN_WARNING to KERN_INFO (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063360800">- VM: handle race condition in reclaim_page (Stephen Tweedie, Larry Woodman)
- PPC64: fix "log_buffer broken" xmon issue (Julie DeWandel)
- fix compiler warnings in netdump (Jeff Moyer)
- AMD64: workaround for 32 bit compat mode page fault problem (Ernie Petrides)
- IA64: make perfmon root-only (Jason Baron)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063274400">- fix smp race in rebalance_laundry_zone()</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063188000">- fix compiler warnings when hugetlbfs is disabled (Pete Zaitcev)
- fix tux performance bug (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063101600">- don't evict kernel stack seg translation on ppc64 (Julie DeWandel)
- fix callers of do_page_fault on ppc64 (Mark DeWandel)
- AMD64 munmap return value, fix lsb failure (Jeff Moyer)
- fix for PPC64 32-bit ioctl (Jim Paradis)
- bring IA64 value of MINSIGSTKSZ in line with upstream (Jakub Jelinek)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063015200">- fix potential datacorruptor in viodasd driver (Julie DeWandel)
- fix race condition in s390 dirty bit handling (Pete Zaitcev)
- limit per-cpu slab cache size
- correct 32-bit readv/writev border cases on ppc64 (Matt Wilson)
- AMD Golem IO-APIC fixup for i686 kernel on AMD64 (Jeremy Katz)
- NFS Solaris 8 acl fix (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062756000">- minor nfs permissions bugfix (Steve Dickson)
- change mprotect return value to SuS mandated value (Arjan van de Ven)
- kernel-unsupported now provides kernel-modules (Jeremy Katz)
- correct __hugemem__modules typos in rhkernel.h
- fix subtle pmd corruption error (Larry Woodman, Dave Anderson)
- fix cut'n'paste error in SATA io port reservation
- restore NFSEXP_CROSSMNT ABI compatibility (Steve Dickson)
- round up executable name field length in core file (Jakub Jelinek)
- switch off exception_trace on amd64 (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062496800">- patch to access odd last sector on ia64 (Jason Baron)
- misc fixes from upstream (Arjan van de Ven)
- fix audigy driver (Jeff Garzik)
- tunable dcache reclaim priority for tux (Ingo Molnar)
- tg3 driver update (Jeff Garzik)
- ipv6 and icmp network bugfixes (David Miller)
- fix ppc64 memory access security bug (Julie DeWandel)
- reduce memory allocated for skb (Ingo Molnar)
- small smp fix for scalable timers (Ingo Molnar)
- make s390 recognise MSDOS partitions (Pete Zaitcev)
- small smp fixes in tux (Ingo Molnar)
- make mptfusion drivers supported on 4/4 split kernel (Tom Coughlan)
- add entries to scsi whitelist (Tom Coughlan)
- minor sata/ata driver updates (Jeff Garzik)
- small fixes to viodasd driver (Julie DeWandel)
- nfs_get_root and nfs access bit patches (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062064800">- don't show interrupts in /proc/stat for ppc64 (Matt Wilson)
- make sure sync returns in a reasonable time
- PPC64: fix for boot cpu not being cpu 0 (Julie DeWandel)
- zero sized write no longer updates mtime (Matt Wilson)
- fix video bios read corruption on ia64 (Larry Woodman)
- network fixes to tg3, bonding (Jeff Garzik)
- properly reserve legacy IDE regions in sata driver (Jeff Garzik)
- fix ppc64 signal handling bugs (Mark DeWandel)
- tux fixes (Ingo Molnar)
- tgkill syscall for s390(x) (Pete Zaitcev)
- amd64 32 bit compatibility fixes (Jim Paradis)
- ppc64 32 bit compatibility fixes (Julie DeWandel)
- fix 4G/4G follow_page problem (Ingo Molnar)
- reduce memory used by VMAs and dentries (Arjan van de Ven)
- make LVM snapshotting of ext3 work reliably (Stephen Tweedie)
- make netdump play better with the nmi watchdog (Jeff Moyer)
- QLA2200: disable irq mitigation, fix off-by-one (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061805600">- seq_file /proc/interrupts for x86 too (Ingo Molnar)
- fix memory leak in ia64 exec of ia32 binaries
- check tgid not pid in scm_check_creds()  (David Miller)
- VM fixes: shm swap priority, zeromap_page_range
- workaround VFS limitations for VXFS NFS export</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061546400">- use personality for 3GB userspace on x86 -hugemem (Ingo Molnar)
- add sysctl interface for lockd (Steve Dickson)
- don't prod VGA space on HP Pinnacle systems (Larry Woodman)
- fix for 32 bit binaries on amd64 (Jim Paradis)
- add preemption point to write_some_buffers (Julie DeWandel)
- sort ACPI table to get correct device ordering on HP (Larry Woodman)
- fix refcounting bug with ipv6 addresses on netdevs (David Miller)
- add s390 syscalls for tux (Pete Zaitcev)
- md multipath enablers (Doug Ledford)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061460000">- fix process and nice time accounting (Doug Ledford)
- amd64: syscall table updates, timer robustness (Jim Paradis)
- amd64 3GB personality for 32-bit processes (Jim Paradis)
- use 256MB pagesize for hugetlbfs on ia64 (Larry Woodman)
- make sure e100 only claims ipv4 checksumming
- igmpv3/mldv2 OOPS'er fix (David Miller)
- hugetlbfs: make chown work and allow uid=X,gid=Y mount options
- make larger mmap windows work (Ernie Petrides, Ingo Molnar)
- ia64: improve ia32 compatibility (Larry Woodman)
- fix bug in rpc retry code (Steve Dickson)
- make acpi pci hotplug modulable (Jeff Moyer)
- update (trivial) to megaraid 1.18j (Tom Coughlan) 
- enable varyio on mptfusion (Tom Coughlan)
- panic on oops to prevent data corruption opportunities (Ernie Petrides)
- small iorl locking fix (Doug Ledford)
- fix ppc64 get_wchan() bad deref (Mark DeWandel)
- fix aio read into mmap()d PROT_WRITE (Jeff Moyer, Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061373600">- libata update (Jeff Garzik)
- amd64 syscalls for xattrs &amp; ACLs (Jim Paradis)
- tux fixes (Julie DeWandel, Ingo Molnar)
- via &amp; i810 audio fixes (Jeff Garzik)
- small 4G/4G split bugfixes (Ingo Molnar)
- fix sigsuspend race on x86, amd64, ia64 (Mark DeWandel)
- ia32 behavior for FP denormal exceptions on ia64 (Jason Baron)
- get the set/get of NAT bits for ia64 correct (Jason Baron)
- ipsec update, adds cast6 encryption (David Miller)
- VM update: OOM bugfix &amp; page-&gt;flags atomic updates (Rik van Riel)
- reenable serpent encryption on ppc64
- bladecenter usb-ohci support (Pete Zaitcev)
- iorl fixes (Doug Ledford)
- network bonding driver oops fix (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060768800">- DAC960 back to bigmem supported, ne2k-pci &amp; usb audio to bigmem unsupported
- netdump updates for tg3 and e1000 (Jeff Moyer)
- put a hole between stack and mmap area (Ernie Petrides)
- process time accounting updates (Doug Ledford)
- fix null characters in TUX header (Julie DeWandel, Ingo Molnar)
- display correct executable when running interpreted script
- zfcp zSeries fibrechannel driver (Pete Zaitcev)
- ipsec updates (David Miller)
- fix 4G/4G race conditions (Ingo Molnar)
- rename -bigmem kernel to -hugemem to reflect changed tradeoffs
- optionally show task states from hangcheck timer (Jason Baron)
- various small bugfixes from upstream</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060423200">- fix scalable timer race condition  (Julie DeWandel, Ingo Molnar)
- print warning on boot with &gt;16GB RAM on -smp kernel (Arjan van de Ven)
- fix for xapic issue with ServerWorks chipsets (Ernie Petrides)
- remove spurious ioctl printk on ppc64 (Mark DeWandel)
- ppc64 wchan improvement (Mark DeWandel)
- hint @pause changes for ia64
- longer scsi scan timeout on ppc64 (Julie DeWandel)
- readv/writev for raw IO (Stephen Tweedie)
- fix for easy stack/mmap collisions (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060164000">- various XAPIC related fixes (Ingo Molnar)
- correct context switch and iowait stats with HT shared runqueues
- ext3 obscure deadlock fixes (Stephen Tweedie)
- knfsd fixes: blocked lock, symlink error &amp; missing bkl  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060077600">- de_thread bugfix from 2.6 upstream  (Matt Wilson)
- viocons driver update (Julie DeWandel)
- fix VM non-overcommit mode (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059991200">- plug data leak in aio code (Jeff Moyer)
- initial list of 4G/4G unsupported modules (Tom Coughlan)
- nfs softirq race fix (Steve Dickson)
- updated IPSEC patch (David Miller)
- networking updates/fixes from 2.4.22-preX (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059904800">- drop orlov allocator for now (Arjan van de Ven)
- correct HT cpu pair detection (Arjan van de Ven)
- build zImage.partial for netbooting on pSeries (Matt Wilson)
- fix missing symbols</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059818400">- export two AIO symbols for OCFS
- disable CONFIG_DEBUG_SLAB so performance testing can start
- crosshost mmap hooks for distributed filesystems (Stephen Tweedie)
- include partially linked zImage for pSeries netboot (Matt Wilson)
- nfs highmem fix, unmap when xdr_kmap() fails (Steve Dickson)
- update megaraid2 locking to work with IORL (Com Coughlan)
- make sure to build the qla2100 driver (Tom Coughlan)
- fix cdrom ioctl 32 bit compatibility for ppc64, amd64 (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059645600">- run depmod on install of unsupported modules (Arjan van de Ven)
- fix register corruption in IA64 lazy fpu handling (Larry Woodman)
- add b44 network driver (Jeff Garzik)
- make ppc64 pci interface routines compatible (Julie DeWandel)
- allow 32 bit userland on AMD64 and PPC64 to use volumes &gt; 2GB (Jeff Moyer)
- nfsd: acl related mount and export flags (Steve Dickson)
- fix nfs exp_fodrop oops (Steve Dickson)
- fix missed signal wakeups on ppc64 (Mark DeWandel)
- smp scalable timer bugfixes (Ingo Molnar)
- workaround for a prefetch bug in some Athlon CPUs (Ernie Petrides)
- code to make more modules unsupported for 4/4 split (Arjan van de Ven)
- various spec file and config cleanups
- viopath driver fix (Julie DeWandel)
- add match for 440gx chipset bioses (Arjan van de Ven)
- move epic100 and ne2k-pci back to supported (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059472800">- updated finegrained process accounting patch (Doug Ledford)
- make iSeries compile without CONFIG_ICOM (Julie DeWandel)
- nfsd: only set -&gt;reuse for tcp sockets, not udp  (Steve Dickson)
- enable the 4G/4G split on the i686-bigmem kernel only
- sysrq support for viocons (Julie DeWandel)
- limit pci_bus size changes to ppc64 (Jeff Garzik)
- fix for signal delivery race (Ernie Petrides, Mark DeWandel)
- add ShdPnd to /proc (Ingo Molnar)
- fix de_thread() hang (Ingo Molnar)
- add kernel support for CLONE_STOPPED (Ernie Petrides)
- make sure to initialise HVC console (Julie DeWandel)
- fix _SEG abort hit in ACPI code (Larry Woodman)
- build addon drivers on amd64 and ppc64 too (Tom Coughlan)
- build IPS driver on all architectures (Tom Coughlan)
- fix a few ia32 emulation bugs for IA64 (Larry Woodman)
- enable correct/new __clear_bit macro for IA64 (Larry Woodman)
- flexible mmap allows mappings of huge executable segments (Larry Woodman)
- sysrq-w for s390 (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058436000">- have s390 cpu_relax() also include barrier  (Pete Zaitcev)
- convert ppc64 xmon traceback code to ksymoops (Matt Wilson)
- rename kstat_sum() variable with aliasing problems  (Ingo Molnar)
- fix AIO-on-hugetlbfs crash (Ingo Molnar)
- update support for IA64 Long's Peak ACPI serial ports  (Larry Woodman)
- turn on xmon for both iSeries and pSeries (Matt Wilson)
- bugfix to make CLI work correctly on iSeries (Julie DeWandel)
- SATA bugfixes (Jeff Garzik)
- enable 4G/4G split in -BOOT kernel, due to syslinux trouble</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058349600">- fix s390 compile (Pete Zaitcev)
- taint the kernel on sii6512 driver link, GPL but no source available
- handle debug registers with 4G/4G split (Ingo Molnar)
- tgkill syscall for ppc64 (Julie DeWandel)
- fix NFSD/ACL/ext3/jbd deadlock (Stephen Tweedie, Steve Dickson)
- fix maxcpus=1 installation panic fix for ppc64 (Julie DeWandel)
- IDE byteswapping io functions for ppc64 (Julie DeWandel)
- update sata driver (Jeff Garzik)
- raise the number of /proc entries (Julie DeWandel)
- sticky sysrq key with timeout (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058263200">- make SysRq-W useable on s390 (Pete Zaitcev)
- updated process accounting patch (Doug Ledford)
- siginfo_t fixes for s390x and amd64 (Jakub Jelinek)
- clustered NFS fail-over support (Steve Dickson)
- autofs4 updates and fixes
- ia64 patches to reduce cpu power/temp in idle loop (Larry Woodman)
- add irqsafe up() for LVM locking (Stephen Tweedie)
- O_DIRECT fallback to synchronous allocation in holes (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058176800">- ia64 HP iommu: add sx1000 detection
- possible bug in s390x 32-bit emulation  (Roland McGrath)
- updated ipsec patch, should fix all current ipv6 bugs  (David Miller)
- finegrained process accounting (Doug Ledford)
- ICH5 pci irq routing, and associated ids (Jeff Garzik)
- fix the machine_real_restart() reboot path on 4G/4G (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057917600">- fix amd64 agp-gart code to work around hugetlbfs debug code (Jim Paradis)
- fix ppc32 pthread_cancel (Jakub Jelinek) 
- Do not sent IGMP leave messages unless IFF_UP  (David Miller)
- software iommu for ia64 systems without hardware iommu (Jason Baron)
- fix ext3 oops fix during dio, LTP failure (Arjan van de Ven, Stephen Tweedie)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057831200">- Remove illegal calls to dst_link_failure</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057831200">- enable HT scheduler for bigmem kernel
- add tgkill syscall for x86 and ia64
- make -BOOT kernel smaller w/ modular md and CONFIG_SMALL
- rmap VM updates
- 4G/4G agpgart potential corruption fix (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057744800">- switch off exec shield everywhere
- eliminate hostfs for amd64 (Jim Paradis)
- megaraid update, mostly vendor ID (Tom Coughlan)
- shrink boot kernel by disabling some config options
- additions for the SCSI whitelist (Tom Coughlan)
- ia64 extable fix (Jason Baron)
- viocons driver upgrade (Julie DeWandel)
- another ia64 mmu context wraparound deadlock fix (Larry Woodman)
- iSeries icom debugger patch (Julie DeWandel)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057658400">- Drop io_request_lock in usb scsiglue.c:device_reset</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057658400">- fix cpu_relax for amd64 and ia64 to include a barrier (Ingo Molnar)
- restore o_direct api compatibility (Stephen Tweedie)
- fix possible ext3 deadlock in o_direct patches (Stephen Tweedie)
- ACLs for JFS (Stephen Tweedie)
- fix /proc/cpuinfo runqueue printing (Ingo Molnar)
- via audio fixes, smaller emu10k1 patch (Alan Cox, Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057572000">- fix process accounting, tux ftp passwords and si_pid (Ingo Molnar)
- 32bit compat statfs fix (Guy Streeter)
- don't serialise exit on BKL when accounting is off (Ingo Molnar)
- truncate timeouts to 32 bits on 64bit systems (Ingo Molnar)
- fix network channel bonding (Jeff Garzik)
- split netdump patch into core and net-drivers (Jeff Garzik)
- delayed tlb flushing for ia64 (Larry Woodman)
- emu10k1 driver fixes
- kksymoops for AMD64 (Jim Paradis)
- select bugfixes from 2.4 upstream (Jeff Garzik)
- OOM tweaks (Rik van Riel)
- use seq_file for /proc/interrupts on ppc64 (Mark DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057140000">- add qdio and qeth drivers for s390(x)  (Phil Knirsch)
- slab cache scale bugfix (Larry Woodman)
- S390: qdio &amp; qeth drivers (Phil Knirsch)
- hangcheck timer for ppc64 (Julie DeWandel)
- fix race conditions in ia64 ia32 compat layer (Larry Woodman)
- update megaraid, aic7xxx, cciss and cpqarray drivers (Tom Coughlan)
- nfs xdr_shift_buf, tcp client corruption and alignment (Steve Dickson)
- rhconfig.h stuff for ppc64, s390 and s390x (Matt Wilson)
- AIO on sockets</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057053600">- kiobuf optimisations (Stephen Tweedie, Larry Woodman)
- ipsec update (David Miller)
- ipvs update to deal with timer changes (David Miller)
- 4G/4G split patch optimisations (Ingo Molnar)
- hangcheck timer (Jason Baron)
- recent (AGP 3.0) agpgart support (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056967200">- semtimedop() support on s390/s390x  (Ernie Petrides)
- fix a 4G bug that triggers on systems with &gt;30 CPUs (Ingo Molnar)
- updated SCSI SMP affine queueing patch  (Arjan van de Ven)
- page hash prefetch in do_generic_file_read bugfix (Julie DeWandel)
- updates the qlogic driver to the latest (Arjan van de Ven)
- slab cache SMP scalability tweaks (Ingo Molnar)
- ACPI 2.0 for IPF and AMD64 (Jim Paradis, Larry Woodman)
- statm fixes for hugetlbfs and remap_file_pages (Jason Baron)
- acpi serial port detection (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056708000">- iseries driver updates (Julie DeWandel)
- aio scalability and 2.5 backports  (Ingo Molnar)
- SMP scalable timers (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056621600">- make qlogic driver use new scsi infrastructure (Arjan van de Ven)
- export aio kvec functions
- fix statm oops
- compile fixes 
- NFS ACL over the wire protocol extensions (Steve Dickson)
- rate limit slab pruning, to limit IPI load on SMP systems (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056448800">- scsi request lock scaling (Ingo Molnar)
- cpu affinity for scsi command processing (Ingo Molnar)
- use softirqs instead of bhs for the scsi layer (Doug Ledford)
- igmpv3 fixes and improvements (David Miller)
- oprofile for ppc64 (Will Cohen)
- Increase MAX_ADDR_LEN from 8 to 32 for Infiniband over IP (Tom Coughlan)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056362400">- per-cpu kstat arrays (Ingo Molnar)
- optimise 4G/4G tlb flushing (Ingo Molnar)
- kiobuf reclaim together with buffer reclaim (Arjan van de Ven)
- more scalable gendisk statistics (Ingo Molnar)
- nfs reconnect fixes (Steve Dickson)
- add 32-bit compatibility for ustat system call on ppc64 (Julie DeWandel)
- scalable gettimeofday (Ingo Molnar)
- hugetlbfs ppc64 &amp; s390 bits (Mark DeWandel, Pete Zaitcev)
- hugetlbfs for ia64 (Jason Baron)
- qlogic scsi driver update (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056189600">- nfs patches (Steve Dickson)
- xapic improvements, summit support (Ingo Molnar)
- fix core dump name for multithreaded programs (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056103200">- merge up to marcelo's latest</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056016800">- oom killer fixes (Larry Woodman, Rik van Riel)
- tunable VM overcommit (Rik van Riel)
- hugetlbfs for amd64 (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055930400">- updated iseries virtual drivers (Julie DeWandel)
- nfs lockd improvements (Steve Dickson)
- remap_file_pages improvements (Ingo Molnar)
- /proc/efi/symtab patch for ia64 (Larry Woodman)
- disable O_PROFILE on UP x86 machines
- allow NMI watchdog profiling frequencies up to 10kHz (Ingo Molnar)
- statm (Jason Baron)
- hugetlbfs (Ingo Molnar)
- have nfsd honour ACLs on a per-export basis (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055844000">- Enable O_PROFILE on non-SMP configs (Stephen Tweedie)
- more conservative AIC config options
- Fix BOOT kernel panic while mounting /dev/cdrom (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055757600">- merge to 2.4.21 + selected ac bits
- ipsec upgrade (David Miller)
- HT scheduler patch fix (correct sibling counting)
- make bdflush writeout smoother
- AMD64 gdb fix (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055412000">- don't include unsupported drivers in -BOOT kernel
- merge up to 2.4.21-rc8 + selected ac bits
- FIXME: sysrq for 3170, dasd, odirect &amp; odirect for nfs</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com" date="1055412000">- oprofile for s390</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055239200">- statm (Jason Baron / Julie DeWandel)
- AIO 32-bit compat for 64-bit machines (Julie DeWandel)
- only do bufferhead reclaim in extreme situations (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055152800">- Serial ATA support (Jeff Garzik)
- mtp fusion 2.05.05+ (Dave Maley)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054893600">- XATTR/ACL patches, except NFS over the wire (Stephen Tweedie)
- ipsec module autoloading (David Miller)
- remap_file_pages (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054807200">- upgrade to latest -rmap with Ernie's fixes
- sysrq+C shows the stack dump of all CPUs
- ext3 truncate fix (Stephen Tweedie)
- NFS fixes for HZ=1000 machines (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054720800">- 4G/4G split fix (Ingo Molnar)
- ppc64 fixes (Guy Streeter, Rik van Riel)
- enable oprofile on amd64
- ipsec updates (David Miller)
- fork returns pid instead of task_struct* (Julie DeWandel)
- ia64 ptrace bugfixes (Dave Anderson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054634400">- HP diva serial driver (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054548000">- NFS over TCP patches (Steve Dickson)
- switch to using ppc64pseries/ppc64iseries arches instead of
  kernel-pseries and kernel-iseries (Jeremy Katz)
- egenera scsi bus rescan patch (Jeff Garzik)
- oprofile (Graydon Hoare)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054288800">- futex requeue (Ingo Molnar)
- enable NAPI for E1000
- signal latency and scheduler improvements (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054202400">- kscand oops fix (Ingo Molnar, Rik van Riel)
- pcnet32 fixes (Julie Dewandel)
- raid autorun (Pete Zaitcev)
- turn off CONFIG_SUNDANCE_MMIO (Jeff Garzik)
- flexible mmap (Larry Woodman)
- ppc64 fixes (Matt Wilson, Guy Streeter)
- loop softirq 10 times before giving up (Ingo Molnar)
- O_DIRECT for NFS (Steve Dickson)
- prevent md from shutting down active arrays (Doug Ledford)
- rmap updates, inode reclaim &amp; higher order allocations (Rik van Riel)
- network channel bonding (Jeff Garzik)</changelog><changelog author="Jim Paradis &lt;jparadis@redhat.com&gt;" date="1054116000">- Re-enable x86_64 in build
- x86_64-specific updates for exec-shield
- Bring in improved "nonx" support for x86_64 from upstream</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1054116000">- Hush s390 printks upon user SIGSEGV by default. It can be enabled back with
  a sysctl kernel.userprocess_debug.
- Enable optional 3270 console mode on s390.</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053684000">- get rid of vsyscall page (Arjan van de Ven)
- fix missing symbol copy_str_fromuser_size</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053424800">- exec-shield updates to fix hang-on-boot on some systems (Ingo Molnar)
- temporarily disabled the architectures, which got broken by exec-shield updates
- fix for LTP sigprocmask02 failure (Matt Wilson)
- ppc64 updates (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053338400">- pagecache scalability patch (Ingo Molnar)
- IPC semaphore scalability patch (Ingo Molnar)
- ppc64 updates (Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052992800">- exec-shield (Ingo Molnar)
- AMD64 ACPI updates (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052906400">- reenable O_DIRECT, O_DIRECT fixes and superbh-aio (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052820000">- vma merging (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052733600">- nmi profiler
- VM updates: rmap, dma zone isolation
- tux (Ingo Molnar)
- ext3 stall fixes (Ingo Molnar)
- e1000 fixes (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052474400">- config files overhaul (Arjan van de Ven)
- fix bug in mlock patch
- IPVS (Dave Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052388000">- import IO elevator changes from gingin
- critical VM fix
- matrox framebuffer patch for pseries (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052301600">- hammer nptl fixes (Ulrich Drepper)
- 4G/4G split (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052215200">- upgrade to 2.4.21-rc1-ac4 (minus -ac acpi and xapic changes)
- drop nfs patches since those seem to be in -ac</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052128800">- larger message buffer size + boot option (Mark DeWandel)
- AMD64: tls handling, coredump fixes (Jim Paradis)
- SMP &amp; highmem VM fixes (Ben LaHaise)
- HT+NUMA scheduler (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051956000">- ext3 orphan cleanup fix (Ernie Petrides)
- s390 affinity fixes (Pete Zaitcev)
- i386 vsyscall DSO changes (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051869600">- bugfixes and config changes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051783200">- enable semtimedop for other architectures (Ernie Petrides)
- large pci bus numbers (Julie DeWandel)
- bugfixes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051610400">- igmpv3 (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051524000">- generic 32bit compat stuff + amd64/ppc64/ipf pieces (Matt Wilson)
- clustered apic (XAPIC) support (Ingo Molnar)
- ppc64 architecture updates (Matt Wilson, Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051264800">- ppc64 fixes</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051178400">- collapse ipsec into one patch (David Miller)
- ppc64 build fix (Matt Wilson)
- improve smp scheduler fairness (Ingo Molnar)
- allow mlock for normal users, up to ulimit (Ingo Molnar)
- AMD64 port (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051092000">- clean up mechanism to pass extra CFLAGS so we don't override what's
  already there
- merge ia64 build stuff (Larry Woodman)
- merge varyio + superbh (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051005600">- merge up to 2.4.21-rc1
- IA64: virtual mem_map, acpi updates, netdump update, pte-highmem &amp; fealnx
- IA64: architecture specific patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050919200">- import davem's ipsec patch pile
- ppc64 kallsyms and dump_fpu patches (Matt Wilson)
- rmap updates (x86_64 &amp; bufferhead reclaim)
- ppc64 ptrace patch (Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050660000">- open up patch namespace 2000-5000 for network protocol changes
- renumber existing patches in that range</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050573600">- make sure to actually apply the rmap-updates patch
- iowait statistics
- ppc64 code merge (Mark &amp; Julie DeWandel)
- ppc64 build scripts (Matt Wilson)
- raise symlink recursion level to 8 (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050487200">- merge up to marcelo's latest
- pte-highmem bits for x86-64 and ppc64</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050400800">- merge up to 2.4.21-pre7-ac1
- drop semtimedop patches (now in -ac)
- drop nfs xprt_fixes, fix_softirq, d_drop and nfs-readeof (merged in -pre7)
- add !CONFIG_QUOTA compile fix for 2.4.21-pre7-ac1</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1050314400">- add LCS driver (endemic to s390)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050314400">- add rmap VM
- add kunmap_atomic debugging patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050141600">- remove dir.c part of NFS kmap_atomic patch for now
- using strlen as local variable name in nfs code kills, literally</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050055200">- merge S390(x) back in  (Pete Zaitcev)
- fix NFS kmap_atomic patch
- sched.c patch to disable interrupts in wake_forked_task  (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049968800">- AIO infrastructure  (Ben LaHaise)
- update NFS kmap_atomic patch  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049882400">- semtimedop patches  (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049796000">- I know understand linux-2.4.20-nfs-readeof.patch, so I merged it
- netdump update (Dave Anderson)
- 64 bit pci &amp; elf loader fix (Mark &amp; Julie)
- nptl whitespace patches, folded into nptl patch (Arjan van de Ven)
- rediff linux-2.4.18-smallpatches.patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049709600">- merge NFS patches by Steve Dickson (blame me for NFS kmap_atomic patch)
- split x86 syscall stuff out into separate patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049536800">- fix nptl patch, now it boots</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049450400">- port linux-2.4.20-o1-nptl.patch from gingin
- rediff a few patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049277600">- update linux-modules-unsupported (with Arjan)
- fix up the list a second time to fix module dependencies</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049191200">- copy -head into new AS3 branch
- remove i586 build
- remove 7.x compatibility (linux-2.4.9-fstat.patch)
- architecture patches get more breathing room (100 - 500)
- reserve patch numbers 1000 - 2000 for VM
- patch numbers 2000 - 5000 for bugfixes, changes and updates to
  existing drivers and filesystems
- remove inode reclaim patch (will be merged later as part of rmap)
- remove io priority scheduler (still experimental)
- remove nfs patches (linux-2.4.20-nfs-cto.patch,
  linux-2.4.20-nfs-access.patch &amp; linux-2.4.20-nfs-rdplus.patch)
- remove linux-2.4.18-gericom.patch
- update netdump from RH9 branch</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1048240800">- Added three NFS performance patches</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048240800">- add a timer for aging requests up</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048154400">- fix the sorting in the io elevator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048068000">- remerge ext3 orlov allocator and enable
- more priority io elevator infrastructure work</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1047117600">- merge ext3 orlov allocator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046772000">- go to 2.4.21-pre5-ac1
- split the rpm into a primary fileset and secondary (rare modules) fileset</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046253600">- go to 2.4.21-pre4-ac6
- drop lots of patches
- trim changelog to not have 2000, 2001 and 2002 anymore</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045476000">- downgrade pwc webcam driver one notch to the last known working version
- work around vm livelock
- make the cciss driver not enable irq's in it's irq handler</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1045130400">- fix for shared statistic &lt; 0</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045130400">- Signal fixes for LSB testsuite
- merge patch to fix init=/bin/sh
- 2.4.21-pre4-ac4 bugfixes (mostly IDE crashes)</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044784800">- merge 2.4.21-pre4-ac3 bugfixes</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1044352800">- Add ext3 fix for truncating negative i_blocks</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1044266400">- add oopsmeharder for debugging hard hangs</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044266400">- merge rmap15d
- set the sbp2 command buffer to 64 elements instead of 8</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1043834400">- merge tcp stall fix from DaveM
- merge bugfixes from 2.4.21-pre4</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1042452000">- Merge in the ACL and XATTR patches from the UL and BestBits trees.</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1042279200">- Merge in the LVM pvmove fix to current tree</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1042020000">- add AMD Golem fixup</changelog></package>
<package pkgid="4363a9decbdfd18ba270a6968a76047cd4636507" name="kernel" arch="x86_64"><version epoch="0" ver="2.4.21" rel="32.0.1.EL.XFS"/><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1117101600">- added SGI XFS patch set</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.0.1.EL" date="1116237600">- prevent shared memory lock/unlock w/o permissions (Dave Anderson)
- prevent mlock() resource limit bypass w/shm locking (Ernie Petrides)
- fix data corruption from pte_clear() races on &gt;4GB x86's (Larry Woodman)
- fix arg/env access in ELF core dumping and /proc reads (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.EL" date="1113559200">- fix data corruption w/ext3 xattr on 64-bit arches (Jason Baron)
- validate LCP frame lengths in PPP async handling (Dave Miller)
- enable forcedeth net driver builds in x86 configs (Jim Paradis)
- isolate IP fragment queues among various callers (Dave Miller)
- prevent busy inodes for symlinks after unmounts (Don Howard)
- revise PCI device ids extending ICH7 support (John Linville)
- work around broken xw4300 BIOS AHCI BAR setup (John Linville)
- add protocol validation in net bluetooth driver (John Linville)
- enable software watchdog timer in s390,x configs (Jan Glauber)
- fix data corruption w/uselib() on bad ELF libs (Ernie Petrides)
- add USB tablet init delay in wacom_probe() (Kristian Høgsberg)
- prevent core dumps with non-readable ELF interps (Dave Anderson)
- add maxevents validation in epoll_wait() handling (Ernie Petrides)
- add len validation in /dev/random poolsize sysctl (Ernie Petrides)
- correct size of ia64 syscall table initialization (Jason Baron)
- correct x86_64 user-mode i/o port validation (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-31.EL" date="1110448800">- fix missing ppc64 netdump/diskdump symbols (Nobuhiro Tachino)
- prevent ia64 unwind from traversing off stack (Jason Baron)
- disable 3w-9xxx driver builds on ppc64 (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-30.EL" date="1110362400">- fix obscure oops in tty init_dev() handling (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-29.EL" date="1109844000">- incorporate urgent late-breaking SATA fixes (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-28.EL" date="1109152800">- add more USB device support to visor driver (Pete Zaitcev)
- implement clustered APIC support for x86_64 (Larry Woodman)
- constrain x86 MSR writes based on cpu model (Jason Baron)
- increase max superbh size for performance (Stephen Tweedie)
- add locking to prevent oops in md_seq_show() (Doug Ledford)
- restore missing ia64 panic_on_oops handling (Tatsuo Uchida)
- implement Ethernet PCI quirk for HP xw9300 (Jim Paradis)
- revert NFS flock() avoidance to -27.7.EL (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.17.EL" date="1108980000">- rework NFS flock() avoidance w/FS_WANT_FLOCK for GFS (Ken Preslan)
- prevent inode corruption from delete/lookup races (Wendy Cheng)
- preserve registers for ia64 16-byte atomic ops (Geoff Gustafson)
- update SCSI whitelist for LSI/HP/STK/EMC devices (Tom Coughlan)
- disable vary_io in ips driver to avoid ctlr hangs (Tom Coughlan)
- correct handling of 2-TB device partitions (Peter Martuccelli)
- update support for ia64 perfmon facility (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.16.EL" date="1108720800">- implement diskdump support for SATA piix/promise (Nobuhiro Tachino)
- correct /proc/mtrr size values on EM64T platforms (Larry Woodman)
- restore page permissions after writes from ptrace() (Don Howard)
- fix /proc parent pids from multi-threaded forks (Ernie Petrides)
- enable software watchdog timer support on s390,x (Jan Glauber)
- update tg3 network driver to version 3.22RH (John Linville)
- incorporate 3w-9xxx driver version 2.24.00.011fw (Adam Manthei)
- correct ending boundary check in filemap_sync() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.15.EL" date="1108548000">- add e100 driver PCI device ids for ICH7 support (John Linville)
- restore obsolete but ignored e100 module params (John Linville)
- implement user-mode (gdb) access to ia64 gate page (Jason Baron)
- fix x86_64 FPU IP and DP values in SIGFPE context (Larry Woodman)
- add qla2200 module parameter to use NVRAM RIO val (Tom Coughlan)
- update 3w-xxxx driver to 1.02.00.037 w/.033 backup (Adam Manthei)
- fix crashes in video Firewire (ieee1394) driver (Bastien Nocera)
- prevent info leaks into ext3 journal disk blocks (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.14.EL" date="1108461600">- enhance AIO performance over NFS w/FS_AIO_SYNC hook (Steve Dickson)
- defer e100_tx_timeout() work from interrupt context (John Linville)
- correct IPV6 DST entry release to prevent route leak (Dave Miller)
- ignore MTU updates from invalid IPV6 ndisc packets (Dave Miller)
- add relevant PCI device ids to extend ICH7 support (John Linville)
- reduce system pauses during heavy page laundering (Larry Woodman)
- fix audit logging of paths w/predicate filter usage (Neil Horman)
- enable building of unsupported fusion isense module (Adam Manthei)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.13.EL" date="1108375200">- increase dxfer size limit for ppc64 SG_IO ioctl32 (David Howells)
- eliminate tty line discipline usage/switching races (Jason Baron)
- fix autofs recognition of ghosted direct map updates (Jeff Moyer)
- fix sg driver race between cmd completion and close (Tom Coughlan)
- prevent e100 data corruption from v.3.0.27-k2 update (John Linville)
- upgrade SATA support (core, libata, new/old drivers) (John Linville)
- implement diskdump support for sym53c8xx adapter (Yuichi Nagahama)
- add USB support for Wacom Cintiq/Intuos3 tablets (Kristian Høgsberg)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.12.EL" date="1107943200">- update e100 network driver to version 3.3.6-k2 (John Linville)
- correct cpu id macro for dual-core Opteron support (Jim Paradis)
- add "numa=off" message on x86_64 OOM kills w/NUMA (Larry Woodman)
- improve user/system timer tick accounting on s390,x (Pete Zaitcev)
- prevent EAGAIN errs from interrupted TCP recv() calls (Dave Miller)
- update cciss disk driver to version v2.4.54.RH1 (Adam Manthei)
- eliminate diskdump cpu id from frozen list (Nobuhiro Tachino)
- fix user-space access bug in USB vicam ioctl (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.11.EL" date="1107424800">- incorporate Emulex driver ioctl module version 1.0.13 (Tom Coughlan)
- eliminate potential call_lock deadlock with diskdump (Tatsuo Uchida)
- fix potential kiobuf_lock deadlock in free_kiovec() (Larry Woodman)
- add L2 cache descriptor for EM64T Irwindale processor (Neil Horman)
- prevent mmap() syscalls from choosing NULL mappings (Rik van Riel)
- include bounce buffer pages in show_mem() output (Larry Woodman)
- add I2C driver support for ICH5 in i2c-i801.c (John Linville)
- correct parport_pc errors on insmod failures (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.10.EL" date="1106906400">- fix futex_wait() race condition that allowed app hang (Ingo Molnar)
- add/correct write barrier placement in timer routines (David Howells)
- add x86_64 NMI switch support to debug kernel hangs (Yuichi Nagahama)
- restore CIV/LVI offset operation in i810_audio driver (John Linville)
- update e1000 network driver to version 5.6.10.1-k2 (John Linville)
- prevent bogus BUG_ON during multi-threaded core dump (Roland McGrath)
- fix x86_64 crash in huge_page_release() w/SHM_HUGETLB (Larry Woodman)
- fix possible mem corruption from /proc/kcore access (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.9.EL" date="1106647200">- fix core dumping over NFS mounts with "intr" option (Roland McGrath)
- prevent multi-threaded app hang from sys_wait4() race (Ingo Molnar)
- restore e1000 support for Intel PCI device id 1014 (John Linville)
- add ac97 quirk entries for HP xw6000/xw6200/xw8000 (John Linville)
- update b44 network driver to upstream version 0.95 (John Linville)
- revert NFS silly-delete and rpciod-hang patches (Steve Dickson)
- fix panics while backing up LVM snapshots (Heinz Mauelshagen)
- fix oops in redirect_target() on DHCP refresh (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.8.EL" date="1105696800">- rework ia64 INIT switch stacks for clean tracebacks (Tatsuo Uchida)
- fix USB raced timeout errors and ohci_complete_add() (Pete Zaitcev)
- add O_DIRECT handling in LVM driver handling (Heinz Mauelshagen)
- downgrade wait4() SIGCHLD/SIG_IGN warning message (Ingo Molnar)
- eliminate potential VMA list races with do_brk() (Dave Anderson)
- ignore ICMP Source Quench messages in tcp_v4_err() (Dave Miller)
- prevent VMA overlap crashes in insert_vm_struct() (Jason Baron)
- move flock() avoidance from NFS up to F/S layer (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.7.EL" date="1105437600">- fix 32-compat alt-stack signal handling on x86_64 (Geoff Gustafson)
- add initialization of ppc64 EEH error buffer size (David Howells)
- make ppc64 xmon work properly with Power5 console (David Howells)
- prevent infinite sync loop from NFS ESTALE writes (Steve Dickson)
- update 8139too network driver w/recent 2.4 fixes (John Linville)
- avoid netfilter oops when ip_conntrack is unloaded (Dave Miller)
- fix potential rpciod hangs during NFS sillydelete (Steve Dickson)
- avoid "No locks available" errors w/flock() on NFS (Ken Preslan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.6.EL" date="1104919200">- fix x86 phys proc ids for non-clustered APIC systems (Geoff Gustafson)
- return EINVAL on e100/e1000 rx-mini/rx-jumbo settings (John Linville)
- fix i810_audio regression from modified ICH6 PCI ids (John Linville)
- prevent race conditions in add_wait_queue_cond() macros (Jeff Moyer)
- fix FAT32 file system corruption w/writing 8M files (Alexander Viro)
- fix derivation/presentation of PHB unit ids on ppc64 (David Howells)
- close OpenFirmware stdin device at boot on ppc64 (David Woodhouse)
- fix 32-bit-compat regression in CMSG validations (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.5.EL" date="1103796000">- add "CommitLimit" data to /proc/meminfo output (Frank Hirtz)
- allow autofs to expire mounts on ppc64 arch (Jeff Moyer)
- add 3c59x EEPROM_RESET for 3c900 Boomerang (John Linville)
- ignore PTE mapping status in page_anon() (Larry Woodman)
- fix SIOCGIFHWADDR handling for zero addr_len (Dave Miller)
- add netdump support for x86_64, ia64, ppc64 (Dave Anderson)
- correct overcommit accounting on fork failure (Frank Hirtz)
- raise default ia64/ia32e swiotlb size to 64M (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.4.EL" date="1103709600">- add network CMSG validation checks (Dave Miller)
- fix data struct leak in ip_options_get() (Dave Miller)
- fix IGMP vulnerabilities in ip[6]_mc_source() (Dave Miller)
- fix e_phnum binfmt_elf loader vulnerability (Dave Anderson)
- clean x86_64 32-bit-compat syscall numbers (Jim Paradis)
- prevent ia64 floating point reg val leakage (Jason Baron)
- add USB io_edgeport driver size check (Peter Martuccelli)
- enable softirq deferral for x86_64 arch (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.3.EL" date="1102586400">- add data/param length sanity checks in smbfs (Alexander Viro)
- prevent /proc/&lt;PID&gt;/cmdline env data disclosure (Dave Anderson)
- make tulip_stop_rxtx() wait for DMA termination (John Linville)
- fix mm_stat regression introduced in -20.13.EL (Rik van Riel)
- correct return value from vlan_dev_change_mtu() (John Linville)
- serialize datagram read w/appropriate semaphore (Dave Miller)
- fix keyboard regression introduced in -24.EL (Peter Martuccelli)
- enable mmap/mprotect PROT_EXEC for legacy apps (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-26.2.EL" date="1101722400">- fix USB problems with keyboards and ia64 oopses (Pete Zaitcev)
- add i810 PCI IDs for nforce3/CK804 audio devices (Jim Paradis)
- fix ppc64 viodasd driver dev naming/limit bugs (David Howells)
- prevent tg3 fiber link bounces w/auto-negotiation (Dave Miller)
- add ac97 quirk handling for i810_audio driver (John Linville)
- prevent incorrect OOM killing with iscsi usage (Larry Woodman)
- create kiobuf cache to reduce lowmem contention (Larry Woodman)
- fix yet another binfmt_elf loader vulnerability (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.1.EL" date="1100512800">- (this is the first build for RHEL 3 Update 5)
- implement open() recovery from NFS ESTALE errors (Neil Horman)
- clean up warnings from lpfc and lpfc_703 Makefiles (Tom Coughlan)
- fix nessus-induced kernel panic with auditing (Peter Martuccelli)
- update 3c59x driver to LK1.1.18 and fix reset bug (John Linville)
- fix ext3 O_DIRECT bug in orphan list handling (Stephen Tweedie)
- flush cached dirty pages on NFS reads w/O_DIRECT (Steve Dickson)
- allow ia64 kernel unaligned access msg suppression (Neil Horman)
- correct test for performing buffer-head reclaim (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.EL" date="1100253600">- fix binfmt_elf loader vulnerabilities (Jim Paradis, Dave Anderson)
- limit kernel data struct slabs to single-page allocs (Larry Woodman)
- update Emulex driver to 7.1.14 (backup still 7.0.3) (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-24.EL" date="1100080800">- fix several ppc64 problems with signal catching (David Woodhouse)
- fix several bugs in /proc/ppc64/lparcfg driver (David Howells)
- fix possible diskdump hangs w/megaraid2 driver (Tatsuo Uchida)
- add support for IBM EM64T-based Groucho blade (Peter Martuccelli)
- fix regression in USB BIOS-&gt;kernel hand-off support (Pete Zaitcev)
- fix regression in ia64 kernel stack unwind handling (Don Howard)
- fix regression w/agpgart support of i8xx chipsets (Larry Woodman)
- add support for BLKSSZGET ioctl in cciss driver (Tom Coughlan)
- disable iSCSI builds in ppc64 and s390* configs (Tom Coughlan)
- update Emulex driver to 7.1.13 (backup still 7.0.3) (Tom Coughlan)
- correct SCSI whitelist for Chaparral FR1422 devices (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-23.EL" date="1098957600">- prevent kswapd from getting stuck in prune_icache() (Larry Woodman)
- fix ppc64 single-stepping into signal handlers (David Woodhouse)
- fix corruption from user stack expansion races (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-22.EL" date="1098093600">- prevent add/removal races in SCSI open handling (Doug Ledford)
- fix U3 agpgart regression with Intel i8xx chipsets (Dave Jones)
- update SCSI whitelist for IBM 1722/1724 devices (Tom Coughlan)
- correct TSS descriptor limit checking for x86_64 (Jim Paradis)
- add nforce3/CK804 device support and fix ACPI bug (Jim Paradis)
- add support for "forcedeth" net driver version 0.28 (Jim Paradis)
- enable diskdump support in amd64/ia32e configs (Nobuhiro Tachino)
- restore/improve linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- add missing page_cache_release() in launder_page() (Larry Woodman)
- update Emulex driver to 7.1.11 (backup still 7.0.3) (Tom Coughlan)
- add new USB ids to support latest Wacom tablets (Kristian Høgsberg)
- remove drivers/net/tun.o from unsupported list (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-21.EL" date="1096538400">- fix potential PTE race in do_anonymous_page() (Rik van Riel)
- add "Committed_AS" data to /proc/meminfo output (Frank Hirtz)
- revise DMA zone paging thresholds for x86_64 (Larry Woodman)
- prevent /proc/scsi/scsi oops during probes (David Woodhouse)
- avoid kswapd hangs via free_more_memory() hooks (Rik van Riel)
- update megaraid2 driver to 2.10.8.2 w/2.10.6 backup (Adam Manthei)
- fix do_notify_parent() panic from ptrace death race (Roland McGrath)
- fix large core file support on 64-bit architectures (Dave Anderson)
- enable tux on ia64 and increase max tux threads to 16 (Ingo Molnar)
- fix ia64/s390,x single-stepping w/signal handlers (David Woodhouse)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.14.EL" date="1096452000">- fix hang in SCSI starvation management code (David Howells)
- update SCSI whitelist for NETAPP LUN devices (Wendy Cheng)
- fix s390 cio handling during ESS fail-overs (Pete Zaitcev)
- update Emulex driver to 7.1.8 w/7.0.3 backup (Tom Coughlan)
- update Qlogic driver to 7.01.01 w/7.00.03 backup (Tom Coughlan)
- correct unlock/free order in proc_lookupfd() (Ernie Petrides)
- use ACPI for PCI interrupt routing on ia32e (Jim Paradis)
- allow cpus to boot w/APIC IDs &gt; 8 on ia32e (Jim Paradis)
- fix pid allocation when pid_max &gt; 32768 (Ernie Petrides)
- fix regs in multi-threaded ia64 core dumps (Keiichi Mori)
- enable sym53c8xx driver for ppc64 iSeries (David Howells)
- fix ac97 depmod errors w/hugemem configs (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.13.EL" date="1096365600">- fix aic79xx_osm.h/3c59x.c changes in prior rev (Tachino/Linville)
- allow for larger nfsd block sizes on some archs (Steve Dickson)
- fix possible aacraid driver panic in aac_info() (Tom Coughlan)
- fix xdr argsize check to handle writes &gt;= 2^31 (Steve Dickson)
- update e1000 network driver to version 5.3.19-k2 (John Linville)
- apply several cciss driver fixes (to 2.4.52.RH2) (Adam Manthei)
- fix x86_64 versions of cpu capability test macros (Jim Paradis)
- fix ppc64 HPTE memory corruption race condition (Rik van Riel)
- add sys_epoll support on s390,x (Stephen Tweedie, Pete Zaitcev)
- prevent keyboard.c warnings from mouse clicks (Norm Murray)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.12.EL" date="1096279200">- improve slab cache page reaping heuristics (Larry Woodman)
- implement diskdump support for x86_64 arch (Nobuhiro Tachino)
- add ia64 INIT trigger switch support for debugging (Tatsuo Uchida)
- fix several problems in handling of AIO on pipes (Jeff Moyer)
- update fixes for LTP read02 test hangs with tmpfs (Alexander Viro)
- fix x86_64 single-stepping out of signal handlers (Jim Paradis)
- increase size of ppc64 RTAS error log buffer (David Howells)
- increase max possible kNFSD lockd cookie size (Steve Dickson)
- backport 3c59x fixes for mii-tool problems w/10Mb (John Linville)
- incorporate Cisco's iscsi_sfnet initiator driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.11.EL" date="1095933600">- implement diskdump support for megaraid2 adapter (Tatsuo Uchida)
- update ips driver to version 7.10.18 w/7.00.15 backup (Tom Coughlan)
- correct max page aging interval boundary in kscand() (Larry Woodman)
- add ppc64 support for ptrace() with PT_SINGLESTEP (David Woodhouse)
- update e100 network driver to version 3.0.27-k2 (John Linville)
- fix LTP read02 test hangs when tmpfs is in use (Alexander Viro)
- get proc_dir_entry reference in proc_lookup() (Alexander Viro)
- add exports of several AIO-related interfaces (Larry Woodman)
- reduce swapping during excessive pagecache use (Larry Woodman)
- implement statfs64() syscall on x86 for NFS use (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.10.EL" date="1095847200">- implement early USB hand-off (BIOS-&gt;kernel) support (Pete Zaitcev)
- fix stack pointer calculation in x86 show() handling (Jeff Moyer)
- prevent interference between flock/POSIX lock types (Frank Hirtz)
- update pcnet32 network driver to version 1.30c (John Linville)
- add export of block_commit_write() f/s interface (Larry Woodman)
- implement diskdump support for dpt_i2o adapter (Tatsuo Uchida)
- update mptfusion driver to version 2.05.16.02 (Adam Manthei)
- move disk_dump_notifier_list to diskdumplib.c (Nobuhiro Tachino)
- update s390 zfcp driver to revision 5.31.2.11+ (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.9.EL" date="1095674400">- fix occasional ibmvscsic driver insmod crash (David Howells)
- disable linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- prevent double slashes in symlink auditing (Peter Martuccelli)
- fix overzealous compat32 setsockopt conversions (David Woodhouse)
- backport tulip driver fixes from upstream 2.4.28 (John Linville)
- update tg3 network driver to version 3.10RH (John Linville)
- implement sysctl to force igmp protocol versions (Neil Horman)
- add diskdump performance improvement info (Nobuhiro Tachino)
- fix s390 iucv lost connections and ping hangs (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.8.EL" date="1095588000">- prevent diskdump deadlock in case of die() recursion (Tatsuo Uchida)
- add x86/x86_64 support for ptrace() w/PT_SINGLESTEP (Roland McGrath)
- fix x86/x86_64 single-stepping into signal handlers (Roland McGrath)
- increase x86 value for MAX_MP_BUSSES definition to 260 (Ingo Molnar)
- eliminate ia64 potential for scheduler runq deadlock (Larry Woodman)
- add support for /proc/sys/kernel/mem_nmi_panic sysctl (Dave Anderson)
- prevent keyboard-initiated sysrq hangs in handle_sysrq() (Jeff Moyer)
- fix intermittent netdump hangs from cpu-frozen messages (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.7.EL" date="1095415200">- fix premature OOM killing change added in prior rev (Larry Woodman)
- backport vlan driver fixes from upstream 2.4.28-rc1 (John Linville)
- add _sb_findmap symbol export in s390/s390x kernels (Pete Zaitcev)
- add ppc64 support for 32-bit sendfile64() syscall (David Howells)
- fix 32-bit IPC_INFO shmctl() syscalls for ppc64 (David Howells)
- upgrade libata/SATA support to current 2.4 bits (John Linville)
- avoid USB device resets of shared/busy interfaces (Pete Zaitcev)
- fix miscellaneous problems in ppc64 icom driver (David Howells)
- fix ip_queue_maxlen sysctl for ip[6]_queue modules (Neil Horman)
- add module parm for max entries in NFS_ACL replies (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.6.EL" date="1095156000">- prevent OOM killer from kicking in prematurely (Larry Woodman)
- avoid NMI watchdog crashes during sysrq-m usage (Wendy Cheng)
- add auditing support for ia64 clone2 syscall (Peter Martuccelli)
- correct sign of auditing error codes for ia64 (Peter Martuccelli)
- implement ia64 auditing 32-bit-disable sysctl (Peter Martuccelli)
- fix ia64 faults w/stale VHPT-generated TLB entries (Dave Anderson)
- fix invalid x86_64 checksums for multicast packets (Mike Gahagan)
- fix incorrect blocking bug inside wakeup_kswapd() (Larry Woodman)
- validate appropriate media type in DVD drives (Doug Ledford)
- reduce s390 stack usage in qeth/qdio drivers (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.5.EL" date="1094810400">- prevent scenarios that lead to hang of kswapd (Larry Woodman)
- add locking for access to /proc/bus/usb/devices (Pete Zaitcev)
- correct x86 rescheduling to handle apm=power-off (Ingo Molnar)
- fix OOM killer locking and mm referencing holes (Larry Woodman)
- pin ia64 mapping for idle proc stack during boot (Larry Woodman)
- fix warning throttle for amd64 stack overflow check (Neil Horman)
- fix content lengths when using tux gzip compression (Ingo Molnar)
- add auditing support for pread/pwrite syscalls (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.4.EL" date="1094724000">- prevent bogus data in /proc/scsi/ibmvscsi/* (David Howells)
- update tg3 network driver to version 3.9RH (John Linville)
- improve ramfs memory alloc w/scarce highmem (Larry Woodman)
- correct several values in /proc/ppc64/lparcfg (David Howells)
- allow dirty page rebalancing under mem pressure (Rik van Riel)
- prevent memory leak in scsi_build_commandblocks() (Doug Ledford)
- fix potential kswapd deadlock w/disk quota usage (Larry Woodman)
- increase MAX_IO_APICS from 8 to 32 for x86_64 arch (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.3.EL" date="1094205600">- fix various error path bugs in bcm5820 driver (John Linville)
- validate addresses used with /dev/kmem accesses (Neil Horman)
- eliminate IPSEC tunnel leaks when using IPComp (Dave Miller)
- add auditing support for utimes() syscalls (Peter Martuccelli)
- prevent netconsole freeze w/cable dis-/re-connect (Jeff Moyer)
- correct reboot_cpu validation for "reboot=s&lt;n&gt;" (Doug Ledford)
- fix mem/irq clean-up in olympic tokenring driver (Neil Horman)
- update network bonding driver to version 2.6.0 (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.2.EL" date="1094032800">- add maps/rlimits output with print-fatal-signals=2 (Ingo Molnar)
- backport ac97 sound support from upstream 2.4.27 (John Linville)
- eliminate kernel stack data leaks from USB drivers (Mark Cox)
- fix interrupt status mask in AMD PCnet32 driver (David Howells)
- fix module loading problems in ibmvscsic driver (David Howells)
- fix x86 shared runq mapping when ACPI data is bad (Bernd Schmidt)
- disable enhanced error handling on PCI-ISA bridges (David Howells)
- add memory-mapped i/o support to i810_audio driver (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.1.EL" date="1093860000">- (this is the first build for RHEL 3 Update 4)
- backport r8169 network driver changes from 2.4 (John Linville)
- update i810_audio sound driver to version 1.01 (John Linville)
- convert USB UHCI driver warning to debug message (Pete Zaitcev)
- backport 2.6 PROT_GROWSDOWN/UP mprotect() support (Jakub Jelinek)
- lower ppc64 console logging level of RTAS messages (David Howells)
- fix ppc64 handling of "smt-emabled=off" boot option (David Howells)
- correct socket sndbuf accounting w/IP_MULTICAST_LOOP (Neil Horman)
- reduce x86_64 user stack start randomization to 16K (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.EL" date="1092823200">- change TARGET_CPUS on x86_64 to include all on-line cpus (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-19.EL" date="1092304800">- fix possible races/overflows in file offset handling (Alexander Viro)
- correct logging of boot progress messages on Power5 (David Howells)
- extend ppc64 EEH support for other types of devices (David Howells)
- fix ibmveth driver to properly shut down and restart (David Howells)
- fix several races and overflows in ppc64 RTAS driver (David Howells)
- backport "acpi=noirq" support to work around Nocona hangs (Don Howard)
- conditionalize pbn_hp_diva to fix serial driver oops (Matthew Galgoci)
- add amd64 GART entry guard mappings for PCI mis-prefetch (Jim Paradis)
- upgrade SATA support again to resolve several problems (Jeff Garzik)
- qualify ia32e IRQ affinity disable with BIOS flag check (Jim Paradis)
- fix eeh_check_failure() on ppc64 to be interrupt safe (David Howells)
- correct ppc64 EEH macros to use appropriate data size (David Howells)
- fix x86/ia64 no-wait handling in smp_call_function() (Larry Woodman)
- fix "Filter target 0x203 not known ..." audit msgs (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-18.EL" date="1090404000">- prevent s390 mlock hangs with follow_page() rework (Ernie Petrides)
- fix Power5 initialization and handling of RAS IRQs (David Howells)
- fix ppc64 viocons driver deadlocks with printk() (David Howells)
- apply eh_timeout, netdump, cli fixes in diskdump (Tatsuo Uchida)
- add skip_mapped_pages tuning for page eviction (Stephen Tweedie)
- fix initrd's effect on ppc64 mem_end calculation (David Howells)
- allow HT support on ppc64 systems with single cpu (David Howells)
- backport v2.0.8 aic7xxx driver h/w support for Dell (Tom Coughlan)
- correct ppc64 device node searching in hvsi driver (David Howells)
- fix KMI compat problem w/pgprot_t in x86 NX support (Jim Paradis)
- resurrect mptfusion driver backup version 2.05.05 (Tom Coughlan)
- disable IRQ affinity setting on some ia32e systems (Jim Paradis)
- update SCSI whitelist for Dot Hill SANnet/StorEdge (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-17.EL" date="1089280800">- account for zone holes in big hash table allocator (Stephen Tweedie)
- prevent reserved stack space overflow of mmap_top (Ernie Petrides)
- fix USB crash in scan_async() with EHCI hardware (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-16.EL" date="1088848800">- enable exec-shield and add x86 NX support (Ingo Molnar, Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.19.EL" date="1088762400">- add owner check in inode_change_ok() for gid changes (Ernie Petrides)
- fix race in finish_task_switch() between wakeup/exit (Ernie Petrides)
- remove Samsung CD-ROM SN-124 from IDE DMA blacklist (Tom Coughlan)
- update e1000 network driver to version 5.2.52-k3 (John Linville)
- add auditing support for semtimedop syscalls (Peter Martuccelli)
- fix tasklet and locking bugs in Power5 hvsi driver (David Howells)
- fix megaraid2 handling of TUR cmds with SCSI CD-ROM (Adam Manthei)
- update SCSI whitelist for HP NS E1200-160 router (Tom Coughlan)
- prevent x86 read_ldt() from reading beyond kmap (Ernie Petrides)
- force single loadable segment in ia64 kernels (Jakub Jelinek)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.18.EL" date="1088157600">- implement ia64 work-around for TLB fetch timeout MCA (Larry Woodman)
- fix Power3 interrupt initialization in ppc64 setup (David Howells)
- correct info msg, prevent double panic in diskdump (Tatsuo Uchida)
- defend against NULL "mm" ptrs in page_referenced() (Rik van Riel)
- fix miscellaneous audit subsystem problems (Peter Martuccelli)
- prevent crash with tux CGI execution on x86_64 (Ingo Molnar)
- add installer info to SATA sx8 block driver (Jeff Garzik)
- turn on vary_io flag in SCSI ips driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.17.EL" date="1087984800">- allocate big system hash tables w/bootmem allocator (David Howells)
- prevent loading aic7xxx_old when aic7xxx is in use (Doug Ledford)
- implement stat() recovery from NFS ESTALE errors (Steve Dickson)
- fix raw/O_DIRECT i/o bug with unmapped pages (Stephen Tweedie)
- correct another locking hole in RAID1 handling (Doug Ledford)
- fix __x86_64__ conditional in megaraid2.c driver (Adam Manthei)
- fix unresolved symbols on ia64 in cciss driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.16.EL" date="1087898400">- make NFS sillydelete wait for unlink completion (Steve Dickson)
- prevent EIO w/concurrent O_DIRECT+buffered i/o (Stephen Tweedie)
- upgrade SATA support (core, libata, and drivers) (Jeff Garzik)
- implement futex() FUTEX_CMP_REQUEUE op (Al Viro, Pete Zaitcev)
- update b44 network driver to version 0.93 (John Linville)
- avoid unix_stream_sendmsg() ENOBUFS errors (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.15.EL" date="1087812000">- improve SCSI mid-layer error handling w/sdev_retry_q (Doug Ledford)
- eliminate rw-semaphore races between waiter/wakeup (David Howells)
- add locking and fix accounting bug in RAID1 handling (Doug Ledford)
- backport Carmel sx8.c driver from upstream 2.4 base (John Linville)
- rename ppc64-squadrons-* patches to ppc64-power5-* (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.14.EL" date="1087639200">- introduce support for IBM Squadrons/Power5 systems (David Howells)
- update aacraid driver to 1.1.5-2339 w/1.1.2 backup (Adam Manthei)
- allow sys_remap_file_pages() on unlocked ramfs VMAs (Larry Woodman)
- fix diskdump hangs during resets with aic79xx driver (Tatsuo Uchida)
- fix possible data corruption when using SHM_HUGETLB (Larry Woodman)
- set QLogic HbaApiNode proc file permissions to 0600 (Tom Coughlan)
- add IRQ blocking/restoring in add_gendisk/del_gendisk (Jeff Needle)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.13.EL" date="1087466400">- fix problem causing PCI bus 255 to be missing on ia64 (Ben Woodard)
- make nfs_statfs() recognize/handle fs size overflows (Steve Dickson)
- update QLogic driver to 7.00.03-RH1 w/6.07.02 backup (Tom Coughlan)
- allow procfs to utilize more dynamic inode numbers (David Howells)
- prevent inappropriate "unexpected IO-APIC" messages (Ernie Petrides)
- avoid lost dirty page bits in s390/s390x VM handling (Pete Zaitcev)
- fix ACPI SCI interrupt defaults and add kernel params (Jim Paradis)
- fix user-space access bugs in acpi/airo/decnet/sound (Alexander Viro)
- remove drivers/net/starfire.o from unsupported list (Ernie Petrides)
- fix mm_struct mem leak in copy_process() error path (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.12.EL" date="1087293600">- correct s390/s390x tests for PT_AUDITED flag (Peter Martuccelli)
- update e100 network driver to version 2.3.43-k1 (John Linville)
- update megaraid2 driver to 2.10.6 w/2.10.1.1 backup (Adam Manthei)
- add x86_64 auditing support for 32-bit-compat (Peter Martuccelli)
- fix ia64 unwind handling for UNW_INSN_SETNAT_MEMSTK (Jason Baron)
- update cciss driver to v2.4.52 for several fixes (Tom Coughlan)
- fix variable block mode tape handling in st driver (Tom Coughlan)
- incorporate latest Emulex fibre channel driver (Tom Coughlan)
- fix USB EHCI problem with BIOS-to-host handoff (Pete Zaitcev)
- update SCSI whitelist for DDN/Xyratex/SanDisk/CBOX3 (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.11.EL" date="1087207200">- upgrade to latest autofs4, remove from unsupported list (Jeff Moyer)
- fix memory corruption bug in audit driver code (Peter Martuccelli)
- store adjusted KSP value in ia64 diskdump support (Tatsuo Uchida)
- update e1000 network driver to version 5.2.52-k1 (John Linville)
- update ips driver to version 7.00.15 w/6.11.07 backup (Adam Manthei)
- implement USB device interlock between ioctls/SCSI-ops (Pete Zaitcev)
- update tg3 driver to version 3.6RH for upcoming chipsets (Dave Miller)
- downgrade several PCI cache line size debugging messages (Jim Paradis)
- correct x86_64 32-bit-compat support for AIO syscalls (Jeff Moyer)
- prevent FPU exception handling hangs on x86/x86_64 (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.10.EL" date="1086948000">- give wait.func highest priority in wake_up_filtered() (Larry Woodman)
- reduce system time when using sys_remap_file_pages() (Larry Woodman)
- enable CONFIG_SOFT_WATCHDOG module for ppc64 configs (David Howells)
- improve page allocation to avoid unnecessary swapping (Rik van Riel)
- implement diskdump support for ia64 with mptfusion (Tatsuo Uchida)
- disable native ia32 support for ia64 Montecito cpus (Jason Baron)
- save/restore P4/ia32e perf registers for oprofile (Will Cohen)
- fix oprofile ESCR_SET_EVENT_SELECT() event mask (Will Cohen)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.9.EL" date="1086775200">- update s390 zcrypt driver to version 1.2.1 (Pete Zaitcev)
- update network tg3 driver to version 3.5RH (Dave Miller)
- eliminate separate ia32e oprofile processor id (Will Cohen)
- update SCSI whitelist for IBM 2105/2145 devs (Doug Ledford)
- avoid EAGAIN errors on blocking UDP sockets (Steve Dickson)
- avoid putting locked inodes on dirty list (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.8.EL" date="1086688800">- decouple NFS O_DIRECT handling for performance gain (Steve Dickson)
- export page_is_ram() interface for amd64/ia32e arch (Jim Paradis)
- enable CONFIG_SCSI_SATA_* options in x86_64 configs (Jim Paradis)
- update mptfusion driver to 2.05.16 w/2.05.11.03 backup (Adam Manthei)
- fix nopage_sequential_readahead() and filemap_sync() (Larry Woodman)
- fix USB EHCI driver to avoid Squadrons install oops (Pete Zaitcev)
- add x86 NMI trigger switch support for debugging (Yuichi Nagahama)
- add dmi_blacklist[] entry for "Intel NA440BX DP" (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.7.EL" date="1086602400">- apply some minor scsi_dump_status() format tweaks (Doug Ledford)
- implement SCSI support for dynamic add (hot plug) (Doug Ledford)
- upgrade lvm driver logic to version 1.0.8-2 (Heinz Mauelshagen)
- fix x86_64 definition for inlined ffs() function (Jim Paradis)
- preserve VM_MAYEXEC for executable stack support (Jim Paradis)
- add extra SLBIEs for ppc64 Power5 DD2.0 errata (David Howells)
- add ppc64 32-bit compat for TIOCGICOUNT/MIWAIT (David Howells)
- hold file struct ref when removing POSIX locks (Steve Dickson)
- fix window scaling bug in tcp_ack_update_window() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.6.EL" date="1086343200">- make fsync() flush all pending NFS updates to disk (Steve Dickson)
- complete ia64 support for multiple I/O port spaces (Larry Woodman)
- fix sending of IP broadcast frames with TTL of zero (Neil Horman)
- prevent context switch storms under high VM loads (Larry Woodman)
- fix sigaltstack() errors w/JVM on hugemem kernels (Roland McGrath)
- add locking and improve output in scsi_dump_status() (Doug Ledford)
- add size boundary checking in scsi_resize_dma_pool() (Doug Ledford)
- fix SCSI request struct leak on command init failures (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.5.EL" date="1084528800">- overhaul ia64 SAL/MCA subsystem (Ben Woodard)
- enable x86_64 32-bit UID support (Jim Paradis)
- add initial diskdump support (Nobuhiro Tachino)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.4.EL" date="1084356000">- reduce chance of "VFS: Busy inodes after unmount." errs (Steve Dickson)
- convert "uaddr2" arg ptr in s390x futex() compat syscall (Pete Zaitcev)
- add ppc64 32-bit compat handler for PE_LOCKED_COPY ioctl (David Howells)
- update s390 dasd driver with several recent bug fixes (Pete Zaitcev)
- fix amd64 NUMA node scanning for Northbridge systems (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.3.EL" date="1084183200">- prevent exp_stopfodrop() oops during cluster failover (Steve Dickson)
- make nfs_file_commit() always flush the entire file (Steve Dickson)
- fix pcnet32 driver's MAC address selection on ppc64 (Julie DeWandel)
- backport /dev/random driver fixes for missed wakeups (Mark DeWandel)
- fix hang w/SoundBlaster 16-bit sampling w/odd count (Ernie Petrides)
- make s390 tape driver specify GPL module license type (Pete Zaitcev)
- correct buffer len value in ppc64 pSeries ipr driver (David Howells)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.2.EL" date="1083664800">- enable booting on 8-way Opteron systems (Jim Paradis)
- fix 32-bit-compat truncate64() on x86_64 (Jim Paradis)
- correct promiscuous mode counter handling (Dave Miller)
- support 128-GB ia64 systems w/HP zx1 chipset (Larry Woodman)
- add export of sys_ioctl() global symbol on s390x (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.1.EL" date="1083578400">- (this is the first build for RHEL 3 Update 3)
- reenable/fix linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- clean up file locks when NFS clients receive signals (Steve Dickson)
- complete ia64-specific LAuS syscall auditing support (Mark DeWandel)
- prevent NULL pointer dereference in page_referenced() (Rik van Riel)
- fix max sectors argument in lvm_snapshot_alloc() (Heinz Mauelshagen)
- allow AGP bus scanning to execute for all architectures (John Dennis)
- fix page_referenced() rss limit checks w/unmapped pages (Rik van Riel)
- correct locking and cr/lf problems in usbserial driver (Pete Zaitcev)
- add /proc/cpuinfo support for new ppc64 processors (Julie DeWandel)
- fix sense data handling on certain SCSI cmd retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.EL" date="1082541600">- fix clobbering of /proc/cpuinfo vendor_id on x86_64 (Jim Paradis)
- correct MCAST_MSFILTER/IP_MSFILTER size checking (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-14.EL" date="1081936800">- disable linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- prevent symlink buffer overflow in ISO-9660 fs (Ernie Petrides)
- check for skb overrun in IPV4/IPV6 IGMP handling (Dave Miller)
- fix possible hang in rebalance_laundry_zone() (Larry Woodman)
- correct zone_wired[] initialization for NUMA (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-13.EL" date="1081332000">- fix several critical libata bugs (Jeff Garzik)
- correct IPSEC XFRM policy ref counting (Dave Miller)
- add amd64/ia32e parsing for "acpi=off" arg (Jim Paradis)
- update tg3 driver to v3.1 for several fixes (Dave Miller)
- fix SCSI whitelist for Hitachi/HP DFx00, Apple Xserve (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-12.EL" date="1080295200">- add USB support for Handspring Treo 600 PDA syncing (Matthew Galgoci)
- clear state for CPEs during ia64 MCA SAL error logging (Ben Woodard)
- prevent DMA resource leak in QLogic driver error path (Tom Coughlan)
- change default QLogic driver device queue depth to 64 (Tom Coughlan)
- replace fabricated cciss drive geometry w/ENXIO error (Tom Coughlan)
- update SCSI whitelist for HP SureStore/StorageWorks (Tom Coughlan)
- disable CONFIG_ACPI_DEBUG in amd64/ia32e configs (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-11.EL" date="1078740000">- add yet another Intel ICH6 SATA PCI id (Jeff Garzik)
- fix ref counting in copy_process() error path (Larry Woodman)
- remove ia64 support for /proc/bus/mckinley/bitmap (Jason Baron)
- correct depmod versioning for unsupported modules (Ernie Petrides)
- prevent data corruption in ia32e phys_proc_id[] info (Larry Woodman)
- change default value for inactive_clean_percent to 30 (Larry Woodman)
- enable improved version of s390 on-demand timer patch (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-10.EL" date="1078221600">- incorporate late-breaking libata fixes (Jeff Garzik)
- enable amd64 syscall for tux support (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.17.EL" date="1078135200">- reduce s390 idle overhead with on-demand timer patch (Pete Zaitcev)
- complete ia64 NPTL support for 32-bit-EL executables (Jason Baron)
- add several ia64 syscall table entries for 32-bit-EL (Jason Baron)
- upgrade libata/SATA support, delete ich5-sata.patch (Jeff Garzik)
- check for mremap/vmtruncate race in move_one_page() (Jason Baron)
- prevent ia64 NaT-bit corruption during sig catching (Jason Baron)
- fix amd64 get_mtrr() parsing error with &gt;4GB memory (Jim Paradis)
- change amd64 default behavior to avoid TSC timer use (Jim Paradis)
- force s390utils upgrade to prevent zipl seg fault (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.16.EL" date="1078048800">- restore varyio capability in mptfusion driver update (Adam Manthei)
- enhance SCSI mid-layer queuing for indefinite retries (Doug Ledford)
- add ia64 reg reloads for 32-bit-EL strace -f support (Jason Baron)
- fix ia64 core dump support for 32-bit-EL executables (Jason Baron)
- add SCSI whitelist devs with BLIST_RETRY_ABORTED_CMD (Doug Ledford)
- remove stack-in-interpreter check in binfmt_elf.c (Julie DeWandel)
- clear all flags in exec_usermodehelper() for kmod (Alexander Viro)
- fix aacraid command completion (rq corruption) bugs (Tom Coughlan)
- correct cciss_proc_tape_report() type in flags decl (Tom Coughlan)
- enable USB-2.0-hub-based mice/keyboards to function (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.15.EL" date="1077962400">- fix amd64 oprofile linkage problem in ia32e support (Ernie Petrides)
- update ips driver to version 6.11.07 w/6.10.52 backup (Tom Coughlan)
- add size checks to DRM ATI r128 driver ioctl handling (John Dennis)
- avoid megaraid2 irq_disable calls for mem-mapped ctlrs (Tom Coughlan)
- upgrade firmware imbedded in QLogic driver to 3.02.24 (Tom Coughlan)
- correct ia64 memory accounting in overcommit mode 2 (Larry Woodman)
- implement softirq deferral to limit kernel stack depth (Ingo Molnar)
- reduce kernel stack usage in a couple of tux functions (Ingo Molnar)
- fix shared extended attribute ref counting in ext3 (Stephen Tweedie)
- clear SCSI sense data buffer between eh retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.14.EL" date="1077789600">- add .RH1 suffix to cciss driver version v2.4.50 (Tom Coughlan)
- implement initial LAuS syscall auditing support (Mark DeWandel)
- introduce GFS enablers for locking and sendfile ops (Ken Preslan)
- update QLogic driver to 6.07.01 w/6.06.00b11 backup (Tom Coughlan)
- improve netdump reliability w/asynchronous IPI param (Jeff Moyer)
- add ICH6 DSP audio support to i810_audio driver (Jeff Garzik)
- apply SCSI whitelist updates for several devices (Tom Coughlan)
- fix odd byte tape i/o handling in sym53c8xx driver (Tom Coughlan)
- correct minimum nfsd version that supports acls (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.13.EL" date="1077703200">- allow concurrent NFS direct i/o to same file if !append (Steve Dickson)
- introduce support for new Intel 64-bit ia32e processor (Larry Woodman)
- update mptfusion driver to 2.05.11.03 w/2.05.05 backup (Adam Manthei)
- remove fs/binfmt_misc.o from linux-modules-unsupported (Jason Baron)
- fix ia64 predicate register use in sig trampoline code (Jason Baron)
- add oprofile cpu type recognition for ia32e processor (Will Cohen)
- update e1000 network driver to version 5.2.30.1-k1 (Jeff Garzik)
- add more Intel PCI ids to match upstream 2.4 (Jeff Garzik)
- add ICH6 PATA support, PCI ids, irq routing (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.12.EL" date="1077530400">- add deferred page freeing for intr-context unmap_kvec() (Jeff Moyer)
- update megaraid2 driver to v2.10.1.1 w/v2.00.9 backup (Tom Coughlan)
- fix ppc64 pte hash table locking to avoid deadlocks (Julie DeWandel)
- fix ia64 data TLB init to prevent random boot-up hangs (Jason Baron)
- fix ia64 RNat register corruption with alt sig stacks (Jason Baron)
- allow smaller ia64 sig stacks in ia32 emulation layer (Jason Baron)
- backport ncpfs fixes to eliminate var-length arrays (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.11.EL" date="1077271200">- backport cisco aironet driver from 2.6.3-rc4 (Matthew Galgoci)
- update tg3 driver to v2.7 to fix status reg handling (Dave Miller)
- correct lost jiffies logic for x440/5 cyclone timer (Bernd Schmidt)
- fix open() error clean-up for unsupported O_DIRECT (Stephen Tweedie)
- prevent ia64 crashes when unmapping hugetlb pages (Jason Baron)
- add ppc64 processor support for future PPC970+ (Julie DeWandel)
- rework ppc64 32-bit-compat iptables support (Julie DeWandel)
- fix func ptr test in ethtool_set_ringparam() (Jeff Garzik)
- disable linux-2.4.21-scsi-affine-queue.patch (Doug Ledford)
- improve scsi_allow_ghost_devices description (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.10.EL" date="1077098400">- fix amd64 iommu bug causing data corruption on &gt;4GB systems (Jim Paradis)
- return EINVAL for unsupported ioctl32 syscalls on ppc64 (Julie DeWandel)
- remove incorrect BUG() call in __remove_inode_page() (Stephen Tweedie)
- fix s390 ctc driver problem causing build system hangs (Pete Zaitcev)
- fix s390 qeth driver error path to reset write_busy (Pete Zaitcev)
- update s390 zfcp driver to fix miscellaneous bugs (Pete Zaitcev)
- apply upstream nfs fixes for acl error handling (Steve Dickson)
- prevent kernel stack data leak via /dev/rtc (Ernie Petrides)
- allow AIO operations on sockets for non-inet (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.9.EL" date="1076925600">- restore genksyms_smp_prefix setting for non-x86 builds (Ernie Petrides)
- display/log memory stats whenever there's an OOM kill (Larry Woodman)
- update tg3 driver to v2.6, the latest upstream version (Jeff Garzik)
- update net bonding driver to v2.4.1, latest upstream (Jeff Garzik)
- fix irq, mem, printk, strtol bugs in cciss driver (Tom Coughlan)
- wait for board ready after hot add, cciss driver (Tom Coughlan)
- enable cciss adapter prefetch for x86 platforms (Tom Coughlan)
- add preserve_arg0 handling for ia32 emulation (Larry Woodman)
- fix ppc64 compat support for quota syscall (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.8.EL" date="1076580000">- remove Power-Blade-specific def for USB TEAC floppy (Julie DeWandel)
- fix s390 crash in iucv driver on connection shutdown (Pete Zaitcev)
- fix ia64 ACPI parsing for multinode IDE devs on x455 (Jim Paradis)
- fix amd64 core dumping of multithreaded 32-bit apps (Jim Paradis)
- fix s390 oprofile conditional and zero top addr bits (Will Cohen)
- add ipr driver v1.0.3 for IBM's PPC RAID adapters (Tom Coughlan)
- add {alloc,free}_netdev(), list macro, tg3 PCI ids (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.7.EL" date="1076407200">- restrict /proc/tty/driver directory access to root (Jeff Moyer)
- allow non-standard usr/sys VM splits at 2G/2G, 1G/3G (Ingo Molnar)
- extend existing ppc64 RTAS firmware flash interface (Mark DeWandel)
- fix ppc64 version of strncpy() to zero-pad buffers (Julie DeWandel)
- fix s390/x version of strncpy() to zero-pad buffers (Pete Zaitcev)
- fix generic version of strncpy() to zero-pad buffers (Jim Paradis)
- improve ppc64 segment table entry replacement logic (Julie DeWandel)
- correct type/cast of "len" in ppc64/kernel/nvram.c (Julie DeWandel)
- implement new ppc64 RTAS system call interface (Julie DeWandel)
- increase x86 RSDT table limit in ACPI parsing (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.6.EL" date="1076320800">- fix more usb-storage bugs for Power Blade support (Julie DeWandel)
- remove extra inactive_clean_pages-- in reclaim_page() (Larry Woodman)
- return proper error codes for do_munmap() failure in mremap (Dave Jones)
- fix binfmt_elf.c problems for apps with huge bss regions (Julie DeWandel)
- update cciss driver to v2.4.50 for Smart Array 6i support (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.5.EL" date="1075975200">- prevent netdump progress output from filling up log_buf (Jeff Moyer)
- add ppc64 RAS hook at end of panic() processing (Julie DeWandel)
- correct source IP address in ICMP error message (Dave Miller)
- fix smp deadlock with pdeath_signal posting (Roland McGrath)
- add ppc64 support for /proc/ppc64/lparcfg (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.4.EL" date="1075888800">- update nfsd mode-with-acls fix for upstream conformance (Steve Dickson)
- rework usb-storage locking to avoid hangs on disconnect (Pete Zaitcev)
- fix mmio alignment error in olympic token ring driver (Julie DeWandel)
- prevent tux logger-thread shutdown problems on ppc64 (Ingo Molnar)
- add ppc64 AltiVec chip support for Power Blades (Julie DeWandel)
- eliminate multi-threaded coredump hang potential (Ingo Molnar)
- fix ppc64 segfaults with tasks &gt; 2GB in size (Julie DeWandel)
- fix usb-storage memory-allocation/iowait deadlock (Alan Cox)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.3.EL" date="1075716000">- add amd64 support for PT_GNU_STACK with exec shield (Jim Paradis)
- fix s390 raid1 sync problem w/writes at end of dev (Pete Zaitcev)
- update s390 zcrypt driver to version 1.1.4 (Pete Zaitcev)
- fix output of large /proc/pid/statm values (Mark DeWandel)
- fix output of large /proc/partitions values (Mark DeWandel)
- enable ppc64 support for JS20 Power Blades (Julie DeWandel)
- fix kernel stack memory leak on fork failures (Dave Anderson)
- fix ipv6 packet quoting problem in icmpv6_send() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.2.EL" date="1075370400">- apply Intel's x86 microcode loader update (Jim Paradis)
- enhance PCI multifunction support for ppc64 (Julie DeWandel)
- fix nfsd returning bad mode bits when acls set (Steve Dickson)
- prevent unkillable zombies from detached NPTL threads (Ingo Molnar)
- avoid missing scsi disks in /proc/partitions on detach (Jason Baron)
- correct pte calculation inside zeromap_pte_range() loop (Ben Woodard)
- add inline function PDE() to help driver backporting (Matthew Galgoci)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.1.EL" date="1074679200">- (this is the first build for RHEL 3 Update 2)
- relocate various pieces of the "undo" patch (Patch Review Committee)
- rename s390 zcrypt and zfcp driver patches (Pete Zaitcev)
- add LKML discussion to COPYING.modules (Arjan van de Ven)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.EL" date="1073556000">- fix race condition between thread creation and signals (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-8.EL" date="1073469600">- fix amd64 eflags masking in 32-bit emulation of ptrace (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-7.EL" date="1073383200">- fix numerous ppc64 problems with /proc access (Julie DeWandel)
- allow user core files larger than 2GB in size (Dave Anderson)
- add ia64 support for Crestone Peak AGP bridges (John Dennis)
- fix unaligned kernel accesses in nfs_readdir() (Steve Dickson)
- add new_len/new_addr checks in do_mremap() (Ernie Petrides)
- fix nfs O_DIRECT corruption with &gt;4GB files (Steve Dickson)
- enable bus scan for AGP ctlrs on amd64 systems (John Dennis)
- limit PCI-alloc'ed physaddrs to 4GB on HP ia64 (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-6.EL" date="1070877600">- fix ppc64 firmware updates (Julie DeWandel)
- fix sync wakeup problem (Ingo Molnar)
- add ia64 cyclone support (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-5.EL" date="1070272800">- undo rejected patches (Stephen Tweedie, Arjan van de Ven, Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.20.EL" date="1069840800">- enable NUMA support in amd64 smp configs (Jim Paradis)
- prevent oopses with tux in OOM scenarios (Ingo Molnar)
- apply several ipv6 multicast bug fixes (Dave Miller)
- assign retval in copy_process() error path (Ingo Molnar)
- add lseek-in-/proc support for s390x "ps" (Pete Zaitcev)
- redefine zone_is_highmem() for Celestica (Dave Anderson)
- fix unresolved symbols in amd64 modules (Bill Nottingham)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.19.EL" date="1069754400">- fix tg3 rx_pending limit for BCM5705/BCM5782 chips (Jeff Garzik)
- reset page error flag prior to read of new contents (Jeff Moyer)
- enable CONFIG_HOTPLUG_PCI option for ia64 configs (Doug Ledford)
- fix inactive laundry list race in ramfs_writepage() (Dave Anderson)
- avoid out_of_memory() for wired pages when there's lomem (Dave Anderson)
- conditionalize ppc64 machdep_calls change for KMI compat (Ernie Petrides)
- limit anon/cache pages scanned in refill_inactive_zone() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.18.EL" date="1069668000">- create old version (rev. 5.64) of cmpci sound driver (Tom Coughlan)
- remove ac97.o, ad1848.o, cs4232.o from unsupported (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.17.EL" date="1069063200">- fix missing use of __GFP_HIGHMEM flag in pte_alloc_one() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.16.EL" date="1068890400">- rework scsi mid-layer queuing logic to fix error handling (Doug Ledford)
- fix pci_dma_sync_sg() scatterlist arg in megaraid2 driver (Tom Coughlan)
- move more-ptes-in-rmap-pte-chain logic to its own patch (Ernie Petrides)
- tag uses of __GENKSYMS__ with KMI/ABI compat comment (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.15.EL" date="1068804000">- fix MD multipath bugs causing crashes during fail-overs (Doug Ledford)
- add chain_ptep_t and revert pte_addr_t for KMI compat (Ernie Petrides)
- restore sub-timer-tick time-of-day granularity for ia64 (Jason Baron)
- modify agpgart and drm drivers for ia64 HP ZX1 support (John Dennis)
- fix ia64 32-bit emulation for several stat-related calls (Jason Baron)
- enable amd64 use of new ips driver w/config separation (Tom Coughlan)
- update e100 network driver to version 2.3.30-k1 (Jeff Garzik)
- update e1000 network driver to version 5.2.20-k1 (Jeff Garzik)
- apply scsi whitelist updates for IBM/CNSi/NEC devices (Tom Coughlan)
- reenable varyio for aic7xxx driver (hangs were unrelated) (Jeff Moyer)
- conditionalize NVIDIA_NFORCE3 to restore KMI compat (Ernie Petrides)
- prevent two ext3 panics on corrupted filesystems (Stephen Tweedie)
- apply two minor fixes to ppc64 RAS nvram reading (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.14.EL" date="1068717600">- update ServeRAID (ips) driver to version 6.10.52 (Tom Coughlan)
- configure xmon on by default in ppc64 configs (Julie DeWandel)
- create initial s390 zcrypt driver, version 1.1.2 (Pete Zaitcev)
- remove zfcp driver from linux-modules-unsupported (Pete Zaitcev)
- revise ppc64 reliability/serviceability support (Julie DeWandel)
- reduce kernel stack usage inside nfs_readdir() (Steve Dickson)
- add gameport dependency to cmpci driver config (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.13.EL" date="1068631200">- reduce UDP retransmissions and fix slow reads for NFS (Steve Dickson)
- implement wired page lists for better ramfs handling (Larry Woodman)
- fix vfork deadlock when child process causes core dump (Ingo Molnar)
- enhance AltSysRq-M output and fix deadlock potential (Larry Woodman)
- update cmpci sound driver for some HP IPF workstations (Tom Coughlan)
- correct tq_struct struct initialization in tg3 driver (Jeff Garzik)
- fix NFS file attribute inconsistency after rename (Steve Dickson)
- prevent ia64 machine checks w/sysreport on Olympia (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.12.EL" date="1068544800">- redesign refill_inactive_zone() for smarter deactivation (Larry Woodman)
- improve page deactivation scalability w/delayed laundering (Larry Woodman)
- rework locking and timer usage in s390 ctc network driver (Pete Zaitcev)
- allow xmon to be enabled at boot-time for ppc64 debugging (Julie DeWandel)
- reverse kscand's order of anon/cache active list traversal (Larry Woodman)
- force in-lining of br_read/write_lock/unlock routines (Julie DeWandel)
- fix mistaken fall-through cases in s390 chandev driver (Pete Zaitcev)
- make a few exported symbols available to OpenGFS (Stephen Tweedie)
- fix ld/st ordering bug causing lost signal wakeups (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.11.EL" date="1068112800">- make profile=X imply nmi_watchdog=1 and fix NMI w/d bugs (Ernie Petrides)
- add lock init in scsi_get_host_dev() to fix shutdown hang (Doug Ledford)
- enable distributed interrupts by default on ppc64 iSeries (Julie DeWandel)
- improve amd64 reporting of machine check errors (Jim Paradis)
- fix disabling of autonegotiation in tg3 driver (Dave Miller)
- add image name to s390 ioctl32 debug message (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.10.EL" date="1068026400">- fix file lock ownership by NPTL threads to be process-wide (Ernie Petrides)
- upgrade megaraid driver to version 1.18k and fix isr/fw sync (Tom Coughlan)
- upgrade megaraid2 driver to version 2.00.9 and enable varyio (Tom Coughlan)
- improve scsi mlqueue handling to enable BUSY/QUEUE_FULL fix (Doug Ledford)
- correct reporting of i/o errors in ppc64 viodasd driver (Julie DeWandel)
- update acenic driver to handle enabling of jumbo frame mode (Jeff Moyer)
- fix i386 PAGE_NONE bits to prevent get_user_page() hang (Roland McGrath)
- fix ia64 show_mem() handler to use efi_memmap_walk() call (Dave Anderson)
- replace spaces in slabinfo entry name for async poll table (Matt Wilson)
- fix race condition in buffer-head memory footprint patch (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.9.EL" date="1067940000">- improve spec file robustness in %post/%preun stanzas (Florian La Roche)
- add s390x iovec length checking for 32-bit reads/writes (Matt Wilson)
- use highmem for pte/ramfs page allocation w/__GFP_WIRED (Larry Woodman)
- upgrade oprofile support with bug fixes and enhancements (Will Cohen)
- fix infinite recursion in SCSI mid-layer post-processing (Jeff Moyer)
- introduce no-auto-start-on-add handling for SCSI blacklist (Jeff Moyer)
- enable s390 support for blk stats handling for iostat -x (Pete Zaitcev)
- fix LVS timer-related hang from ip_vs_conn_expire() bug (Ernie Petrides)
- correct module init in cpqarray driver to fix insmod crash (Tom Coughlan)
- incorporate ESB PATA support and fix a pirq_routers PCI id (Jeff Garzik)
- fix nfs async write deadlock potential w/nfs_writepage() (Steve Dickson)
- fix SCSI error handling for BUSY queue status messages (Doug Ledford)
- improve ppc64 32-bit ioctl support for use by ethtool (Julie DeWandel)
- add missing unlock in ip_mc_del_src() to fix IGMP deadlock (Dave Miller)
- change ppc64 reporting of floppy capacity to be 1.44 MB (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.8.EL" date="1067421600">- fix up various problems on Nforce3-based amd64 systems (Jim Paradis)
- double number of pte addrs in rmap pte_chain structs (Larry Woodman)
- restrict slab size for kernel data structs to 2 pages (Larry Woodman)
- clean up obsolete quicklist usage for ppc64 pte pages [rejected]
- prevent readdirplus from returning hidden mount points (Steve Dickson)
- prevent lockd deadlocks caused by export table locking (Steve Dickson)
- eliminate use of parallel task_struct init macro on ia64 [rejected]
- fix broken s390x overflow checks with 32-bit F_GETLK use (Matt Wilson)
- fix SCSI errors with "mt stoptions" and IDE tape drives (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.7.EL" date="1067162400">- fix bad checksumming interaction between e100 and bridge (Jeff Garzik)
- prevent system hang by OOM killing when overcommitted (Larry Woodman)
- un-inline ext3 error function to reduce stack usage (Stephen Tweedie)
- fix several ppc64 problems with interrupt handling (Julie DeWandel)
- correct amd64 identification in /dev/oprofile/cpu_type (Jim Paradis)
- move fput() call in do_tty_hangup() to avoid oops w/kon (Alexander Viro)
- eliminate creation of never-used task_struct slab cache (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.6.EL" date="1066903200">- reduce buffer-head memory footprint from read-only files (Ingo Molnar)
- update qeth driver for reduced stack usage and bug fixes (Pete Zaitcev)
- fix s390 qeth driver again to allow tcpdump to function (Pete Zaitcev)
- add exec_mmap() locking to prevent vma lookup races (Ernie Petrides)
- rework RPC slot allocation for further NFS improvements (Steve Dickson)
- reduce frequency of RPC retransmits during NFS writes (Steve Dickson)
- make generic/ext3 file system write handling 64-bit clean (Jeff Moyer)
- allow SMP scheduling rebalancing to occur every 200 msecs (Ingo Molnar)
- prevent races during IPC semaphore set and msg queue removal (Ingo Molnar)
- fix ACPI handling to identify trigger/polarity of PCI IRQs (Jim Paradis)
- correct amd64/ia64 acpi_disabled decls for post-boot access (Jeff Moyer)
- update ppc64 viocons driver with several bug fixes (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.5.EL" date="1066298400">- move fix for PPR use in sym53c8xx driver to its own patch (Ernie Petrides)
- correct pids exported by msgctl/semctl/shmctl/fcntl calls (Ulrich Drepper)
- apply s390 lcs driver wait queue init and locking updates (Pete Zaitcev)
- enable dummy network driver use in generic s390 config file (Pete Zaitcev)
- add missing ptrace hooks for exec and vfork-done events (Bill Nottingham)
- fix SMP timer race that triggered BUG_ON() in add_timer() (Ingo Molnar)
- fix several bogus ipvs boundary checks in ftp module [rejected]
- fix vfsmount queuing in attach_mnt() for CLONE_NEWNS [rejected]
- add net_device check to prevent oops in pppoe driver [rejected]
- fix memory leak in symlink error path of /proc driver [rejected]
- fix overflow in v1_disk2mem_dqblk() quota calculation [rejected]
- increase ppc64 ramdisk size to 8192k in p/iSeries configs (Jeremy Katz)
- lower amd64 TASK_UNMAPPED_32 to increase avail address space (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.4.EL" date="1066039200">- fix ppc64 stack pointer alignment in user signal handlers (Jakub Jelinek)
- increase amd64 exception stack size to 4k to avoid overflow (Jim Paradis)
- fix ppc64 interrupt rate accounting for vmstat and /proc (Julie DeWandel)
- extend amd64 NMI watchdog timeouts to tolerate bad 2nd cpu (Jim Paradis)
- allow s390 dasd driver to use noop elevator module (Pete Zaitcev)
- add free_irq() in error path of olympic token ring driver (Matt Wilson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.3.EL" date="1065866400">- make pid fields in ucred structures hold tgid values (Ulrich Drepper)
- prevent ppc64 iSeries virtual console writes &gt; 4k (Julie DeWandel)
- control ia64 unaligned access messages with new sysctl (Jeff Moyer)
- correct SCSI data direction on cmd to spin up disks (Pete Zaitcev)
- add do_brk() TASK_SIZE and address space wrap checks (Arjan van de Ven)
- limit PPR use in sym53c8xx driver for ppc64 Zapata drives (Doug Ledford)
- list ac97.o, ad1848.o, and cs4232.o modules as unsupported (Jeff Moyer)
- clean up conditional compilation in s390 zfcp driver (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.2.EL" date="1065693600">- identify whether i686 or athlon config in oops output (Arjan van de Ven)
- remove warning in reclaim_page() unmapped page path (Ernie Petrides)
- fix several lvm error handling paths causing memory leaks [rejected]
- correct i386 smp shutdown logic when netdump is enabled (Jeff Moyer)
- fix amd64 potential data leaks on FPU save/restore errors (Jim Paradis)
- prevent aic7xxx chip resets leading to PCI parity errors (Tom Coughlan)
- remove ia64 user tty warning on unaligned accesses (Arjan van de Ven)
- fix ppc64 /proc file buf overruns in viodasd driver (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.1.EL" date="1065607200">- (this is the first build for RHEL 3 Update 1)
- avoid m/ctime update for pipe writes on r/o file systems (Stephen Tweedie)
- prevent theoretical ext3 fs corruption in ext3_read_inode (Stephen Tweedie)
- enable AGRESSIVE_IDLE_STEAL to improve scheduler balancing (Ingo Molnar)
- fix potential ppc64 lock-up on ioctl32 un/reregistering (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.EL" date="1065175200">- extend ppc64 scsi timeout values for Zapata DVD-ROM drives (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-3.EL" date="1063965600">- make sure to release viotape op structure after use (Julie DeWandel)
- disable pgd/pmd quicklists on ppc64 (Mark DeWandel)
- temporarily disable aio on sockets (Jeff Moyer)
- correctly refile inodes to make them reclaimable (Harald Hoyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-2.EL" date="1063792800">- S390: update zfcp and cio drivers (Pete Zaitcev)
- IA64: add extra check to virtual mem_map (Larry Woodman, Dave Anderson)
- initialise local variables in ide-tape &amp; ide-scsi
- cap qla2200 tcq depth to 255
- switch version number scheme to kernel-2.4.21-N.EL</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063706400">- PPC64: invalidate evicted sbl entries in the erat (Julie DeWandel)
- increase ethernet tx_queue_len to 1000 (David Miller)
- in udp_{v6_}flush_pending_frames, reset up-&gt;len too (David Miller)
- S390: CMS reserved minidisk detection (Pete Zaitcev)
- call recount_segments() on a different occasion (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063620000">- really disable exec-shield (Roland McGrath)
- reduce stack randomisation, disable brk randomisation (Ingo Molnar)
- make e1000 driver 64 bit clean (Julie DeWandel)
- minor aio corner case error condition fix (Jeff Moyer)
- AMD64: more lenient check for call workaround (Ernie Petrides)
- PPC64: disable CONFIG_XMON (Mark DeWandel)
- S390: fix CCW slab selection (Pete Zaitcev)
- fix two-disk combined mode sata (Jeff Garzik)
- move buslogic scsi driver to supported, for vmware only (Tom Coughlan)
- change viocons message from KERN_WARNING to KERN_INFO (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063360800">- VM: handle race condition in reclaim_page (Stephen Tweedie, Larry Woodman)
- PPC64: fix "log_buffer broken" xmon issue (Julie DeWandel)
- fix compiler warnings in netdump (Jeff Moyer)
- AMD64: workaround for 32 bit compat mode page fault problem (Ernie Petrides)
- IA64: make perfmon root-only (Jason Baron)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063274400">- fix smp race in rebalance_laundry_zone()</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063188000">- fix compiler warnings when hugetlbfs is disabled (Pete Zaitcev)
- fix tux performance bug (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063101600">- don't evict kernel stack seg translation on ppc64 (Julie DeWandel)
- fix callers of do_page_fault on ppc64 (Mark DeWandel)
- AMD64 munmap return value, fix lsb failure (Jeff Moyer)
- fix for PPC64 32-bit ioctl (Jim Paradis)
- bring IA64 value of MINSIGSTKSZ in line with upstream (Jakub Jelinek)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063015200">- fix potential datacorruptor in viodasd driver (Julie DeWandel)
- fix race condition in s390 dirty bit handling (Pete Zaitcev)
- limit per-cpu slab cache size
- correct 32-bit readv/writev border cases on ppc64 (Matt Wilson)
- AMD Golem IO-APIC fixup for i686 kernel on AMD64 (Jeremy Katz)
- NFS Solaris 8 acl fix (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062756000">- minor nfs permissions bugfix (Steve Dickson)
- change mprotect return value to SuS mandated value (Arjan van de Ven)
- kernel-unsupported now provides kernel-modules (Jeremy Katz)
- correct __hugemem__modules typos in rhkernel.h
- fix subtle pmd corruption error (Larry Woodman, Dave Anderson)
- fix cut'n'paste error in SATA io port reservation
- restore NFSEXP_CROSSMNT ABI compatibility (Steve Dickson)
- round up executable name field length in core file (Jakub Jelinek)
- switch off exception_trace on amd64 (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062496800">- patch to access odd last sector on ia64 (Jason Baron)
- misc fixes from upstream (Arjan van de Ven)
- fix audigy driver (Jeff Garzik)
- tunable dcache reclaim priority for tux (Ingo Molnar)
- tg3 driver update (Jeff Garzik)
- ipv6 and icmp network bugfixes (David Miller)
- fix ppc64 memory access security bug (Julie DeWandel)
- reduce memory allocated for skb (Ingo Molnar)
- small smp fix for scalable timers (Ingo Molnar)
- make s390 recognise MSDOS partitions (Pete Zaitcev)
- small smp fixes in tux (Ingo Molnar)
- make mptfusion drivers supported on 4/4 split kernel (Tom Coughlan)
- add entries to scsi whitelist (Tom Coughlan)
- minor sata/ata driver updates (Jeff Garzik)
- small fixes to viodasd driver (Julie DeWandel)
- nfs_get_root and nfs access bit patches (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062064800">- don't show interrupts in /proc/stat for ppc64 (Matt Wilson)
- make sure sync returns in a reasonable time
- PPC64: fix for boot cpu not being cpu 0 (Julie DeWandel)
- zero sized write no longer updates mtime (Matt Wilson)
- fix video bios read corruption on ia64 (Larry Woodman)
- network fixes to tg3, bonding (Jeff Garzik)
- properly reserve legacy IDE regions in sata driver (Jeff Garzik)
- fix ppc64 signal handling bugs (Mark DeWandel)
- tux fixes (Ingo Molnar)
- tgkill syscall for s390(x) (Pete Zaitcev)
- amd64 32 bit compatibility fixes (Jim Paradis)
- ppc64 32 bit compatibility fixes (Julie DeWandel)
- fix 4G/4G follow_page problem (Ingo Molnar)
- reduce memory used by VMAs and dentries (Arjan van de Ven)
- make LVM snapshotting of ext3 work reliably (Stephen Tweedie)
- make netdump play better with the nmi watchdog (Jeff Moyer)
- QLA2200: disable irq mitigation, fix off-by-one (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061805600">- seq_file /proc/interrupts for x86 too (Ingo Molnar)
- fix memory leak in ia64 exec of ia32 binaries
- check tgid not pid in scm_check_creds()  (David Miller)
- VM fixes: shm swap priority, zeromap_page_range
- workaround VFS limitations for VXFS NFS export</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061546400">- use personality for 3GB userspace on x86 -hugemem (Ingo Molnar)
- add sysctl interface for lockd (Steve Dickson)
- don't prod VGA space on HP Pinnacle systems (Larry Woodman)
- fix for 32 bit binaries on amd64 (Jim Paradis)
- add preemption point to write_some_buffers (Julie DeWandel)
- sort ACPI table to get correct device ordering on HP (Larry Woodman)
- fix refcounting bug with ipv6 addresses on netdevs (David Miller)
- add s390 syscalls for tux (Pete Zaitcev)
- md multipath enablers (Doug Ledford)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061460000">- fix process and nice time accounting (Doug Ledford)
- amd64: syscall table updates, timer robustness (Jim Paradis)
- amd64 3GB personality for 32-bit processes (Jim Paradis)
- use 256MB pagesize for hugetlbfs on ia64 (Larry Woodman)
- make sure e100 only claims ipv4 checksumming
- igmpv3/mldv2 OOPS'er fix (David Miller)
- hugetlbfs: make chown work and allow uid=X,gid=Y mount options
- make larger mmap windows work (Ernie Petrides, Ingo Molnar)
- ia64: improve ia32 compatibility (Larry Woodman)
- fix bug in rpc retry code (Steve Dickson)
- make acpi pci hotplug modulable (Jeff Moyer)
- update (trivial) to megaraid 1.18j (Tom Coughlan) 
- enable varyio on mptfusion (Tom Coughlan)
- panic on oops to prevent data corruption opportunities (Ernie Petrides)
- small iorl locking fix (Doug Ledford)
- fix ppc64 get_wchan() bad deref (Mark DeWandel)
- fix aio read into mmap()d PROT_WRITE (Jeff Moyer, Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061373600">- libata update (Jeff Garzik)
- amd64 syscalls for xattrs &amp; ACLs (Jim Paradis)
- tux fixes (Julie DeWandel, Ingo Molnar)
- via &amp; i810 audio fixes (Jeff Garzik)
- small 4G/4G split bugfixes (Ingo Molnar)
- fix sigsuspend race on x86, amd64, ia64 (Mark DeWandel)
- ia32 behavior for FP denormal exceptions on ia64 (Jason Baron)
- get the set/get of NAT bits for ia64 correct (Jason Baron)
- ipsec update, adds cast6 encryption (David Miller)
- VM update: OOM bugfix &amp; page-&gt;flags atomic updates (Rik van Riel)
- reenable serpent encryption on ppc64
- bladecenter usb-ohci support (Pete Zaitcev)
- iorl fixes (Doug Ledford)
- network bonding driver oops fix (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060768800">- DAC960 back to bigmem supported, ne2k-pci &amp; usb audio to bigmem unsupported
- netdump updates for tg3 and e1000 (Jeff Moyer)
- put a hole between stack and mmap area (Ernie Petrides)
- process time accounting updates (Doug Ledford)
- fix null characters in TUX header (Julie DeWandel, Ingo Molnar)
- display correct executable when running interpreted script
- zfcp zSeries fibrechannel driver (Pete Zaitcev)
- ipsec updates (David Miller)
- fix 4G/4G race conditions (Ingo Molnar)
- rename -bigmem kernel to -hugemem to reflect changed tradeoffs
- optionally show task states from hangcheck timer (Jason Baron)
- various small bugfixes from upstream</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060423200">- fix scalable timer race condition  (Julie DeWandel, Ingo Molnar)
- print warning on boot with &gt;16GB RAM on -smp kernel (Arjan van de Ven)
- fix for xapic issue with ServerWorks chipsets (Ernie Petrides)
- remove spurious ioctl printk on ppc64 (Mark DeWandel)
- ppc64 wchan improvement (Mark DeWandel)
- hint @pause changes for ia64
- longer scsi scan timeout on ppc64 (Julie DeWandel)
- readv/writev for raw IO (Stephen Tweedie)
- fix for easy stack/mmap collisions (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060164000">- various XAPIC related fixes (Ingo Molnar)
- correct context switch and iowait stats with HT shared runqueues
- ext3 obscure deadlock fixes (Stephen Tweedie)
- knfsd fixes: blocked lock, symlink error &amp; missing bkl  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060077600">- de_thread bugfix from 2.6 upstream  (Matt Wilson)
- viocons driver update (Julie DeWandel)
- fix VM non-overcommit mode (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059991200">- plug data leak in aio code (Jeff Moyer)
- initial list of 4G/4G unsupported modules (Tom Coughlan)
- nfs softirq race fix (Steve Dickson)
- updated IPSEC patch (David Miller)
- networking updates/fixes from 2.4.22-preX (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059904800">- drop orlov allocator for now (Arjan van de Ven)
- correct HT cpu pair detection (Arjan van de Ven)
- build zImage.partial for netbooting on pSeries (Matt Wilson)
- fix missing symbols</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059818400">- export two AIO symbols for OCFS
- disable CONFIG_DEBUG_SLAB so performance testing can start
- crosshost mmap hooks for distributed filesystems (Stephen Tweedie)
- include partially linked zImage for pSeries netboot (Matt Wilson)
- nfs highmem fix, unmap when xdr_kmap() fails (Steve Dickson)
- update megaraid2 locking to work with IORL (Com Coughlan)
- make sure to build the qla2100 driver (Tom Coughlan)
- fix cdrom ioctl 32 bit compatibility for ppc64, amd64 (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059645600">- run depmod on install of unsupported modules (Arjan van de Ven)
- fix register corruption in IA64 lazy fpu handling (Larry Woodman)
- add b44 network driver (Jeff Garzik)
- make ppc64 pci interface routines compatible (Julie DeWandel)
- allow 32 bit userland on AMD64 and PPC64 to use volumes &gt; 2GB (Jeff Moyer)
- nfsd: acl related mount and export flags (Steve Dickson)
- fix nfs exp_fodrop oops (Steve Dickson)
- fix missed signal wakeups on ppc64 (Mark DeWandel)
- smp scalable timer bugfixes (Ingo Molnar)
- workaround for a prefetch bug in some Athlon CPUs (Ernie Petrides)
- code to make more modules unsupported for 4/4 split (Arjan van de Ven)
- various spec file and config cleanups
- viopath driver fix (Julie DeWandel)
- add match for 440gx chipset bioses (Arjan van de Ven)
- move epic100 and ne2k-pci back to supported (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059472800">- updated finegrained process accounting patch (Doug Ledford)
- make iSeries compile without CONFIG_ICOM (Julie DeWandel)
- nfsd: only set -&gt;reuse for tcp sockets, not udp  (Steve Dickson)
- enable the 4G/4G split on the i686-bigmem kernel only
- sysrq support for viocons (Julie DeWandel)
- limit pci_bus size changes to ppc64 (Jeff Garzik)
- fix for signal delivery race (Ernie Petrides, Mark DeWandel)
- add ShdPnd to /proc (Ingo Molnar)
- fix de_thread() hang (Ingo Molnar)
- add kernel support for CLONE_STOPPED (Ernie Petrides)
- make sure to initialise HVC console (Julie DeWandel)
- fix _SEG abort hit in ACPI code (Larry Woodman)
- build addon drivers on amd64 and ppc64 too (Tom Coughlan)
- build IPS driver on all architectures (Tom Coughlan)
- fix a few ia32 emulation bugs for IA64 (Larry Woodman)
- enable correct/new __clear_bit macro for IA64 (Larry Woodman)
- flexible mmap allows mappings of huge executable segments (Larry Woodman)
- sysrq-w for s390 (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058436000">- have s390 cpu_relax() also include barrier  (Pete Zaitcev)
- convert ppc64 xmon traceback code to ksymoops (Matt Wilson)
- rename kstat_sum() variable with aliasing problems  (Ingo Molnar)
- fix AIO-on-hugetlbfs crash (Ingo Molnar)
- update support for IA64 Long's Peak ACPI serial ports  (Larry Woodman)
- turn on xmon for both iSeries and pSeries (Matt Wilson)
- bugfix to make CLI work correctly on iSeries (Julie DeWandel)
- SATA bugfixes (Jeff Garzik)
- enable 4G/4G split in -BOOT kernel, due to syslinux trouble</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058349600">- fix s390 compile (Pete Zaitcev)
- taint the kernel on sii6512 driver link, GPL but no source available
- handle debug registers with 4G/4G split (Ingo Molnar)
- tgkill syscall for ppc64 (Julie DeWandel)
- fix NFSD/ACL/ext3/jbd deadlock (Stephen Tweedie, Steve Dickson)
- fix maxcpus=1 installation panic fix for ppc64 (Julie DeWandel)
- IDE byteswapping io functions for ppc64 (Julie DeWandel)
- update sata driver (Jeff Garzik)
- raise the number of /proc entries (Julie DeWandel)
- sticky sysrq key with timeout (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058263200">- make SysRq-W useable on s390 (Pete Zaitcev)
- updated process accounting patch (Doug Ledford)
- siginfo_t fixes for s390x and amd64 (Jakub Jelinek)
- clustered NFS fail-over support (Steve Dickson)
- autofs4 updates and fixes
- ia64 patches to reduce cpu power/temp in idle loop (Larry Woodman)
- add irqsafe up() for LVM locking (Stephen Tweedie)
- O_DIRECT fallback to synchronous allocation in holes (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058176800">- ia64 HP iommu: add sx1000 detection
- possible bug in s390x 32-bit emulation  (Roland McGrath)
- updated ipsec patch, should fix all current ipv6 bugs  (David Miller)
- finegrained process accounting (Doug Ledford)
- ICH5 pci irq routing, and associated ids (Jeff Garzik)
- fix the machine_real_restart() reboot path on 4G/4G (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057917600">- fix amd64 agp-gart code to work around hugetlbfs debug code (Jim Paradis)
- fix ppc32 pthread_cancel (Jakub Jelinek) 
- Do not sent IGMP leave messages unless IFF_UP  (David Miller)
- software iommu for ia64 systems without hardware iommu (Jason Baron)
- fix ext3 oops fix during dio, LTP failure (Arjan van de Ven, Stephen Tweedie)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057831200">- Remove illegal calls to dst_link_failure</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057831200">- enable HT scheduler for bigmem kernel
- add tgkill syscall for x86 and ia64
- make -BOOT kernel smaller w/ modular md and CONFIG_SMALL
- rmap VM updates
- 4G/4G agpgart potential corruption fix (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057744800">- switch off exec shield everywhere
- eliminate hostfs for amd64 (Jim Paradis)
- megaraid update, mostly vendor ID (Tom Coughlan)
- shrink boot kernel by disabling some config options
- additions for the SCSI whitelist (Tom Coughlan)
- ia64 extable fix (Jason Baron)
- viocons driver upgrade (Julie DeWandel)
- another ia64 mmu context wraparound deadlock fix (Larry Woodman)
- iSeries icom debugger patch (Julie DeWandel)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057658400">- Drop io_request_lock in usb scsiglue.c:device_reset</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057658400">- fix cpu_relax for amd64 and ia64 to include a barrier (Ingo Molnar)
- restore o_direct api compatibility (Stephen Tweedie)
- fix possible ext3 deadlock in o_direct patches (Stephen Tweedie)
- ACLs for JFS (Stephen Tweedie)
- fix /proc/cpuinfo runqueue printing (Ingo Molnar)
- via audio fixes, smaller emu10k1 patch (Alan Cox, Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057572000">- fix process accounting, tux ftp passwords and si_pid (Ingo Molnar)
- 32bit compat statfs fix (Guy Streeter)
- don't serialise exit on BKL when accounting is off (Ingo Molnar)
- truncate timeouts to 32 bits on 64bit systems (Ingo Molnar)
- fix network channel bonding (Jeff Garzik)
- split netdump patch into core and net-drivers (Jeff Garzik)
- delayed tlb flushing for ia64 (Larry Woodman)
- emu10k1 driver fixes
- kksymoops for AMD64 (Jim Paradis)
- select bugfixes from 2.4 upstream (Jeff Garzik)
- OOM tweaks (Rik van Riel)
- use seq_file for /proc/interrupts on ppc64 (Mark DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057140000">- add qdio and qeth drivers for s390(x)  (Phil Knirsch)
- slab cache scale bugfix (Larry Woodman)
- S390: qdio &amp; qeth drivers (Phil Knirsch)
- hangcheck timer for ppc64 (Julie DeWandel)
- fix race conditions in ia64 ia32 compat layer (Larry Woodman)
- update megaraid, aic7xxx, cciss and cpqarray drivers (Tom Coughlan)
- nfs xdr_shift_buf, tcp client corruption and alignment (Steve Dickson)
- rhconfig.h stuff for ppc64, s390 and s390x (Matt Wilson)
- AIO on sockets</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057053600">- kiobuf optimisations (Stephen Tweedie, Larry Woodman)
- ipsec update (David Miller)
- ipvs update to deal with timer changes (David Miller)
- 4G/4G split patch optimisations (Ingo Molnar)
- hangcheck timer (Jason Baron)
- recent (AGP 3.0) agpgart support (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056967200">- semtimedop() support on s390/s390x  (Ernie Petrides)
- fix a 4G bug that triggers on systems with &gt;30 CPUs (Ingo Molnar)
- updated SCSI SMP affine queueing patch  (Arjan van de Ven)
- page hash prefetch in do_generic_file_read bugfix (Julie DeWandel)
- updates the qlogic driver to the latest (Arjan van de Ven)
- slab cache SMP scalability tweaks (Ingo Molnar)
- ACPI 2.0 for IPF and AMD64 (Jim Paradis, Larry Woodman)
- statm fixes for hugetlbfs and remap_file_pages (Jason Baron)
- acpi serial port detection (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056708000">- iseries driver updates (Julie DeWandel)
- aio scalability and 2.5 backports  (Ingo Molnar)
- SMP scalable timers (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056621600">- make qlogic driver use new scsi infrastructure (Arjan van de Ven)
- export aio kvec functions
- fix statm oops
- compile fixes 
- NFS ACL over the wire protocol extensions (Steve Dickson)
- rate limit slab pruning, to limit IPI load on SMP systems (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056448800">- scsi request lock scaling (Ingo Molnar)
- cpu affinity for scsi command processing (Ingo Molnar)
- use softirqs instead of bhs for the scsi layer (Doug Ledford)
- igmpv3 fixes and improvements (David Miller)
- oprofile for ppc64 (Will Cohen)
- Increase MAX_ADDR_LEN from 8 to 32 for Infiniband over IP (Tom Coughlan)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056362400">- per-cpu kstat arrays (Ingo Molnar)
- optimise 4G/4G tlb flushing (Ingo Molnar)
- kiobuf reclaim together with buffer reclaim (Arjan van de Ven)
- more scalable gendisk statistics (Ingo Molnar)
- nfs reconnect fixes (Steve Dickson)
- add 32-bit compatibility for ustat system call on ppc64 (Julie DeWandel)
- scalable gettimeofday (Ingo Molnar)
- hugetlbfs ppc64 &amp; s390 bits (Mark DeWandel, Pete Zaitcev)
- hugetlbfs for ia64 (Jason Baron)
- qlogic scsi driver update (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056189600">- nfs patches (Steve Dickson)
- xapic improvements, summit support (Ingo Molnar)
- fix core dump name for multithreaded programs (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056103200">- merge up to marcelo's latest</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056016800">- oom killer fixes (Larry Woodman, Rik van Riel)
- tunable VM overcommit (Rik van Riel)
- hugetlbfs for amd64 (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055930400">- updated iseries virtual drivers (Julie DeWandel)
- nfs lockd improvements (Steve Dickson)
- remap_file_pages improvements (Ingo Molnar)
- /proc/efi/symtab patch for ia64 (Larry Woodman)
- disable O_PROFILE on UP x86 machines
- allow NMI watchdog profiling frequencies up to 10kHz (Ingo Molnar)
- statm (Jason Baron)
- hugetlbfs (Ingo Molnar)
- have nfsd honour ACLs on a per-export basis (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055844000">- Enable O_PROFILE on non-SMP configs (Stephen Tweedie)
- more conservative AIC config options
- Fix BOOT kernel panic while mounting /dev/cdrom (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055757600">- merge to 2.4.21 + selected ac bits
- ipsec upgrade (David Miller)
- HT scheduler patch fix (correct sibling counting)
- make bdflush writeout smoother
- AMD64 gdb fix (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055412000">- don't include unsupported drivers in -BOOT kernel
- merge up to 2.4.21-rc8 + selected ac bits
- FIXME: sysrq for 3170, dasd, odirect &amp; odirect for nfs</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com" date="1055412000">- oprofile for s390</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055239200">- statm (Jason Baron / Julie DeWandel)
- AIO 32-bit compat for 64-bit machines (Julie DeWandel)
- only do bufferhead reclaim in extreme situations (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055152800">- Serial ATA support (Jeff Garzik)
- mtp fusion 2.05.05+ (Dave Maley)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054893600">- XATTR/ACL patches, except NFS over the wire (Stephen Tweedie)
- ipsec module autoloading (David Miller)
- remap_file_pages (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054807200">- upgrade to latest -rmap with Ernie's fixes
- sysrq+C shows the stack dump of all CPUs
- ext3 truncate fix (Stephen Tweedie)
- NFS fixes for HZ=1000 machines (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054720800">- 4G/4G split fix (Ingo Molnar)
- ppc64 fixes (Guy Streeter, Rik van Riel)
- enable oprofile on amd64
- ipsec updates (David Miller)
- fork returns pid instead of task_struct* (Julie DeWandel)
- ia64 ptrace bugfixes (Dave Anderson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054634400">- HP diva serial driver (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054548000">- NFS over TCP patches (Steve Dickson)
- switch to using ppc64pseries/ppc64iseries arches instead of
  kernel-pseries and kernel-iseries (Jeremy Katz)
- egenera scsi bus rescan patch (Jeff Garzik)
- oprofile (Graydon Hoare)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054288800">- futex requeue (Ingo Molnar)
- enable NAPI for E1000
- signal latency and scheduler improvements (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054202400">- kscand oops fix (Ingo Molnar, Rik van Riel)
- pcnet32 fixes (Julie Dewandel)
- raid autorun (Pete Zaitcev)
- turn off CONFIG_SUNDANCE_MMIO (Jeff Garzik)
- flexible mmap (Larry Woodman)
- ppc64 fixes (Matt Wilson, Guy Streeter)
- loop softirq 10 times before giving up (Ingo Molnar)
- O_DIRECT for NFS (Steve Dickson)
- prevent md from shutting down active arrays (Doug Ledford)
- rmap updates, inode reclaim &amp; higher order allocations (Rik van Riel)
- network channel bonding (Jeff Garzik)</changelog><changelog author="Jim Paradis &lt;jparadis@redhat.com&gt;" date="1054116000">- Re-enable x86_64 in build
- x86_64-specific updates for exec-shield
- Bring in improved "nonx" support for x86_64 from upstream</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1054116000">- Hush s390 printks upon user SIGSEGV by default. It can be enabled back with
  a sysctl kernel.userprocess_debug.
- Enable optional 3270 console mode on s390.</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053684000">- get rid of vsyscall page (Arjan van de Ven)
- fix missing symbol copy_str_fromuser_size</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053424800">- exec-shield updates to fix hang-on-boot on some systems (Ingo Molnar)
- temporarily disabled the architectures, which got broken by exec-shield updates
- fix for LTP sigprocmask02 failure (Matt Wilson)
- ppc64 updates (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053338400">- pagecache scalability patch (Ingo Molnar)
- IPC semaphore scalability patch (Ingo Molnar)
- ppc64 updates (Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052992800">- exec-shield (Ingo Molnar)
- AMD64 ACPI updates (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052906400">- reenable O_DIRECT, O_DIRECT fixes and superbh-aio (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052820000">- vma merging (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052733600">- nmi profiler
- VM updates: rmap, dma zone isolation
- tux (Ingo Molnar)
- ext3 stall fixes (Ingo Molnar)
- e1000 fixes (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052474400">- config files overhaul (Arjan van de Ven)
- fix bug in mlock patch
- IPVS (Dave Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052388000">- import IO elevator changes from gingin
- critical VM fix
- matrox framebuffer patch for pseries (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052301600">- hammer nptl fixes (Ulrich Drepper)
- 4G/4G split (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052215200">- upgrade to 2.4.21-rc1-ac4 (minus -ac acpi and xapic changes)
- drop nfs patches since those seem to be in -ac</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052128800">- larger message buffer size + boot option (Mark DeWandel)
- AMD64: tls handling, coredump fixes (Jim Paradis)
- SMP &amp; highmem VM fixes (Ben LaHaise)
- HT+NUMA scheduler (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051956000">- ext3 orphan cleanup fix (Ernie Petrides)
- s390 affinity fixes (Pete Zaitcev)
- i386 vsyscall DSO changes (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051869600">- bugfixes and config changes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051783200">- enable semtimedop for other architectures (Ernie Petrides)
- large pci bus numbers (Julie DeWandel)
- bugfixes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051610400">- igmpv3 (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051524000">- generic 32bit compat stuff + amd64/ppc64/ipf pieces (Matt Wilson)
- clustered apic (XAPIC) support (Ingo Molnar)
- ppc64 architecture updates (Matt Wilson, Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051264800">- ppc64 fixes</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051178400">- collapse ipsec into one patch (David Miller)
- ppc64 build fix (Matt Wilson)
- improve smp scheduler fairness (Ingo Molnar)
- allow mlock for normal users, up to ulimit (Ingo Molnar)
- AMD64 port (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051092000">- clean up mechanism to pass extra CFLAGS so we don't override what's
  already there
- merge ia64 build stuff (Larry Woodman)
- merge varyio + superbh (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051005600">- merge up to 2.4.21-rc1
- IA64: virtual mem_map, acpi updates, netdump update, pte-highmem &amp; fealnx
- IA64: architecture specific patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050919200">- import davem's ipsec patch pile
- ppc64 kallsyms and dump_fpu patches (Matt Wilson)
- rmap updates (x86_64 &amp; bufferhead reclaim)
- ppc64 ptrace patch (Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050660000">- open up patch namespace 2000-5000 for network protocol changes
- renumber existing patches in that range</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050573600">- make sure to actually apply the rmap-updates patch
- iowait statistics
- ppc64 code merge (Mark &amp; Julie DeWandel)
- ppc64 build scripts (Matt Wilson)
- raise symlink recursion level to 8 (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050487200">- merge up to marcelo's latest
- pte-highmem bits for x86-64 and ppc64</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050400800">- merge up to 2.4.21-pre7-ac1
- drop semtimedop patches (now in -ac)
- drop nfs xprt_fixes, fix_softirq, d_drop and nfs-readeof (merged in -pre7)
- add !CONFIG_QUOTA compile fix for 2.4.21-pre7-ac1</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1050314400">- add LCS driver (endemic to s390)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050314400">- add rmap VM
- add kunmap_atomic debugging patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050141600">- remove dir.c part of NFS kmap_atomic patch for now
- using strlen as local variable name in nfs code kills, literally</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050055200">- merge S390(x) back in  (Pete Zaitcev)
- fix NFS kmap_atomic patch
- sched.c patch to disable interrupts in wake_forked_task  (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049968800">- AIO infrastructure  (Ben LaHaise)
- update NFS kmap_atomic patch  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049882400">- semtimedop patches  (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049796000">- I know understand linux-2.4.20-nfs-readeof.patch, so I merged it
- netdump update (Dave Anderson)
- 64 bit pci &amp; elf loader fix (Mark &amp; Julie)
- nptl whitespace patches, folded into nptl patch (Arjan van de Ven)
- rediff linux-2.4.18-smallpatches.patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049709600">- merge NFS patches by Steve Dickson (blame me for NFS kmap_atomic patch)
- split x86 syscall stuff out into separate patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049536800">- fix nptl patch, now it boots</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049450400">- port linux-2.4.20-o1-nptl.patch from gingin
- rediff a few patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049277600">- update linux-modules-unsupported (with Arjan)
- fix up the list a second time to fix module dependencies</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049191200">- copy -head into new AS3 branch
- remove i586 build
- remove 7.x compatibility (linux-2.4.9-fstat.patch)
- architecture patches get more breathing room (100 - 500)
- reserve patch numbers 1000 - 2000 for VM
- patch numbers 2000 - 5000 for bugfixes, changes and updates to
  existing drivers and filesystems
- remove inode reclaim patch (will be merged later as part of rmap)
- remove io priority scheduler (still experimental)
- remove nfs patches (linux-2.4.20-nfs-cto.patch,
  linux-2.4.20-nfs-access.patch &amp; linux-2.4.20-nfs-rdplus.patch)
- remove linux-2.4.18-gericom.patch
- update netdump from RH9 branch</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1048240800">- Added three NFS performance patches</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048240800">- add a timer for aging requests up</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048154400">- fix the sorting in the io elevator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048068000">- remerge ext3 orlov allocator and enable
- more priority io elevator infrastructure work</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1047117600">- merge ext3 orlov allocator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046772000">- go to 2.4.21-pre5-ac1
- split the rpm into a primary fileset and secondary (rare modules) fileset</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046253600">- go to 2.4.21-pre4-ac6
- drop lots of patches
- trim changelog to not have 2000, 2001 and 2002 anymore</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045476000">- downgrade pwc webcam driver one notch to the last known working version
- work around vm livelock
- make the cciss driver not enable irq's in it's irq handler</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1045130400">- fix for shared statistic &lt; 0</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045130400">- Signal fixes for LSB testsuite
- merge patch to fix init=/bin/sh
- 2.4.21-pre4-ac4 bugfixes (mostly IDE crashes)</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044784800">- merge 2.4.21-pre4-ac3 bugfixes</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1044352800">- Add ext3 fix for truncating negative i_blocks</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1044266400">- add oopsmeharder for debugging hard hangs</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044266400">- merge rmap15d
- set the sbp2 command buffer to 64 elements instead of 8</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1043834400">- merge tcp stall fix from DaveM
- merge bugfixes from 2.4.21-pre4</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1042452000">- Merge in the ACL and XATTR patches from the UL and BestBits trees.</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1042279200">- Merge in the LVM pvmove fix to current tree</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1042020000">- add AMD Golem fixup</changelog></package>
<package pkgid="8a768b5bd2ca33e50c927dbaff120c4ed0248b64" name="kernel" arch="ia32e"><version epoch="0" ver="2.4.21" rel="37.EL.XFS"/><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1128420000">- added SGI XFS patch set</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-37.EL" date="1126087200">- fix latent sendmsg() cmsghdr32 bug exposed in -36.EL (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-36.EL" date="1125655200">- fix sync() hangs from NFS file create/delete races (Steve Dickson)
- add support for HP Smart Array E400i in cciss driver (Tom Coughlan)
- defend against cmsghdr32 changes in sendmsg() handling (Dave Miller)
- correct OpenIPMI module version strings (v35 -&gt; 35.4) (Brian Maly)
- fix intermittent build failures under lpfc subdir (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-35.EL" date="1124445600">- disable FAN processing in Emulex driver (7.3.2) (Tom Coughlan)
- update cciss disk driver to version 2.4.58.RH1 (Tom Coughlan)
- update SCSI whitelist for EMC Invista devices (Tom Coughlan)
- fix diskdump regression w/module CRC errors (Nobuhiro Tachino)
- update SCSI whitelist for IBM ULT3580 TapeLibrary (Wendy Cheng)
- fix f/w upgrade hang, dmi_table bug in IPMI (Peter Martuccelli)
- fix x86_64 machine check regression from -32.10.EL (Brian Maly)
- validate XFRM policy in IPSEC setsockopt() calls (John Linville)
- fix intr kiobuf_init() regression from -32.11.EL (Larry Woodman)
- fix pollcomplete error in cciss diskdump support (Tom Coughlan)
- enforce CAP_NET_ADMIN perms for policy creation (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-34.EL" date="1122544800">- fix O_SYNC EIO error propagation through ext3/jbd (Stephen Tweedie)
- add support for Enterprise Southbridge II (ESB2) (Geoff Gustafson)
- implement devname callback for block device drivers (Doug Ledford)
- upgrade SATA support (core, libata, and drivers) (Jeff Garzik)
- add ia64 export of (*pm_power_off)() for IPMI (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-33.EL" date="1121767200">- update 3w-9xxx driver to version 2.24.03.008RH (Tom Coughlan)
- revise reserved port avoidance added in -32.8.EL (Steve Dickson)
- update OpenIPMI driver/configs to version v35 (Peter Martuccelli)
- add handling for NEC vendor ID in megaraid2 driver (Tom Coughlan)
- update SCSI whitelist for 3PARdata/Dell/SGI devices (Tom Coughlan)
- add support for netdump over bonded interfaces (Jeff Moyer)
- implement diskdump support for cciss devices (Tom Coughlan)
- add x86_64 ACPI Power Management timer support (Jim Paradis)
- add dual-core support on x86 and x86_64 arches (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.12.EL" date="1121421600">- constrain x86_64 MSR writes based on cpu model (Larry Woodman)
- correct smbfs mounts to support 32-bit uids/guids (Peter Staubach)
- eliminate long system pauses when kscand is running (Larry Woodman)
- update Emulex driver to 7.3.1, ioctl module to 1.2.1 (Tom Coughlan)
- update QLogic driver to 7.05.00-RH1 (w/new firmware) (Tom Coughlan)
- prevent ext3 EA/ACL block sharing/deletion races (Stephen Tweedie)
- fix dpt_i2o insmod oops during adpt_info() lookup (Neil Horman)
- fix dpt_i2o timeouts during long tape commands (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.11.EL" date="1121248800">- downgrade blk_queue_bounce_limit() msg to KERN_INFO (Neil Horman)
- update cciss disk driver to version 2.4.56.RH1 (Adam Manthei)
- update mptfusion driver to version 2.06.16i.01 (Tom Coughlan)
- prevent expand_kiobuf() calls during interrupts (Larry Woodman)
- update iscsi_sfnet driver to version 3.6.2.1 (Mike Christie)
- account for system ticks in ITIMER_PROF sig delivery (Don Howard)
- correct superbh ptr arg to superbh_will_bounce() (Stephen Tweedie)
- fix ext3 symlink perms created w/i386-BOOT kernels (Stephen Tweedie)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.10.EL" date="1121076000">- prevent bogus GART errs from amd64 Northbridge handling (Brian Maly)
- get correct link status in b44 driver's open routine (John Linville)
- check for missing EM64T support for better panic msg (Ernie Petrides)
- fix ref counting bug in x86[_64] __change_page_attr() (Dave Anderson)
- fix memory leak in success path of sys_init_module() (John Linville)
- add ia64 ptrace/sigreturn RSC reg priv level validation (Jason Baron)
- prevent connection list corruption in ip_vs_conn_flush() (Neil Horman)
- limit arg/env ptrs for x86_64/ia64 32-bit-compat execs (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.9.EL" date="1119002400">- fix crashes from failed ACPI root bus additions (Jim Paradis)
- correct insufficient lock owner checks in DRM code (Don Howard)
- add missing sanity checks in Coda ioctl handling (Alexander Viro)
- fix autofs errors with ghosting and expire event races (Jeff Moyer)
- reset ppc64 signal handler correctly for SA_ONESHOT (David Howells)
- store prev user stack pointer in ppc64 signal frames (David Howells)
- fix kernel_lock deadlock between sd_open()/sd_ioctl() (Larry Woodman)
- add ht flag in /proc/cpuinfo for EM64Ts w/hyperthreading (Brian Maly)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.8.EL" date="1118743200">- update e100 network driver to version 3.4.8-k2 (John Linville)
- preserve x86_64 32-bit-compat ptrace reg changes (Roland McGrath)
- add missing x86_64 support for PTRACE_SETOPTIONS (Roland McGrath)
- avoid using reserved ports for portmapper connections (Steve Dickson)
- prevent non-canonical %rip in x86_64 ptrace reg mods (Jim Paradis)
- prevent invalid fs/gs_base in x86_64 ptrace reg mods (Ernie Petrides)
- improve ISO-9660 fs robustness against bad CD formats (Peter Staubach)
- correct __get_user_pages() ref counting w/PG_reserved (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.7.EL" date="1118224800">- fix IPV6 isRouter flag and default router list handling (John Linville)
- eliminate unexpected IO-APIC msg from x86 kernel on amd64 (Jim Paradis)
- switch to reg stack on user-mode x86_64 stk seg faults (Dave Anderson)
- fix two time-related problems in the netconsole module (Dave Anderson)
- remove microcode.o from x86 hugemem unsupported list (Ernie Petrides)
- fix x86_64 committed space accounting w/overcommit=2 (Larry Woodman)
- enforce page locking resource limit in expand_stack() (Jason Baron)
- fix SCSI command block leak w/off-line non-zero LUNs (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.6.EL" date="1117533600">- fix races between POSIX locking and file closes (Peter Staubach)
- update tg3 network driver to version 3.27RH (John Linville)
- add ia64 frame size validation in syscall handling (Jason Baron)
- prevent info leaks into JFS metadata disk blocks (Stephen Tweedie)
- fix ext2 fast-symlink/EA compatibility problem (Stephen Tweedie)
- add x86_64 32-bit-compat SO_{SND,RCV}TIMEO support (Guy Streeter)
- add piix driver PCI device ids for ICH4-L support (John Linville)
- validate "ndigis" value in addition of ROSE routes (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.5.EL" date="1117101600">- update e1000 network driver to version 6.0.54-k2 (John Linville)
- fix arp_ip_traget failover with bonding driver mode 1 (Eric Paris)
- prevent indefinite postponement under __alloc_pages() (Ernie Petrides)
- capture ia64 reg state on all cpus for OS_INIT dumps (Nobuhiro Tachino)
- add documentation listing which drivers support netconsole (Jeff Moyer)
- fail opens of removable media drives if media not present (Pete Zaitcev)
- fix x86_64 find_target() oops in 32-bit-compat ptrace() (Ernie Petrides)
- prevent info leaks into ext2 directory entry blocks (Stephen Tweedie)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.4.EL" date="1115978400">- limit concurrent OOM kills using /proc/sys/vm/oom-kill (Ernie Petrides)
- rework ppc64 wchan fix to avoid module install crashes (David Woodhouse)
- fix diskdump signature check failures w/block_order=8 (Nobuhiro Tachino)
- fix data corruption from pte_clear() races on &gt;4GB x86's (Larry Woodman)
- avoid s390,x kernel stack overflows in network ctc driver (Pete Zaitcev)
- add description of /proc/stat to file system documentation (Brian Maly)
- avoid inode races in __refile_inode() and clear_inode() (Larry Woodman)
- fix arg/env access in ELF core dumping and /proc reads (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.3.EL" date="1115200800">- remove extra chars from scsi_logging_level mod param (Ernie Petrides)
- use GFP_NOFS allocs to avoid kswapd/rpciod deadlocks (Steve Dickson)
- fix ia64 kernel thread creation to force 64-bit tasks (Jason Baron)
- fix data corruption from 4K overflow in /proc/devices (Neil Horman)
- prevent mlock() resource limit bypass w/shm locking (Ernie Petrides)
- restrict MOXA ctlr firmware updates to privileged users (Brian Maly)
- support EM64T systems with mix of cpus with/without NX (Jim Paradis)
- allow modules to use get/put_task_struct() macros (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.2.EL" date="1114164000">- fix IDE disk accounting bug from wrong ios_in_flight (Larry Woodman)
- limit IGMP traffic to active link in bond_alb_xmit() (John Linville)
- fix audit refs to permit /var unmounting on shutdown (Dave Anderson)
- prevent IP4/6 output memory leaks of dst_entry structs (Dave Miller)
- enhance support for ethtool in 3c59x network driver (John Linville)
- fix launder_page() locking to avoid kswapd deadlock (Larry Woodman)
- suppress ide-floppy I/O errors when media isn't present (Brian Maly)
- make netdump more reliable on NAPI-enabled controllers (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.1.EL" date="1113991200">- (this is the first build for RHEL 3 Update 6)
- fix oops when io_setup() is called w/unwritable addr (Jeff Moyer)
- prevent kswapd hangs under launder_page() w/no bufs (Larry Woodman)
- fix autofs memory leaks when events share wait queues (Jeff Moyer)
- change IBM veth driver to indicate link is always up (David Howells)
- fix error resets and TF reg reads in SATA AHCI driver (Jeff Garzik)
- avoid dropping &gt;200-byte frames in sk98lin driver (John Linville)
- prevent shared memory lock/unlock w/o permissions (Dave Anderson)
- remove duplicate USB ESSENTIAL_REALITY defines (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.EL" date="1113559200">- fix data corruption w/ext3 xattr on 64-bit arches (Jason Baron)
- validate LCP frame lengths in PPP async handling (Dave Miller)
- enable forcedeth net driver builds in x86 configs (Jim Paradis)
- isolate IP fragment queues among various callers (Dave Miller)
- prevent busy inodes for symlinks after unmounts (Don Howard)
- revise PCI device ids extending ICH7 support (John Linville)
- work around broken xw4300 BIOS AHCI BAR setup (John Linville)
- add protocol validation in net bluetooth driver (John Linville)
- enable software watchdog timer in s390,x configs (Jan Glauber)
- fix data corruption w/uselib() on bad ELF libs (Ernie Petrides)
- add USB tablet init delay in wacom_probe() (Kristian Høgsberg)
- prevent core dumps with non-readable ELF interps (Dave Anderson)
- add maxevents validation in epoll_wait() handling (Ernie Petrides)
- add len validation in /dev/random poolsize sysctl (Ernie Petrides)
- correct size of ia64 syscall table initialization (Jason Baron)
- correct x86_64 user-mode i/o port validation (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-31.EL" date="1110448800">- fix missing ppc64 netdump/diskdump symbols (Nobuhiro Tachino)
- prevent ia64 unwind from traversing off stack (Jason Baron)
- disable 3w-9xxx driver builds on ppc64 (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-30.EL" date="1110362400">- fix obscure oops in tty init_dev() handling (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-29.EL" date="1109844000">- incorporate urgent late-breaking SATA fixes (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-28.EL" date="1109152800">- add more USB device support to visor driver (Pete Zaitcev)
- implement clustered APIC support for x86_64 (Larry Woodman)
- constrain x86 MSR writes based on cpu model (Jason Baron)
- increase max superbh size for performance (Stephen Tweedie)
- add locking to prevent oops in md_seq_show() (Doug Ledford)
- restore missing ia64 panic_on_oops handling (Tatsuo Uchida)
- implement Ethernet PCI quirk for HP xw9300 (Jim Paradis)
- revert NFS flock() avoidance to -27.7.EL (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.17.EL" date="1108980000">- rework NFS flock() avoidance w/FS_WANT_FLOCK for GFS (Ken Preslan)
- prevent inode corruption from delete/lookup races (Wendy Cheng)
- preserve registers for ia64 16-byte atomic ops (Geoff Gustafson)
- update SCSI whitelist for LSI/HP/STK/EMC devices (Tom Coughlan)
- disable vary_io in ips driver to avoid ctlr hangs (Tom Coughlan)
- correct handling of 2-TB device partitions (Peter Martuccelli)
- update support for ia64 perfmon facility (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.16.EL" date="1108720800">- implement diskdump support for SATA piix/promise (Nobuhiro Tachino)
- correct /proc/mtrr size values on EM64T platforms (Larry Woodman)
- restore page permissions after writes from ptrace() (Don Howard)
- fix /proc parent pids from multi-threaded forks (Ernie Petrides)
- enable software watchdog timer support on s390,x (Jan Glauber)
- update tg3 network driver to version 3.22RH (John Linville)
- incorporate 3w-9xxx driver version 2.24.00.011fw (Adam Manthei)
- correct ending boundary check in filemap_sync() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.15.EL" date="1108548000">- add e100 driver PCI device ids for ICH7 support (John Linville)
- restore obsolete but ignored e100 module params (John Linville)
- implement user-mode (gdb) access to ia64 gate page (Jason Baron)
- fix x86_64 FPU IP and DP values in SIGFPE context (Larry Woodman)
- add qla2200 module parameter to use NVRAM RIO val (Tom Coughlan)
- update 3w-xxxx driver to 1.02.00.037 w/.033 backup (Adam Manthei)
- fix crashes in video Firewire (ieee1394) driver (Bastien Nocera)
- prevent info leaks into ext3 journal disk blocks (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.14.EL" date="1108461600">- enhance AIO performance over NFS w/FS_AIO_SYNC hook (Steve Dickson)
- defer e100_tx_timeout() work from interrupt context (John Linville)
- correct IPV6 DST entry release to prevent route leak (Dave Miller)
- ignore MTU updates from invalid IPV6 ndisc packets (Dave Miller)
- add relevant PCI device ids to extend ICH7 support (John Linville)
- reduce system pauses during heavy page laundering (Larry Woodman)
- fix audit logging of paths w/predicate filter usage (Neil Horman)
- enable building of unsupported fusion isense module (Adam Manthei)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.13.EL" date="1108375200">- increase dxfer size limit for ppc64 SG_IO ioctl32 (David Howells)
- eliminate tty line discipline usage/switching races (Jason Baron)
- fix autofs recognition of ghosted direct map updates (Jeff Moyer)
- fix sg driver race between cmd completion and close (Tom Coughlan)
- prevent e100 data corruption from v.3.0.27-k2 update (John Linville)
- upgrade SATA support (core, libata, new/old drivers) (John Linville)
- implement diskdump support for sym53c8xx adapter (Yuichi Nagahama)
- add USB support for Wacom Cintiq/Intuos3 tablets (Kristian Høgsberg)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.12.EL" date="1107943200">- update e100 network driver to version 3.3.6-k2 (John Linville)
- correct cpu id macro for dual-core Opteron support (Jim Paradis)
- add "numa=off" message on x86_64 OOM kills w/NUMA (Larry Woodman)
- improve user/system timer tick accounting on s390,x (Pete Zaitcev)
- prevent EAGAIN errs from interrupted TCP recv() calls (Dave Miller)
- update cciss disk driver to version v2.4.54.RH1 (Adam Manthei)
- eliminate diskdump cpu id from frozen list (Nobuhiro Tachino)
- fix user-space access bug in USB vicam ioctl (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.11.EL" date="1107424800">- incorporate Emulex driver ioctl module version 1.0.13 (Tom Coughlan)
- eliminate potential call_lock deadlock with diskdump (Tatsuo Uchida)
- fix potential kiobuf_lock deadlock in free_kiovec() (Larry Woodman)
- add L2 cache descriptor for EM64T Irwindale processor (Neil Horman)
- prevent mmap() syscalls from choosing NULL mappings (Rik van Riel)
- include bounce buffer pages in show_mem() output (Larry Woodman)
- add I2C driver support for ICH5 in i2c-i801.c (John Linville)
- correct parport_pc errors on insmod failures (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.10.EL" date="1106906400">- fix futex_wait() race condition that allowed app hang (Ingo Molnar)
- add/correct write barrier placement in timer routines (David Howells)
- add x86_64 NMI switch support to debug kernel hangs (Yuichi Nagahama)
- restore CIV/LVI offset operation in i810_audio driver (John Linville)
- update e1000 network driver to version 5.6.10.1-k2 (John Linville)
- prevent bogus BUG_ON during multi-threaded core dump (Roland McGrath)
- fix x86_64 crash in huge_page_release() w/SHM_HUGETLB (Larry Woodman)
- fix possible mem corruption from /proc/kcore access (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.9.EL" date="1106647200">- fix core dumping over NFS mounts with "intr" option (Roland McGrath)
- prevent multi-threaded app hang from sys_wait4() race (Ingo Molnar)
- restore e1000 support for Intel PCI device id 1014 (John Linville)
- add ac97 quirk entries for HP xw6000/xw6200/xw8000 (John Linville)
- update b44 network driver to upstream version 0.95 (John Linville)
- revert NFS silly-delete and rpciod-hang patches (Steve Dickson)
- fix panics while backing up LVM snapshots (Heinz Mauelshagen)
- fix oops in redirect_target() on DHCP refresh (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.8.EL" date="1105696800">- rework ia64 INIT switch stacks for clean tracebacks (Tatsuo Uchida)
- fix USB raced timeout errors and ohci_complete_add() (Pete Zaitcev)
- add O_DIRECT handling in LVM driver handling (Heinz Mauelshagen)
- downgrade wait4() SIGCHLD/SIG_IGN warning message (Ingo Molnar)
- eliminate potential VMA list races with do_brk() (Dave Anderson)
- ignore ICMP Source Quench messages in tcp_v4_err() (Dave Miller)
- prevent VMA overlap crashes in insert_vm_struct() (Jason Baron)
- move flock() avoidance from NFS up to F/S layer (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.7.EL" date="1105437600">- fix 32-compat alt-stack signal handling on x86_64 (Geoff Gustafson)
- add initialization of ppc64 EEH error buffer size (David Howells)
- make ppc64 xmon work properly with Power5 console (David Howells)
- prevent infinite sync loop from NFS ESTALE writes (Steve Dickson)
- update 8139too network driver w/recent 2.4 fixes (John Linville)
- avoid netfilter oops when ip_conntrack is unloaded (Dave Miller)
- fix potential rpciod hangs during NFS sillydelete (Steve Dickson)
- avoid "No locks available" errors w/flock() on NFS (Ken Preslan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.6.EL" date="1104919200">- fix x86 phys proc ids for non-clustered APIC systems (Geoff Gustafson)
- return EINVAL on e100/e1000 rx-mini/rx-jumbo settings (John Linville)
- fix i810_audio regression from modified ICH6 PCI ids (John Linville)
- prevent race conditions in add_wait_queue_cond() macros (Jeff Moyer)
- fix FAT32 file system corruption w/writing 8M files (Alexander Viro)
- fix derivation/presentation of PHB unit ids on ppc64 (David Howells)
- close OpenFirmware stdin device at boot on ppc64 (David Woodhouse)
- fix 32-bit-compat regression in CMSG validations (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.5.EL" date="1103796000">- add "CommitLimit" data to /proc/meminfo output (Frank Hirtz)
- allow autofs to expire mounts on ppc64 arch (Jeff Moyer)
- add 3c59x EEPROM_RESET for 3c900 Boomerang (John Linville)
- ignore PTE mapping status in page_anon() (Larry Woodman)
- fix SIOCGIFHWADDR handling for zero addr_len (Dave Miller)
- add netdump support for x86_64, ia64, ppc64 (Dave Anderson)
- correct overcommit accounting on fork failure (Frank Hirtz)
- raise default ia64/ia32e swiotlb size to 64M (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.4.EL" date="1103709600">- add network CMSG validation checks (Dave Miller)
- fix data struct leak in ip_options_get() (Dave Miller)
- fix IGMP vulnerabilities in ip[6]_mc_source() (Dave Miller)
- fix e_phnum binfmt_elf loader vulnerability (Dave Anderson)
- clean x86_64 32-bit-compat syscall numbers (Jim Paradis)
- prevent ia64 floating point reg val leakage (Jason Baron)
- add USB io_edgeport driver size check (Peter Martuccelli)
- enable softirq deferral for x86_64 arch (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.3.EL" date="1102586400">- add data/param length sanity checks in smbfs (Alexander Viro)
- prevent /proc/&lt;PID&gt;/cmdline env data disclosure (Dave Anderson)
- make tulip_stop_rxtx() wait for DMA termination (John Linville)
- fix mm_stat regression introduced in -20.13.EL (Rik van Riel)
- correct return value from vlan_dev_change_mtu() (John Linville)
- serialize datagram read w/appropriate semaphore (Dave Miller)
- fix keyboard regression introduced in -24.EL (Peter Martuccelli)
- enable mmap/mprotect PROT_EXEC for legacy apps (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-26.2.EL" date="1101722400">- fix USB problems with keyboards and ia64 oopses (Pete Zaitcev)
- add i810 PCI IDs for nforce3/CK804 audio devices (Jim Paradis)
- fix ppc64 viodasd driver dev naming/limit bugs (David Howells)
- prevent tg3 fiber link bounces w/auto-negotiation (Dave Miller)
- add ac97 quirk handling for i810_audio driver (John Linville)
- prevent incorrect OOM killing with iscsi usage (Larry Woodman)
- create kiobuf cache to reduce lowmem contention (Larry Woodman)
- fix yet another binfmt_elf loader vulnerability (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.1.EL" date="1100512800">- (this is the first build for RHEL 3 Update 5)
- implement open() recovery from NFS ESTALE errors (Neil Horman)
- clean up warnings from lpfc and lpfc_703 Makefiles (Tom Coughlan)
- fix nessus-induced kernel panic with auditing (Peter Martuccelli)
- update 3c59x driver to LK1.1.18 and fix reset bug (John Linville)
- fix ext3 O_DIRECT bug in orphan list handling (Stephen Tweedie)
- flush cached dirty pages on NFS reads w/O_DIRECT (Steve Dickson)
- allow ia64 kernel unaligned access msg suppression (Neil Horman)
- correct test for performing buffer-head reclaim (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.EL" date="1100253600">- fix binfmt_elf loader vulnerabilities (Jim Paradis, Dave Anderson)
- limit kernel data struct slabs to single-page allocs (Larry Woodman)
- update Emulex driver to 7.1.14 (backup still 7.0.3) (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-24.EL" date="1100080800">- fix several ppc64 problems with signal catching (David Woodhouse)
- fix several bugs in /proc/ppc64/lparcfg driver (David Howells)
- fix possible diskdump hangs w/megaraid2 driver (Tatsuo Uchida)
- add support for IBM EM64T-based Groucho blade (Peter Martuccelli)
- fix regression in USB BIOS-&gt;kernel hand-off support (Pete Zaitcev)
- fix regression in ia64 kernel stack unwind handling (Don Howard)
- fix regression w/agpgart support of i8xx chipsets (Larry Woodman)
- add support for BLKSSZGET ioctl in cciss driver (Tom Coughlan)
- disable iSCSI builds in ppc64 and s390* configs (Tom Coughlan)
- update Emulex driver to 7.1.13 (backup still 7.0.3) (Tom Coughlan)
- correct SCSI whitelist for Chaparral FR1422 devices (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-23.EL" date="1098957600">- prevent kswapd from getting stuck in prune_icache() (Larry Woodman)
- fix ppc64 single-stepping into signal handlers (David Woodhouse)
- fix corruption from user stack expansion races (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-22.EL" date="1098093600">- prevent add/removal races in SCSI open handling (Doug Ledford)
- fix U3 agpgart regression with Intel i8xx chipsets (Dave Jones)
- update SCSI whitelist for IBM 1722/1724 devices (Tom Coughlan)
- correct TSS descriptor limit checking for x86_64 (Jim Paradis)
- add nforce3/CK804 device support and fix ACPI bug (Jim Paradis)
- add support for "forcedeth" net driver version 0.28 (Jim Paradis)
- enable diskdump support in amd64/ia32e configs (Nobuhiro Tachino)
- restore/improve linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- add missing page_cache_release() in launder_page() (Larry Woodman)
- update Emulex driver to 7.1.11 (backup still 7.0.3) (Tom Coughlan)
- add new USB ids to support latest Wacom tablets (Kristian Høgsberg)
- remove drivers/net/tun.o from unsupported list (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-21.EL" date="1096538400">- fix potential PTE race in do_anonymous_page() (Rik van Riel)
- add "Committed_AS" data to /proc/meminfo output (Frank Hirtz)
- revise DMA zone paging thresholds for x86_64 (Larry Woodman)
- prevent /proc/scsi/scsi oops during probes (David Woodhouse)
- avoid kswapd hangs via free_more_memory() hooks (Rik van Riel)
- update megaraid2 driver to 2.10.8.2 w/2.10.6 backup (Adam Manthei)
- fix do_notify_parent() panic from ptrace death race (Roland McGrath)
- fix large core file support on 64-bit architectures (Dave Anderson)
- enable tux on ia64 and increase max tux threads to 16 (Ingo Molnar)
- fix ia64/s390,x single-stepping w/signal handlers (David Woodhouse)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.14.EL" date="1096452000">- fix hang in SCSI starvation management code (David Howells)
- update SCSI whitelist for NETAPP LUN devices (Wendy Cheng)
- fix s390 cio handling during ESS fail-overs (Pete Zaitcev)
- update Emulex driver to 7.1.8 w/7.0.3 backup (Tom Coughlan)
- update Qlogic driver to 7.01.01 w/7.00.03 backup (Tom Coughlan)
- correct unlock/free order in proc_lookupfd() (Ernie Petrides)
- use ACPI for PCI interrupt routing on ia32e (Jim Paradis)
- allow cpus to boot w/APIC IDs &gt; 8 on ia32e (Jim Paradis)
- fix pid allocation when pid_max &gt; 32768 (Ernie Petrides)
- fix regs in multi-threaded ia64 core dumps (Keiichi Mori)
- enable sym53c8xx driver for ppc64 iSeries (David Howells)
- fix ac97 depmod errors w/hugemem configs (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.13.EL" date="1096365600">- fix aic79xx_osm.h/3c59x.c changes in prior rev (Tachino/Linville)
- allow for larger nfsd block sizes on some archs (Steve Dickson)
- fix possible aacraid driver panic in aac_info() (Tom Coughlan)
- fix xdr argsize check to handle writes &gt;= 2^31 (Steve Dickson)
- update e1000 network driver to version 5.3.19-k2 (John Linville)
- apply several cciss driver fixes (to 2.4.52.RH2) (Adam Manthei)
- fix x86_64 versions of cpu capability test macros (Jim Paradis)
- fix ppc64 HPTE memory corruption race condition (Rik van Riel)
- add sys_epoll support on s390,x (Stephen Tweedie, Pete Zaitcev)
- prevent keyboard.c warnings from mouse clicks (Norm Murray)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.12.EL" date="1096279200">- improve slab cache page reaping heuristics (Larry Woodman)
- implement diskdump support for x86_64 arch (Nobuhiro Tachino)
- add ia64 INIT trigger switch support for debugging (Tatsuo Uchida)
- fix several problems in handling of AIO on pipes (Jeff Moyer)
- update fixes for LTP read02 test hangs with tmpfs (Alexander Viro)
- fix x86_64 single-stepping out of signal handlers (Jim Paradis)
- increase size of ppc64 RTAS error log buffer (David Howells)
- increase max possible kNFSD lockd cookie size (Steve Dickson)
- backport 3c59x fixes for mii-tool problems w/10Mb (John Linville)
- incorporate Cisco's iscsi_sfnet initiator driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.11.EL" date="1095933600">- implement diskdump support for megaraid2 adapter (Tatsuo Uchida)
- update ips driver to version 7.10.18 w/7.00.15 backup (Tom Coughlan)
- correct max page aging interval boundary in kscand() (Larry Woodman)
- add ppc64 support for ptrace() with PT_SINGLESTEP (David Woodhouse)
- update e100 network driver to version 3.0.27-k2 (John Linville)
- fix LTP read02 test hangs when tmpfs is in use (Alexander Viro)
- get proc_dir_entry reference in proc_lookup() (Alexander Viro)
- add exports of several AIO-related interfaces (Larry Woodman)
- reduce swapping during excessive pagecache use (Larry Woodman)
- implement statfs64() syscall on x86 for NFS use (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.10.EL" date="1095847200">- implement early USB hand-off (BIOS-&gt;kernel) support (Pete Zaitcev)
- fix stack pointer calculation in x86 show() handling (Jeff Moyer)
- prevent interference between flock/POSIX lock types (Frank Hirtz)
- update pcnet32 network driver to version 1.30c (John Linville)
- add export of block_commit_write() f/s interface (Larry Woodman)
- implement diskdump support for dpt_i2o adapter (Tatsuo Uchida)
- update mptfusion driver to version 2.05.16.02 (Adam Manthei)
- move disk_dump_notifier_list to diskdumplib.c (Nobuhiro Tachino)
- update s390 zfcp driver to revision 5.31.2.11+ (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.9.EL" date="1095674400">- fix occasional ibmvscsic driver insmod crash (David Howells)
- disable linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- prevent double slashes in symlink auditing (Peter Martuccelli)
- fix overzealous compat32 setsockopt conversions (David Woodhouse)
- backport tulip driver fixes from upstream 2.4.28 (John Linville)
- update tg3 network driver to version 3.10RH (John Linville)
- implement sysctl to force igmp protocol versions (Neil Horman)
- add diskdump performance improvement info (Nobuhiro Tachino)
- fix s390 iucv lost connections and ping hangs (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.8.EL" date="1095588000">- prevent diskdump deadlock in case of die() recursion (Tatsuo Uchida)
- add x86/x86_64 support for ptrace() w/PT_SINGLESTEP (Roland McGrath)
- fix x86/x86_64 single-stepping into signal handlers (Roland McGrath)
- increase x86 value for MAX_MP_BUSSES definition to 260 (Ingo Molnar)
- eliminate ia64 potential for scheduler runq deadlock (Larry Woodman)
- add support for /proc/sys/kernel/mem_nmi_panic sysctl (Dave Anderson)
- prevent keyboard-initiated sysrq hangs in handle_sysrq() (Jeff Moyer)
- fix intermittent netdump hangs from cpu-frozen messages (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.7.EL" date="1095415200">- fix premature OOM killing change added in prior rev (Larry Woodman)
- backport vlan driver fixes from upstream 2.4.28-rc1 (John Linville)
- add _sb_findmap symbol export in s390/s390x kernels (Pete Zaitcev)
- add ppc64 support for 32-bit sendfile64() syscall (David Howells)
- fix 32-bit IPC_INFO shmctl() syscalls for ppc64 (David Howells)
- upgrade libata/SATA support to current 2.4 bits (John Linville)
- avoid USB device resets of shared/busy interfaces (Pete Zaitcev)
- fix miscellaneous problems in ppc64 icom driver (David Howells)
- fix ip_queue_maxlen sysctl for ip[6]_queue modules (Neil Horman)
- add module parm for max entries in NFS_ACL replies (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.6.EL" date="1095156000">- prevent OOM killer from kicking in prematurely (Larry Woodman)
- avoid NMI watchdog crashes during sysrq-m usage (Wendy Cheng)
- add auditing support for ia64 clone2 syscall (Peter Martuccelli)
- correct sign of auditing error codes for ia64 (Peter Martuccelli)
- implement ia64 auditing 32-bit-disable sysctl (Peter Martuccelli)
- fix ia64 faults w/stale VHPT-generated TLB entries (Dave Anderson)
- fix invalid x86_64 checksums for multicast packets (Mike Gahagan)
- fix incorrect blocking bug inside wakeup_kswapd() (Larry Woodman)
- validate appropriate media type in DVD drives (Doug Ledford)
- reduce s390 stack usage in qeth/qdio drivers (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.5.EL" date="1094810400">- prevent scenarios that lead to hang of kswapd (Larry Woodman)
- add locking for access to /proc/bus/usb/devices (Pete Zaitcev)
- correct x86 rescheduling to handle apm=power-off (Ingo Molnar)
- fix OOM killer locking and mm referencing holes (Larry Woodman)
- pin ia64 mapping for idle proc stack during boot (Larry Woodman)
- fix warning throttle for amd64 stack overflow check (Neil Horman)
- fix content lengths when using tux gzip compression (Ingo Molnar)
- add auditing support for pread/pwrite syscalls (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.4.EL" date="1094724000">- prevent bogus data in /proc/scsi/ibmvscsi/* (David Howells)
- update tg3 network driver to version 3.9RH (John Linville)
- improve ramfs memory alloc w/scarce highmem (Larry Woodman)
- correct several values in /proc/ppc64/lparcfg (David Howells)
- allow dirty page rebalancing under mem pressure (Rik van Riel)
- prevent memory leak in scsi_build_commandblocks() (Doug Ledford)
- fix potential kswapd deadlock w/disk quota usage (Larry Woodman)
- increase MAX_IO_APICS from 8 to 32 for x86_64 arch (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.3.EL" date="1094205600">- fix various error path bugs in bcm5820 driver (John Linville)
- validate addresses used with /dev/kmem accesses (Neil Horman)
- eliminate IPSEC tunnel leaks when using IPComp (Dave Miller)
- add auditing support for utimes() syscalls (Peter Martuccelli)
- prevent netconsole freeze w/cable dis-/re-connect (Jeff Moyer)
- correct reboot_cpu validation for "reboot=s&lt;n&gt;" (Doug Ledford)
- fix mem/irq clean-up in olympic tokenring driver (Neil Horman)
- update network bonding driver to version 2.6.0 (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.2.EL" date="1094032800">- add maps/rlimits output with print-fatal-signals=2 (Ingo Molnar)
- backport ac97 sound support from upstream 2.4.27 (John Linville)
- eliminate kernel stack data leaks from USB drivers (Mark Cox)
- fix interrupt status mask in AMD PCnet32 driver (David Howells)
- fix module loading problems in ibmvscsic driver (David Howells)
- fix x86 shared runq mapping when ACPI data is bad (Bernd Schmidt)
- disable enhanced error handling on PCI-ISA bridges (David Howells)
- add memory-mapped i/o support to i810_audio driver (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.1.EL" date="1093860000">- (this is the first build for RHEL 3 Update 4)
- backport r8169 network driver changes from 2.4 (John Linville)
- update i810_audio sound driver to version 1.01 (John Linville)
- convert USB UHCI driver warning to debug message (Pete Zaitcev)
- backport 2.6 PROT_GROWSDOWN/UP mprotect() support (Jakub Jelinek)
- lower ppc64 console logging level of RTAS messages (David Howells)
- fix ppc64 handling of "smt-emabled=off" boot option (David Howells)
- correct socket sndbuf accounting w/IP_MULTICAST_LOOP (Neil Horman)
- reduce x86_64 user stack start randomization to 16K (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.EL" date="1092823200">- change TARGET_CPUS on x86_64 to include all on-line cpus (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-19.EL" date="1092304800">- fix possible races/overflows in file offset handling (Alexander Viro)
- correct logging of boot progress messages on Power5 (David Howells)
- extend ppc64 EEH support for other types of devices (David Howells)
- fix ibmveth driver to properly shut down and restart (David Howells)
- fix several races and overflows in ppc64 RTAS driver (David Howells)
- backport "acpi=noirq" support to work around Nocona hangs (Don Howard)
- conditionalize pbn_hp_diva to fix serial driver oops (Matthew Galgoci)
- add amd64 GART entry guard mappings for PCI mis-prefetch (Jim Paradis)
- upgrade SATA support again to resolve several problems (Jeff Garzik)
- qualify ia32e IRQ affinity disable with BIOS flag check (Jim Paradis)
- fix eeh_check_failure() on ppc64 to be interrupt safe (David Howells)
- correct ppc64 EEH macros to use appropriate data size (David Howells)
- fix x86/ia64 no-wait handling in smp_call_function() (Larry Woodman)
- fix "Filter target 0x203 not known ..." audit msgs (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-18.EL" date="1090404000">- prevent s390 mlock hangs with follow_page() rework (Ernie Petrides)
- fix Power5 initialization and handling of RAS IRQs (David Howells)
- fix ppc64 viocons driver deadlocks with printk() (David Howells)
- apply eh_timeout, netdump, cli fixes in diskdump (Tatsuo Uchida)
- add skip_mapped_pages tuning for page eviction (Stephen Tweedie)
- fix initrd's effect on ppc64 mem_end calculation (David Howells)
- allow HT support on ppc64 systems with single cpu (David Howells)
- backport v2.0.8 aic7xxx driver h/w support for Dell (Tom Coughlan)
- correct ppc64 device node searching in hvsi driver (David Howells)
- fix KMI compat problem w/pgprot_t in x86 NX support (Jim Paradis)
- resurrect mptfusion driver backup version 2.05.05 (Tom Coughlan)
- disable IRQ affinity setting on some ia32e systems (Jim Paradis)
- update SCSI whitelist for Dot Hill SANnet/StorEdge (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-17.EL" date="1089280800">- account for zone holes in big hash table allocator (Stephen Tweedie)
- prevent reserved stack space overflow of mmap_top (Ernie Petrides)
- fix USB crash in scan_async() with EHCI hardware (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-16.EL" date="1088848800">- enable exec-shield and add x86 NX support (Ingo Molnar, Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.19.EL" date="1088762400">- add owner check in inode_change_ok() for gid changes (Ernie Petrides)
- fix race in finish_task_switch() between wakeup/exit (Ernie Petrides)
- remove Samsung CD-ROM SN-124 from IDE DMA blacklist (Tom Coughlan)
- update e1000 network driver to version 5.2.52-k3 (John Linville)
- add auditing support for semtimedop syscalls (Peter Martuccelli)
- fix tasklet and locking bugs in Power5 hvsi driver (David Howells)
- fix megaraid2 handling of TUR cmds with SCSI CD-ROM (Adam Manthei)
- update SCSI whitelist for HP NS E1200-160 router (Tom Coughlan)
- prevent x86 read_ldt() from reading beyond kmap (Ernie Petrides)
- force single loadable segment in ia64 kernels (Jakub Jelinek)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.18.EL" date="1088157600">- implement ia64 work-around for TLB fetch timeout MCA (Larry Woodman)
- fix Power3 interrupt initialization in ppc64 setup (David Howells)
- correct info msg, prevent double panic in diskdump (Tatsuo Uchida)
- defend against NULL "mm" ptrs in page_referenced() (Rik van Riel)
- fix miscellaneous audit subsystem problems (Peter Martuccelli)
- prevent crash with tux CGI execution on x86_64 (Ingo Molnar)
- add installer info to SATA sx8 block driver (Jeff Garzik)
- turn on vary_io flag in SCSI ips driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.17.EL" date="1087984800">- allocate big system hash tables w/bootmem allocator (David Howells)
- prevent loading aic7xxx_old when aic7xxx is in use (Doug Ledford)
- implement stat() recovery from NFS ESTALE errors (Steve Dickson)
- fix raw/O_DIRECT i/o bug with unmapped pages (Stephen Tweedie)
- correct another locking hole in RAID1 handling (Doug Ledford)
- fix __x86_64__ conditional in megaraid2.c driver (Adam Manthei)
- fix unresolved symbols on ia64 in cciss driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.16.EL" date="1087898400">- make NFS sillydelete wait for unlink completion (Steve Dickson)
- prevent EIO w/concurrent O_DIRECT+buffered i/o (Stephen Tweedie)
- upgrade SATA support (core, libata, and drivers) (Jeff Garzik)
- implement futex() FUTEX_CMP_REQUEUE op (Al Viro, Pete Zaitcev)
- update b44 network driver to version 0.93 (John Linville)
- avoid unix_stream_sendmsg() ENOBUFS errors (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.15.EL" date="1087812000">- improve SCSI mid-layer error handling w/sdev_retry_q (Doug Ledford)
- eliminate rw-semaphore races between waiter/wakeup (David Howells)
- add locking and fix accounting bug in RAID1 handling (Doug Ledford)
- backport Carmel sx8.c driver from upstream 2.4 base (John Linville)
- rename ppc64-squadrons-* patches to ppc64-power5-* (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.14.EL" date="1087639200">- introduce support for IBM Squadrons/Power5 systems (David Howells)
- update aacraid driver to 1.1.5-2339 w/1.1.2 backup (Adam Manthei)
- allow sys_remap_file_pages() on unlocked ramfs VMAs (Larry Woodman)
- fix diskdump hangs during resets with aic79xx driver (Tatsuo Uchida)
- fix possible data corruption when using SHM_HUGETLB (Larry Woodman)
- set QLogic HbaApiNode proc file permissions to 0600 (Tom Coughlan)
- add IRQ blocking/restoring in add_gendisk/del_gendisk (Jeff Needle)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.13.EL" date="1087466400">- fix problem causing PCI bus 255 to be missing on ia64 (Ben Woodard)
- make nfs_statfs() recognize/handle fs size overflows (Steve Dickson)
- update QLogic driver to 7.00.03-RH1 w/6.07.02 backup (Tom Coughlan)
- allow procfs to utilize more dynamic inode numbers (David Howells)
- prevent inappropriate "unexpected IO-APIC" messages (Ernie Petrides)
- avoid lost dirty page bits in s390/s390x VM handling (Pete Zaitcev)
- fix ACPI SCI interrupt defaults and add kernel params (Jim Paradis)
- fix user-space access bugs in acpi/airo/decnet/sound (Alexander Viro)
- remove drivers/net/starfire.o from unsupported list (Ernie Petrides)
- fix mm_struct mem leak in copy_process() error path (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.12.EL" date="1087293600">- correct s390/s390x tests for PT_AUDITED flag (Peter Martuccelli)
- update e100 network driver to version 2.3.43-k1 (John Linville)
- update megaraid2 driver to 2.10.6 w/2.10.1.1 backup (Adam Manthei)
- add x86_64 auditing support for 32-bit-compat (Peter Martuccelli)
- fix ia64 unwind handling for UNW_INSN_SETNAT_MEMSTK (Jason Baron)
- update cciss driver to v2.4.52 for several fixes (Tom Coughlan)
- fix variable block mode tape handling in st driver (Tom Coughlan)
- incorporate latest Emulex fibre channel driver (Tom Coughlan)
- fix USB EHCI problem with BIOS-to-host handoff (Pete Zaitcev)
- update SCSI whitelist for DDN/Xyratex/SanDisk/CBOX3 (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.11.EL" date="1087207200">- upgrade to latest autofs4, remove from unsupported list (Jeff Moyer)
- fix memory corruption bug in audit driver code (Peter Martuccelli)
- store adjusted KSP value in ia64 diskdump support (Tatsuo Uchida)
- update e1000 network driver to version 5.2.52-k1 (John Linville)
- update ips driver to version 7.00.15 w/6.11.07 backup (Adam Manthei)
- implement USB device interlock between ioctls/SCSI-ops (Pete Zaitcev)
- update tg3 driver to version 3.6RH for upcoming chipsets (Dave Miller)
- downgrade several PCI cache line size debugging messages (Jim Paradis)
- correct x86_64 32-bit-compat support for AIO syscalls (Jeff Moyer)
- prevent FPU exception handling hangs on x86/x86_64 (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.10.EL" date="1086948000">- give wait.func highest priority in wake_up_filtered() (Larry Woodman)
- reduce system time when using sys_remap_file_pages() (Larry Woodman)
- enable CONFIG_SOFT_WATCHDOG module for ppc64 configs (David Howells)
- improve page allocation to avoid unnecessary swapping (Rik van Riel)
- implement diskdump support for ia64 with mptfusion (Tatsuo Uchida)
- disable native ia32 support for ia64 Montecito cpus (Jason Baron)
- save/restore P4/ia32e perf registers for oprofile (Will Cohen)
- fix oprofile ESCR_SET_EVENT_SELECT() event mask (Will Cohen)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.9.EL" date="1086775200">- update s390 zcrypt driver to version 1.2.1 (Pete Zaitcev)
- update network tg3 driver to version 3.5RH (Dave Miller)
- eliminate separate ia32e oprofile processor id (Will Cohen)
- update SCSI whitelist for IBM 2105/2145 devs (Doug Ledford)
- avoid EAGAIN errors on blocking UDP sockets (Steve Dickson)
- avoid putting locked inodes on dirty list (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.8.EL" date="1086688800">- decouple NFS O_DIRECT handling for performance gain (Steve Dickson)
- export page_is_ram() interface for amd64/ia32e arch (Jim Paradis)
- enable CONFIG_SCSI_SATA_* options in x86_64 configs (Jim Paradis)
- update mptfusion driver to 2.05.16 w/2.05.11.03 backup (Adam Manthei)
- fix nopage_sequential_readahead() and filemap_sync() (Larry Woodman)
- fix USB EHCI driver to avoid Squadrons install oops (Pete Zaitcev)
- add x86 NMI trigger switch support for debugging (Yuichi Nagahama)
- add dmi_blacklist[] entry for "Intel NA440BX DP" (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.7.EL" date="1086602400">- apply some minor scsi_dump_status() format tweaks (Doug Ledford)
- implement SCSI support for dynamic add (hot plug) (Doug Ledford)
- upgrade lvm driver logic to version 1.0.8-2 (Heinz Mauelshagen)
- fix x86_64 definition for inlined ffs() function (Jim Paradis)
- preserve VM_MAYEXEC for executable stack support (Jim Paradis)
- add extra SLBIEs for ppc64 Power5 DD2.0 errata (David Howells)
- add ppc64 32-bit compat for TIOCGICOUNT/MIWAIT (David Howells)
- hold file struct ref when removing POSIX locks (Steve Dickson)
- fix window scaling bug in tcp_ack_update_window() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.6.EL" date="1086343200">- make fsync() flush all pending NFS updates to disk (Steve Dickson)
- complete ia64 support for multiple I/O port spaces (Larry Woodman)
- fix sending of IP broadcast frames with TTL of zero (Neil Horman)
- prevent context switch storms under high VM loads (Larry Woodman)
- fix sigaltstack() errors w/JVM on hugemem kernels (Roland McGrath)
- add locking and improve output in scsi_dump_status() (Doug Ledford)
- add size boundary checking in scsi_resize_dma_pool() (Doug Ledford)
- fix SCSI request struct leak on command init failures (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.5.EL" date="1084528800">- overhaul ia64 SAL/MCA subsystem (Ben Woodard)
- enable x86_64 32-bit UID support (Jim Paradis)
- add initial diskdump support (Nobuhiro Tachino)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.4.EL" date="1084356000">- reduce chance of "VFS: Busy inodes after unmount." errs (Steve Dickson)
- convert "uaddr2" arg ptr in s390x futex() compat syscall (Pete Zaitcev)
- add ppc64 32-bit compat handler for PE_LOCKED_COPY ioctl (David Howells)
- update s390 dasd driver with several recent bug fixes (Pete Zaitcev)
- fix amd64 NUMA node scanning for Northbridge systems (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.3.EL" date="1084183200">- prevent exp_stopfodrop() oops during cluster failover (Steve Dickson)
- make nfs_file_commit() always flush the entire file (Steve Dickson)
- fix pcnet32 driver's MAC address selection on ppc64 (Julie DeWandel)
- backport /dev/random driver fixes for missed wakeups (Mark DeWandel)
- fix hang w/SoundBlaster 16-bit sampling w/odd count (Ernie Petrides)
- make s390 tape driver specify GPL module license type (Pete Zaitcev)
- correct buffer len value in ppc64 pSeries ipr driver (David Howells)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.2.EL" date="1083664800">- enable booting on 8-way Opteron systems (Jim Paradis)
- fix 32-bit-compat truncate64() on x86_64 (Jim Paradis)
- correct promiscuous mode counter handling (Dave Miller)
- support 128-GB ia64 systems w/HP zx1 chipset (Larry Woodman)
- add export of sys_ioctl() global symbol on s390x (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.1.EL" date="1083578400">- (this is the first build for RHEL 3 Update 3)
- reenable/fix linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- clean up file locks when NFS clients receive signals (Steve Dickson)
- complete ia64-specific LAuS syscall auditing support (Mark DeWandel)
- prevent NULL pointer dereference in page_referenced() (Rik van Riel)
- fix max sectors argument in lvm_snapshot_alloc() (Heinz Mauelshagen)
- allow AGP bus scanning to execute for all architectures (John Dennis)
- fix page_referenced() rss limit checks w/unmapped pages (Rik van Riel)
- correct locking and cr/lf problems in usbserial driver (Pete Zaitcev)
- add /proc/cpuinfo support for new ppc64 processors (Julie DeWandel)
- fix sense data handling on certain SCSI cmd retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.EL" date="1082541600">- fix clobbering of /proc/cpuinfo vendor_id on x86_64 (Jim Paradis)
- correct MCAST_MSFILTER/IP_MSFILTER size checking (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-14.EL" date="1081936800">- disable linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- prevent symlink buffer overflow in ISO-9660 fs (Ernie Petrides)
- check for skb overrun in IPV4/IPV6 IGMP handling (Dave Miller)
- fix possible hang in rebalance_laundry_zone() (Larry Woodman)
- correct zone_wired[] initialization for NUMA (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-13.EL" date="1081332000">- fix several critical libata bugs (Jeff Garzik)
- correct IPSEC XFRM policy ref counting (Dave Miller)
- add amd64/ia32e parsing for "acpi=off" arg (Jim Paradis)
- update tg3 driver to v3.1 for several fixes (Dave Miller)
- fix SCSI whitelist for Hitachi/HP DFx00, Apple Xserve (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-12.EL" date="1080295200">- add USB support for Handspring Treo 600 PDA syncing (Matthew Galgoci)
- clear state for CPEs during ia64 MCA SAL error logging (Ben Woodard)
- prevent DMA resource leak in QLogic driver error path (Tom Coughlan)
- change default QLogic driver device queue depth to 64 (Tom Coughlan)
- replace fabricated cciss drive geometry w/ENXIO error (Tom Coughlan)
- update SCSI whitelist for HP SureStore/StorageWorks (Tom Coughlan)
- disable CONFIG_ACPI_DEBUG in amd64/ia32e configs (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-11.EL" date="1078740000">- add yet another Intel ICH6 SATA PCI id (Jeff Garzik)
- fix ref counting in copy_process() error path (Larry Woodman)
- remove ia64 support for /proc/bus/mckinley/bitmap (Jason Baron)
- correct depmod versioning for unsupported modules (Ernie Petrides)
- prevent data corruption in ia32e phys_proc_id[] info (Larry Woodman)
- change default value for inactive_clean_percent to 30 (Larry Woodman)
- enable improved version of s390 on-demand timer patch (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-10.EL" date="1078221600">- incorporate late-breaking libata fixes (Jeff Garzik)
- enable amd64 syscall for tux support (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.17.EL" date="1078135200">- reduce s390 idle overhead with on-demand timer patch (Pete Zaitcev)
- complete ia64 NPTL support for 32-bit-EL executables (Jason Baron)
- add several ia64 syscall table entries for 32-bit-EL (Jason Baron)
- upgrade libata/SATA support, delete ich5-sata.patch (Jeff Garzik)
- check for mremap/vmtruncate race in move_one_page() (Jason Baron)
- prevent ia64 NaT-bit corruption during sig catching (Jason Baron)
- fix amd64 get_mtrr() parsing error with &gt;4GB memory (Jim Paradis)
- change amd64 default behavior to avoid TSC timer use (Jim Paradis)
- force s390utils upgrade to prevent zipl seg fault (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.16.EL" date="1078048800">- restore varyio capability in mptfusion driver update (Adam Manthei)
- enhance SCSI mid-layer queuing for indefinite retries (Doug Ledford)
- add ia64 reg reloads for 32-bit-EL strace -f support (Jason Baron)
- fix ia64 core dump support for 32-bit-EL executables (Jason Baron)
- add SCSI whitelist devs with BLIST_RETRY_ABORTED_CMD (Doug Ledford)
- remove stack-in-interpreter check in binfmt_elf.c (Julie DeWandel)
- clear all flags in exec_usermodehelper() for kmod (Alexander Viro)
- fix aacraid command completion (rq corruption) bugs (Tom Coughlan)
- correct cciss_proc_tape_report() type in flags decl (Tom Coughlan)
- enable USB-2.0-hub-based mice/keyboards to function (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.15.EL" date="1077962400">- fix amd64 oprofile linkage problem in ia32e support (Ernie Petrides)
- update ips driver to version 6.11.07 w/6.10.52 backup (Tom Coughlan)
- add size checks to DRM ATI r128 driver ioctl handling (John Dennis)
- avoid megaraid2 irq_disable calls for mem-mapped ctlrs (Tom Coughlan)
- upgrade firmware imbedded in QLogic driver to 3.02.24 (Tom Coughlan)
- correct ia64 memory accounting in overcommit mode 2 (Larry Woodman)
- implement softirq deferral to limit kernel stack depth (Ingo Molnar)
- reduce kernel stack usage in a couple of tux functions (Ingo Molnar)
- fix shared extended attribute ref counting in ext3 (Stephen Tweedie)
- clear SCSI sense data buffer between eh retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.14.EL" date="1077789600">- add .RH1 suffix to cciss driver version v2.4.50 (Tom Coughlan)
- implement initial LAuS syscall auditing support (Mark DeWandel)
- introduce GFS enablers for locking and sendfile ops (Ken Preslan)
- update QLogic driver to 6.07.01 w/6.06.00b11 backup (Tom Coughlan)
- improve netdump reliability w/asynchronous IPI param (Jeff Moyer)
- add ICH6 DSP audio support to i810_audio driver (Jeff Garzik)
- apply SCSI whitelist updates for several devices (Tom Coughlan)
- fix odd byte tape i/o handling in sym53c8xx driver (Tom Coughlan)
- correct minimum nfsd version that supports acls (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.13.EL" date="1077703200">- allow concurrent NFS direct i/o to same file if !append (Steve Dickson)
- introduce support for new Intel 64-bit ia32e processor (Larry Woodman)
- update mptfusion driver to 2.05.11.03 w/2.05.05 backup (Adam Manthei)
- remove fs/binfmt_misc.o from linux-modules-unsupported (Jason Baron)
- fix ia64 predicate register use in sig trampoline code (Jason Baron)
- add oprofile cpu type recognition for ia32e processor (Will Cohen)
- update e1000 network driver to version 5.2.30.1-k1 (Jeff Garzik)
- add more Intel PCI ids to match upstream 2.4 (Jeff Garzik)
- add ICH6 PATA support, PCI ids, irq routing (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.12.EL" date="1077530400">- add deferred page freeing for intr-context unmap_kvec() (Jeff Moyer)
- update megaraid2 driver to v2.10.1.1 w/v2.00.9 backup (Tom Coughlan)
- fix ppc64 pte hash table locking to avoid deadlocks (Julie DeWandel)
- fix ia64 data TLB init to prevent random boot-up hangs (Jason Baron)
- fix ia64 RNat register corruption with alt sig stacks (Jason Baron)
- allow smaller ia64 sig stacks in ia32 emulation layer (Jason Baron)
- backport ncpfs fixes to eliminate var-length arrays (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.11.EL" date="1077271200">- backport cisco aironet driver from 2.6.3-rc4 (Matthew Galgoci)
- update tg3 driver to v2.7 to fix status reg handling (Dave Miller)
- correct lost jiffies logic for x440/5 cyclone timer (Bernd Schmidt)
- fix open() error clean-up for unsupported O_DIRECT (Stephen Tweedie)
- prevent ia64 crashes when unmapping hugetlb pages (Jason Baron)
- add ppc64 processor support for future PPC970+ (Julie DeWandel)
- rework ppc64 32-bit-compat iptables support (Julie DeWandel)
- fix func ptr test in ethtool_set_ringparam() (Jeff Garzik)
- disable linux-2.4.21-scsi-affine-queue.patch (Doug Ledford)
- improve scsi_allow_ghost_devices description (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.10.EL" date="1077098400">- fix amd64 iommu bug causing data corruption on &gt;4GB systems (Jim Paradis)
- return EINVAL for unsupported ioctl32 syscalls on ppc64 (Julie DeWandel)
- remove incorrect BUG() call in __remove_inode_page() (Stephen Tweedie)
- fix s390 ctc driver problem causing build system hangs (Pete Zaitcev)
- fix s390 qeth driver error path to reset write_busy (Pete Zaitcev)
- update s390 zfcp driver to fix miscellaneous bugs (Pete Zaitcev)
- apply upstream nfs fixes for acl error handling (Steve Dickson)
- prevent kernel stack data leak via /dev/rtc (Ernie Petrides)
- allow AIO operations on sockets for non-inet (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.9.EL" date="1076925600">- restore genksyms_smp_prefix setting for non-x86 builds (Ernie Petrides)
- display/log memory stats whenever there's an OOM kill (Larry Woodman)
- update tg3 driver to v2.6, the latest upstream version (Jeff Garzik)
- update net bonding driver to v2.4.1, latest upstream (Jeff Garzik)
- fix irq, mem, printk, strtol bugs in cciss driver (Tom Coughlan)
- wait for board ready after hot add, cciss driver (Tom Coughlan)
- enable cciss adapter prefetch for x86 platforms (Tom Coughlan)
- add preserve_arg0 handling for ia32 emulation (Larry Woodman)
- fix ppc64 compat support for quota syscall (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.8.EL" date="1076580000">- remove Power-Blade-specific def for USB TEAC floppy (Julie DeWandel)
- fix s390 crash in iucv driver on connection shutdown (Pete Zaitcev)
- fix ia64 ACPI parsing for multinode IDE devs on x455 (Jim Paradis)
- fix amd64 core dumping of multithreaded 32-bit apps (Jim Paradis)
- fix s390 oprofile conditional and zero top addr bits (Will Cohen)
- add ipr driver v1.0.3 for IBM's PPC RAID adapters (Tom Coughlan)
- add {alloc,free}_netdev(), list macro, tg3 PCI ids (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.7.EL" date="1076407200">- restrict /proc/tty/driver directory access to root (Jeff Moyer)
- allow non-standard usr/sys VM splits at 2G/2G, 1G/3G (Ingo Molnar)
- extend existing ppc64 RTAS firmware flash interface (Mark DeWandel)
- fix ppc64 version of strncpy() to zero-pad buffers (Julie DeWandel)
- fix s390/x version of strncpy() to zero-pad buffers (Pete Zaitcev)
- fix generic version of strncpy() to zero-pad buffers (Jim Paradis)
- improve ppc64 segment table entry replacement logic (Julie DeWandel)
- correct type/cast of "len" in ppc64/kernel/nvram.c (Julie DeWandel)
- implement new ppc64 RTAS system call interface (Julie DeWandel)
- increase x86 RSDT table limit in ACPI parsing (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.6.EL" date="1076320800">- fix more usb-storage bugs for Power Blade support (Julie DeWandel)
- remove extra inactive_clean_pages-- in reclaim_page() (Larry Woodman)
- return proper error codes for do_munmap() failure in mremap (Dave Jones)
- fix binfmt_elf.c problems for apps with huge bss regions (Julie DeWandel)
- update cciss driver to v2.4.50 for Smart Array 6i support (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.5.EL" date="1075975200">- prevent netdump progress output from filling up log_buf (Jeff Moyer)
- add ppc64 RAS hook at end of panic() processing (Julie DeWandel)
- correct source IP address in ICMP error message (Dave Miller)
- fix smp deadlock with pdeath_signal posting (Roland McGrath)
- add ppc64 support for /proc/ppc64/lparcfg (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.4.EL" date="1075888800">- update nfsd mode-with-acls fix for upstream conformance (Steve Dickson)
- rework usb-storage locking to avoid hangs on disconnect (Pete Zaitcev)
- fix mmio alignment error in olympic token ring driver (Julie DeWandel)
- prevent tux logger-thread shutdown problems on ppc64 (Ingo Molnar)
- add ppc64 AltiVec chip support for Power Blades (Julie DeWandel)
- eliminate multi-threaded coredump hang potential (Ingo Molnar)
- fix ppc64 segfaults with tasks &gt; 2GB in size (Julie DeWandel)
- fix usb-storage memory-allocation/iowait deadlock (Alan Cox)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.3.EL" date="1075716000">- add amd64 support for PT_GNU_STACK with exec shield (Jim Paradis)
- fix s390 raid1 sync problem w/writes at end of dev (Pete Zaitcev)
- update s390 zcrypt driver to version 1.1.4 (Pete Zaitcev)
- fix output of large /proc/pid/statm values (Mark DeWandel)
- fix output of large /proc/partitions values (Mark DeWandel)
- enable ppc64 support for JS20 Power Blades (Julie DeWandel)
- fix kernel stack memory leak on fork failures (Dave Anderson)
- fix ipv6 packet quoting problem in icmpv6_send() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.2.EL" date="1075370400">- apply Intel's x86 microcode loader update (Jim Paradis)
- enhance PCI multifunction support for ppc64 (Julie DeWandel)
- fix nfsd returning bad mode bits when acls set (Steve Dickson)
- prevent unkillable zombies from detached NPTL threads (Ingo Molnar)
- avoid missing scsi disks in /proc/partitions on detach (Jason Baron)
- correct pte calculation inside zeromap_pte_range() loop (Ben Woodard)
- add inline function PDE() to help driver backporting (Matthew Galgoci)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.1.EL" date="1074679200">- (this is the first build for RHEL 3 Update 2)
- relocate various pieces of the "undo" patch (Patch Review Committee)
- rename s390 zcrypt and zfcp driver patches (Pete Zaitcev)
- add LKML discussion to COPYING.modules (Arjan van de Ven)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.EL" date="1073556000">- fix race condition between thread creation and signals (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-8.EL" date="1073469600">- fix amd64 eflags masking in 32-bit emulation of ptrace (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-7.EL" date="1073383200">- fix numerous ppc64 problems with /proc access (Julie DeWandel)
- allow user core files larger than 2GB in size (Dave Anderson)
- add ia64 support for Crestone Peak AGP bridges (John Dennis)
- fix unaligned kernel accesses in nfs_readdir() (Steve Dickson)
- add new_len/new_addr checks in do_mremap() (Ernie Petrides)
- fix nfs O_DIRECT corruption with &gt;4GB files (Steve Dickson)
- enable bus scan for AGP ctlrs on amd64 systems (John Dennis)
- limit PCI-alloc'ed physaddrs to 4GB on HP ia64 (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-6.EL" date="1070877600">- fix ppc64 firmware updates (Julie DeWandel)
- fix sync wakeup problem (Ingo Molnar)
- add ia64 cyclone support (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-5.EL" date="1070272800">- undo rejected patches (Stephen Tweedie, Arjan van de Ven, Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.20.EL" date="1069840800">- enable NUMA support in amd64 smp configs (Jim Paradis)
- prevent oopses with tux in OOM scenarios (Ingo Molnar)
- apply several ipv6 multicast bug fixes (Dave Miller)
- assign retval in copy_process() error path (Ingo Molnar)
- add lseek-in-/proc support for s390x "ps" (Pete Zaitcev)
- redefine zone_is_highmem() for Celestica (Dave Anderson)
- fix unresolved symbols in amd64 modules (Bill Nottingham)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.19.EL" date="1069754400">- fix tg3 rx_pending limit for BCM5705/BCM5782 chips (Jeff Garzik)
- reset page error flag prior to read of new contents (Jeff Moyer)
- enable CONFIG_HOTPLUG_PCI option for ia64 configs (Doug Ledford)
- fix inactive laundry list race in ramfs_writepage() (Dave Anderson)
- avoid out_of_memory() for wired pages when there's lomem (Dave Anderson)
- conditionalize ppc64 machdep_calls change for KMI compat (Ernie Petrides)
- limit anon/cache pages scanned in refill_inactive_zone() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.18.EL" date="1069668000">- create old version (rev. 5.64) of cmpci sound driver (Tom Coughlan)
- remove ac97.o, ad1848.o, cs4232.o from unsupported (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.17.EL" date="1069063200">- fix missing use of __GFP_HIGHMEM flag in pte_alloc_one() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.16.EL" date="1068890400">- rework scsi mid-layer queuing logic to fix error handling (Doug Ledford)
- fix pci_dma_sync_sg() scatterlist arg in megaraid2 driver (Tom Coughlan)
- move more-ptes-in-rmap-pte-chain logic to its own patch (Ernie Petrides)
- tag uses of __GENKSYMS__ with KMI/ABI compat comment (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.15.EL" date="1068804000">- fix MD multipath bugs causing crashes during fail-overs (Doug Ledford)
- add chain_ptep_t and revert pte_addr_t for KMI compat (Ernie Petrides)
- restore sub-timer-tick time-of-day granularity for ia64 (Jason Baron)
- modify agpgart and drm drivers for ia64 HP ZX1 support (John Dennis)
- fix ia64 32-bit emulation for several stat-related calls (Jason Baron)
- enable amd64 use of new ips driver w/config separation (Tom Coughlan)
- update e100 network driver to version 2.3.30-k1 (Jeff Garzik)
- update e1000 network driver to version 5.2.20-k1 (Jeff Garzik)
- apply scsi whitelist updates for IBM/CNSi/NEC devices (Tom Coughlan)
- reenable varyio for aic7xxx driver (hangs were unrelated) (Jeff Moyer)
- conditionalize NVIDIA_NFORCE3 to restore KMI compat (Ernie Petrides)
- prevent two ext3 panics on corrupted filesystems (Stephen Tweedie)
- apply two minor fixes to ppc64 RAS nvram reading (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.14.EL" date="1068717600">- update ServeRAID (ips) driver to version 6.10.52 (Tom Coughlan)
- configure xmon on by default in ppc64 configs (Julie DeWandel)
- create initial s390 zcrypt driver, version 1.1.2 (Pete Zaitcev)
- remove zfcp driver from linux-modules-unsupported (Pete Zaitcev)
- revise ppc64 reliability/serviceability support (Julie DeWandel)
- reduce kernel stack usage inside nfs_readdir() (Steve Dickson)
- add gameport dependency to cmpci driver config (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.13.EL" date="1068631200">- reduce UDP retransmissions and fix slow reads for NFS (Steve Dickson)
- implement wired page lists for better ramfs handling (Larry Woodman)
- fix vfork deadlock when child process causes core dump (Ingo Molnar)
- enhance AltSysRq-M output and fix deadlock potential (Larry Woodman)
- update cmpci sound driver for some HP IPF workstations (Tom Coughlan)
- correct tq_struct struct initialization in tg3 driver (Jeff Garzik)
- fix NFS file attribute inconsistency after rename (Steve Dickson)
- prevent ia64 machine checks w/sysreport on Olympia (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.12.EL" date="1068544800">- redesign refill_inactive_zone() for smarter deactivation (Larry Woodman)
- improve page deactivation scalability w/delayed laundering (Larry Woodman)
- rework locking and timer usage in s390 ctc network driver (Pete Zaitcev)
- allow xmon to be enabled at boot-time for ppc64 debugging (Julie DeWandel)
- reverse kscand's order of anon/cache active list traversal (Larry Woodman)
- force in-lining of br_read/write_lock/unlock routines (Julie DeWandel)
- fix mistaken fall-through cases in s390 chandev driver (Pete Zaitcev)
- make a few exported symbols available to OpenGFS (Stephen Tweedie)
- fix ld/st ordering bug causing lost signal wakeups (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.11.EL" date="1068112800">- make profile=X imply nmi_watchdog=1 and fix NMI w/d bugs (Ernie Petrides)
- add lock init in scsi_get_host_dev() to fix shutdown hang (Doug Ledford)
- enable distributed interrupts by default on ppc64 iSeries (Julie DeWandel)
- improve amd64 reporting of machine check errors (Jim Paradis)
- fix disabling of autonegotiation in tg3 driver (Dave Miller)
- add image name to s390 ioctl32 debug message (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.10.EL" date="1068026400">- fix file lock ownership by NPTL threads to be process-wide (Ernie Petrides)
- upgrade megaraid driver to version 1.18k and fix isr/fw sync (Tom Coughlan)
- upgrade megaraid2 driver to version 2.00.9 and enable varyio (Tom Coughlan)
- improve scsi mlqueue handling to enable BUSY/QUEUE_FULL fix (Doug Ledford)
- correct reporting of i/o errors in ppc64 viodasd driver (Julie DeWandel)
- update acenic driver to handle enabling of jumbo frame mode (Jeff Moyer)
- fix i386 PAGE_NONE bits to prevent get_user_page() hang (Roland McGrath)
- fix ia64 show_mem() handler to use efi_memmap_walk() call (Dave Anderson)
- replace spaces in slabinfo entry name for async poll table (Matt Wilson)
- fix race condition in buffer-head memory footprint patch (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.9.EL" date="1067940000">- improve spec file robustness in %post/%preun stanzas (Florian La Roche)
- add s390x iovec length checking for 32-bit reads/writes (Matt Wilson)
- use highmem for pte/ramfs page allocation w/__GFP_WIRED (Larry Woodman)
- upgrade oprofile support with bug fixes and enhancements (Will Cohen)
- fix infinite recursion in SCSI mid-layer post-processing (Jeff Moyer)
- introduce no-auto-start-on-add handling for SCSI blacklist (Jeff Moyer)
- enable s390 support for blk stats handling for iostat -x (Pete Zaitcev)
- fix LVS timer-related hang from ip_vs_conn_expire() bug (Ernie Petrides)
- correct module init in cpqarray driver to fix insmod crash (Tom Coughlan)
- incorporate ESB PATA support and fix a pirq_routers PCI id (Jeff Garzik)
- fix nfs async write deadlock potential w/nfs_writepage() (Steve Dickson)
- fix SCSI error handling for BUSY queue status messages (Doug Ledford)
- improve ppc64 32-bit ioctl support for use by ethtool (Julie DeWandel)
- add missing unlock in ip_mc_del_src() to fix IGMP deadlock (Dave Miller)
- change ppc64 reporting of floppy capacity to be 1.44 MB (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.8.EL" date="1067421600">- fix up various problems on Nforce3-based amd64 systems (Jim Paradis)
- double number of pte addrs in rmap pte_chain structs (Larry Woodman)
- restrict slab size for kernel data structs to 2 pages (Larry Woodman)
- clean up obsolete quicklist usage for ppc64 pte pages [rejected]
- prevent readdirplus from returning hidden mount points (Steve Dickson)
- prevent lockd deadlocks caused by export table locking (Steve Dickson)
- eliminate use of parallel task_struct init macro on ia64 [rejected]
- fix broken s390x overflow checks with 32-bit F_GETLK use (Matt Wilson)
- fix SCSI errors with "mt stoptions" and IDE tape drives (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.7.EL" date="1067162400">- fix bad checksumming interaction between e100 and bridge (Jeff Garzik)
- prevent system hang by OOM killing when overcommitted (Larry Woodman)
- un-inline ext3 error function to reduce stack usage (Stephen Tweedie)
- fix several ppc64 problems with interrupt handling (Julie DeWandel)
- correct amd64 identification in /dev/oprofile/cpu_type (Jim Paradis)
- move fput() call in do_tty_hangup() to avoid oops w/kon (Alexander Viro)
- eliminate creation of never-used task_struct slab cache (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.6.EL" date="1066903200">- reduce buffer-head memory footprint from read-only files (Ingo Molnar)
- update qeth driver for reduced stack usage and bug fixes (Pete Zaitcev)
- fix s390 qeth driver again to allow tcpdump to function (Pete Zaitcev)
- add exec_mmap() locking to prevent vma lookup races (Ernie Petrides)
- rework RPC slot allocation for further NFS improvements (Steve Dickson)
- reduce frequency of RPC retransmits during NFS writes (Steve Dickson)
- make generic/ext3 file system write handling 64-bit clean (Jeff Moyer)
- allow SMP scheduling rebalancing to occur every 200 msecs (Ingo Molnar)
- prevent races during IPC semaphore set and msg queue removal (Ingo Molnar)
- fix ACPI handling to identify trigger/polarity of PCI IRQs (Jim Paradis)
- correct amd64/ia64 acpi_disabled decls for post-boot access (Jeff Moyer)
- update ppc64 viocons driver with several bug fixes (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.5.EL" date="1066298400">- move fix for PPR use in sym53c8xx driver to its own patch (Ernie Petrides)
- correct pids exported by msgctl/semctl/shmctl/fcntl calls (Ulrich Drepper)
- apply s390 lcs driver wait queue init and locking updates (Pete Zaitcev)
- enable dummy network driver use in generic s390 config file (Pete Zaitcev)
- add missing ptrace hooks for exec and vfork-done events (Bill Nottingham)
- fix SMP timer race that triggered BUG_ON() in add_timer() (Ingo Molnar)
- fix several bogus ipvs boundary checks in ftp module [rejected]
- fix vfsmount queuing in attach_mnt() for CLONE_NEWNS [rejected]
- add net_device check to prevent oops in pppoe driver [rejected]
- fix memory leak in symlink error path of /proc driver [rejected]
- fix overflow in v1_disk2mem_dqblk() quota calculation [rejected]
- increase ppc64 ramdisk size to 8192k in p/iSeries configs (Jeremy Katz)
- lower amd64 TASK_UNMAPPED_32 to increase avail address space (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.4.EL" date="1066039200">- fix ppc64 stack pointer alignment in user signal handlers (Jakub Jelinek)
- increase amd64 exception stack size to 4k to avoid overflow (Jim Paradis)
- fix ppc64 interrupt rate accounting for vmstat and /proc (Julie DeWandel)
- extend amd64 NMI watchdog timeouts to tolerate bad 2nd cpu (Jim Paradis)
- allow s390 dasd driver to use noop elevator module (Pete Zaitcev)
- add free_irq() in error path of olympic token ring driver (Matt Wilson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.3.EL" date="1065866400">- make pid fields in ucred structures hold tgid values (Ulrich Drepper)
- prevent ppc64 iSeries virtual console writes &gt; 4k (Julie DeWandel)
- control ia64 unaligned access messages with new sysctl (Jeff Moyer)
- correct SCSI data direction on cmd to spin up disks (Pete Zaitcev)
- add do_brk() TASK_SIZE and address space wrap checks (Arjan van de Ven)
- limit PPR use in sym53c8xx driver for ppc64 Zapata drives (Doug Ledford)
- list ac97.o, ad1848.o, and cs4232.o modules as unsupported (Jeff Moyer)
- clean up conditional compilation in s390 zfcp driver (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.2.EL" date="1065693600">- identify whether i686 or athlon config in oops output (Arjan van de Ven)
- remove warning in reclaim_page() unmapped page path (Ernie Petrides)
- fix several lvm error handling paths causing memory leaks [rejected]
- correct i386 smp shutdown logic when netdump is enabled (Jeff Moyer)
- fix amd64 potential data leaks on FPU save/restore errors (Jim Paradis)
- prevent aic7xxx chip resets leading to PCI parity errors (Tom Coughlan)
- remove ia64 user tty warning on unaligned accesses (Arjan van de Ven)
- fix ppc64 /proc file buf overruns in viodasd driver (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.1.EL" date="1065607200">- (this is the first build for RHEL 3 Update 1)
- avoid m/ctime update for pipe writes on r/o file systems (Stephen Tweedie)
- prevent theoretical ext3 fs corruption in ext3_read_inode (Stephen Tweedie)
- enable AGRESSIVE_IDLE_STEAL to improve scheduler balancing (Ingo Molnar)
- fix potential ppc64 lock-up on ioctl32 un/reregistering (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.EL" date="1065175200">- extend ppc64 scsi timeout values for Zapata DVD-ROM drives (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-3.EL" date="1063965600">- make sure to release viotape op structure after use (Julie DeWandel)
- disable pgd/pmd quicklists on ppc64 (Mark DeWandel)
- temporarily disable aio on sockets (Jeff Moyer)
- correctly refile inodes to make them reclaimable (Harald Hoyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-2.EL" date="1063792800">- S390: update zfcp and cio drivers (Pete Zaitcev)
- IA64: add extra check to virtual mem_map (Larry Woodman, Dave Anderson)
- initialise local variables in ide-tape &amp; ide-scsi
- cap qla2200 tcq depth to 255
- switch version number scheme to kernel-2.4.21-N.EL</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063706400">- PPC64: invalidate evicted sbl entries in the erat (Julie DeWandel)
- increase ethernet tx_queue_len to 1000 (David Miller)
- in udp_{v6_}flush_pending_frames, reset up-&gt;len too (David Miller)
- S390: CMS reserved minidisk detection (Pete Zaitcev)
- call recount_segments() on a different occasion (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063620000">- really disable exec-shield (Roland McGrath)
- reduce stack randomisation, disable brk randomisation (Ingo Molnar)
- make e1000 driver 64 bit clean (Julie DeWandel)
- minor aio corner case error condition fix (Jeff Moyer)
- AMD64: more lenient check for call workaround (Ernie Petrides)
- PPC64: disable CONFIG_XMON (Mark DeWandel)
- S390: fix CCW slab selection (Pete Zaitcev)
- fix two-disk combined mode sata (Jeff Garzik)
- move buslogic scsi driver to supported, for vmware only (Tom Coughlan)
- change viocons message from KERN_WARNING to KERN_INFO (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063360800">- VM: handle race condition in reclaim_page (Stephen Tweedie, Larry Woodman)
- PPC64: fix "log_buffer broken" xmon issue (Julie DeWandel)
- fix compiler warnings in netdump (Jeff Moyer)
- AMD64: workaround for 32 bit compat mode page fault problem (Ernie Petrides)
- IA64: make perfmon root-only (Jason Baron)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063274400">- fix smp race in rebalance_laundry_zone()</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063188000">- fix compiler warnings when hugetlbfs is disabled (Pete Zaitcev)
- fix tux performance bug (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063101600">- don't evict kernel stack seg translation on ppc64 (Julie DeWandel)
- fix callers of do_page_fault on ppc64 (Mark DeWandel)
- AMD64 munmap return value, fix lsb failure (Jeff Moyer)
- fix for PPC64 32-bit ioctl (Jim Paradis)
- bring IA64 value of MINSIGSTKSZ in line with upstream (Jakub Jelinek)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063015200">- fix potential datacorruptor in viodasd driver (Julie DeWandel)
- fix race condition in s390 dirty bit handling (Pete Zaitcev)
- limit per-cpu slab cache size
- correct 32-bit readv/writev border cases on ppc64 (Matt Wilson)
- AMD Golem IO-APIC fixup for i686 kernel on AMD64 (Jeremy Katz)
- NFS Solaris 8 acl fix (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062756000">- minor nfs permissions bugfix (Steve Dickson)
- change mprotect return value to SuS mandated value (Arjan van de Ven)
- kernel-unsupported now provides kernel-modules (Jeremy Katz)
- correct __hugemem__modules typos in rhkernel.h
- fix subtle pmd corruption error (Larry Woodman, Dave Anderson)
- fix cut'n'paste error in SATA io port reservation
- restore NFSEXP_CROSSMNT ABI compatibility (Steve Dickson)
- round up executable name field length in core file (Jakub Jelinek)
- switch off exception_trace on amd64 (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062496800">- patch to access odd last sector on ia64 (Jason Baron)
- misc fixes from upstream (Arjan van de Ven)
- fix audigy driver (Jeff Garzik)
- tunable dcache reclaim priority for tux (Ingo Molnar)
- tg3 driver update (Jeff Garzik)
- ipv6 and icmp network bugfixes (David Miller)
- fix ppc64 memory access security bug (Julie DeWandel)
- reduce memory allocated for skb (Ingo Molnar)
- small smp fix for scalable timers (Ingo Molnar)
- make s390 recognise MSDOS partitions (Pete Zaitcev)
- small smp fixes in tux (Ingo Molnar)
- make mptfusion drivers supported on 4/4 split kernel (Tom Coughlan)
- add entries to scsi whitelist (Tom Coughlan)
- minor sata/ata driver updates (Jeff Garzik)
- small fixes to viodasd driver (Julie DeWandel)
- nfs_get_root and nfs access bit patches (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062064800">- don't show interrupts in /proc/stat for ppc64 (Matt Wilson)
- make sure sync returns in a reasonable time
- PPC64: fix for boot cpu not being cpu 0 (Julie DeWandel)
- zero sized write no longer updates mtime (Matt Wilson)
- fix video bios read corruption on ia64 (Larry Woodman)
- network fixes to tg3, bonding (Jeff Garzik)
- properly reserve legacy IDE regions in sata driver (Jeff Garzik)
- fix ppc64 signal handling bugs (Mark DeWandel)
- tux fixes (Ingo Molnar)
- tgkill syscall for s390(x) (Pete Zaitcev)
- amd64 32 bit compatibility fixes (Jim Paradis)
- ppc64 32 bit compatibility fixes (Julie DeWandel)
- fix 4G/4G follow_page problem (Ingo Molnar)
- reduce memory used by VMAs and dentries (Arjan van de Ven)
- make LVM snapshotting of ext3 work reliably (Stephen Tweedie)
- make netdump play better with the nmi watchdog (Jeff Moyer)
- QLA2200: disable irq mitigation, fix off-by-one (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061805600">- seq_file /proc/interrupts for x86 too (Ingo Molnar)
- fix memory leak in ia64 exec of ia32 binaries
- check tgid not pid in scm_check_creds()  (David Miller)
- VM fixes: shm swap priority, zeromap_page_range
- workaround VFS limitations for VXFS NFS export</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061546400">- use personality for 3GB userspace on x86 -hugemem (Ingo Molnar)
- add sysctl interface for lockd (Steve Dickson)
- don't prod VGA space on HP Pinnacle systems (Larry Woodman)
- fix for 32 bit binaries on amd64 (Jim Paradis)
- add preemption point to write_some_buffers (Julie DeWandel)
- sort ACPI table to get correct device ordering on HP (Larry Woodman)
- fix refcounting bug with ipv6 addresses on netdevs (David Miller)
- add s390 syscalls for tux (Pete Zaitcev)
- md multipath enablers (Doug Ledford)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061460000">- fix process and nice time accounting (Doug Ledford)
- amd64: syscall table updates, timer robustness (Jim Paradis)
- amd64 3GB personality for 32-bit processes (Jim Paradis)
- use 256MB pagesize for hugetlbfs on ia64 (Larry Woodman)
- make sure e100 only claims ipv4 checksumming
- igmpv3/mldv2 OOPS'er fix (David Miller)
- hugetlbfs: make chown work and allow uid=X,gid=Y mount options
- make larger mmap windows work (Ernie Petrides, Ingo Molnar)
- ia64: improve ia32 compatibility (Larry Woodman)
- fix bug in rpc retry code (Steve Dickson)
- make acpi pci hotplug modulable (Jeff Moyer)
- update (trivial) to megaraid 1.18j (Tom Coughlan) 
- enable varyio on mptfusion (Tom Coughlan)
- panic on oops to prevent data corruption opportunities (Ernie Petrides)
- small iorl locking fix (Doug Ledford)
- fix ppc64 get_wchan() bad deref (Mark DeWandel)
- fix aio read into mmap()d PROT_WRITE (Jeff Moyer, Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061373600">- libata update (Jeff Garzik)
- amd64 syscalls for xattrs &amp; ACLs (Jim Paradis)
- tux fixes (Julie DeWandel, Ingo Molnar)
- via &amp; i810 audio fixes (Jeff Garzik)
- small 4G/4G split bugfixes (Ingo Molnar)
- fix sigsuspend race on x86, amd64, ia64 (Mark DeWandel)
- ia32 behavior for FP denormal exceptions on ia64 (Jason Baron)
- get the set/get of NAT bits for ia64 correct (Jason Baron)
- ipsec update, adds cast6 encryption (David Miller)
- VM update: OOM bugfix &amp; page-&gt;flags atomic updates (Rik van Riel)
- reenable serpent encryption on ppc64
- bladecenter usb-ohci support (Pete Zaitcev)
- iorl fixes (Doug Ledford)
- network bonding driver oops fix (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060768800">- DAC960 back to bigmem supported, ne2k-pci &amp; usb audio to bigmem unsupported
- netdump updates for tg3 and e1000 (Jeff Moyer)
- put a hole between stack and mmap area (Ernie Petrides)
- process time accounting updates (Doug Ledford)
- fix null characters in TUX header (Julie DeWandel, Ingo Molnar)
- display correct executable when running interpreted script
- zfcp zSeries fibrechannel driver (Pete Zaitcev)
- ipsec updates (David Miller)
- fix 4G/4G race conditions (Ingo Molnar)
- rename -bigmem kernel to -hugemem to reflect changed tradeoffs
- optionally show task states from hangcheck timer (Jason Baron)
- various small bugfixes from upstream</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060423200">- fix scalable timer race condition  (Julie DeWandel, Ingo Molnar)
- print warning on boot with &gt;16GB RAM on -smp kernel (Arjan van de Ven)
- fix for xapic issue with ServerWorks chipsets (Ernie Petrides)
- remove spurious ioctl printk on ppc64 (Mark DeWandel)
- ppc64 wchan improvement (Mark DeWandel)
- hint @pause changes for ia64
- longer scsi scan timeout on ppc64 (Julie DeWandel)
- readv/writev for raw IO (Stephen Tweedie)
- fix for easy stack/mmap collisions (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060164000">- various XAPIC related fixes (Ingo Molnar)
- correct context switch and iowait stats with HT shared runqueues
- ext3 obscure deadlock fixes (Stephen Tweedie)
- knfsd fixes: blocked lock, symlink error &amp; missing bkl  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060077600">- de_thread bugfix from 2.6 upstream  (Matt Wilson)
- viocons driver update (Julie DeWandel)
- fix VM non-overcommit mode (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059991200">- plug data leak in aio code (Jeff Moyer)
- initial list of 4G/4G unsupported modules (Tom Coughlan)
- nfs softirq race fix (Steve Dickson)
- updated IPSEC patch (David Miller)
- networking updates/fixes from 2.4.22-preX (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059904800">- drop orlov allocator for now (Arjan van de Ven)
- correct HT cpu pair detection (Arjan van de Ven)
- build zImage.partial for netbooting on pSeries (Matt Wilson)
- fix missing symbols</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059818400">- export two AIO symbols for OCFS
- disable CONFIG_DEBUG_SLAB so performance testing can start
- crosshost mmap hooks for distributed filesystems (Stephen Tweedie)
- include partially linked zImage for pSeries netboot (Matt Wilson)
- nfs highmem fix, unmap when xdr_kmap() fails (Steve Dickson)
- update megaraid2 locking to work with IORL (Com Coughlan)
- make sure to build the qla2100 driver (Tom Coughlan)
- fix cdrom ioctl 32 bit compatibility for ppc64, amd64 (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059645600">- run depmod on install of unsupported modules (Arjan van de Ven)
- fix register corruption in IA64 lazy fpu handling (Larry Woodman)
- add b44 network driver (Jeff Garzik)
- make ppc64 pci interface routines compatible (Julie DeWandel)
- allow 32 bit userland on AMD64 and PPC64 to use volumes &gt; 2GB (Jeff Moyer)
- nfsd: acl related mount and export flags (Steve Dickson)
- fix nfs exp_fodrop oops (Steve Dickson)
- fix missed signal wakeups on ppc64 (Mark DeWandel)
- smp scalable timer bugfixes (Ingo Molnar)
- workaround for a prefetch bug in some Athlon CPUs (Ernie Petrides)
- code to make more modules unsupported for 4/4 split (Arjan van de Ven)
- various spec file and config cleanups
- viopath driver fix (Julie DeWandel)
- add match for 440gx chipset bioses (Arjan van de Ven)
- move epic100 and ne2k-pci back to supported (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059472800">- updated finegrained process accounting patch (Doug Ledford)
- make iSeries compile without CONFIG_ICOM (Julie DeWandel)
- nfsd: only set -&gt;reuse for tcp sockets, not udp  (Steve Dickson)
- enable the 4G/4G split on the i686-bigmem kernel only
- sysrq support for viocons (Julie DeWandel)
- limit pci_bus size changes to ppc64 (Jeff Garzik)
- fix for signal delivery race (Ernie Petrides, Mark DeWandel)
- add ShdPnd to /proc (Ingo Molnar)
- fix de_thread() hang (Ingo Molnar)
- add kernel support for CLONE_STOPPED (Ernie Petrides)
- make sure to initialise HVC console (Julie DeWandel)
- fix _SEG abort hit in ACPI code (Larry Woodman)
- build addon drivers on amd64 and ppc64 too (Tom Coughlan)
- build IPS driver on all architectures (Tom Coughlan)
- fix a few ia32 emulation bugs for IA64 (Larry Woodman)
- enable correct/new __clear_bit macro for IA64 (Larry Woodman)
- flexible mmap allows mappings of huge executable segments (Larry Woodman)
- sysrq-w for s390 (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058436000">- have s390 cpu_relax() also include barrier  (Pete Zaitcev)
- convert ppc64 xmon traceback code to ksymoops (Matt Wilson)
- rename kstat_sum() variable with aliasing problems  (Ingo Molnar)
- fix AIO-on-hugetlbfs crash (Ingo Molnar)
- update support for IA64 Long's Peak ACPI serial ports  (Larry Woodman)
- turn on xmon for both iSeries and pSeries (Matt Wilson)
- bugfix to make CLI work correctly on iSeries (Julie DeWandel)
- SATA bugfixes (Jeff Garzik)
- enable 4G/4G split in -BOOT kernel, due to syslinux trouble</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058349600">- fix s390 compile (Pete Zaitcev)
- taint the kernel on sii6512 driver link, GPL but no source available
- handle debug registers with 4G/4G split (Ingo Molnar)
- tgkill syscall for ppc64 (Julie DeWandel)
- fix NFSD/ACL/ext3/jbd deadlock (Stephen Tweedie, Steve Dickson)
- fix maxcpus=1 installation panic fix for ppc64 (Julie DeWandel)
- IDE byteswapping io functions for ppc64 (Julie DeWandel)
- update sata driver (Jeff Garzik)
- raise the number of /proc entries (Julie DeWandel)
- sticky sysrq key with timeout (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058263200">- make SysRq-W useable on s390 (Pete Zaitcev)
- updated process accounting patch (Doug Ledford)
- siginfo_t fixes for s390x and amd64 (Jakub Jelinek)
- clustered NFS fail-over support (Steve Dickson)
- autofs4 updates and fixes
- ia64 patches to reduce cpu power/temp in idle loop (Larry Woodman)
- add irqsafe up() for LVM locking (Stephen Tweedie)
- O_DIRECT fallback to synchronous allocation in holes (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058176800">- ia64 HP iommu: add sx1000 detection
- possible bug in s390x 32-bit emulation  (Roland McGrath)
- updated ipsec patch, should fix all current ipv6 bugs  (David Miller)
- finegrained process accounting (Doug Ledford)
- ICH5 pci irq routing, and associated ids (Jeff Garzik)
- fix the machine_real_restart() reboot path on 4G/4G (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057917600">- fix amd64 agp-gart code to work around hugetlbfs debug code (Jim Paradis)
- fix ppc32 pthread_cancel (Jakub Jelinek) 
- Do not sent IGMP leave messages unless IFF_UP  (David Miller)
- software iommu for ia64 systems without hardware iommu (Jason Baron)
- fix ext3 oops fix during dio, LTP failure (Arjan van de Ven, Stephen Tweedie)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057831200">- Remove illegal calls to dst_link_failure</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057831200">- enable HT scheduler for bigmem kernel
- add tgkill syscall for x86 and ia64
- make -BOOT kernel smaller w/ modular md and CONFIG_SMALL
- rmap VM updates
- 4G/4G agpgart potential corruption fix (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057744800">- switch off exec shield everywhere
- eliminate hostfs for amd64 (Jim Paradis)
- megaraid update, mostly vendor ID (Tom Coughlan)
- shrink boot kernel by disabling some config options
- additions for the SCSI whitelist (Tom Coughlan)
- ia64 extable fix (Jason Baron)
- viocons driver upgrade (Julie DeWandel)
- another ia64 mmu context wraparound deadlock fix (Larry Woodman)
- iSeries icom debugger patch (Julie DeWandel)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057658400">- Drop io_request_lock in usb scsiglue.c:device_reset</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057658400">- fix cpu_relax for amd64 and ia64 to include a barrier (Ingo Molnar)
- restore o_direct api compatibility (Stephen Tweedie)
- fix possible ext3 deadlock in o_direct patches (Stephen Tweedie)
- ACLs for JFS (Stephen Tweedie)
- fix /proc/cpuinfo runqueue printing (Ingo Molnar)
- via audio fixes, smaller emu10k1 patch (Alan Cox, Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057572000">- fix process accounting, tux ftp passwords and si_pid (Ingo Molnar)
- 32bit compat statfs fix (Guy Streeter)
- don't serialise exit on BKL when accounting is off (Ingo Molnar)
- truncate timeouts to 32 bits on 64bit systems (Ingo Molnar)
- fix network channel bonding (Jeff Garzik)
- split netdump patch into core and net-drivers (Jeff Garzik)
- delayed tlb flushing for ia64 (Larry Woodman)
- emu10k1 driver fixes
- kksymoops for AMD64 (Jim Paradis)
- select bugfixes from 2.4 upstream (Jeff Garzik)
- OOM tweaks (Rik van Riel)
- use seq_file for /proc/interrupts on ppc64 (Mark DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057140000">- add qdio and qeth drivers for s390(x)  (Phil Knirsch)
- slab cache scale bugfix (Larry Woodman)
- S390: qdio &amp; qeth drivers (Phil Knirsch)
- hangcheck timer for ppc64 (Julie DeWandel)
- fix race conditions in ia64 ia32 compat layer (Larry Woodman)
- update megaraid, aic7xxx, cciss and cpqarray drivers (Tom Coughlan)
- nfs xdr_shift_buf, tcp client corruption and alignment (Steve Dickson)
- rhconfig.h stuff for ppc64, s390 and s390x (Matt Wilson)
- AIO on sockets</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057053600">- kiobuf optimisations (Stephen Tweedie, Larry Woodman)
- ipsec update (David Miller)
- ipvs update to deal with timer changes (David Miller)
- 4G/4G split patch optimisations (Ingo Molnar)
- hangcheck timer (Jason Baron)
- recent (AGP 3.0) agpgart support (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056967200">- semtimedop() support on s390/s390x  (Ernie Petrides)
- fix a 4G bug that triggers on systems with &gt;30 CPUs (Ingo Molnar)
- updated SCSI SMP affine queueing patch  (Arjan van de Ven)
- page hash prefetch in do_generic_file_read bugfix (Julie DeWandel)
- updates the qlogic driver to the latest (Arjan van de Ven)
- slab cache SMP scalability tweaks (Ingo Molnar)
- ACPI 2.0 for IPF and AMD64 (Jim Paradis, Larry Woodman)
- statm fixes for hugetlbfs and remap_file_pages (Jason Baron)
- acpi serial port detection (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056708000">- iseries driver updates (Julie DeWandel)
- aio scalability and 2.5 backports  (Ingo Molnar)
- SMP scalable timers (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056621600">- make qlogic driver use new scsi infrastructure (Arjan van de Ven)
- export aio kvec functions
- fix statm oops
- compile fixes 
- NFS ACL over the wire protocol extensions (Steve Dickson)
- rate limit slab pruning, to limit IPI load on SMP systems (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056448800">- scsi request lock scaling (Ingo Molnar)
- cpu affinity for scsi command processing (Ingo Molnar)
- use softirqs instead of bhs for the scsi layer (Doug Ledford)
- igmpv3 fixes and improvements (David Miller)
- oprofile for ppc64 (Will Cohen)
- Increase MAX_ADDR_LEN from 8 to 32 for Infiniband over IP (Tom Coughlan)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056362400">- per-cpu kstat arrays (Ingo Molnar)
- optimise 4G/4G tlb flushing (Ingo Molnar)
- kiobuf reclaim together with buffer reclaim (Arjan van de Ven)
- more scalable gendisk statistics (Ingo Molnar)
- nfs reconnect fixes (Steve Dickson)
- add 32-bit compatibility for ustat system call on ppc64 (Julie DeWandel)
- scalable gettimeofday (Ingo Molnar)
- hugetlbfs ppc64 &amp; s390 bits (Mark DeWandel, Pete Zaitcev)
- hugetlbfs for ia64 (Jason Baron)
- qlogic scsi driver update (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056189600">- nfs patches (Steve Dickson)
- xapic improvements, summit support (Ingo Molnar)
- fix core dump name for multithreaded programs (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056103200">- merge up to marcelo's latest</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056016800">- oom killer fixes (Larry Woodman, Rik van Riel)
- tunable VM overcommit (Rik van Riel)
- hugetlbfs for amd64 (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055930400">- updated iseries virtual drivers (Julie DeWandel)
- nfs lockd improvements (Steve Dickson)
- remap_file_pages improvements (Ingo Molnar)
- /proc/efi/symtab patch for ia64 (Larry Woodman)
- disable O_PROFILE on UP x86 machines
- allow NMI watchdog profiling frequencies up to 10kHz (Ingo Molnar)
- statm (Jason Baron)
- hugetlbfs (Ingo Molnar)
- have nfsd honour ACLs on a per-export basis (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055844000">- Enable O_PROFILE on non-SMP configs (Stephen Tweedie)
- more conservative AIC config options
- Fix BOOT kernel panic while mounting /dev/cdrom (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055757600">- merge to 2.4.21 + selected ac bits
- ipsec upgrade (David Miller)
- HT scheduler patch fix (correct sibling counting)
- make bdflush writeout smoother
- AMD64 gdb fix (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055412000">- don't include unsupported drivers in -BOOT kernel
- merge up to 2.4.21-rc8 + selected ac bits
- FIXME: sysrq for 3170, dasd, odirect &amp; odirect for nfs</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com" date="1055412000">- oprofile for s390</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055239200">- statm (Jason Baron / Julie DeWandel)
- AIO 32-bit compat for 64-bit machines (Julie DeWandel)
- only do bufferhead reclaim in extreme situations (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055152800">- Serial ATA support (Jeff Garzik)
- mtp fusion 2.05.05+ (Dave Maley)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054893600">- XATTR/ACL patches, except NFS over the wire (Stephen Tweedie)
- ipsec module autoloading (David Miller)
- remap_file_pages (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054807200">- upgrade to latest -rmap with Ernie's fixes
- sysrq+C shows the stack dump of all CPUs
- ext3 truncate fix (Stephen Tweedie)
- NFS fixes for HZ=1000 machines (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054720800">- 4G/4G split fix (Ingo Molnar)
- ppc64 fixes (Guy Streeter, Rik van Riel)
- enable oprofile on amd64
- ipsec updates (David Miller)
- fork returns pid instead of task_struct* (Julie DeWandel)
- ia64 ptrace bugfixes (Dave Anderson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054634400">- HP diva serial driver (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054548000">- NFS over TCP patches (Steve Dickson)
- switch to using ppc64pseries/ppc64iseries arches instead of
  kernel-pseries and kernel-iseries (Jeremy Katz)
- egenera scsi bus rescan patch (Jeff Garzik)
- oprofile (Graydon Hoare)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054288800">- futex requeue (Ingo Molnar)
- enable NAPI for E1000
- signal latency and scheduler improvements (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054202400">- kscand oops fix (Ingo Molnar, Rik van Riel)
- pcnet32 fixes (Julie Dewandel)
- raid autorun (Pete Zaitcev)
- turn off CONFIG_SUNDANCE_MMIO (Jeff Garzik)
- flexible mmap (Larry Woodman)
- ppc64 fixes (Matt Wilson, Guy Streeter)
- loop softirq 10 times before giving up (Ingo Molnar)
- O_DIRECT for NFS (Steve Dickson)
- prevent md from shutting down active arrays (Doug Ledford)
- rmap updates, inode reclaim &amp; higher order allocations (Rik van Riel)
- network channel bonding (Jeff Garzik)</changelog><changelog author="Jim Paradis &lt;jparadis@redhat.com&gt;" date="1054116000">- Re-enable x86_64 in build
- x86_64-specific updates for exec-shield
- Bring in improved "nonx" support for x86_64 from upstream</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1054116000">- Hush s390 printks upon user SIGSEGV by default. It can be enabled back with
  a sysctl kernel.userprocess_debug.
- Enable optional 3270 console mode on s390.</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053684000">- get rid of vsyscall page (Arjan van de Ven)
- fix missing symbol copy_str_fromuser_size</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053424800">- exec-shield updates to fix hang-on-boot on some systems (Ingo Molnar)
- temporarily disabled the architectures, which got broken by exec-shield updates
- fix for LTP sigprocmask02 failure (Matt Wilson)
- ppc64 updates (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053338400">- pagecache scalability patch (Ingo Molnar)
- IPC semaphore scalability patch (Ingo Molnar)
- ppc64 updates (Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052992800">- exec-shield (Ingo Molnar)
- AMD64 ACPI updates (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052906400">- reenable O_DIRECT, O_DIRECT fixes and superbh-aio (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052820000">- vma merging (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052733600">- nmi profiler
- VM updates: rmap, dma zone isolation
- tux (Ingo Molnar)
- ext3 stall fixes (Ingo Molnar)
- e1000 fixes (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052474400">- config files overhaul (Arjan van de Ven)
- fix bug in mlock patch
- IPVS (Dave Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052388000">- import IO elevator changes from gingin
- critical VM fix
- matrox framebuffer patch for pseries (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052301600">- hammer nptl fixes (Ulrich Drepper)
- 4G/4G split (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052215200">- upgrade to 2.4.21-rc1-ac4 (minus -ac acpi and xapic changes)
- drop nfs patches since those seem to be in -ac</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052128800">- larger message buffer size + boot option (Mark DeWandel)
- AMD64: tls handling, coredump fixes (Jim Paradis)
- SMP &amp; highmem VM fixes (Ben LaHaise)
- HT+NUMA scheduler (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051956000">- ext3 orphan cleanup fix (Ernie Petrides)
- s390 affinity fixes (Pete Zaitcev)
- i386 vsyscall DSO changes (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051869600">- bugfixes and config changes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051783200">- enable semtimedop for other architectures (Ernie Petrides)
- large pci bus numbers (Julie DeWandel)
- bugfixes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051610400">- igmpv3 (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051524000">- generic 32bit compat stuff + amd64/ppc64/ipf pieces (Matt Wilson)
- clustered apic (XAPIC) support (Ingo Molnar)
- ppc64 architecture updates (Matt Wilson, Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051264800">- ppc64 fixes</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051178400">- collapse ipsec into one patch (David Miller)
- ppc64 build fix (Matt Wilson)
- improve smp scheduler fairness (Ingo Molnar)
- allow mlock for normal users, up to ulimit (Ingo Molnar)
- AMD64 port (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051092000">- clean up mechanism to pass extra CFLAGS so we don't override what's
  already there
- merge ia64 build stuff (Larry Woodman)
- merge varyio + superbh (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051005600">- merge up to 2.4.21-rc1
- IA64: virtual mem_map, acpi updates, netdump update, pte-highmem &amp; fealnx
- IA64: architecture specific patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050919200">- import davem's ipsec patch pile
- ppc64 kallsyms and dump_fpu patches (Matt Wilson)
- rmap updates (x86_64 &amp; bufferhead reclaim)
- ppc64 ptrace patch (Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050660000">- open up patch namespace 2000-5000 for network protocol changes
- renumber existing patches in that range</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050573600">- make sure to actually apply the rmap-updates patch
- iowait statistics
- ppc64 code merge (Mark &amp; Julie DeWandel)
- ppc64 build scripts (Matt Wilson)
- raise symlink recursion level to 8 (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050487200">- merge up to marcelo's latest
- pte-highmem bits for x86-64 and ppc64</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050400800">- merge up to 2.4.21-pre7-ac1
- drop semtimedop patches (now in -ac)
- drop nfs xprt_fixes, fix_softirq, d_drop and nfs-readeof (merged in -pre7)
- add !CONFIG_QUOTA compile fix for 2.4.21-pre7-ac1</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1050314400">- add LCS driver (endemic to s390)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050314400">- add rmap VM
- add kunmap_atomic debugging patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050141600">- remove dir.c part of NFS kmap_atomic patch for now
- using strlen as local variable name in nfs code kills, literally</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050055200">- merge S390(x) back in  (Pete Zaitcev)
- fix NFS kmap_atomic patch
- sched.c patch to disable interrupts in wake_forked_task  (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049968800">- AIO infrastructure  (Ben LaHaise)
- update NFS kmap_atomic patch  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049882400">- semtimedop patches  (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049796000">- I know understand linux-2.4.20-nfs-readeof.patch, so I merged it
- netdump update (Dave Anderson)
- 64 bit pci &amp; elf loader fix (Mark &amp; Julie)
- nptl whitespace patches, folded into nptl patch (Arjan van de Ven)
- rediff linux-2.4.18-smallpatches.patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049709600">- merge NFS patches by Steve Dickson (blame me for NFS kmap_atomic patch)
- split x86 syscall stuff out into separate patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049536800">- fix nptl patch, now it boots</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049450400">- port linux-2.4.20 o1-nptl.patch from gingin
- rediff a few patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049277600">- update linux-modules-unsupported (with Arjan)
- fix up the list a second time to fix module dependencies</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049191200">- copy -head into new AS3 branch
- remove i586 build
- remove 7.x compatibility (linux-2.4.9-fstat.patch)
- architecture patches get more breathing room (100 - 500)
- reserve patch numbers 1000 - 2000 for VM
- patch numbers 2000 - 5000 for bugfixes, changes and updates to
  existing drivers and filesystems
- remove inode reclaim patch (will be merged later as part of rmap)
- remove io priority scheduler (still experimental)
- remove nfs patches (linux-2.4.20-nfs-cto.patch,
  linux-2.4.20-nfs-access.patch &amp; linux-2.4.20-nfs-rdplus.patch)
- remove linux-2.4.18-gericom.patch
- update netdump from RH9 branch</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1048240800">- Added three NFS performance patches</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048240800">- add a timer for aging requests up</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048154400">- fix the sorting in the io elevator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048068000">- remerge ext3 orlov allocator and enable
- more priority io elevator infrastructure work</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1047117600">- merge ext3 orlov allocator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046772000">- go to 2.4.21-pre5-ac1
- split the rpm into a primary fileset and secondary (rare modules) fileset</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046253600">- go to 2.4.21-pre4-ac6
- drop lots of patches
- trim changelog to not have 2000, 2001 and 2002 anymore</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045476000">- downgrade pwc webcam driver one notch to the last known working version
- work around vm livelock
- make the cciss driver not enable irq's in it's irq handler</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1045130400">- fix for shared statistic &lt; 0</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045130400">- Signal fixes for LSB testsuite
- merge patch to fix init=/bin/sh
- 2.4.21-pre4-ac4 bugfixes (mostly IDE crashes)</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044784800">- merge 2.4.21-pre4-ac3 bugfixes</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1044352800">- Add ext3 fix for truncating negative i_blocks</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1044266400">- add oopsmeharder for debugging hard hangs</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044266400">- merge rmap15d
- set the sbp2 command buffer to 64 elements instead of 8</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1043834400">- merge tcp stall fix from DaveM
- merge bugfixes from 2.4.21-pre4</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1042452000">- Merge in the ACL and XATTR patches from the UL and BestBits trees.</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1042279200">- Merge in the LVM pvmove fix to current tree</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1042020000">- add AMD Golem fixup</changelog></package>
<package pkgid="95024c8c6d37eca49414bc7aacc2f17093826cef" name="kernel" arch="x86_64"><version epoch="0" ver="2.4.21" rel="37.EL.XFS"/><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1128420000">- added SGI XFS patch set</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-37.EL" date="1126087200">- fix latent sendmsg() cmsghdr32 bug exposed in -36.EL (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-36.EL" date="1125655200">- fix sync() hangs from NFS file create/delete races (Steve Dickson)
- add support for HP Smart Array E400i in cciss driver (Tom Coughlan)
- defend against cmsghdr32 changes in sendmsg() handling (Dave Miller)
- correct OpenIPMI module version strings (v35 -&gt; 35.4) (Brian Maly)
- fix intermittent build failures under lpfc subdir (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-35.EL" date="1124445600">- disable FAN processing in Emulex driver (7.3.2) (Tom Coughlan)
- update cciss disk driver to version 2.4.58.RH1 (Tom Coughlan)
- update SCSI whitelist for EMC Invista devices (Tom Coughlan)
- fix diskdump regression w/module CRC errors (Nobuhiro Tachino)
- update SCSI whitelist for IBM ULT3580 TapeLibrary (Wendy Cheng)
- fix f/w upgrade hang, dmi_table bug in IPMI (Peter Martuccelli)
- fix x86_64 machine check regression from -32.10.EL (Brian Maly)
- validate XFRM policy in IPSEC setsockopt() calls (John Linville)
- fix intr kiobuf_init() regression from -32.11.EL (Larry Woodman)
- fix pollcomplete error in cciss diskdump support (Tom Coughlan)
- enforce CAP_NET_ADMIN perms for policy creation (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-34.EL" date="1122544800">- fix O_SYNC EIO error propagation through ext3/jbd (Stephen Tweedie)
- add support for Enterprise Southbridge II (ESB2) (Geoff Gustafson)
- implement devname callback for block device drivers (Doug Ledford)
- upgrade SATA support (core, libata, and drivers) (Jeff Garzik)
- add ia64 export of (*pm_power_off)() for IPMI (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-33.EL" date="1121767200">- update 3w-9xxx driver to version 2.24.03.008RH (Tom Coughlan)
- revise reserved port avoidance added in -32.8.EL (Steve Dickson)
- update OpenIPMI driver/configs to version v35 (Peter Martuccelli)
- add handling for NEC vendor ID in megaraid2 driver (Tom Coughlan)
- update SCSI whitelist for 3PARdata/Dell/SGI devices (Tom Coughlan)
- add support for netdump over bonded interfaces (Jeff Moyer)
- implement diskdump support for cciss devices (Tom Coughlan)
- add x86_64 ACPI Power Management timer support (Jim Paradis)
- add dual-core support on x86 and x86_64 arches (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.12.EL" date="1121421600">- constrain x86_64 MSR writes based on cpu model (Larry Woodman)
- correct smbfs mounts to support 32-bit uids/guids (Peter Staubach)
- eliminate long system pauses when kscand is running (Larry Woodman)
- update Emulex driver to 7.3.1, ioctl module to 1.2.1 (Tom Coughlan)
- update QLogic driver to 7.05.00-RH1 (w/new firmware) (Tom Coughlan)
- prevent ext3 EA/ACL block sharing/deletion races (Stephen Tweedie)
- fix dpt_i2o insmod oops during adpt_info() lookup (Neil Horman)
- fix dpt_i2o timeouts during long tape commands (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.11.EL" date="1121248800">- downgrade blk_queue_bounce_limit() msg to KERN_INFO (Neil Horman)
- update cciss disk driver to version 2.4.56.RH1 (Adam Manthei)
- update mptfusion driver to version 2.06.16i.01 (Tom Coughlan)
- prevent expand_kiobuf() calls during interrupts (Larry Woodman)
- update iscsi_sfnet driver to version 3.6.2.1 (Mike Christie)
- account for system ticks in ITIMER_PROF sig delivery (Don Howard)
- correct superbh ptr arg to superbh_will_bounce() (Stephen Tweedie)
- fix ext3 symlink perms created w/i386-BOOT kernels (Stephen Tweedie)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.10.EL" date="1121076000">- prevent bogus GART errs from amd64 Northbridge handling (Brian Maly)
- get correct link status in b44 driver's open routine (John Linville)
- check for missing EM64T support for better panic msg (Ernie Petrides)
- fix ref counting bug in x86[_64] __change_page_attr() (Dave Anderson)
- fix memory leak in success path of sys_init_module() (John Linville)
- add ia64 ptrace/sigreturn RSC reg priv level validation (Jason Baron)
- prevent connection list corruption in ip_vs_conn_flush() (Neil Horman)
- limit arg/env ptrs for x86_64/ia64 32-bit-compat execs (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.9.EL" date="1119002400">- fix crashes from failed ACPI root bus additions (Jim Paradis)
- correct insufficient lock owner checks in DRM code (Don Howard)
- add missing sanity checks in Coda ioctl handling (Alexander Viro)
- fix autofs errors with ghosting and expire event races (Jeff Moyer)
- reset ppc64 signal handler correctly for SA_ONESHOT (David Howells)
- store prev user stack pointer in ppc64 signal frames (David Howells)
- fix kernel_lock deadlock between sd_open()/sd_ioctl() (Larry Woodman)
- add ht flag in /proc/cpuinfo for EM64Ts w/hyperthreading (Brian Maly)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.8.EL" date="1118743200">- update e100 network driver to version 3.4.8-k2 (John Linville)
- preserve x86_64 32-bit-compat ptrace reg changes (Roland McGrath)
- add missing x86_64 support for PTRACE_SETOPTIONS (Roland McGrath)
- avoid using reserved ports for portmapper connections (Steve Dickson)
- prevent non-canonical %rip in x86_64 ptrace reg mods (Jim Paradis)
- prevent invalid fs/gs_base in x86_64 ptrace reg mods (Ernie Petrides)
- improve ISO-9660 fs robustness against bad CD formats (Peter Staubach)
- correct __get_user_pages() ref counting w/PG_reserved (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.7.EL" date="1118224800">- fix IPV6 isRouter flag and default router list handling (John Linville)
- eliminate unexpected IO-APIC msg from x86 kernel on amd64 (Jim Paradis)
- switch to reg stack on user-mode x86_64 stk seg faults (Dave Anderson)
- fix two time-related problems in the netconsole module (Dave Anderson)
- remove microcode.o from x86 hugemem unsupported list (Ernie Petrides)
- fix x86_64 committed space accounting w/overcommit=2 (Larry Woodman)
- enforce page locking resource limit in expand_stack() (Jason Baron)
- fix SCSI command block leak w/off-line non-zero LUNs (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.6.EL" date="1117533600">- fix races between POSIX locking and file closes (Peter Staubach)
- update tg3 network driver to version 3.27RH (John Linville)
- add ia64 frame size validation in syscall handling (Jason Baron)
- prevent info leaks into JFS metadata disk blocks (Stephen Tweedie)
- fix ext2 fast-symlink/EA compatibility problem (Stephen Tweedie)
- add x86_64 32-bit-compat SO_{SND,RCV}TIMEO support (Guy Streeter)
- add piix driver PCI device ids for ICH4-L support (John Linville)
- validate "ndigis" value in addition of ROSE routes (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.5.EL" date="1117101600">- update e1000 network driver to version 6.0.54-k2 (John Linville)
- fix arp_ip_traget failover with bonding driver mode 1 (Eric Paris)
- prevent indefinite postponement under __alloc_pages() (Ernie Petrides)
- capture ia64 reg state on all cpus for OS_INIT dumps (Nobuhiro Tachino)
- add documentation listing which drivers support netconsole (Jeff Moyer)
- fail opens of removable media drives if media not present (Pete Zaitcev)
- fix x86_64 find_target() oops in 32-bit-compat ptrace() (Ernie Petrides)
- prevent info leaks into ext2 directory entry blocks (Stephen Tweedie)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.4.EL" date="1115978400">- limit concurrent OOM kills using /proc/sys/vm/oom-kill (Ernie Petrides)
- rework ppc64 wchan fix to avoid module install crashes (David Woodhouse)
- fix diskdump signature check failures w/block_order=8 (Nobuhiro Tachino)
- fix data corruption from pte_clear() races on &gt;4GB x86's (Larry Woodman)
- avoid s390,x kernel stack overflows in network ctc driver (Pete Zaitcev)
- add description of /proc/stat to file system documentation (Brian Maly)
- avoid inode races in __refile_inode() and clear_inode() (Larry Woodman)
- fix arg/env access in ELF core dumping and /proc reads (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.3.EL" date="1115200800">- remove extra chars from scsi_logging_level mod param (Ernie Petrides)
- use GFP_NOFS allocs to avoid kswapd/rpciod deadlocks (Steve Dickson)
- fix ia64 kernel thread creation to force 64-bit tasks (Jason Baron)
- fix data corruption from 4K overflow in /proc/devices (Neil Horman)
- prevent mlock() resource limit bypass w/shm locking (Ernie Petrides)
- restrict MOXA ctlr firmware updates to privileged users (Brian Maly)
- support EM64T systems with mix of cpus with/without NX (Jim Paradis)
- allow modules to use get/put_task_struct() macros (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.2.EL" date="1114164000">- fix IDE disk accounting bug from wrong ios_in_flight (Larry Woodman)
- limit IGMP traffic to active link in bond_alb_xmit() (John Linville)
- fix audit refs to permit /var unmounting on shutdown (Dave Anderson)
- prevent IP4/6 output memory leaks of dst_entry structs (Dave Miller)
- enhance support for ethtool in 3c59x network driver (John Linville)
- fix launder_page() locking to avoid kswapd deadlock (Larry Woodman)
- suppress ide-floppy I/O errors when media isn't present (Brian Maly)
- make netdump more reliable on NAPI-enabled controllers (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.1.EL" date="1113991200">- (this is the first build for RHEL 3 Update 6)
- fix oops when io_setup() is called w/unwritable addr (Jeff Moyer)
- prevent kswapd hangs under launder_page() w/no bufs (Larry Woodman)
- fix autofs memory leaks when events share wait queues (Jeff Moyer)
- change IBM veth driver to indicate link is always up (David Howells)
- fix error resets and TF reg reads in SATA AHCI driver (Jeff Garzik)
- avoid dropping &gt;200-byte frames in sk98lin driver (John Linville)
- prevent shared memory lock/unlock w/o permissions (Dave Anderson)
- remove duplicate USB ESSENTIAL_REALITY defines (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.EL" date="1113559200">- fix data corruption w/ext3 xattr on 64-bit arches (Jason Baron)
- validate LCP frame lengths in PPP async handling (Dave Miller)
- enable forcedeth net driver builds in x86 configs (Jim Paradis)
- isolate IP fragment queues among various callers (Dave Miller)
- prevent busy inodes for symlinks after unmounts (Don Howard)
- revise PCI device ids extending ICH7 support (John Linville)
- work around broken xw4300 BIOS AHCI BAR setup (John Linville)
- add protocol validation in net bluetooth driver (John Linville)
- enable software watchdog timer in s390,x configs (Jan Glauber)
- fix data corruption w/uselib() on bad ELF libs (Ernie Petrides)
- add USB tablet init delay in wacom_probe() (Kristian Høgsberg)
- prevent core dumps with non-readable ELF interps (Dave Anderson)
- add maxevents validation in epoll_wait() handling (Ernie Petrides)
- add len validation in /dev/random poolsize sysctl (Ernie Petrides)
- correct size of ia64 syscall table initialization (Jason Baron)
- correct x86_64 user-mode i/o port validation (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-31.EL" date="1110448800">- fix missing ppc64 netdump/diskdump symbols (Nobuhiro Tachino)
- prevent ia64 unwind from traversing off stack (Jason Baron)
- disable 3w-9xxx driver builds on ppc64 (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-30.EL" date="1110362400">- fix obscure oops in tty init_dev() handling (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-29.EL" date="1109844000">- incorporate urgent late-breaking SATA fixes (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-28.EL" date="1109152800">- add more USB device support to visor driver (Pete Zaitcev)
- implement clustered APIC support for x86_64 (Larry Woodman)
- constrain x86 MSR writes based on cpu model (Jason Baron)
- increase max superbh size for performance (Stephen Tweedie)
- add locking to prevent oops in md_seq_show() (Doug Ledford)
- restore missing ia64 panic_on_oops handling (Tatsuo Uchida)
- implement Ethernet PCI quirk for HP xw9300 (Jim Paradis)
- revert NFS flock() avoidance to -27.7.EL (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.17.EL" date="1108980000">- rework NFS flock() avoidance w/FS_WANT_FLOCK for GFS (Ken Preslan)
- prevent inode corruption from delete/lookup races (Wendy Cheng)
- preserve registers for ia64 16-byte atomic ops (Geoff Gustafson)
- update SCSI whitelist for LSI/HP/STK/EMC devices (Tom Coughlan)
- disable vary_io in ips driver to avoid ctlr hangs (Tom Coughlan)
- correct handling of 2-TB device partitions (Peter Martuccelli)
- update support for ia64 perfmon facility (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.16.EL" date="1108720800">- implement diskdump support for SATA piix/promise (Nobuhiro Tachino)
- correct /proc/mtrr size values on EM64T platforms (Larry Woodman)
- restore page permissions after writes from ptrace() (Don Howard)
- fix /proc parent pids from multi-threaded forks (Ernie Petrides)
- enable software watchdog timer support on s390,x (Jan Glauber)
- update tg3 network driver to version 3.22RH (John Linville)
- incorporate 3w-9xxx driver version 2.24.00.011fw (Adam Manthei)
- correct ending boundary check in filemap_sync() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.15.EL" date="1108548000">- add e100 driver PCI device ids for ICH7 support (John Linville)
- restore obsolete but ignored e100 module params (John Linville)
- implement user-mode (gdb) access to ia64 gate page (Jason Baron)
- fix x86_64 FPU IP and DP values in SIGFPE context (Larry Woodman)
- add qla2200 module parameter to use NVRAM RIO val (Tom Coughlan)
- update 3w-xxxx driver to 1.02.00.037 w/.033 backup (Adam Manthei)
- fix crashes in video Firewire (ieee1394) driver (Bastien Nocera)
- prevent info leaks into ext3 journal disk blocks (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.14.EL" date="1108461600">- enhance AIO performance over NFS w/FS_AIO_SYNC hook (Steve Dickson)
- defer e100_tx_timeout() work from interrupt context (John Linville)
- correct IPV6 DST entry release to prevent route leak (Dave Miller)
- ignore MTU updates from invalid IPV6 ndisc packets (Dave Miller)
- add relevant PCI device ids to extend ICH7 support (John Linville)
- reduce system pauses during heavy page laundering (Larry Woodman)
- fix audit logging of paths w/predicate filter usage (Neil Horman)
- enable building of unsupported fusion isense module (Adam Manthei)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.13.EL" date="1108375200">- increase dxfer size limit for ppc64 SG_IO ioctl32 (David Howells)
- eliminate tty line discipline usage/switching races (Jason Baron)
- fix autofs recognition of ghosted direct map updates (Jeff Moyer)
- fix sg driver race between cmd completion and close (Tom Coughlan)
- prevent e100 data corruption from v.3.0.27-k2 update (John Linville)
- upgrade SATA support (core, libata, new/old drivers) (John Linville)
- implement diskdump support for sym53c8xx adapter (Yuichi Nagahama)
- add USB support for Wacom Cintiq/Intuos3 tablets (Kristian Høgsberg)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.12.EL" date="1107943200">- update e100 network driver to version 3.3.6-k2 (John Linville)
- correct cpu id macro for dual-core Opteron support (Jim Paradis)
- add "numa=off" message on x86_64 OOM kills w/NUMA (Larry Woodman)
- improve user/system timer tick accounting on s390,x (Pete Zaitcev)
- prevent EAGAIN errs from interrupted TCP recv() calls (Dave Miller)
- update cciss disk driver to version v2.4.54.RH1 (Adam Manthei)
- eliminate diskdump cpu id from frozen list (Nobuhiro Tachino)
- fix user-space access bug in USB vicam ioctl (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.11.EL" date="1107424800">- incorporate Emulex driver ioctl module version 1.0.13 (Tom Coughlan)
- eliminate potential call_lock deadlock with diskdump (Tatsuo Uchida)
- fix potential kiobuf_lock deadlock in free_kiovec() (Larry Woodman)
- add L2 cache descriptor for EM64T Irwindale processor (Neil Horman)
- prevent mmap() syscalls from choosing NULL mappings (Rik van Riel)
- include bounce buffer pages in show_mem() output (Larry Woodman)
- add I2C driver support for ICH5 in i2c-i801.c (John Linville)
- correct parport_pc errors on insmod failures (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.10.EL" date="1106906400">- fix futex_wait() race condition that allowed app hang (Ingo Molnar)
- add/correct write barrier placement in timer routines (David Howells)
- add x86_64 NMI switch support to debug kernel hangs (Yuichi Nagahama)
- restore CIV/LVI offset operation in i810_audio driver (John Linville)
- update e1000 network driver to version 5.6.10.1-k2 (John Linville)
- prevent bogus BUG_ON during multi-threaded core dump (Roland McGrath)
- fix x86_64 crash in huge_page_release() w/SHM_HUGETLB (Larry Woodman)
- fix possible mem corruption from /proc/kcore access (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.9.EL" date="1106647200">- fix core dumping over NFS mounts with "intr" option (Roland McGrath)
- prevent multi-threaded app hang from sys_wait4() race (Ingo Molnar)
- restore e1000 support for Intel PCI device id 1014 (John Linville)
- add ac97 quirk entries for HP xw6000/xw6200/xw8000 (John Linville)
- update b44 network driver to upstream version 0.95 (John Linville)
- revert NFS silly-delete and rpciod-hang patches (Steve Dickson)
- fix panics while backing up LVM snapshots (Heinz Mauelshagen)
- fix oops in redirect_target() on DHCP refresh (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.8.EL" date="1105696800">- rework ia64 INIT switch stacks for clean tracebacks (Tatsuo Uchida)
- fix USB raced timeout errors and ohci_complete_add() (Pete Zaitcev)
- add O_DIRECT handling in LVM driver handling (Heinz Mauelshagen)
- downgrade wait4() SIGCHLD/SIG_IGN warning message (Ingo Molnar)
- eliminate potential VMA list races with do_brk() (Dave Anderson)
- ignore ICMP Source Quench messages in tcp_v4_err() (Dave Miller)
- prevent VMA overlap crashes in insert_vm_struct() (Jason Baron)
- move flock() avoidance from NFS up to F/S layer (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.7.EL" date="1105437600">- fix 32-compat alt-stack signal handling on x86_64 (Geoff Gustafson)
- add initialization of ppc64 EEH error buffer size (David Howells)
- make ppc64 xmon work properly with Power5 console (David Howells)
- prevent infinite sync loop from NFS ESTALE writes (Steve Dickson)
- update 8139too network driver w/recent 2.4 fixes (John Linville)
- avoid netfilter oops when ip_conntrack is unloaded (Dave Miller)
- fix potential rpciod hangs during NFS sillydelete (Steve Dickson)
- avoid "No locks available" errors w/flock() on NFS (Ken Preslan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.6.EL" date="1104919200">- fix x86 phys proc ids for non-clustered APIC systems (Geoff Gustafson)
- return EINVAL on e100/e1000 rx-mini/rx-jumbo settings (John Linville)
- fix i810_audio regression from modified ICH6 PCI ids (John Linville)
- prevent race conditions in add_wait_queue_cond() macros (Jeff Moyer)
- fix FAT32 file system corruption w/writing 8M files (Alexander Viro)
- fix derivation/presentation of PHB unit ids on ppc64 (David Howells)
- close OpenFirmware stdin device at boot on ppc64 (David Woodhouse)
- fix 32-bit-compat regression in CMSG validations (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.5.EL" date="1103796000">- add "CommitLimit" data to /proc/meminfo output (Frank Hirtz)
- allow autofs to expire mounts on ppc64 arch (Jeff Moyer)
- add 3c59x EEPROM_RESET for 3c900 Boomerang (John Linville)
- ignore PTE mapping status in page_anon() (Larry Woodman)
- fix SIOCGIFHWADDR handling for zero addr_len (Dave Miller)
- add netdump support for x86_64, ia64, ppc64 (Dave Anderson)
- correct overcommit accounting on fork failure (Frank Hirtz)
- raise default ia64/ia32e swiotlb size to 64M (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.4.EL" date="1103709600">- add network CMSG validation checks (Dave Miller)
- fix data struct leak in ip_options_get() (Dave Miller)
- fix IGMP vulnerabilities in ip[6]_mc_source() (Dave Miller)
- fix e_phnum binfmt_elf loader vulnerability (Dave Anderson)
- clean x86_64 32-bit-compat syscall numbers (Jim Paradis)
- prevent ia64 floating point reg val leakage (Jason Baron)
- add USB io_edgeport driver size check (Peter Martuccelli)
- enable softirq deferral for x86_64 arch (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.3.EL" date="1102586400">- add data/param length sanity checks in smbfs (Alexander Viro)
- prevent /proc/&lt;PID&gt;/cmdline env data disclosure (Dave Anderson)
- make tulip_stop_rxtx() wait for DMA termination (John Linville)
- fix mm_stat regression introduced in -20.13.EL (Rik van Riel)
- correct return value from vlan_dev_change_mtu() (John Linville)
- serialize datagram read w/appropriate semaphore (Dave Miller)
- fix keyboard regression introduced in -24.EL (Peter Martuccelli)
- enable mmap/mprotect PROT_EXEC for legacy apps (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-26.2.EL" date="1101722400">- fix USB problems with keyboards and ia64 oopses (Pete Zaitcev)
- add i810 PCI IDs for nforce3/CK804 audio devices (Jim Paradis)
- fix ppc64 viodasd driver dev naming/limit bugs (David Howells)
- prevent tg3 fiber link bounces w/auto-negotiation (Dave Miller)
- add ac97 quirk handling for i810_audio driver (John Linville)
- prevent incorrect OOM killing with iscsi usage (Larry Woodman)
- create kiobuf cache to reduce lowmem contention (Larry Woodman)
- fix yet another binfmt_elf loader vulnerability (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.1.EL" date="1100512800">- (this is the first build for RHEL 3 Update 5)
- implement open() recovery from NFS ESTALE errors (Neil Horman)
- clean up warnings from lpfc and lpfc_703 Makefiles (Tom Coughlan)
- fix nessus-induced kernel panic with auditing (Peter Martuccelli)
- update 3c59x driver to LK1.1.18 and fix reset bug (John Linville)
- fix ext3 O_DIRECT bug in orphan list handling (Stephen Tweedie)
- flush cached dirty pages on NFS reads w/O_DIRECT (Steve Dickson)
- allow ia64 kernel unaligned access msg suppression (Neil Horman)
- correct test for performing buffer-head reclaim (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.EL" date="1100253600">- fix binfmt_elf loader vulnerabilities (Jim Paradis, Dave Anderson)
- limit kernel data struct slabs to single-page allocs (Larry Woodman)
- update Emulex driver to 7.1.14 (backup still 7.0.3) (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-24.EL" date="1100080800">- fix several ppc64 problems with signal catching (David Woodhouse)
- fix several bugs in /proc/ppc64/lparcfg driver (David Howells)
- fix possible diskdump hangs w/megaraid2 driver (Tatsuo Uchida)
- add support for IBM EM64T-based Groucho blade (Peter Martuccelli)
- fix regression in USB BIOS-&gt;kernel hand-off support (Pete Zaitcev)
- fix regression in ia64 kernel stack unwind handling (Don Howard)
- fix regression w/agpgart support of i8xx chipsets (Larry Woodman)
- add support for BLKSSZGET ioctl in cciss driver (Tom Coughlan)
- disable iSCSI builds in ppc64 and s390* configs (Tom Coughlan)
- update Emulex driver to 7.1.13 (backup still 7.0.3) (Tom Coughlan)
- correct SCSI whitelist for Chaparral FR1422 devices (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-23.EL" date="1098957600">- prevent kswapd from getting stuck in prune_icache() (Larry Woodman)
- fix ppc64 single-stepping into signal handlers (David Woodhouse)
- fix corruption from user stack expansion races (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-22.EL" date="1098093600">- prevent add/removal races in SCSI open handling (Doug Ledford)
- fix U3 agpgart regression with Intel i8xx chipsets (Dave Jones)
- update SCSI whitelist for IBM 1722/1724 devices (Tom Coughlan)
- correct TSS descriptor limit checking for x86_64 (Jim Paradis)
- add nforce3/CK804 device support and fix ACPI bug (Jim Paradis)
- add support for "forcedeth" net driver version 0.28 (Jim Paradis)
- enable diskdump support in amd64/ia32e configs (Nobuhiro Tachino)
- restore/improve linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- add missing page_cache_release() in launder_page() (Larry Woodman)
- update Emulex driver to 7.1.11 (backup still 7.0.3) (Tom Coughlan)
- add new USB ids to support latest Wacom tablets (Kristian Høgsberg)
- remove drivers/net/tun.o from unsupported list (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-21.EL" date="1096538400">- fix potential PTE race in do_anonymous_page() (Rik van Riel)
- add "Committed_AS" data to /proc/meminfo output (Frank Hirtz)
- revise DMA zone paging thresholds for x86_64 (Larry Woodman)
- prevent /proc/scsi/scsi oops during probes (David Woodhouse)
- avoid kswapd hangs via free_more_memory() hooks (Rik van Riel)
- update megaraid2 driver to 2.10.8.2 w/2.10.6 backup (Adam Manthei)
- fix do_notify_parent() panic from ptrace death race (Roland McGrath)
- fix large core file support on 64-bit architectures (Dave Anderson)
- enable tux on ia64 and increase max tux threads to 16 (Ingo Molnar)
- fix ia64/s390,x single-stepping w/signal handlers (David Woodhouse)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.14.EL" date="1096452000">- fix hang in SCSI starvation management code (David Howells)
- update SCSI whitelist for NETAPP LUN devices (Wendy Cheng)
- fix s390 cio handling during ESS fail-overs (Pete Zaitcev)
- update Emulex driver to 7.1.8 w/7.0.3 backup (Tom Coughlan)
- update Qlogic driver to 7.01.01 w/7.00.03 backup (Tom Coughlan)
- correct unlock/free order in proc_lookupfd() (Ernie Petrides)
- use ACPI for PCI interrupt routing on ia32e (Jim Paradis)
- allow cpus to boot w/APIC IDs &gt; 8 on ia32e (Jim Paradis)
- fix pid allocation when pid_max &gt; 32768 (Ernie Petrides)
- fix regs in multi-threaded ia64 core dumps (Keiichi Mori)
- enable sym53c8xx driver for ppc64 iSeries (David Howells)
- fix ac97 depmod errors w/hugemem configs (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.13.EL" date="1096365600">- fix aic79xx_osm.h/3c59x.c changes in prior rev (Tachino/Linville)
- allow for larger nfsd block sizes on some archs (Steve Dickson)
- fix possible aacraid driver panic in aac_info() (Tom Coughlan)
- fix xdr argsize check to handle writes &gt;= 2^31 (Steve Dickson)
- update e1000 network driver to version 5.3.19-k2 (John Linville)
- apply several cciss driver fixes (to 2.4.52.RH2) (Adam Manthei)
- fix x86_64 versions of cpu capability test macros (Jim Paradis)
- fix ppc64 HPTE memory corruption race condition (Rik van Riel)
- add sys_epoll support on s390,x (Stephen Tweedie, Pete Zaitcev)
- prevent keyboard.c warnings from mouse clicks (Norm Murray)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.12.EL" date="1096279200">- improve slab cache page reaping heuristics (Larry Woodman)
- implement diskdump support for x86_64 arch (Nobuhiro Tachino)
- add ia64 INIT trigger switch support for debugging (Tatsuo Uchida)
- fix several problems in handling of AIO on pipes (Jeff Moyer)
- update fixes for LTP read02 test hangs with tmpfs (Alexander Viro)
- fix x86_64 single-stepping out of signal handlers (Jim Paradis)
- increase size of ppc64 RTAS error log buffer (David Howells)
- increase max possible kNFSD lockd cookie size (Steve Dickson)
- backport 3c59x fixes for mii-tool problems w/10Mb (John Linville)
- incorporate Cisco's iscsi_sfnet initiator driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.11.EL" date="1095933600">- implement diskdump support for megaraid2 adapter (Tatsuo Uchida)
- update ips driver to version 7.10.18 w/7.00.15 backup (Tom Coughlan)
- correct max page aging interval boundary in kscand() (Larry Woodman)
- add ppc64 support for ptrace() with PT_SINGLESTEP (David Woodhouse)
- update e100 network driver to version 3.0.27-k2 (John Linville)
- fix LTP read02 test hangs when tmpfs is in use (Alexander Viro)
- get proc_dir_entry reference in proc_lookup() (Alexander Viro)
- add exports of several AIO-related interfaces (Larry Woodman)
- reduce swapping during excessive pagecache use (Larry Woodman)
- implement statfs64() syscall on x86 for NFS use (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.10.EL" date="1095847200">- implement early USB hand-off (BIOS-&gt;kernel) support (Pete Zaitcev)
- fix stack pointer calculation in x86 show() handling (Jeff Moyer)
- prevent interference between flock/POSIX lock types (Frank Hirtz)
- update pcnet32 network driver to version 1.30c (John Linville)
- add export of block_commit_write() f/s interface (Larry Woodman)
- implement diskdump support for dpt_i2o adapter (Tatsuo Uchida)
- update mptfusion driver to version 2.05.16.02 (Adam Manthei)
- move disk_dump_notifier_list to diskdumplib.c (Nobuhiro Tachino)
- update s390 zfcp driver to revision 5.31.2.11+ (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.9.EL" date="1095674400">- fix occasional ibmvscsic driver insmod crash (David Howells)
- disable linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- prevent double slashes in symlink auditing (Peter Martuccelli)
- fix overzealous compat32 setsockopt conversions (David Woodhouse)
- backport tulip driver fixes from upstream 2.4.28 (John Linville)
- update tg3 network driver to version 3.10RH (John Linville)
- implement sysctl to force igmp protocol versions (Neil Horman)
- add diskdump performance improvement info (Nobuhiro Tachino)
- fix s390 iucv lost connections and ping hangs (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.8.EL" date="1095588000">- prevent diskdump deadlock in case of die() recursion (Tatsuo Uchida)
- add x86/x86_64 support for ptrace() w/PT_SINGLESTEP (Roland McGrath)
- fix x86/x86_64 single-stepping into signal handlers (Roland McGrath)
- increase x86 value for MAX_MP_BUSSES definition to 260 (Ingo Molnar)
- eliminate ia64 potential for scheduler runq deadlock (Larry Woodman)
- add support for /proc/sys/kernel/mem_nmi_panic sysctl (Dave Anderson)
- prevent keyboard-initiated sysrq hangs in handle_sysrq() (Jeff Moyer)
- fix intermittent netdump hangs from cpu-frozen messages (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.7.EL" date="1095415200">- fix premature OOM killing change added in prior rev (Larry Woodman)
- backport vlan driver fixes from upstream 2.4.28-rc1 (John Linville)
- add _sb_findmap symbol export in s390/s390x kernels (Pete Zaitcev)
- add ppc64 support for 32-bit sendfile64() syscall (David Howells)
- fix 32-bit IPC_INFO shmctl() syscalls for ppc64 (David Howells)
- upgrade libata/SATA support to current 2.4 bits (John Linville)
- avoid USB device resets of shared/busy interfaces (Pete Zaitcev)
- fix miscellaneous problems in ppc64 icom driver (David Howells)
- fix ip_queue_maxlen sysctl for ip[6]_queue modules (Neil Horman)
- add module parm for max entries in NFS_ACL replies (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.6.EL" date="1095156000">- prevent OOM killer from kicking in prematurely (Larry Woodman)
- avoid NMI watchdog crashes during sysrq-m usage (Wendy Cheng)
- add auditing support for ia64 clone2 syscall (Peter Martuccelli)
- correct sign of auditing error codes for ia64 (Peter Martuccelli)
- implement ia64 auditing 32-bit-disable sysctl (Peter Martuccelli)
- fix ia64 faults w/stale VHPT-generated TLB entries (Dave Anderson)
- fix invalid x86_64 checksums for multicast packets (Mike Gahagan)
- fix incorrect blocking bug inside wakeup_kswapd() (Larry Woodman)
- validate appropriate media type in DVD drives (Doug Ledford)
- reduce s390 stack usage in qeth/qdio drivers (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.5.EL" date="1094810400">- prevent scenarios that lead to hang of kswapd (Larry Woodman)
- add locking for access to /proc/bus/usb/devices (Pete Zaitcev)
- correct x86 rescheduling to handle apm=power-off (Ingo Molnar)
- fix OOM killer locking and mm referencing holes (Larry Woodman)
- pin ia64 mapping for idle proc stack during boot (Larry Woodman)
- fix warning throttle for amd64 stack overflow check (Neil Horman)
- fix content lengths when using tux gzip compression (Ingo Molnar)
- add auditing support for pread/pwrite syscalls (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.4.EL" date="1094724000">- prevent bogus data in /proc/scsi/ibmvscsi/* (David Howells)
- update tg3 network driver to version 3.9RH (John Linville)
- improve ramfs memory alloc w/scarce highmem (Larry Woodman)
- correct several values in /proc/ppc64/lparcfg (David Howells)
- allow dirty page rebalancing under mem pressure (Rik van Riel)
- prevent memory leak in scsi_build_commandblocks() (Doug Ledford)
- fix potential kswapd deadlock w/disk quota usage (Larry Woodman)
- increase MAX_IO_APICS from 8 to 32 for x86_64 arch (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.3.EL" date="1094205600">- fix various error path bugs in bcm5820 driver (John Linville)
- validate addresses used with /dev/kmem accesses (Neil Horman)
- eliminate IPSEC tunnel leaks when using IPComp (Dave Miller)
- add auditing support for utimes() syscalls (Peter Martuccelli)
- prevent netconsole freeze w/cable dis-/re-connect (Jeff Moyer)
- correct reboot_cpu validation for "reboot=s&lt;n&gt;" (Doug Ledford)
- fix mem/irq clean-up in olympic tokenring driver (Neil Horman)
- update network bonding driver to version 2.6.0 (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.2.EL" date="1094032800">- add maps/rlimits output with print-fatal-signals=2 (Ingo Molnar)
- backport ac97 sound support from upstream 2.4.27 (John Linville)
- eliminate kernel stack data leaks from USB drivers (Mark Cox)
- fix interrupt status mask in AMD PCnet32 driver (David Howells)
- fix module loading problems in ibmvscsic driver (David Howells)
- fix x86 shared runq mapping when ACPI data is bad (Bernd Schmidt)
- disable enhanced error handling on PCI-ISA bridges (David Howells)
- add memory-mapped i/o support to i810_audio driver (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.1.EL" date="1093860000">- (this is the first build for RHEL 3 Update 4)
- backport r8169 network driver changes from 2.4 (John Linville)
- update i810_audio sound driver to version 1.01 (John Linville)
- convert USB UHCI driver warning to debug message (Pete Zaitcev)
- backport 2.6 PROT_GROWSDOWN/UP mprotect() support (Jakub Jelinek)
- lower ppc64 console logging level of RTAS messages (David Howells)
- fix ppc64 handling of "smt-emabled=off" boot option (David Howells)
- correct socket sndbuf accounting w/IP_MULTICAST_LOOP (Neil Horman)
- reduce x86_64 user stack start randomization to 16K (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.EL" date="1092823200">- change TARGET_CPUS on x86_64 to include all on-line cpus (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-19.EL" date="1092304800">- fix possible races/overflows in file offset handling (Alexander Viro)
- correct logging of boot progress messages on Power5 (David Howells)
- extend ppc64 EEH support for other types of devices (David Howells)
- fix ibmveth driver to properly shut down and restart (David Howells)
- fix several races and overflows in ppc64 RTAS driver (David Howells)
- backport "acpi=noirq" support to work around Nocona hangs (Don Howard)
- conditionalize pbn_hp_diva to fix serial driver oops (Matthew Galgoci)
- add amd64 GART entry guard mappings for PCI mis-prefetch (Jim Paradis)
- upgrade SATA support again to resolve several problems (Jeff Garzik)
- qualify ia32e IRQ affinity disable with BIOS flag check (Jim Paradis)
- fix eeh_check_failure() on ppc64 to be interrupt safe (David Howells)
- correct ppc64 EEH macros to use appropriate data size (David Howells)
- fix x86/ia64 no-wait handling in smp_call_function() (Larry Woodman)
- fix "Filter target 0x203 not known ..." audit msgs (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-18.EL" date="1090404000">- prevent s390 mlock hangs with follow_page() rework (Ernie Petrides)
- fix Power5 initialization and handling of RAS IRQs (David Howells)
- fix ppc64 viocons driver deadlocks with printk() (David Howells)
- apply eh_timeout, netdump, cli fixes in diskdump (Tatsuo Uchida)
- add skip_mapped_pages tuning for page eviction (Stephen Tweedie)
- fix initrd's effect on ppc64 mem_end calculation (David Howells)
- allow HT support on ppc64 systems with single cpu (David Howells)
- backport v2.0.8 aic7xxx driver h/w support for Dell (Tom Coughlan)
- correct ppc64 device node searching in hvsi driver (David Howells)
- fix KMI compat problem w/pgprot_t in x86 NX support (Jim Paradis)
- resurrect mptfusion driver backup version 2.05.05 (Tom Coughlan)
- disable IRQ affinity setting on some ia32e systems (Jim Paradis)
- update SCSI whitelist for Dot Hill SANnet/StorEdge (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-17.EL" date="1089280800">- account for zone holes in big hash table allocator (Stephen Tweedie)
- prevent reserved stack space overflow of mmap_top (Ernie Petrides)
- fix USB crash in scan_async() with EHCI hardware (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-16.EL" date="1088848800">- enable exec-shield and add x86 NX support (Ingo Molnar, Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.19.EL" date="1088762400">- add owner check in inode_change_ok() for gid changes (Ernie Petrides)
- fix race in finish_task_switch() between wakeup/exit (Ernie Petrides)
- remove Samsung CD-ROM SN-124 from IDE DMA blacklist (Tom Coughlan)
- update e1000 network driver to version 5.2.52-k3 (John Linville)
- add auditing support for semtimedop syscalls (Peter Martuccelli)
- fix tasklet and locking bugs in Power5 hvsi driver (David Howells)
- fix megaraid2 handling of TUR cmds with SCSI CD-ROM (Adam Manthei)
- update SCSI whitelist for HP NS E1200-160 router (Tom Coughlan)
- prevent x86 read_ldt() from reading beyond kmap (Ernie Petrides)
- force single loadable segment in ia64 kernels (Jakub Jelinek)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.18.EL" date="1088157600">- implement ia64 work-around for TLB fetch timeout MCA (Larry Woodman)
- fix Power3 interrupt initialization in ppc64 setup (David Howells)
- correct info msg, prevent double panic in diskdump (Tatsuo Uchida)
- defend against NULL "mm" ptrs in page_referenced() (Rik van Riel)
- fix miscellaneous audit subsystem problems (Peter Martuccelli)
- prevent crash with tux CGI execution on x86_64 (Ingo Molnar)
- add installer info to SATA sx8 block driver (Jeff Garzik)
- turn on vary_io flag in SCSI ips driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.17.EL" date="1087984800">- allocate big system hash tables w/bootmem allocator (David Howells)
- prevent loading aic7xxx_old when aic7xxx is in use (Doug Ledford)
- implement stat() recovery from NFS ESTALE errors (Steve Dickson)
- fix raw/O_DIRECT i/o bug with unmapped pages (Stephen Tweedie)
- correct another locking hole in RAID1 handling (Doug Ledford)
- fix __x86_64__ conditional in megaraid2.c driver (Adam Manthei)
- fix unresolved symbols on ia64 in cciss driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.16.EL" date="1087898400">- make NFS sillydelete wait for unlink completion (Steve Dickson)
- prevent EIO w/concurrent O_DIRECT+buffered i/o (Stephen Tweedie)
- upgrade SATA support (core, libata, and drivers) (Jeff Garzik)
- implement futex() FUTEX_CMP_REQUEUE op (Al Viro, Pete Zaitcev)
- update b44 network driver to version 0.93 (John Linville)
- avoid unix_stream_sendmsg() ENOBUFS errors (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.15.EL" date="1087812000">- improve SCSI mid-layer error handling w/sdev_retry_q (Doug Ledford)
- eliminate rw-semaphore races between waiter/wakeup (David Howells)
- add locking and fix accounting bug in RAID1 handling (Doug Ledford)
- backport Carmel sx8.c driver from upstream 2.4 base (John Linville)
- rename ppc64-squadrons-* patches to ppc64-power5-* (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.14.EL" date="1087639200">- introduce support for IBM Squadrons/Power5 systems (David Howells)
- update aacraid driver to 1.1.5-2339 w/1.1.2 backup (Adam Manthei)
- allow sys_remap_file_pages() on unlocked ramfs VMAs (Larry Woodman)
- fix diskdump hangs during resets with aic79xx driver (Tatsuo Uchida)
- fix possible data corruption when using SHM_HUGETLB (Larry Woodman)
- set QLogic HbaApiNode proc file permissions to 0600 (Tom Coughlan)
- add IRQ blocking/restoring in add_gendisk/del_gendisk (Jeff Needle)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.13.EL" date="1087466400">- fix problem causing PCI bus 255 to be missing on ia64 (Ben Woodard)
- make nfs_statfs() recognize/handle fs size overflows (Steve Dickson)
- update QLogic driver to 7.00.03-RH1 w/6.07.02 backup (Tom Coughlan)
- allow procfs to utilize more dynamic inode numbers (David Howells)
- prevent inappropriate "unexpected IO-APIC" messages (Ernie Petrides)
- avoid lost dirty page bits in s390/s390x VM handling (Pete Zaitcev)
- fix ACPI SCI interrupt defaults and add kernel params (Jim Paradis)
- fix user-space access bugs in acpi/airo/decnet/sound (Alexander Viro)
- remove drivers/net/starfire.o from unsupported list (Ernie Petrides)
- fix mm_struct mem leak in copy_process() error path (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.12.EL" date="1087293600">- correct s390/s390x tests for PT_AUDITED flag (Peter Martuccelli)
- update e100 network driver to version 2.3.43-k1 (John Linville)
- update megaraid2 driver to 2.10.6 w/2.10.1.1 backup (Adam Manthei)
- add x86_64 auditing support for 32-bit-compat (Peter Martuccelli)
- fix ia64 unwind handling for UNW_INSN_SETNAT_MEMSTK (Jason Baron)
- update cciss driver to v2.4.52 for several fixes (Tom Coughlan)
- fix variable block mode tape handling in st driver (Tom Coughlan)
- incorporate latest Emulex fibre channel driver (Tom Coughlan)
- fix USB EHCI problem with BIOS-to-host handoff (Pete Zaitcev)
- update SCSI whitelist for DDN/Xyratex/SanDisk/CBOX3 (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.11.EL" date="1087207200">- upgrade to latest autofs4, remove from unsupported list (Jeff Moyer)
- fix memory corruption bug in audit driver code (Peter Martuccelli)
- store adjusted KSP value in ia64 diskdump support (Tatsuo Uchida)
- update e1000 network driver to version 5.2.52-k1 (John Linville)
- update ips driver to version 7.00.15 w/6.11.07 backup (Adam Manthei)
- implement USB device interlock between ioctls/SCSI-ops (Pete Zaitcev)
- update tg3 driver to version 3.6RH for upcoming chipsets (Dave Miller)
- downgrade several PCI cache line size debugging messages (Jim Paradis)
- correct x86_64 32-bit-compat support for AIO syscalls (Jeff Moyer)
- prevent FPU exception handling hangs on x86/x86_64 (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.10.EL" date="1086948000">- give wait.func highest priority in wake_up_filtered() (Larry Woodman)
- reduce system time when using sys_remap_file_pages() (Larry Woodman)
- enable CONFIG_SOFT_WATCHDOG module for ppc64 configs (David Howells)
- improve page allocation to avoid unnecessary swapping (Rik van Riel)
- implement diskdump support for ia64 with mptfusion (Tatsuo Uchida)
- disable native ia32 support for ia64 Montecito cpus (Jason Baron)
- save/restore P4/ia32e perf registers for oprofile (Will Cohen)
- fix oprofile ESCR_SET_EVENT_SELECT() event mask (Will Cohen)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.9.EL" date="1086775200">- update s390 zcrypt driver to version 1.2.1 (Pete Zaitcev)
- update network tg3 driver to version 3.5RH (Dave Miller)
- eliminate separate ia32e oprofile processor id (Will Cohen)
- update SCSI whitelist for IBM 2105/2145 devs (Doug Ledford)
- avoid EAGAIN errors on blocking UDP sockets (Steve Dickson)
- avoid putting locked inodes on dirty list (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.8.EL" date="1086688800">- decouple NFS O_DIRECT handling for performance gain (Steve Dickson)
- export page_is_ram() interface for amd64/ia32e arch (Jim Paradis)
- enable CONFIG_SCSI_SATA_* options in x86_64 configs (Jim Paradis)
- update mptfusion driver to 2.05.16 w/2.05.11.03 backup (Adam Manthei)
- fix nopage_sequential_readahead() and filemap_sync() (Larry Woodman)
- fix USB EHCI driver to avoid Squadrons install oops (Pete Zaitcev)
- add x86 NMI trigger switch support for debugging (Yuichi Nagahama)
- add dmi_blacklist[] entry for "Intel NA440BX DP" (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.7.EL" date="1086602400">- apply some minor scsi_dump_status() format tweaks (Doug Ledford)
- implement SCSI support for dynamic add (hot plug) (Doug Ledford)
- upgrade lvm driver logic to version 1.0.8-2 (Heinz Mauelshagen)
- fix x86_64 definition for inlined ffs() function (Jim Paradis)
- preserve VM_MAYEXEC for executable stack support (Jim Paradis)
- add extra SLBIEs for ppc64 Power5 DD2.0 errata (David Howells)
- add ppc64 32-bit compat for TIOCGICOUNT/MIWAIT (David Howells)
- hold file struct ref when removing POSIX locks (Steve Dickson)
- fix window scaling bug in tcp_ack_update_window() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.6.EL" date="1086343200">- make fsync() flush all pending NFS updates to disk (Steve Dickson)
- complete ia64 support for multiple I/O port spaces (Larry Woodman)
- fix sending of IP broadcast frames with TTL of zero (Neil Horman)
- prevent context switch storms under high VM loads (Larry Woodman)
- fix sigaltstack() errors w/JVM on hugemem kernels (Roland McGrath)
- add locking and improve output in scsi_dump_status() (Doug Ledford)
- add size boundary checking in scsi_resize_dma_pool() (Doug Ledford)
- fix SCSI request struct leak on command init failures (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.5.EL" date="1084528800">- overhaul ia64 SAL/MCA subsystem (Ben Woodard)
- enable x86_64 32-bit UID support (Jim Paradis)
- add initial diskdump support (Nobuhiro Tachino)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.4.EL" date="1084356000">- reduce chance of "VFS: Busy inodes after unmount." errs (Steve Dickson)
- convert "uaddr2" arg ptr in s390x futex() compat syscall (Pete Zaitcev)
- add ppc64 32-bit compat handler for PE_LOCKED_COPY ioctl (David Howells)
- update s390 dasd driver with several recent bug fixes (Pete Zaitcev)
- fix amd64 NUMA node scanning for Northbridge systems (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.3.EL" date="1084183200">- prevent exp_stopfodrop() oops during cluster failover (Steve Dickson)
- make nfs_file_commit() always flush the entire file (Steve Dickson)
- fix pcnet32 driver's MAC address selection on ppc64 (Julie DeWandel)
- backport /dev/random driver fixes for missed wakeups (Mark DeWandel)
- fix hang w/SoundBlaster 16-bit sampling w/odd count (Ernie Petrides)
- make s390 tape driver specify GPL module license type (Pete Zaitcev)
- correct buffer len value in ppc64 pSeries ipr driver (David Howells)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.2.EL" date="1083664800">- enable booting on 8-way Opteron systems (Jim Paradis)
- fix 32-bit-compat truncate64() on x86_64 (Jim Paradis)
- correct promiscuous mode counter handling (Dave Miller)
- support 128-GB ia64 systems w/HP zx1 chipset (Larry Woodman)
- add export of sys_ioctl() global symbol on s390x (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.1.EL" date="1083578400">- (this is the first build for RHEL 3 Update 3)
- reenable/fix linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- clean up file locks when NFS clients receive signals (Steve Dickson)
- complete ia64-specific LAuS syscall auditing support (Mark DeWandel)
- prevent NULL pointer dereference in page_referenced() (Rik van Riel)
- fix max sectors argument in lvm_snapshot_alloc() (Heinz Mauelshagen)
- allow AGP bus scanning to execute for all architectures (John Dennis)
- fix page_referenced() rss limit checks w/unmapped pages (Rik van Riel)
- correct locking and cr/lf problems in usbserial driver (Pete Zaitcev)
- add /proc/cpuinfo support for new ppc64 processors (Julie DeWandel)
- fix sense data handling on certain SCSI cmd retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.EL" date="1082541600">- fix clobbering of /proc/cpuinfo vendor_id on x86_64 (Jim Paradis)
- correct MCAST_MSFILTER/IP_MSFILTER size checking (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-14.EL" date="1081936800">- disable linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- prevent symlink buffer overflow in ISO-9660 fs (Ernie Petrides)
- check for skb overrun in IPV4/IPV6 IGMP handling (Dave Miller)
- fix possible hang in rebalance_laundry_zone() (Larry Woodman)
- correct zone_wired[] initialization for NUMA (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-13.EL" date="1081332000">- fix several critical libata bugs (Jeff Garzik)
- correct IPSEC XFRM policy ref counting (Dave Miller)
- add amd64/ia32e parsing for "acpi=off" arg (Jim Paradis)
- update tg3 driver to v3.1 for several fixes (Dave Miller)
- fix SCSI whitelist for Hitachi/HP DFx00, Apple Xserve (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-12.EL" date="1080295200">- add USB support for Handspring Treo 600 PDA syncing (Matthew Galgoci)
- clear state for CPEs during ia64 MCA SAL error logging (Ben Woodard)
- prevent DMA resource leak in QLogic driver error path (Tom Coughlan)
- change default QLogic driver device queue depth to 64 (Tom Coughlan)
- replace fabricated cciss drive geometry w/ENXIO error (Tom Coughlan)
- update SCSI whitelist for HP SureStore/StorageWorks (Tom Coughlan)
- disable CONFIG_ACPI_DEBUG in amd64/ia32e configs (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-11.EL" date="1078740000">- add yet another Intel ICH6 SATA PCI id (Jeff Garzik)
- fix ref counting in copy_process() error path (Larry Woodman)
- remove ia64 support for /proc/bus/mckinley/bitmap (Jason Baron)
- correct depmod versioning for unsupported modules (Ernie Petrides)
- prevent data corruption in ia32e phys_proc_id[] info (Larry Woodman)
- change default value for inactive_clean_percent to 30 (Larry Woodman)
- enable improved version of s390 on-demand timer patch (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-10.EL" date="1078221600">- incorporate late-breaking libata fixes (Jeff Garzik)
- enable amd64 syscall for tux support (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.17.EL" date="1078135200">- reduce s390 idle overhead with on-demand timer patch (Pete Zaitcev)
- complete ia64 NPTL support for 32-bit-EL executables (Jason Baron)
- add several ia64 syscall table entries for 32-bit-EL (Jason Baron)
- upgrade libata/SATA support, delete ich5-sata.patch (Jeff Garzik)
- check for mremap/vmtruncate race in move_one_page() (Jason Baron)
- prevent ia64 NaT-bit corruption during sig catching (Jason Baron)
- fix amd64 get_mtrr() parsing error with &gt;4GB memory (Jim Paradis)
- change amd64 default behavior to avoid TSC timer use (Jim Paradis)
- force s390utils upgrade to prevent zipl seg fault (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.16.EL" date="1078048800">- restore varyio capability in mptfusion driver update (Adam Manthei)
- enhance SCSI mid-layer queuing for indefinite retries (Doug Ledford)
- add ia64 reg reloads for 32-bit-EL strace -f support (Jason Baron)
- fix ia64 core dump support for 32-bit-EL executables (Jason Baron)
- add SCSI whitelist devs with BLIST_RETRY_ABORTED_CMD (Doug Ledford)
- remove stack-in-interpreter check in binfmt_elf.c (Julie DeWandel)
- clear all flags in exec_usermodehelper() for kmod (Alexander Viro)
- fix aacraid command completion (rq corruption) bugs (Tom Coughlan)
- correct cciss_proc_tape_report() type in flags decl (Tom Coughlan)
- enable USB-2.0-hub-based mice/keyboards to function (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.15.EL" date="1077962400">- fix amd64 oprofile linkage problem in ia32e support (Ernie Petrides)
- update ips driver to version 6.11.07 w/6.10.52 backup (Tom Coughlan)
- add size checks to DRM ATI r128 driver ioctl handling (John Dennis)
- avoid megaraid2 irq_disable calls for mem-mapped ctlrs (Tom Coughlan)
- upgrade firmware imbedded in QLogic driver to 3.02.24 (Tom Coughlan)
- correct ia64 memory accounting in overcommit mode 2 (Larry Woodman)
- implement softirq deferral to limit kernel stack depth (Ingo Molnar)
- reduce kernel stack usage in a couple of tux functions (Ingo Molnar)
- fix shared extended attribute ref counting in ext3 (Stephen Tweedie)
- clear SCSI sense data buffer between eh retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.14.EL" date="1077789600">- add .RH1 suffix to cciss driver version v2.4.50 (Tom Coughlan)
- implement initial LAuS syscall auditing support (Mark DeWandel)
- introduce GFS enablers for locking and sendfile ops (Ken Preslan)
- update QLogic driver to 6.07.01 w/6.06.00b11 backup (Tom Coughlan)
- improve netdump reliability w/asynchronous IPI param (Jeff Moyer)
- add ICH6 DSP audio support to i810_audio driver (Jeff Garzik)
- apply SCSI whitelist updates for several devices (Tom Coughlan)
- fix odd byte tape i/o handling in sym53c8xx driver (Tom Coughlan)
- correct minimum nfsd version that supports acls (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.13.EL" date="1077703200">- allow concurrent NFS direct i/o to same file if !append (Steve Dickson)
- introduce support for new Intel 64-bit ia32e processor (Larry Woodman)
- update mptfusion driver to 2.05.11.03 w/2.05.05 backup (Adam Manthei)
- remove fs/binfmt_misc.o from linux-modules-unsupported (Jason Baron)
- fix ia64 predicate register use in sig trampoline code (Jason Baron)
- add oprofile cpu type recognition for ia32e processor (Will Cohen)
- update e1000 network driver to version 5.2.30.1-k1 (Jeff Garzik)
- add more Intel PCI ids to match upstream 2.4 (Jeff Garzik)
- add ICH6 PATA support, PCI ids, irq routing (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.12.EL" date="1077530400">- add deferred page freeing for intr-context unmap_kvec() (Jeff Moyer)
- update megaraid2 driver to v2.10.1.1 w/v2.00.9 backup (Tom Coughlan)
- fix ppc64 pte hash table locking to avoid deadlocks (Julie DeWandel)
- fix ia64 data TLB init to prevent random boot-up hangs (Jason Baron)
- fix ia64 RNat register corruption with alt sig stacks (Jason Baron)
- allow smaller ia64 sig stacks in ia32 emulation layer (Jason Baron)
- backport ncpfs fixes to eliminate var-length arrays (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.11.EL" date="1077271200">- backport cisco aironet driver from 2.6.3-rc4 (Matthew Galgoci)
- update tg3 driver to v2.7 to fix status reg handling (Dave Miller)
- correct lost jiffies logic for x440/5 cyclone timer (Bernd Schmidt)
- fix open() error clean-up for unsupported O_DIRECT (Stephen Tweedie)
- prevent ia64 crashes when unmapping hugetlb pages (Jason Baron)
- add ppc64 processor support for future PPC970+ (Julie DeWandel)
- rework ppc64 32-bit-compat iptables support (Julie DeWandel)
- fix func ptr test in ethtool_set_ringparam() (Jeff Garzik)
- disable linux-2.4.21-scsi-affine-queue.patch (Doug Ledford)
- improve scsi_allow_ghost_devices description (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.10.EL" date="1077098400">- fix amd64 iommu bug causing data corruption on &gt;4GB systems (Jim Paradis)
- return EINVAL for unsupported ioctl32 syscalls on ppc64 (Julie DeWandel)
- remove incorrect BUG() call in __remove_inode_page() (Stephen Tweedie)
- fix s390 ctc driver problem causing build system hangs (Pete Zaitcev)
- fix s390 qeth driver error path to reset write_busy (Pete Zaitcev)
- update s390 zfcp driver to fix miscellaneous bugs (Pete Zaitcev)
- apply upstream nfs fixes for acl error handling (Steve Dickson)
- prevent kernel stack data leak via /dev/rtc (Ernie Petrides)
- allow AIO operations on sockets for non-inet (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.9.EL" date="1076925600">- restore genksyms_smp_prefix setting for non-x86 builds (Ernie Petrides)
- display/log memory stats whenever there's an OOM kill (Larry Woodman)
- update tg3 driver to v2.6, the latest upstream version (Jeff Garzik)
- update net bonding driver to v2.4.1, latest upstream (Jeff Garzik)
- fix irq, mem, printk, strtol bugs in cciss driver (Tom Coughlan)
- wait for board ready after hot add, cciss driver (Tom Coughlan)
- enable cciss adapter prefetch for x86 platforms (Tom Coughlan)
- add preserve_arg0 handling for ia32 emulation (Larry Woodman)
- fix ppc64 compat support for quota syscall (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.8.EL" date="1076580000">- remove Power-Blade-specific def for USB TEAC floppy (Julie DeWandel)
- fix s390 crash in iucv driver on connection shutdown (Pete Zaitcev)
- fix ia64 ACPI parsing for multinode IDE devs on x455 (Jim Paradis)
- fix amd64 core dumping of multithreaded 32-bit apps (Jim Paradis)
- fix s390 oprofile conditional and zero top addr bits (Will Cohen)
- add ipr driver v1.0.3 for IBM's PPC RAID adapters (Tom Coughlan)
- add {alloc,free}_netdev(), list macro, tg3 PCI ids (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.7.EL" date="1076407200">- restrict /proc/tty/driver directory access to root (Jeff Moyer)
- allow non-standard usr/sys VM splits at 2G/2G, 1G/3G (Ingo Molnar)
- extend existing ppc64 RTAS firmware flash interface (Mark DeWandel)
- fix ppc64 version of strncpy() to zero-pad buffers (Julie DeWandel)
- fix s390/x version of strncpy() to zero-pad buffers (Pete Zaitcev)
- fix generic version of strncpy() to zero-pad buffers (Jim Paradis)
- improve ppc64 segment table entry replacement logic (Julie DeWandel)
- correct type/cast of "len" in ppc64/kernel/nvram.c (Julie DeWandel)
- implement new ppc64 RTAS system call interface (Julie DeWandel)
- increase x86 RSDT table limit in ACPI parsing (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.6.EL" date="1076320800">- fix more usb-storage bugs for Power Blade support (Julie DeWandel)
- remove extra inactive_clean_pages-- in reclaim_page() (Larry Woodman)
- return proper error codes for do_munmap() failure in mremap (Dave Jones)
- fix binfmt_elf.c problems for apps with huge bss regions (Julie DeWandel)
- update cciss driver to v2.4.50 for Smart Array 6i support (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.5.EL" date="1075975200">- prevent netdump progress output from filling up log_buf (Jeff Moyer)
- add ppc64 RAS hook at end of panic() processing (Julie DeWandel)
- correct source IP address in ICMP error message (Dave Miller)
- fix smp deadlock with pdeath_signal posting (Roland McGrath)
- add ppc64 support for /proc/ppc64/lparcfg (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.4.EL" date="1075888800">- update nfsd mode-with-acls fix for upstream conformance (Steve Dickson)
- rework usb-storage locking to avoid hangs on disconnect (Pete Zaitcev)
- fix mmio alignment error in olympic token ring driver (Julie DeWandel)
- prevent tux logger-thread shutdown problems on ppc64 (Ingo Molnar)
- add ppc64 AltiVec chip support for Power Blades (Julie DeWandel)
- eliminate multi-threaded coredump hang potential (Ingo Molnar)
- fix ppc64 segfaults with tasks &gt; 2GB in size (Julie DeWandel)
- fix usb-storage memory-allocation/iowait deadlock (Alan Cox)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.3.EL" date="1075716000">- add amd64 support for PT_GNU_STACK with exec shield (Jim Paradis)
- fix s390 raid1 sync problem w/writes at end of dev (Pete Zaitcev)
- update s390 zcrypt driver to version 1.1.4 (Pete Zaitcev)
- fix output of large /proc/pid/statm values (Mark DeWandel)
- fix output of large /proc/partitions values (Mark DeWandel)
- enable ppc64 support for JS20 Power Blades (Julie DeWandel)
- fix kernel stack memory leak on fork failures (Dave Anderson)
- fix ipv6 packet quoting problem in icmpv6_send() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.2.EL" date="1075370400">- apply Intel's x86 microcode loader update (Jim Paradis)
- enhance PCI multifunction support for ppc64 (Julie DeWandel)
- fix nfsd returning bad mode bits when acls set (Steve Dickson)
- prevent unkillable zombies from detached NPTL threads (Ingo Molnar)
- avoid missing scsi disks in /proc/partitions on detach (Jason Baron)
- correct pte calculation inside zeromap_pte_range() loop (Ben Woodard)
- add inline function PDE() to help driver backporting (Matthew Galgoci)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.1.EL" date="1074679200">- (this is the first build for RHEL 3 Update 2)
- relocate various pieces of the "undo" patch (Patch Review Committee)
- rename s390 zcrypt and zfcp driver patches (Pete Zaitcev)
- add LKML discussion to COPYING.modules (Arjan van de Ven)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.EL" date="1073556000">- fix race condition between thread creation and signals (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-8.EL" date="1073469600">- fix amd64 eflags masking in 32-bit emulation of ptrace (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-7.EL" date="1073383200">- fix numerous ppc64 problems with /proc access (Julie DeWandel)
- allow user core files larger than 2GB in size (Dave Anderson)
- add ia64 support for Crestone Peak AGP bridges (John Dennis)
- fix unaligned kernel accesses in nfs_readdir() (Steve Dickson)
- add new_len/new_addr checks in do_mremap() (Ernie Petrides)
- fix nfs O_DIRECT corruption with &gt;4GB files (Steve Dickson)
- enable bus scan for AGP ctlrs on amd64 systems (John Dennis)
- limit PCI-alloc'ed physaddrs to 4GB on HP ia64 (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-6.EL" date="1070877600">- fix ppc64 firmware updates (Julie DeWandel)
- fix sync wakeup problem (Ingo Molnar)
- add ia64 cyclone support (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-5.EL" date="1070272800">- undo rejected patches (Stephen Tweedie, Arjan van de Ven, Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.20.EL" date="1069840800">- enable NUMA support in amd64 smp configs (Jim Paradis)
- prevent oopses with tux in OOM scenarios (Ingo Molnar)
- apply several ipv6 multicast bug fixes (Dave Miller)
- assign retval in copy_process() error path (Ingo Molnar)
- add lseek-in-/proc support for s390x "ps" (Pete Zaitcev)
- redefine zone_is_highmem() for Celestica (Dave Anderson)
- fix unresolved symbols in amd64 modules (Bill Nottingham)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.19.EL" date="1069754400">- fix tg3 rx_pending limit for BCM5705/BCM5782 chips (Jeff Garzik)
- reset page error flag prior to read of new contents (Jeff Moyer)
- enable CONFIG_HOTPLUG_PCI option for ia64 configs (Doug Ledford)
- fix inactive laundry list race in ramfs_writepage() (Dave Anderson)
- avoid out_of_memory() for wired pages when there's lomem (Dave Anderson)
- conditionalize ppc64 machdep_calls change for KMI compat (Ernie Petrides)
- limit anon/cache pages scanned in refill_inactive_zone() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.18.EL" date="1069668000">- create old version (rev. 5.64) of cmpci sound driver (Tom Coughlan)
- remove ac97.o, ad1848.o, cs4232.o from unsupported (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.17.EL" date="1069063200">- fix missing use of __GFP_HIGHMEM flag in pte_alloc_one() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.16.EL" date="1068890400">- rework scsi mid-layer queuing logic to fix error handling (Doug Ledford)
- fix pci_dma_sync_sg() scatterlist arg in megaraid2 driver (Tom Coughlan)
- move more-ptes-in-rmap-pte-chain logic to its own patch (Ernie Petrides)
- tag uses of __GENKSYMS__ with KMI/ABI compat comment (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.15.EL" date="1068804000">- fix MD multipath bugs causing crashes during fail-overs (Doug Ledford)
- add chain_ptep_t and revert pte_addr_t for KMI compat (Ernie Petrides)
- restore sub-timer-tick time-of-day granularity for ia64 (Jason Baron)
- modify agpgart and drm drivers for ia64 HP ZX1 support (John Dennis)
- fix ia64 32-bit emulation for several stat-related calls (Jason Baron)
- enable amd64 use of new ips driver w/config separation (Tom Coughlan)
- update e100 network driver to version 2.3.30-k1 (Jeff Garzik)
- update e1000 network driver to version 5.2.20-k1 (Jeff Garzik)
- apply scsi whitelist updates for IBM/CNSi/NEC devices (Tom Coughlan)
- reenable varyio for aic7xxx driver (hangs were unrelated) (Jeff Moyer)
- conditionalize NVIDIA_NFORCE3 to restore KMI compat (Ernie Petrides)
- prevent two ext3 panics on corrupted filesystems (Stephen Tweedie)
- apply two minor fixes to ppc64 RAS nvram reading (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.14.EL" date="1068717600">- update ServeRAID (ips) driver to version 6.10.52 (Tom Coughlan)
- configure xmon on by default in ppc64 configs (Julie DeWandel)
- create initial s390 zcrypt driver, version 1.1.2 (Pete Zaitcev)
- remove zfcp driver from linux-modules-unsupported (Pete Zaitcev)
- revise ppc64 reliability/serviceability support (Julie DeWandel)
- reduce kernel stack usage inside nfs_readdir() (Steve Dickson)
- add gameport dependency to cmpci driver config (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.13.EL" date="1068631200">- reduce UDP retransmissions and fix slow reads for NFS (Steve Dickson)
- implement wired page lists for better ramfs handling (Larry Woodman)
- fix vfork deadlock when child process causes core dump (Ingo Molnar)
- enhance AltSysRq-M output and fix deadlock potential (Larry Woodman)
- update cmpci sound driver for some HP IPF workstations (Tom Coughlan)
- correct tq_struct struct initialization in tg3 driver (Jeff Garzik)
- fix NFS file attribute inconsistency after rename (Steve Dickson)
- prevent ia64 machine checks w/sysreport on Olympia (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.12.EL" date="1068544800">- redesign refill_inactive_zone() for smarter deactivation (Larry Woodman)
- improve page deactivation scalability w/delayed laundering (Larry Woodman)
- rework locking and timer usage in s390 ctc network driver (Pete Zaitcev)
- allow xmon to be enabled at boot-time for ppc64 debugging (Julie DeWandel)
- reverse kscand's order of anon/cache active list traversal (Larry Woodman)
- force in-lining of br_read/write_lock/unlock routines (Julie DeWandel)
- fix mistaken fall-through cases in s390 chandev driver (Pete Zaitcev)
- make a few exported symbols available to OpenGFS (Stephen Tweedie)
- fix ld/st ordering bug causing lost signal wakeups (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.11.EL" date="1068112800">- make profile=X imply nmi_watchdog=1 and fix NMI w/d bugs (Ernie Petrides)
- add lock init in scsi_get_host_dev() to fix shutdown hang (Doug Ledford)
- enable distributed interrupts by default on ppc64 iSeries (Julie DeWandel)
- improve amd64 reporting of machine check errors (Jim Paradis)
- fix disabling of autonegotiation in tg3 driver (Dave Miller)
- add image name to s390 ioctl32 debug message (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.10.EL" date="1068026400">- fix file lock ownership by NPTL threads to be process-wide (Ernie Petrides)
- upgrade megaraid driver to version 1.18k and fix isr/fw sync (Tom Coughlan)
- upgrade megaraid2 driver to version 2.00.9 and enable varyio (Tom Coughlan)
- improve scsi mlqueue handling to enable BUSY/QUEUE_FULL fix (Doug Ledford)
- correct reporting of i/o errors in ppc64 viodasd driver (Julie DeWandel)
- update acenic driver to handle enabling of jumbo frame mode (Jeff Moyer)
- fix i386 PAGE_NONE bits to prevent get_user_page() hang (Roland McGrath)
- fix ia64 show_mem() handler to use efi_memmap_walk() call (Dave Anderson)
- replace spaces in slabinfo entry name for async poll table (Matt Wilson)
- fix race condition in buffer-head memory footprint patch (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.9.EL" date="1067940000">- improve spec file robustness in %post/%preun stanzas (Florian La Roche)
- add s390x iovec length checking for 32-bit reads/writes (Matt Wilson)
- use highmem for pte/ramfs page allocation w/__GFP_WIRED (Larry Woodman)
- upgrade oprofile support with bug fixes and enhancements (Will Cohen)
- fix infinite recursion in SCSI mid-layer post-processing (Jeff Moyer)
- introduce no-auto-start-on-add handling for SCSI blacklist (Jeff Moyer)
- enable s390 support for blk stats handling for iostat -x (Pete Zaitcev)
- fix LVS timer-related hang from ip_vs_conn_expire() bug (Ernie Petrides)
- correct module init in cpqarray driver to fix insmod crash (Tom Coughlan)
- incorporate ESB PATA support and fix a pirq_routers PCI id (Jeff Garzik)
- fix nfs async write deadlock potential w/nfs_writepage() (Steve Dickson)
- fix SCSI error handling for BUSY queue status messages (Doug Ledford)
- improve ppc64 32-bit ioctl support for use by ethtool (Julie DeWandel)
- add missing unlock in ip_mc_del_src() to fix IGMP deadlock (Dave Miller)
- change ppc64 reporting of floppy capacity to be 1.44 MB (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.8.EL" date="1067421600">- fix up various problems on Nforce3-based amd64 systems (Jim Paradis)
- double number of pte addrs in rmap pte_chain structs (Larry Woodman)
- restrict slab size for kernel data structs to 2 pages (Larry Woodman)
- clean up obsolete quicklist usage for ppc64 pte pages [rejected]
- prevent readdirplus from returning hidden mount points (Steve Dickson)
- prevent lockd deadlocks caused by export table locking (Steve Dickson)
- eliminate use of parallel task_struct init macro on ia64 [rejected]
- fix broken s390x overflow checks with 32-bit F_GETLK use (Matt Wilson)
- fix SCSI errors with "mt stoptions" and IDE tape drives (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.7.EL" date="1067162400">- fix bad checksumming interaction between e100 and bridge (Jeff Garzik)
- prevent system hang by OOM killing when overcommitted (Larry Woodman)
- un-inline ext3 error function to reduce stack usage (Stephen Tweedie)
- fix several ppc64 problems with interrupt handling (Julie DeWandel)
- correct amd64 identification in /dev/oprofile/cpu_type (Jim Paradis)
- move fput() call in do_tty_hangup() to avoid oops w/kon (Alexander Viro)
- eliminate creation of never-used task_struct slab cache (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.6.EL" date="1066903200">- reduce buffer-head memory footprint from read-only files (Ingo Molnar)
- update qeth driver for reduced stack usage and bug fixes (Pete Zaitcev)
- fix s390 qeth driver again to allow tcpdump to function (Pete Zaitcev)
- add exec_mmap() locking to prevent vma lookup races (Ernie Petrides)
- rework RPC slot allocation for further NFS improvements (Steve Dickson)
- reduce frequency of RPC retransmits during NFS writes (Steve Dickson)
- make generic/ext3 file system write handling 64-bit clean (Jeff Moyer)
- allow SMP scheduling rebalancing to occur every 200 msecs (Ingo Molnar)
- prevent races during IPC semaphore set and msg queue removal (Ingo Molnar)
- fix ACPI handling to identify trigger/polarity of PCI IRQs (Jim Paradis)
- correct amd64/ia64 acpi_disabled decls for post-boot access (Jeff Moyer)
- update ppc64 viocons driver with several bug fixes (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.5.EL" date="1066298400">- move fix for PPR use in sym53c8xx driver to its own patch (Ernie Petrides)
- correct pids exported by msgctl/semctl/shmctl/fcntl calls (Ulrich Drepper)
- apply s390 lcs driver wait queue init and locking updates (Pete Zaitcev)
- enable dummy network driver use in generic s390 config file (Pete Zaitcev)
- add missing ptrace hooks for exec and vfork-done events (Bill Nottingham)
- fix SMP timer race that triggered BUG_ON() in add_timer() (Ingo Molnar)
- fix several bogus ipvs boundary checks in ftp module [rejected]
- fix vfsmount queuing in attach_mnt() for CLONE_NEWNS [rejected]
- add net_device check to prevent oops in pppoe driver [rejected]
- fix memory leak in symlink error path of /proc driver [rejected]
- fix overflow in v1_disk2mem_dqblk() quota calculation [rejected]
- increase ppc64 ramdisk size to 8192k in p/iSeries configs (Jeremy Katz)
- lower amd64 TASK_UNMAPPED_32 to increase avail address space (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.4.EL" date="1066039200">- fix ppc64 stack pointer alignment in user signal handlers (Jakub Jelinek)
- increase amd64 exception stack size to 4k to avoid overflow (Jim Paradis)
- fix ppc64 interrupt rate accounting for vmstat and /proc (Julie DeWandel)
- extend amd64 NMI watchdog timeouts to tolerate bad 2nd cpu (Jim Paradis)
- allow s390 dasd driver to use noop elevator module (Pete Zaitcev)
- add free_irq() in error path of olympic token ring driver (Matt Wilson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.3.EL" date="1065866400">- make pid fields in ucred structures hold tgid values (Ulrich Drepper)
- prevent ppc64 iSeries virtual console writes &gt; 4k (Julie DeWandel)
- control ia64 unaligned access messages with new sysctl (Jeff Moyer)
- correct SCSI data direction on cmd to spin up disks (Pete Zaitcev)
- add do_brk() TASK_SIZE and address space wrap checks (Arjan van de Ven)
- limit PPR use in sym53c8xx driver for ppc64 Zapata drives (Doug Ledford)
- list ac97.o, ad1848.o, and cs4232.o modules as unsupported (Jeff Moyer)
- clean up conditional compilation in s390 zfcp driver (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.2.EL" date="1065693600">- identify whether i686 or athlon config in oops output (Arjan van de Ven)
- remove warning in reclaim_page() unmapped page path (Ernie Petrides)
- fix several lvm error handling paths causing memory leaks [rejected]
- correct i386 smp shutdown logic when netdump is enabled (Jeff Moyer)
- fix amd64 potential data leaks on FPU save/restore errors (Jim Paradis)
- prevent aic7xxx chip resets leading to PCI parity errors (Tom Coughlan)
- remove ia64 user tty warning on unaligned accesses (Arjan van de Ven)
- fix ppc64 /proc file buf overruns in viodasd driver (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.1.EL" date="1065607200">- (this is the first build for RHEL 3 Update 1)
- avoid m/ctime update for pipe writes on r/o file systems (Stephen Tweedie)
- prevent theoretical ext3 fs corruption in ext3_read_inode (Stephen Tweedie)
- enable AGRESSIVE_IDLE_STEAL to improve scheduler balancing (Ingo Molnar)
- fix potential ppc64 lock-up on ioctl32 un/reregistering (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.EL" date="1065175200">- extend ppc64 scsi timeout values for Zapata DVD-ROM drives (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-3.EL" date="1063965600">- make sure to release viotape op structure after use (Julie DeWandel)
- disable pgd/pmd quicklists on ppc64 (Mark DeWandel)
- temporarily disable aio on sockets (Jeff Moyer)
- correctly refile inodes to make them reclaimable (Harald Hoyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-2.EL" date="1063792800">- S390: update zfcp and cio drivers (Pete Zaitcev)
- IA64: add extra check to virtual mem_map (Larry Woodman, Dave Anderson)
- initialise local variables in ide-tape &amp; ide-scsi
- cap qla2200 tcq depth to 255
- switch version number scheme to kernel-2.4.21-N.EL</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063706400">- PPC64: invalidate evicted sbl entries in the erat (Julie DeWandel)
- increase ethernet tx_queue_len to 1000 (David Miller)
- in udp_{v6_}flush_pending_frames, reset up-&gt;len too (David Miller)
- S390: CMS reserved minidisk detection (Pete Zaitcev)
- call recount_segments() on a different occasion (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063620000">- really disable exec-shield (Roland McGrath)
- reduce stack randomisation, disable brk randomisation (Ingo Molnar)
- make e1000 driver 64 bit clean (Julie DeWandel)
- minor aio corner case error condition fix (Jeff Moyer)
- AMD64: more lenient check for call workaround (Ernie Petrides)
- PPC64: disable CONFIG_XMON (Mark DeWandel)
- S390: fix CCW slab selection (Pete Zaitcev)
- fix two-disk combined mode sata (Jeff Garzik)
- move buslogic scsi driver to supported, for vmware only (Tom Coughlan)
- change viocons message from KERN_WARNING to KERN_INFO (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063360800">- VM: handle race condition in reclaim_page (Stephen Tweedie, Larry Woodman)
- PPC64: fix "log_buffer broken" xmon issue (Julie DeWandel)
- fix compiler warnings in netdump (Jeff Moyer)
- AMD64: workaround for 32 bit compat mode page fault problem (Ernie Petrides)
- IA64: make perfmon root-only (Jason Baron)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063274400">- fix smp race in rebalance_laundry_zone()</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063188000">- fix compiler warnings when hugetlbfs is disabled (Pete Zaitcev)
- fix tux performance bug (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063101600">- don't evict kernel stack seg translation on ppc64 (Julie DeWandel)
- fix callers of do_page_fault on ppc64 (Mark DeWandel)
- AMD64 munmap return value, fix lsb failure (Jeff Moyer)
- fix for PPC64 32-bit ioctl (Jim Paradis)
- bring IA64 value of MINSIGSTKSZ in line with upstream (Jakub Jelinek)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063015200">- fix potential datacorruptor in viodasd driver (Julie DeWandel)
- fix race condition in s390 dirty bit handling (Pete Zaitcev)
- limit per-cpu slab cache size
- correct 32-bit readv/writev border cases on ppc64 (Matt Wilson)
- AMD Golem IO-APIC fixup for i686 kernel on AMD64 (Jeremy Katz)
- NFS Solaris 8 acl fix (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062756000">- minor nfs permissions bugfix (Steve Dickson)
- change mprotect return value to SuS mandated value (Arjan van de Ven)
- kernel-unsupported now provides kernel-modules (Jeremy Katz)
- correct __hugemem__modules typos in rhkernel.h
- fix subtle pmd corruption error (Larry Woodman, Dave Anderson)
- fix cut'n'paste error in SATA io port reservation
- restore NFSEXP_CROSSMNT ABI compatibility (Steve Dickson)
- round up executable name field length in core file (Jakub Jelinek)
- switch off exception_trace on amd64 (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062496800">- patch to access odd last sector on ia64 (Jason Baron)
- misc fixes from upstream (Arjan van de Ven)
- fix audigy driver (Jeff Garzik)
- tunable dcache reclaim priority for tux (Ingo Molnar)
- tg3 driver update (Jeff Garzik)
- ipv6 and icmp network bugfixes (David Miller)
- fix ppc64 memory access security bug (Julie DeWandel)
- reduce memory allocated for skb (Ingo Molnar)
- small smp fix for scalable timers (Ingo Molnar)
- make s390 recognise MSDOS partitions (Pete Zaitcev)
- small smp fixes in tux (Ingo Molnar)
- make mptfusion drivers supported on 4/4 split kernel (Tom Coughlan)
- add entries to scsi whitelist (Tom Coughlan)
- minor sata/ata driver updates (Jeff Garzik)
- small fixes to viodasd driver (Julie DeWandel)
- nfs_get_root and nfs access bit patches (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062064800">- don't show interrupts in /proc/stat for ppc64 (Matt Wilson)
- make sure sync returns in a reasonable time
- PPC64: fix for boot cpu not being cpu 0 (Julie DeWandel)
- zero sized write no longer updates mtime (Matt Wilson)
- fix video bios read corruption on ia64 (Larry Woodman)
- network fixes to tg3, bonding (Jeff Garzik)
- properly reserve legacy IDE regions in sata driver (Jeff Garzik)
- fix ppc64 signal handling bugs (Mark DeWandel)
- tux fixes (Ingo Molnar)
- tgkill syscall for s390(x) (Pete Zaitcev)
- amd64 32 bit compatibility fixes (Jim Paradis)
- ppc64 32 bit compatibility fixes (Julie DeWandel)
- fix 4G/4G follow_page problem (Ingo Molnar)
- reduce memory used by VMAs and dentries (Arjan van de Ven)
- make LVM snapshotting of ext3 work reliably (Stephen Tweedie)
- make netdump play better with the nmi watchdog (Jeff Moyer)
- QLA2200: disable irq mitigation, fix off-by-one (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061805600">- seq_file /proc/interrupts for x86 too (Ingo Molnar)
- fix memory leak in ia64 exec of ia32 binaries
- check tgid not pid in scm_check_creds()  (David Miller)
- VM fixes: shm swap priority, zeromap_page_range
- workaround VFS limitations for VXFS NFS export</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061546400">- use personality for 3GB userspace on x86 -hugemem (Ingo Molnar)
- add sysctl interface for lockd (Steve Dickson)
- don't prod VGA space on HP Pinnacle systems (Larry Woodman)
- fix for 32 bit binaries on amd64 (Jim Paradis)
- add preemption point to write_some_buffers (Julie DeWandel)
- sort ACPI table to get correct device ordering on HP (Larry Woodman)
- fix refcounting bug with ipv6 addresses on netdevs (David Miller)
- add s390 syscalls for tux (Pete Zaitcev)
- md multipath enablers (Doug Ledford)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061460000">- fix process and nice time accounting (Doug Ledford)
- amd64: syscall table updates, timer robustness (Jim Paradis)
- amd64 3GB personality for 32-bit processes (Jim Paradis)
- use 256MB pagesize for hugetlbfs on ia64 (Larry Woodman)
- make sure e100 only claims ipv4 checksumming
- igmpv3/mldv2 OOPS'er fix (David Miller)
- hugetlbfs: make chown work and allow uid=X,gid=Y mount options
- make larger mmap windows work (Ernie Petrides, Ingo Molnar)
- ia64: improve ia32 compatibility (Larry Woodman)
- fix bug in rpc retry code (Steve Dickson)
- make acpi pci hotplug modulable (Jeff Moyer)
- update (trivial) to megaraid 1.18j (Tom Coughlan) 
- enable varyio on mptfusion (Tom Coughlan)
- panic on oops to prevent data corruption opportunities (Ernie Petrides)
- small iorl locking fix (Doug Ledford)
- fix ppc64 get_wchan() bad deref (Mark DeWandel)
- fix aio read into mmap()d PROT_WRITE (Jeff Moyer, Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061373600">- libata update (Jeff Garzik)
- amd64 syscalls for xattrs &amp; ACLs (Jim Paradis)
- tux fixes (Julie DeWandel, Ingo Molnar)
- via &amp; i810 audio fixes (Jeff Garzik)
- small 4G/4G split bugfixes (Ingo Molnar)
- fix sigsuspend race on x86, amd64, ia64 (Mark DeWandel)
- ia32 behavior for FP denormal exceptions on ia64 (Jason Baron)
- get the set/get of NAT bits for ia64 correct (Jason Baron)
- ipsec update, adds cast6 encryption (David Miller)
- VM update: OOM bugfix &amp; page-&gt;flags atomic updates (Rik van Riel)
- reenable serpent encryption on ppc64
- bladecenter usb-ohci support (Pete Zaitcev)
- iorl fixes (Doug Ledford)
- network bonding driver oops fix (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060768800">- DAC960 back to bigmem supported, ne2k-pci &amp; usb audio to bigmem unsupported
- netdump updates for tg3 and e1000 (Jeff Moyer)
- put a hole between stack and mmap area (Ernie Petrides)
- process time accounting updates (Doug Ledford)
- fix null characters in TUX header (Julie DeWandel, Ingo Molnar)
- display correct executable when running interpreted script
- zfcp zSeries fibrechannel driver (Pete Zaitcev)
- ipsec updates (David Miller)
- fix 4G/4G race conditions (Ingo Molnar)
- rename -bigmem kernel to -hugemem to reflect changed tradeoffs
- optionally show task states from hangcheck timer (Jason Baron)
- various small bugfixes from upstream</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060423200">- fix scalable timer race condition  (Julie DeWandel, Ingo Molnar)
- print warning on boot with &gt;16GB RAM on -smp kernel (Arjan van de Ven)
- fix for xapic issue with ServerWorks chipsets (Ernie Petrides)
- remove spurious ioctl printk on ppc64 (Mark DeWandel)
- ppc64 wchan improvement (Mark DeWandel)
- hint @pause changes for ia64
- longer scsi scan timeout on ppc64 (Julie DeWandel)
- readv/writev for raw IO (Stephen Tweedie)
- fix for easy stack/mmap collisions (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060164000">- various XAPIC related fixes (Ingo Molnar)
- correct context switch and iowait stats with HT shared runqueues
- ext3 obscure deadlock fixes (Stephen Tweedie)
- knfsd fixes: blocked lock, symlink error &amp; missing bkl  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060077600">- de_thread bugfix from 2.6 upstream  (Matt Wilson)
- viocons driver update (Julie DeWandel)
- fix VM non-overcommit mode (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059991200">- plug data leak in aio code (Jeff Moyer)
- initial list of 4G/4G unsupported modules (Tom Coughlan)
- nfs softirq race fix (Steve Dickson)
- updated IPSEC patch (David Miller)
- networking updates/fixes from 2.4.22-preX (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059904800">- drop orlov allocator for now (Arjan van de Ven)
- correct HT cpu pair detection (Arjan van de Ven)
- build zImage.partial for netbooting on pSeries (Matt Wilson)
- fix missing symbols</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059818400">- export two AIO symbols for OCFS
- disable CONFIG_DEBUG_SLAB so performance testing can start
- crosshost mmap hooks for distributed filesystems (Stephen Tweedie)
- include partially linked zImage for pSeries netboot (Matt Wilson)
- nfs highmem fix, unmap when xdr_kmap() fails (Steve Dickson)
- update megaraid2 locking to work with IORL (Com Coughlan)
- make sure to build the qla2100 driver (Tom Coughlan)
- fix cdrom ioctl 32 bit compatibility for ppc64, amd64 (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059645600">- run depmod on install of unsupported modules (Arjan van de Ven)
- fix register corruption in IA64 lazy fpu handling (Larry Woodman)
- add b44 network driver (Jeff Garzik)
- make ppc64 pci interface routines compatible (Julie DeWandel)
- allow 32 bit userland on AMD64 and PPC64 to use volumes &gt; 2GB (Jeff Moyer)
- nfsd: acl related mount and export flags (Steve Dickson)
- fix nfs exp_fodrop oops (Steve Dickson)
- fix missed signal wakeups on ppc64 (Mark DeWandel)
- smp scalable timer bugfixes (Ingo Molnar)
- workaround for a prefetch bug in some Athlon CPUs (Ernie Petrides)
- code to make more modules unsupported for 4/4 split (Arjan van de Ven)
- various spec file and config cleanups
- viopath driver fix (Julie DeWandel)
- add match for 440gx chipset bioses (Arjan van de Ven)
- move epic100 and ne2k-pci back to supported (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059472800">- updated finegrained process accounting patch (Doug Ledford)
- make iSeries compile without CONFIG_ICOM (Julie DeWandel)
- nfsd: only set -&gt;reuse for tcp sockets, not udp  (Steve Dickson)
- enable the 4G/4G split on the i686-bigmem kernel only
- sysrq support for viocons (Julie DeWandel)
- limit pci_bus size changes to ppc64 (Jeff Garzik)
- fix for signal delivery race (Ernie Petrides, Mark DeWandel)
- add ShdPnd to /proc (Ingo Molnar)
- fix de_thread() hang (Ingo Molnar)
- add kernel support for CLONE_STOPPED (Ernie Petrides)
- make sure to initialise HVC console (Julie DeWandel)
- fix _SEG abort hit in ACPI code (Larry Woodman)
- build addon drivers on amd64 and ppc64 too (Tom Coughlan)
- build IPS driver on all architectures (Tom Coughlan)
- fix a few ia32 emulation bugs for IA64 (Larry Woodman)
- enable correct/new __clear_bit macro for IA64 (Larry Woodman)
- flexible mmap allows mappings of huge executable segments (Larry Woodman)
- sysrq-w for s390 (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058436000">- have s390 cpu_relax() also include barrier  (Pete Zaitcev)
- convert ppc64 xmon traceback code to ksymoops (Matt Wilson)
- rename kstat_sum() variable with aliasing problems  (Ingo Molnar)
- fix AIO-on-hugetlbfs crash (Ingo Molnar)
- update support for IA64 Long's Peak ACPI serial ports  (Larry Woodman)
- turn on xmon for both iSeries and pSeries (Matt Wilson)
- bugfix to make CLI work correctly on iSeries (Julie DeWandel)
- SATA bugfixes (Jeff Garzik)
- enable 4G/4G split in -BOOT kernel, due to syslinux trouble</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058349600">- fix s390 compile (Pete Zaitcev)
- taint the kernel on sii6512 driver link, GPL but no source available
- handle debug registers with 4G/4G split (Ingo Molnar)
- tgkill syscall for ppc64 (Julie DeWandel)
- fix NFSD/ACL/ext3/jbd deadlock (Stephen Tweedie, Steve Dickson)
- fix maxcpus=1 installation panic fix for ppc64 (Julie DeWandel)
- IDE byteswapping io functions for ppc64 (Julie DeWandel)
- update sata driver (Jeff Garzik)
- raise the number of /proc entries (Julie DeWandel)
- sticky sysrq key with timeout (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058263200">- make SysRq-W useable on s390 (Pete Zaitcev)
- updated process accounting patch (Doug Ledford)
- siginfo_t fixes for s390x and amd64 (Jakub Jelinek)
- clustered NFS fail-over support (Steve Dickson)
- autofs4 updates and fixes
- ia64 patches to reduce cpu power/temp in idle loop (Larry Woodman)
- add irqsafe up() for LVM locking (Stephen Tweedie)
- O_DIRECT fallback to synchronous allocation in holes (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058176800">- ia64 HP iommu: add sx1000 detection
- possible bug in s390x 32-bit emulation  (Roland McGrath)
- updated ipsec patch, should fix all current ipv6 bugs  (David Miller)
- finegrained process accounting (Doug Ledford)
- ICH5 pci irq routing, and associated ids (Jeff Garzik)
- fix the machine_real_restart() reboot path on 4G/4G (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057917600">- fix amd64 agp-gart code to work around hugetlbfs debug code (Jim Paradis)
- fix ppc32 pthread_cancel (Jakub Jelinek) 
- Do not sent IGMP leave messages unless IFF_UP  (David Miller)
- software iommu for ia64 systems without hardware iommu (Jason Baron)
- fix ext3 oops fix during dio, LTP failure (Arjan van de Ven, Stephen Tweedie)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057831200">- Remove illegal calls to dst_link_failure</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057831200">- enable HT scheduler for bigmem kernel
- add tgkill syscall for x86 and ia64
- make -BOOT kernel smaller w/ modular md and CONFIG_SMALL
- rmap VM updates
- 4G/4G agpgart potential corruption fix (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057744800">- switch off exec shield everywhere
- eliminate hostfs for amd64 (Jim Paradis)
- megaraid update, mostly vendor ID (Tom Coughlan)
- shrink boot kernel by disabling some config options
- additions for the SCSI whitelist (Tom Coughlan)
- ia64 extable fix (Jason Baron)
- viocons driver upgrade (Julie DeWandel)
- another ia64 mmu context wraparound deadlock fix (Larry Woodman)
- iSeries icom debugger patch (Julie DeWandel)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057658400">- Drop io_request_lock in usb scsiglue.c:device_reset</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057658400">- fix cpu_relax for amd64 and ia64 to include a barrier (Ingo Molnar)
- restore o_direct api compatibility (Stephen Tweedie)
- fix possible ext3 deadlock in o_direct patches (Stephen Tweedie)
- ACLs for JFS (Stephen Tweedie)
- fix /proc/cpuinfo runqueue printing (Ingo Molnar)
- via audio fixes, smaller emu10k1 patch (Alan Cox, Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057572000">- fix process accounting, tux ftp passwords and si_pid (Ingo Molnar)
- 32bit compat statfs fix (Guy Streeter)
- don't serialise exit on BKL when accounting is off (Ingo Molnar)
- truncate timeouts to 32 bits on 64bit systems (Ingo Molnar)
- fix network channel bonding (Jeff Garzik)
- split netdump patch into core and net-drivers (Jeff Garzik)
- delayed tlb flushing for ia64 (Larry Woodman)
- emu10k1 driver fixes
- kksymoops for AMD64 (Jim Paradis)
- select bugfixes from 2.4 upstream (Jeff Garzik)
- OOM tweaks (Rik van Riel)
- use seq_file for /proc/interrupts on ppc64 (Mark DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057140000">- add qdio and qeth drivers for s390(x)  (Phil Knirsch)
- slab cache scale bugfix (Larry Woodman)
- S390: qdio &amp; qeth drivers (Phil Knirsch)
- hangcheck timer for ppc64 (Julie DeWandel)
- fix race conditions in ia64 ia32 compat layer (Larry Woodman)
- update megaraid, aic7xxx, cciss and cpqarray drivers (Tom Coughlan)
- nfs xdr_shift_buf, tcp client corruption and alignment (Steve Dickson)
- rhconfig.h stuff for ppc64, s390 and s390x (Matt Wilson)
- AIO on sockets</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057053600">- kiobuf optimisations (Stephen Tweedie, Larry Woodman)
- ipsec update (David Miller)
- ipvs update to deal with timer changes (David Miller)
- 4G/4G split patch optimisations (Ingo Molnar)
- hangcheck timer (Jason Baron)
- recent (AGP 3.0) agpgart support (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056967200">- semtimedop() support on s390/s390x  (Ernie Petrides)
- fix a 4G bug that triggers on systems with &gt;30 CPUs (Ingo Molnar)
- updated SCSI SMP affine queueing patch  (Arjan van de Ven)
- page hash prefetch in do_generic_file_read bugfix (Julie DeWandel)
- updates the qlogic driver to the latest (Arjan van de Ven)
- slab cache SMP scalability tweaks (Ingo Molnar)
- ACPI 2.0 for IPF and AMD64 (Jim Paradis, Larry Woodman)
- statm fixes for hugetlbfs and remap_file_pages (Jason Baron)
- acpi serial port detection (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056708000">- iseries driver updates (Julie DeWandel)
- aio scalability and 2.5 backports  (Ingo Molnar)
- SMP scalable timers (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056621600">- make qlogic driver use new scsi infrastructure (Arjan van de Ven)
- export aio kvec functions
- fix statm oops
- compile fixes 
- NFS ACL over the wire protocol extensions (Steve Dickson)
- rate limit slab pruning, to limit IPI load on SMP systems (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056448800">- scsi request lock scaling (Ingo Molnar)
- cpu affinity for scsi command processing (Ingo Molnar)
- use softirqs instead of bhs for the scsi layer (Doug Ledford)
- igmpv3 fixes and improvements (David Miller)
- oprofile for ppc64 (Will Cohen)
- Increase MAX_ADDR_LEN from 8 to 32 for Infiniband over IP (Tom Coughlan)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056362400">- per-cpu kstat arrays (Ingo Molnar)
- optimise 4G/4G tlb flushing (Ingo Molnar)
- kiobuf reclaim together with buffer reclaim (Arjan van de Ven)
- more scalable gendisk statistics (Ingo Molnar)
- nfs reconnect fixes (Steve Dickson)
- add 32-bit compatibility for ustat system call on ppc64 (Julie DeWandel)
- scalable gettimeofday (Ingo Molnar)
- hugetlbfs ppc64 &amp; s390 bits (Mark DeWandel, Pete Zaitcev)
- hugetlbfs for ia64 (Jason Baron)
- qlogic scsi driver update (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056189600">- nfs patches (Steve Dickson)
- xapic improvements, summit support (Ingo Molnar)
- fix core dump name for multithreaded programs (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056103200">- merge up to marcelo's latest</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056016800">- oom killer fixes (Larry Woodman, Rik van Riel)
- tunable VM overcommit (Rik van Riel)
- hugetlbfs for amd64 (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055930400">- updated iseries virtual drivers (Julie DeWandel)
- nfs lockd improvements (Steve Dickson)
- remap_file_pages improvements (Ingo Molnar)
- /proc/efi/symtab patch for ia64 (Larry Woodman)
- disable O_PROFILE on UP x86 machines
- allow NMI watchdog profiling frequencies up to 10kHz (Ingo Molnar)
- statm (Jason Baron)
- hugetlbfs (Ingo Molnar)
- have nfsd honour ACLs on a per-export basis (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055844000">- Enable O_PROFILE on non-SMP configs (Stephen Tweedie)
- more conservative AIC config options
- Fix BOOT kernel panic while mounting /dev/cdrom (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055757600">- merge to 2.4.21 + selected ac bits
- ipsec upgrade (David Miller)
- HT scheduler patch fix (correct sibling counting)
- make bdflush writeout smoother
- AMD64 gdb fix (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055412000">- don't include unsupported drivers in -BOOT kernel
- merge up to 2.4.21-rc8 + selected ac bits
- FIXME: sysrq for 3170, dasd, odirect &amp; odirect for nfs</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com" date="1055412000">- oprofile for s390</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055239200">- statm (Jason Baron / Julie DeWandel)
- AIO 32-bit compat for 64-bit machines (Julie DeWandel)
- only do bufferhead reclaim in extreme situations (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055152800">- Serial ATA support (Jeff Garzik)
- mtp fusion 2.05.05+ (Dave Maley)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054893600">- XATTR/ACL patches, except NFS over the wire (Stephen Tweedie)
- ipsec module autoloading (David Miller)
- remap_file_pages (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054807200">- upgrade to latest -rmap with Ernie's fixes
- sysrq+C shows the stack dump of all CPUs
- ext3 truncate fix (Stephen Tweedie)
- NFS fixes for HZ=1000 machines (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054720800">- 4G/4G split fix (Ingo Molnar)
- ppc64 fixes (Guy Streeter, Rik van Riel)
- enable oprofile on amd64
- ipsec updates (David Miller)
- fork returns pid instead of task_struct* (Julie DeWandel)
- ia64 ptrace bugfixes (Dave Anderson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054634400">- HP diva serial driver (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054548000">- NFS over TCP patches (Steve Dickson)
- switch to using ppc64pseries/ppc64iseries arches instead of
  kernel-pseries and kernel-iseries (Jeremy Katz)
- egenera scsi bus rescan patch (Jeff Garzik)
- oprofile (Graydon Hoare)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054288800">- futex requeue (Ingo Molnar)
- enable NAPI for E1000
- signal latency and scheduler improvements (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054202400">- kscand oops fix (Ingo Molnar, Rik van Riel)
- pcnet32 fixes (Julie Dewandel)
- raid autorun (Pete Zaitcev)
- turn off CONFIG_SUNDANCE_MMIO (Jeff Garzik)
- flexible mmap (Larry Woodman)
- ppc64 fixes (Matt Wilson, Guy Streeter)
- loop softirq 10 times before giving up (Ingo Molnar)
- O_DIRECT for NFS (Steve Dickson)
- prevent md from shutting down active arrays (Doug Ledford)
- rmap updates, inode reclaim &amp; higher order allocations (Rik van Riel)
- network channel bonding (Jeff Garzik)</changelog><changelog author="Jim Paradis &lt;jparadis@redhat.com&gt;" date="1054116000">- Re-enable x86_64 in build
- x86_64-specific updates for exec-shield
- Bring in improved "nonx" support for x86_64 from upstream</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1054116000">- Hush s390 printks upon user SIGSEGV by default. It can be enabled back with
  a sysctl kernel.userprocess_debug.
- Enable optional 3270 console mode on s390.</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053684000">- get rid of vsyscall page (Arjan van de Ven)
- fix missing symbol copy_str_fromuser_size</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053424800">- exec-shield updates to fix hang-on-boot on some systems (Ingo Molnar)
- temporarily disabled the architectures, which got broken by exec-shield updates
- fix for LTP sigprocmask02 failure (Matt Wilson)
- ppc64 updates (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053338400">- pagecache scalability patch (Ingo Molnar)
- IPC semaphore scalability patch (Ingo Molnar)
- ppc64 updates (Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052992800">- exec-shield (Ingo Molnar)
- AMD64 ACPI updates (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052906400">- reenable O_DIRECT, O_DIRECT fixes and superbh-aio (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052820000">- vma merging (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052733600">- nmi profiler
- VM updates: rmap, dma zone isolation
- tux (Ingo Molnar)
- ext3 stall fixes (Ingo Molnar)
- e1000 fixes (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052474400">- config files overhaul (Arjan van de Ven)
- fix bug in mlock patch
- IPVS (Dave Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052388000">- import IO elevator changes from gingin
- critical VM fix
- matrox framebuffer patch for pseries (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052301600">- hammer nptl fixes (Ulrich Drepper)
- 4G/4G split (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052215200">- upgrade to 2.4.21-rc1-ac4 (minus -ac acpi and xapic changes)
- drop nfs patches since those seem to be in -ac</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052128800">- larger message buffer size + boot option (Mark DeWandel)
- AMD64: tls handling, coredump fixes (Jim Paradis)
- SMP &amp; highmem VM fixes (Ben LaHaise)
- HT+NUMA scheduler (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051956000">- ext3 orphan cleanup fix (Ernie Petrides)
- s390 affinity fixes (Pete Zaitcev)
- i386 vsyscall DSO changes (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051869600">- bugfixes and config changes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051783200">- enable semtimedop for other architectures (Ernie Petrides)
- large pci bus numbers (Julie DeWandel)
- bugfixes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051610400">- igmpv3 (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051524000">- generic 32bit compat stuff + amd64/ppc64/ipf pieces (Matt Wilson)
- clustered apic (XAPIC) support (Ingo Molnar)
- ppc64 architecture updates (Matt Wilson, Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051264800">- ppc64 fixes</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051178400">- collapse ipsec into one patch (David Miller)
- ppc64 build fix (Matt Wilson)
- improve smp scheduler fairness (Ingo Molnar)
- allow mlock for normal users, up to ulimit (Ingo Molnar)
- AMD64 port (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051092000">- clean up mechanism to pass extra CFLAGS so we don't override what's
  already there
- merge ia64 build stuff (Larry Woodman)
- merge varyio + superbh (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051005600">- merge up to 2.4.21-rc1
- IA64: virtual mem_map, acpi updates, netdump update, pte-highmem &amp; fealnx
- IA64: architecture specific patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050919200">- import davem's ipsec patch pile
- ppc64 kallsyms and dump_fpu patches (Matt Wilson)
- rmap updates (x86_64 &amp; bufferhead reclaim)
- ppc64 ptrace patch (Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050660000">- open up patch namespace 2000-5000 for network protocol changes
- renumber existing patches in that range</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050573600">- make sure to actually apply the rmap-updates patch
- iowait statistics
- ppc64 code merge (Mark &amp; Julie DeWandel)
- ppc64 build scripts (Matt Wilson)
- raise symlink recursion level to 8 (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050487200">- merge up to marcelo's latest
- pte-highmem bits for x86-64 and ppc64</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050400800">- merge up to 2.4.21-pre7-ac1
- drop semtimedop patches (now in -ac)
- drop nfs xprt_fixes, fix_softirq, d_drop and nfs-readeof (merged in -pre7)
- add !CONFIG_QUOTA compile fix for 2.4.21-pre7-ac1</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1050314400">- add LCS driver (endemic to s390)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050314400">- add rmap VM
- add kunmap_atomic debugging patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050141600">- remove dir.c part of NFS kmap_atomic patch for now
- using strlen as local variable name in nfs code kills, literally</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050055200">- merge S390(x) back in  (Pete Zaitcev)
- fix NFS kmap_atomic patch
- sched.c patch to disable interrupts in wake_forked_task  (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049968800">- AIO infrastructure  (Ben LaHaise)
- update NFS kmap_atomic patch  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049882400">- semtimedop patches  (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049796000">- I know understand linux-2.4.20-nfs-readeof.patch, so I merged it
- netdump update (Dave Anderson)
- 64 bit pci &amp; elf loader fix (Mark &amp; Julie)
- nptl whitespace patches, folded into nptl patch (Arjan van de Ven)
- rediff linux-2.4.18-smallpatches.patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049709600">- merge NFS patches by Steve Dickson (blame me for NFS kmap_atomic patch)
- split x86 syscall stuff out into separate patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049536800">- fix nptl patch, now it boots</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049450400">- port linux-2.4.20 o1-nptl.patch from gingin
- rediff a few patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049277600">- update linux-modules-unsupported (with Arjan)
- fix up the list a second time to fix module dependencies</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049191200">- copy -head into new AS3 branch
- remove i586 build
- remove 7.x compatibility (linux-2.4.9-fstat.patch)
- architecture patches get more breathing room (100 - 500)
- reserve patch numbers 1000 - 2000 for VM
- patch numbers 2000 - 5000 for bugfixes, changes and updates to
  existing drivers and filesystems
- remove inode reclaim patch (will be merged later as part of rmap)
- remove io priority scheduler (still experimental)
- remove nfs patches (linux-2.4.20-nfs-cto.patch,
  linux-2.4.20-nfs-access.patch &amp; linux-2.4.20-nfs-rdplus.patch)
- remove linux-2.4.18-gericom.patch
- update netdump from RH9 branch</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1048240800">- Added three NFS performance patches</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048240800">- add a timer for aging requests up</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048154400">- fix the sorting in the io elevator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048068000">- remerge ext3 orlov allocator and enable
- more priority io elevator infrastructure work</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1047117600">- merge ext3 orlov allocator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046772000">- go to 2.4.21-pre5-ac1
- split the rpm into a primary fileset and secondary (rare modules) fileset</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046253600">- go to 2.4.21-pre4-ac6
- drop lots of patches
- trim changelog to not have 2000, 2001 and 2002 anymore</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045476000">- downgrade pwc webcam driver one notch to the last known working version
- work around vm livelock
- make the cciss driver not enable irq's in it's irq handler</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1045130400">- fix for shared statistic &lt; 0</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045130400">- Signal fixes for LSB testsuite
- merge patch to fix init=/bin/sh
- 2.4.21-pre4-ac4 bugfixes (mostly IDE crashes)</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044784800">- merge 2.4.21-pre4-ac3 bugfixes</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1044352800">- Add ext3 fix for truncating negative i_blocks</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1044266400">- add oopsmeharder for debugging hard hangs</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044266400">- merge rmap15d
- set the sbp2 command buffer to 64 elements instead of 8</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1043834400">- merge tcp stall fix from DaveM
- merge bugfixes from 2.4.21-pre4</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1042452000">- Merge in the ACL and XATTR patches from the UL and BestBits trees.</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1042279200">- Merge in the LVM pvmove fix to current tree</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1042020000">- add AMD Golem fixup</changelog></package>
<package pkgid="bdf9f789151b9292cf871474220fe60b7e340b9d" name="kernel-doc" arch="x86_64"><version epoch="0" ver="2.4.21" rel="32.0.1.EL.XFS"/><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1117101600">- added SGI XFS patch set</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.0.1.EL" date="1116237600">- prevent shared memory lock/unlock w/o permissions (Dave Anderson)
- prevent mlock() resource limit bypass w/shm locking (Ernie Petrides)
- fix data corruption from pte_clear() races on &gt;4GB x86's (Larry Woodman)
- fix arg/env access in ELF core dumping and /proc reads (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.EL" date="1113559200">- fix data corruption w/ext3 xattr on 64-bit arches (Jason Baron)
- validate LCP frame lengths in PPP async handling (Dave Miller)
- enable forcedeth net driver builds in x86 configs (Jim Paradis)
- isolate IP fragment queues among various callers (Dave Miller)
- prevent busy inodes for symlinks after unmounts (Don Howard)
- revise PCI device ids extending ICH7 support (John Linville)
- work around broken xw4300 BIOS AHCI BAR setup (John Linville)
- add protocol validation in net bluetooth driver (John Linville)
- enable software watchdog timer in s390,x configs (Jan Glauber)
- fix data corruption w/uselib() on bad ELF libs (Ernie Petrides)
- add USB tablet init delay in wacom_probe() (Kristian Høgsberg)
- prevent core dumps with non-readable ELF interps (Dave Anderson)
- add maxevents validation in epoll_wait() handling (Ernie Petrides)
- add len validation in /dev/random poolsize sysctl (Ernie Petrides)
- correct size of ia64 syscall table initialization (Jason Baron)
- correct x86_64 user-mode i/o port validation (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-31.EL" date="1110448800">- fix missing ppc64 netdump/diskdump symbols (Nobuhiro Tachino)
- prevent ia64 unwind from traversing off stack (Jason Baron)
- disable 3w-9xxx driver builds on ppc64 (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-30.EL" date="1110362400">- fix obscure oops in tty init_dev() handling (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-29.EL" date="1109844000">- incorporate urgent late-breaking SATA fixes (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-28.EL" date="1109152800">- add more USB device support to visor driver (Pete Zaitcev)
- implement clustered APIC support for x86_64 (Larry Woodman)
- constrain x86 MSR writes based on cpu model (Jason Baron)
- increase max superbh size for performance (Stephen Tweedie)
- add locking to prevent oops in md_seq_show() (Doug Ledford)
- restore missing ia64 panic_on_oops handling (Tatsuo Uchida)
- implement Ethernet PCI quirk for HP xw9300 (Jim Paradis)
- revert NFS flock() avoidance to -27.7.EL (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.17.EL" date="1108980000">- rework NFS flock() avoidance w/FS_WANT_FLOCK for GFS (Ken Preslan)
- prevent inode corruption from delete/lookup races (Wendy Cheng)
- preserve registers for ia64 16-byte atomic ops (Geoff Gustafson)
- update SCSI whitelist for LSI/HP/STK/EMC devices (Tom Coughlan)
- disable vary_io in ips driver to avoid ctlr hangs (Tom Coughlan)
- correct handling of 2-TB device partitions (Peter Martuccelli)
- update support for ia64 perfmon facility (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.16.EL" date="1108720800">- implement diskdump support for SATA piix/promise (Nobuhiro Tachino)
- correct /proc/mtrr size values on EM64T platforms (Larry Woodman)
- restore page permissions after writes from ptrace() (Don Howard)
- fix /proc parent pids from multi-threaded forks (Ernie Petrides)
- enable software watchdog timer support on s390,x (Jan Glauber)
- update tg3 network driver to version 3.22RH (John Linville)
- incorporate 3w-9xxx driver version 2.24.00.011fw (Adam Manthei)
- correct ending boundary check in filemap_sync() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.15.EL" date="1108548000">- add e100 driver PCI device ids for ICH7 support (John Linville)
- restore obsolete but ignored e100 module params (John Linville)
- implement user-mode (gdb) access to ia64 gate page (Jason Baron)
- fix x86_64 FPU IP and DP values in SIGFPE context (Larry Woodman)
- add qla2200 module parameter to use NVRAM RIO val (Tom Coughlan)
- update 3w-xxxx driver to 1.02.00.037 w/.033 backup (Adam Manthei)
- fix crashes in video Firewire (ieee1394) driver (Bastien Nocera)
- prevent info leaks into ext3 journal disk blocks (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.14.EL" date="1108461600">- enhance AIO performance over NFS w/FS_AIO_SYNC hook (Steve Dickson)
- defer e100_tx_timeout() work from interrupt context (John Linville)
- correct IPV6 DST entry release to prevent route leak (Dave Miller)
- ignore MTU updates from invalid IPV6 ndisc packets (Dave Miller)
- add relevant PCI device ids to extend ICH7 support (John Linville)
- reduce system pauses during heavy page laundering (Larry Woodman)
- fix audit logging of paths w/predicate filter usage (Neil Horman)
- enable building of unsupported fusion isense module (Adam Manthei)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.13.EL" date="1108375200">- increase dxfer size limit for ppc64 SG_IO ioctl32 (David Howells)
- eliminate tty line discipline usage/switching races (Jason Baron)
- fix autofs recognition of ghosted direct map updates (Jeff Moyer)
- fix sg driver race between cmd completion and close (Tom Coughlan)
- prevent e100 data corruption from v.3.0.27-k2 update (John Linville)
- upgrade SATA support (core, libata, new/old drivers) (John Linville)
- implement diskdump support for sym53c8xx adapter (Yuichi Nagahama)
- add USB support for Wacom Cintiq/Intuos3 tablets (Kristian Høgsberg)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.12.EL" date="1107943200">- update e100 network driver to version 3.3.6-k2 (John Linville)
- correct cpu id macro for dual-core Opteron support (Jim Paradis)
- add "numa=off" message on x86_64 OOM kills w/NUMA (Larry Woodman)
- improve user/system timer tick accounting on s390,x (Pete Zaitcev)
- prevent EAGAIN errs from interrupted TCP recv() calls (Dave Miller)
- update cciss disk driver to version v2.4.54.RH1 (Adam Manthei)
- eliminate diskdump cpu id from frozen list (Nobuhiro Tachino)
- fix user-space access bug in USB vicam ioctl (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.11.EL" date="1107424800">- incorporate Emulex driver ioctl module version 1.0.13 (Tom Coughlan)
- eliminate potential call_lock deadlock with diskdump (Tatsuo Uchida)
- fix potential kiobuf_lock deadlock in free_kiovec() (Larry Woodman)
- add L2 cache descriptor for EM64T Irwindale processor (Neil Horman)
- prevent mmap() syscalls from choosing NULL mappings (Rik van Riel)
- include bounce buffer pages in show_mem() output (Larry Woodman)
- add I2C driver support for ICH5 in i2c-i801.c (John Linville)
- correct parport_pc errors on insmod failures (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.10.EL" date="1106906400">- fix futex_wait() race condition that allowed app hang (Ingo Molnar)
- add/correct write barrier placement in timer routines (David Howells)
- add x86_64 NMI switch support to debug kernel hangs (Yuichi Nagahama)
- restore CIV/LVI offset operation in i810_audio driver (John Linville)
- update e1000 network driver to version 5.6.10.1-k2 (John Linville)
- prevent bogus BUG_ON during multi-threaded core dump (Roland McGrath)
- fix x86_64 crash in huge_page_release() w/SHM_HUGETLB (Larry Woodman)
- fix possible mem corruption from /proc/kcore access (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.9.EL" date="1106647200">- fix core dumping over NFS mounts with "intr" option (Roland McGrath)
- prevent multi-threaded app hang from sys_wait4() race (Ingo Molnar)
- restore e1000 support for Intel PCI device id 1014 (John Linville)
- add ac97 quirk entries for HP xw6000/xw6200/xw8000 (John Linville)
- update b44 network driver to upstream version 0.95 (John Linville)
- revert NFS silly-delete and rpciod-hang patches (Steve Dickson)
- fix panics while backing up LVM snapshots (Heinz Mauelshagen)
- fix oops in redirect_target() on DHCP refresh (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.8.EL" date="1105696800">- rework ia64 INIT switch stacks for clean tracebacks (Tatsuo Uchida)
- fix USB raced timeout errors and ohci_complete_add() (Pete Zaitcev)
- add O_DIRECT handling in LVM driver handling (Heinz Mauelshagen)
- downgrade wait4() SIGCHLD/SIG_IGN warning message (Ingo Molnar)
- eliminate potential VMA list races with do_brk() (Dave Anderson)
- ignore ICMP Source Quench messages in tcp_v4_err() (Dave Miller)
- prevent VMA overlap crashes in insert_vm_struct() (Jason Baron)
- move flock() avoidance from NFS up to F/S layer (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.7.EL" date="1105437600">- fix 32-compat alt-stack signal handling on x86_64 (Geoff Gustafson)
- add initialization of ppc64 EEH error buffer size (David Howells)
- make ppc64 xmon work properly with Power5 console (David Howells)
- prevent infinite sync loop from NFS ESTALE writes (Steve Dickson)
- update 8139too network driver w/recent 2.4 fixes (John Linville)
- avoid netfilter oops when ip_conntrack is unloaded (Dave Miller)
- fix potential rpciod hangs during NFS sillydelete (Steve Dickson)
- avoid "No locks available" errors w/flock() on NFS (Ken Preslan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.6.EL" date="1104919200">- fix x86 phys proc ids for non-clustered APIC systems (Geoff Gustafson)
- return EINVAL on e100/e1000 rx-mini/rx-jumbo settings (John Linville)
- fix i810_audio regression from modified ICH6 PCI ids (John Linville)
- prevent race conditions in add_wait_queue_cond() macros (Jeff Moyer)
- fix FAT32 file system corruption w/writing 8M files (Alexander Viro)
- fix derivation/presentation of PHB unit ids on ppc64 (David Howells)
- close OpenFirmware stdin device at boot on ppc64 (David Woodhouse)
- fix 32-bit-compat regression in CMSG validations (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.5.EL" date="1103796000">- add "CommitLimit" data to /proc/meminfo output (Frank Hirtz)
- allow autofs to expire mounts on ppc64 arch (Jeff Moyer)
- add 3c59x EEPROM_RESET for 3c900 Boomerang (John Linville)
- ignore PTE mapping status in page_anon() (Larry Woodman)
- fix SIOCGIFHWADDR handling for zero addr_len (Dave Miller)
- add netdump support for x86_64, ia64, ppc64 (Dave Anderson)
- correct overcommit accounting on fork failure (Frank Hirtz)
- raise default ia64/ia32e swiotlb size to 64M (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.4.EL" date="1103709600">- add network CMSG validation checks (Dave Miller)
- fix data struct leak in ip_options_get() (Dave Miller)
- fix IGMP vulnerabilities in ip[6]_mc_source() (Dave Miller)
- fix e_phnum binfmt_elf loader vulnerability (Dave Anderson)
- clean x86_64 32-bit-compat syscall numbers (Jim Paradis)
- prevent ia64 floating point reg val leakage (Jason Baron)
- add USB io_edgeport driver size check (Peter Martuccelli)
- enable softirq deferral for x86_64 arch (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.3.EL" date="1102586400">- add data/param length sanity checks in smbfs (Alexander Viro)
- prevent /proc/&lt;PID&gt;/cmdline env data disclosure (Dave Anderson)
- make tulip_stop_rxtx() wait for DMA termination (John Linville)
- fix mm_stat regression introduced in -20.13.EL (Rik van Riel)
- correct return value from vlan_dev_change_mtu() (John Linville)
- serialize datagram read w/appropriate semaphore (Dave Miller)
- fix keyboard regression introduced in -24.EL (Peter Martuccelli)
- enable mmap/mprotect PROT_EXEC for legacy apps (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-26.2.EL" date="1101722400">- fix USB problems with keyboards and ia64 oopses (Pete Zaitcev)
- add i810 PCI IDs for nforce3/CK804 audio devices (Jim Paradis)
- fix ppc64 viodasd driver dev naming/limit bugs (David Howells)
- prevent tg3 fiber link bounces w/auto-negotiation (Dave Miller)
- add ac97 quirk handling for i810_audio driver (John Linville)
- prevent incorrect OOM killing with iscsi usage (Larry Woodman)
- create kiobuf cache to reduce lowmem contention (Larry Woodman)
- fix yet another binfmt_elf loader vulnerability (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.1.EL" date="1100512800">- (this is the first build for RHEL 3 Update 5)
- implement open() recovery from NFS ESTALE errors (Neil Horman)
- clean up warnings from lpfc and lpfc_703 Makefiles (Tom Coughlan)
- fix nessus-induced kernel panic with auditing (Peter Martuccelli)
- update 3c59x driver to LK1.1.18 and fix reset bug (John Linville)
- fix ext3 O_DIRECT bug in orphan list handling (Stephen Tweedie)
- flush cached dirty pages on NFS reads w/O_DIRECT (Steve Dickson)
- allow ia64 kernel unaligned access msg suppression (Neil Horman)
- correct test for performing buffer-head reclaim (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.EL" date="1100253600">- fix binfmt_elf loader vulnerabilities (Jim Paradis, Dave Anderson)
- limit kernel data struct slabs to single-page allocs (Larry Woodman)
- update Emulex driver to 7.1.14 (backup still 7.0.3) (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-24.EL" date="1100080800">- fix several ppc64 problems with signal catching (David Woodhouse)
- fix several bugs in /proc/ppc64/lparcfg driver (David Howells)
- fix possible diskdump hangs w/megaraid2 driver (Tatsuo Uchida)
- add support for IBM EM64T-based Groucho blade (Peter Martuccelli)
- fix regression in USB BIOS-&gt;kernel hand-off support (Pete Zaitcev)
- fix regression in ia64 kernel stack unwind handling (Don Howard)
- fix regression w/agpgart support of i8xx chipsets (Larry Woodman)
- add support for BLKSSZGET ioctl in cciss driver (Tom Coughlan)
- disable iSCSI builds in ppc64 and s390* configs (Tom Coughlan)
- update Emulex driver to 7.1.13 (backup still 7.0.3) (Tom Coughlan)
- correct SCSI whitelist for Chaparral FR1422 devices (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-23.EL" date="1098957600">- prevent kswapd from getting stuck in prune_icache() (Larry Woodman)
- fix ppc64 single-stepping into signal handlers (David Woodhouse)
- fix corruption from user stack expansion races (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-22.EL" date="1098093600">- prevent add/removal races in SCSI open handling (Doug Ledford)
- fix U3 agpgart regression with Intel i8xx chipsets (Dave Jones)
- update SCSI whitelist for IBM 1722/1724 devices (Tom Coughlan)
- correct TSS descriptor limit checking for x86_64 (Jim Paradis)
- add nforce3/CK804 device support and fix ACPI bug (Jim Paradis)
- add support for "forcedeth" net driver version 0.28 (Jim Paradis)
- enable diskdump support in amd64/ia32e configs (Nobuhiro Tachino)
- restore/improve linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- add missing page_cache_release() in launder_page() (Larry Woodman)
- update Emulex driver to 7.1.11 (backup still 7.0.3) (Tom Coughlan)
- add new USB ids to support latest Wacom tablets (Kristian Høgsberg)
- remove drivers/net/tun.o from unsupported list (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-21.EL" date="1096538400">- fix potential PTE race in do_anonymous_page() (Rik van Riel)
- add "Committed_AS" data to /proc/meminfo output (Frank Hirtz)
- revise DMA zone paging thresholds for x86_64 (Larry Woodman)
- prevent /proc/scsi/scsi oops during probes (David Woodhouse)
- avoid kswapd hangs via free_more_memory() hooks (Rik van Riel)
- update megaraid2 driver to 2.10.8.2 w/2.10.6 backup (Adam Manthei)
- fix do_notify_parent() panic from ptrace death race (Roland McGrath)
- fix large core file support on 64-bit architectures (Dave Anderson)
- enable tux on ia64 and increase max tux threads to 16 (Ingo Molnar)
- fix ia64/s390,x single-stepping w/signal handlers (David Woodhouse)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.14.EL" date="1096452000">- fix hang in SCSI starvation management code (David Howells)
- update SCSI whitelist for NETAPP LUN devices (Wendy Cheng)
- fix s390 cio handling during ESS fail-overs (Pete Zaitcev)
- update Emulex driver to 7.1.8 w/7.0.3 backup (Tom Coughlan)
- update Qlogic driver to 7.01.01 w/7.00.03 backup (Tom Coughlan)
- correct unlock/free order in proc_lookupfd() (Ernie Petrides)
- use ACPI for PCI interrupt routing on ia32e (Jim Paradis)
- allow cpus to boot w/APIC IDs &gt; 8 on ia32e (Jim Paradis)
- fix pid allocation when pid_max &gt; 32768 (Ernie Petrides)
- fix regs in multi-threaded ia64 core dumps (Keiichi Mori)
- enable sym53c8xx driver for ppc64 iSeries (David Howells)
- fix ac97 depmod errors w/hugemem configs (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.13.EL" date="1096365600">- fix aic79xx_osm.h/3c59x.c changes in prior rev (Tachino/Linville)
- allow for larger nfsd block sizes on some archs (Steve Dickson)
- fix possible aacraid driver panic in aac_info() (Tom Coughlan)
- fix xdr argsize check to handle writes &gt;= 2^31 (Steve Dickson)
- update e1000 network driver to version 5.3.19-k2 (John Linville)
- apply several cciss driver fixes (to 2.4.52.RH2) (Adam Manthei)
- fix x86_64 versions of cpu capability test macros (Jim Paradis)
- fix ppc64 HPTE memory corruption race condition (Rik van Riel)
- add sys_epoll support on s390,x (Stephen Tweedie, Pete Zaitcev)
- prevent keyboard.c warnings from mouse clicks (Norm Murray)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.12.EL" date="1096279200">- improve slab cache page reaping heuristics (Larry Woodman)
- implement diskdump support for x86_64 arch (Nobuhiro Tachino)
- add ia64 INIT trigger switch support for debugging (Tatsuo Uchida)
- fix several problems in handling of AIO on pipes (Jeff Moyer)
- update fixes for LTP read02 test hangs with tmpfs (Alexander Viro)
- fix x86_64 single-stepping out of signal handlers (Jim Paradis)
- increase size of ppc64 RTAS error log buffer (David Howells)
- increase max possible kNFSD lockd cookie size (Steve Dickson)
- backport 3c59x fixes for mii-tool problems w/10Mb (John Linville)
- incorporate Cisco's iscsi_sfnet initiator driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.11.EL" date="1095933600">- implement diskdump support for megaraid2 adapter (Tatsuo Uchida)
- update ips driver to version 7.10.18 w/7.00.15 backup (Tom Coughlan)
- correct max page aging interval boundary in kscand() (Larry Woodman)
- add ppc64 support for ptrace() with PT_SINGLESTEP (David Woodhouse)
- update e100 network driver to version 3.0.27-k2 (John Linville)
- fix LTP read02 test hangs when tmpfs is in use (Alexander Viro)
- get proc_dir_entry reference in proc_lookup() (Alexander Viro)
- add exports of several AIO-related interfaces (Larry Woodman)
- reduce swapping during excessive pagecache use (Larry Woodman)
- implement statfs64() syscall on x86 for NFS use (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.10.EL" date="1095847200">- implement early USB hand-off (BIOS-&gt;kernel) support (Pete Zaitcev)
- fix stack pointer calculation in x86 show() handling (Jeff Moyer)
- prevent interference between flock/POSIX lock types (Frank Hirtz)
- update pcnet32 network driver to version 1.30c (John Linville)
- add export of block_commit_write() f/s interface (Larry Woodman)
- implement diskdump support for dpt_i2o adapter (Tatsuo Uchida)
- update mptfusion driver to version 2.05.16.02 (Adam Manthei)
- move disk_dump_notifier_list to diskdumplib.c (Nobuhiro Tachino)
- update s390 zfcp driver to revision 5.31.2.11+ (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.9.EL" date="1095674400">- fix occasional ibmvscsic driver insmod crash (David Howells)
- disable linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- prevent double slashes in symlink auditing (Peter Martuccelli)
- fix overzealous compat32 setsockopt conversions (David Woodhouse)
- backport tulip driver fixes from upstream 2.4.28 (John Linville)
- update tg3 network driver to version 3.10RH (John Linville)
- implement sysctl to force igmp protocol versions (Neil Horman)
- add diskdump performance improvement info (Nobuhiro Tachino)
- fix s390 iucv lost connections and ping hangs (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.8.EL" date="1095588000">- prevent diskdump deadlock in case of die() recursion (Tatsuo Uchida)
- add x86/x86_64 support for ptrace() w/PT_SINGLESTEP (Roland McGrath)
- fix x86/x86_64 single-stepping into signal handlers (Roland McGrath)
- increase x86 value for MAX_MP_BUSSES definition to 260 (Ingo Molnar)
- eliminate ia64 potential for scheduler runq deadlock (Larry Woodman)
- add support for /proc/sys/kernel/mem_nmi_panic sysctl (Dave Anderson)
- prevent keyboard-initiated sysrq hangs in handle_sysrq() (Jeff Moyer)
- fix intermittent netdump hangs from cpu-frozen messages (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.7.EL" date="1095415200">- fix premature OOM killing change added in prior rev (Larry Woodman)
- backport vlan driver fixes from upstream 2.4.28-rc1 (John Linville)
- add _sb_findmap symbol export in s390/s390x kernels (Pete Zaitcev)
- add ppc64 support for 32-bit sendfile64() syscall (David Howells)
- fix 32-bit IPC_INFO shmctl() syscalls for ppc64 (David Howells)
- upgrade libata/SATA support to current 2.4 bits (John Linville)
- avoid USB device resets of shared/busy interfaces (Pete Zaitcev)
- fix miscellaneous problems in ppc64 icom driver (David Howells)
- fix ip_queue_maxlen sysctl for ip[6]_queue modules (Neil Horman)
- add module parm for max entries in NFS_ACL replies (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.6.EL" date="1095156000">- prevent OOM killer from kicking in prematurely (Larry Woodman)
- avoid NMI watchdog crashes during sysrq-m usage (Wendy Cheng)
- add auditing support for ia64 clone2 syscall (Peter Martuccelli)
- correct sign of auditing error codes for ia64 (Peter Martuccelli)
- implement ia64 auditing 32-bit-disable sysctl (Peter Martuccelli)
- fix ia64 faults w/stale VHPT-generated TLB entries (Dave Anderson)
- fix invalid x86_64 checksums for multicast packets (Mike Gahagan)
- fix incorrect blocking bug inside wakeup_kswapd() (Larry Woodman)
- validate appropriate media type in DVD drives (Doug Ledford)
- reduce s390 stack usage in qeth/qdio drivers (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.5.EL" date="1094810400">- prevent scenarios that lead to hang of kswapd (Larry Woodman)
- add locking for access to /proc/bus/usb/devices (Pete Zaitcev)
- correct x86 rescheduling to handle apm=power-off (Ingo Molnar)
- fix OOM killer locking and mm referencing holes (Larry Woodman)
- pin ia64 mapping for idle proc stack during boot (Larry Woodman)
- fix warning throttle for amd64 stack overflow check (Neil Horman)
- fix content lengths when using tux gzip compression (Ingo Molnar)
- add auditing support for pread/pwrite syscalls (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.4.EL" date="1094724000">- prevent bogus data in /proc/scsi/ibmvscsi/* (David Howells)
- update tg3 network driver to version 3.9RH (John Linville)
- improve ramfs memory alloc w/scarce highmem (Larry Woodman)
- correct several values in /proc/ppc64/lparcfg (David Howells)
- allow dirty page rebalancing under mem pressure (Rik van Riel)
- prevent memory leak in scsi_build_commandblocks() (Doug Ledford)
- fix potential kswapd deadlock w/disk quota usage (Larry Woodman)
- increase MAX_IO_APICS from 8 to 32 for x86_64 arch (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.3.EL" date="1094205600">- fix various error path bugs in bcm5820 driver (John Linville)
- validate addresses used with /dev/kmem accesses (Neil Horman)
- eliminate IPSEC tunnel leaks when using IPComp (Dave Miller)
- add auditing support for utimes() syscalls (Peter Martuccelli)
- prevent netconsole freeze w/cable dis-/re-connect (Jeff Moyer)
- correct reboot_cpu validation for "reboot=s&lt;n&gt;" (Doug Ledford)
- fix mem/irq clean-up in olympic tokenring driver (Neil Horman)
- update network bonding driver to version 2.6.0 (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.2.EL" date="1094032800">- add maps/rlimits output with print-fatal-signals=2 (Ingo Molnar)
- backport ac97 sound support from upstream 2.4.27 (John Linville)
- eliminate kernel stack data leaks from USB drivers (Mark Cox)
- fix interrupt status mask in AMD PCnet32 driver (David Howells)
- fix module loading problems in ibmvscsic driver (David Howells)
- fix x86 shared runq mapping when ACPI data is bad (Bernd Schmidt)
- disable enhanced error handling on PCI-ISA bridges (David Howells)
- add memory-mapped i/o support to i810_audio driver (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.1.EL" date="1093860000">- (this is the first build for RHEL 3 Update 4)
- backport r8169 network driver changes from 2.4 (John Linville)
- update i810_audio sound driver to version 1.01 (John Linville)
- convert USB UHCI driver warning to debug message (Pete Zaitcev)
- backport 2.6 PROT_GROWSDOWN/UP mprotect() support (Jakub Jelinek)
- lower ppc64 console logging level of RTAS messages (David Howells)
- fix ppc64 handling of "smt-emabled=off" boot option (David Howells)
- correct socket sndbuf accounting w/IP_MULTICAST_LOOP (Neil Horman)
- reduce x86_64 user stack start randomization to 16K (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.EL" date="1092823200">- change TARGET_CPUS on x86_64 to include all on-line cpus (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-19.EL" date="1092304800">- fix possible races/overflows in file offset handling (Alexander Viro)
- correct logging of boot progress messages on Power5 (David Howells)
- extend ppc64 EEH support for other types of devices (David Howells)
- fix ibmveth driver to properly shut down and restart (David Howells)
- fix several races and overflows in ppc64 RTAS driver (David Howells)
- backport "acpi=noirq" support to work around Nocona hangs (Don Howard)
- conditionalize pbn_hp_diva to fix serial driver oops (Matthew Galgoci)
- add amd64 GART entry guard mappings for PCI mis-prefetch (Jim Paradis)
- upgrade SATA support again to resolve several problems (Jeff Garzik)
- qualify ia32e IRQ affinity disable with BIOS flag check (Jim Paradis)
- fix eeh_check_failure() on ppc64 to be interrupt safe (David Howells)
- correct ppc64 EEH macros to use appropriate data size (David Howells)
- fix x86/ia64 no-wait handling in smp_call_function() (Larry Woodman)
- fix "Filter target 0x203 not known ..." audit msgs (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-18.EL" date="1090404000">- prevent s390 mlock hangs with follow_page() rework (Ernie Petrides)
- fix Power5 initialization and handling of RAS IRQs (David Howells)
- fix ppc64 viocons driver deadlocks with printk() (David Howells)
- apply eh_timeout, netdump, cli fixes in diskdump (Tatsuo Uchida)
- add skip_mapped_pages tuning for page eviction (Stephen Tweedie)
- fix initrd's effect on ppc64 mem_end calculation (David Howells)
- allow HT support on ppc64 systems with single cpu (David Howells)
- backport v2.0.8 aic7xxx driver h/w support for Dell (Tom Coughlan)
- correct ppc64 device node searching in hvsi driver (David Howells)
- fix KMI compat problem w/pgprot_t in x86 NX support (Jim Paradis)
- resurrect mptfusion driver backup version 2.05.05 (Tom Coughlan)
- disable IRQ affinity setting on some ia32e systems (Jim Paradis)
- update SCSI whitelist for Dot Hill SANnet/StorEdge (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-17.EL" date="1089280800">- account for zone holes in big hash table allocator (Stephen Tweedie)
- prevent reserved stack space overflow of mmap_top (Ernie Petrides)
- fix USB crash in scan_async() with EHCI hardware (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-16.EL" date="1088848800">- enable exec-shield and add x86 NX support (Ingo Molnar, Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.19.EL" date="1088762400">- add owner check in inode_change_ok() for gid changes (Ernie Petrides)
- fix race in finish_task_switch() between wakeup/exit (Ernie Petrides)
- remove Samsung CD-ROM SN-124 from IDE DMA blacklist (Tom Coughlan)
- update e1000 network driver to version 5.2.52-k3 (John Linville)
- add auditing support for semtimedop syscalls (Peter Martuccelli)
- fix tasklet and locking bugs in Power5 hvsi driver (David Howells)
- fix megaraid2 handling of TUR cmds with SCSI CD-ROM (Adam Manthei)
- update SCSI whitelist for HP NS E1200-160 router (Tom Coughlan)
- prevent x86 read_ldt() from reading beyond kmap (Ernie Petrides)
- force single loadable segment in ia64 kernels (Jakub Jelinek)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.18.EL" date="1088157600">- implement ia64 work-around for TLB fetch timeout MCA (Larry Woodman)
- fix Power3 interrupt initialization in ppc64 setup (David Howells)
- correct info msg, prevent double panic in diskdump (Tatsuo Uchida)
- defend against NULL "mm" ptrs in page_referenced() (Rik van Riel)
- fix miscellaneous audit subsystem problems (Peter Martuccelli)
- prevent crash with tux CGI execution on x86_64 (Ingo Molnar)
- add installer info to SATA sx8 block driver (Jeff Garzik)
- turn on vary_io flag in SCSI ips driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.17.EL" date="1087984800">- allocate big system hash tables w/bootmem allocator (David Howells)
- prevent loading aic7xxx_old when aic7xxx is in use (Doug Ledford)
- implement stat() recovery from NFS ESTALE errors (Steve Dickson)
- fix raw/O_DIRECT i/o bug with unmapped pages (Stephen Tweedie)
- correct another locking hole in RAID1 handling (Doug Ledford)
- fix __x86_64__ conditional in megaraid2.c driver (Adam Manthei)
- fix unresolved symbols on ia64 in cciss driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.16.EL" date="1087898400">- make NFS sillydelete wait for unlink completion (Steve Dickson)
- prevent EIO w/concurrent O_DIRECT+buffered i/o (Stephen Tweedie)
- upgrade SATA support (core, libata, and drivers) (Jeff Garzik)
- implement futex() FUTEX_CMP_REQUEUE op (Al Viro, Pete Zaitcev)
- update b44 network driver to version 0.93 (John Linville)
- avoid unix_stream_sendmsg() ENOBUFS errors (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.15.EL" date="1087812000">- improve SCSI mid-layer error handling w/sdev_retry_q (Doug Ledford)
- eliminate rw-semaphore races between waiter/wakeup (David Howells)
- add locking and fix accounting bug in RAID1 handling (Doug Ledford)
- backport Carmel sx8.c driver from upstream 2.4 base (John Linville)
- rename ppc64-squadrons-* patches to ppc64-power5-* (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.14.EL" date="1087639200">- introduce support for IBM Squadrons/Power5 systems (David Howells)
- update aacraid driver to 1.1.5-2339 w/1.1.2 backup (Adam Manthei)
- allow sys_remap_file_pages() on unlocked ramfs VMAs (Larry Woodman)
- fix diskdump hangs during resets with aic79xx driver (Tatsuo Uchida)
- fix possible data corruption when using SHM_HUGETLB (Larry Woodman)
- set QLogic HbaApiNode proc file permissions to 0600 (Tom Coughlan)
- add IRQ blocking/restoring in add_gendisk/del_gendisk (Jeff Needle)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.13.EL" date="1087466400">- fix problem causing PCI bus 255 to be missing on ia64 (Ben Woodard)
- make nfs_statfs() recognize/handle fs size overflows (Steve Dickson)
- update QLogic driver to 7.00.03-RH1 w/6.07.02 backup (Tom Coughlan)
- allow procfs to utilize more dynamic inode numbers (David Howells)
- prevent inappropriate "unexpected IO-APIC" messages (Ernie Petrides)
- avoid lost dirty page bits in s390/s390x VM handling (Pete Zaitcev)
- fix ACPI SCI interrupt defaults and add kernel params (Jim Paradis)
- fix user-space access bugs in acpi/airo/decnet/sound (Alexander Viro)
- remove drivers/net/starfire.o from unsupported list (Ernie Petrides)
- fix mm_struct mem leak in copy_process() error path (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.12.EL" date="1087293600">- correct s390/s390x tests for PT_AUDITED flag (Peter Martuccelli)
- update e100 network driver to version 2.3.43-k1 (John Linville)
- update megaraid2 driver to 2.10.6 w/2.10.1.1 backup (Adam Manthei)
- add x86_64 auditing support for 32-bit-compat (Peter Martuccelli)
- fix ia64 unwind handling for UNW_INSN_SETNAT_MEMSTK (Jason Baron)
- update cciss driver to v2.4.52 for several fixes (Tom Coughlan)
- fix variable block mode tape handling in st driver (Tom Coughlan)
- incorporate latest Emulex fibre channel driver (Tom Coughlan)
- fix USB EHCI problem with BIOS-to-host handoff (Pete Zaitcev)
- update SCSI whitelist for DDN/Xyratex/SanDisk/CBOX3 (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.11.EL" date="1087207200">- upgrade to latest autofs4, remove from unsupported list (Jeff Moyer)
- fix memory corruption bug in audit driver code (Peter Martuccelli)
- store adjusted KSP value in ia64 diskdump support (Tatsuo Uchida)
- update e1000 network driver to version 5.2.52-k1 (John Linville)
- update ips driver to version 7.00.15 w/6.11.07 backup (Adam Manthei)
- implement USB device interlock between ioctls/SCSI-ops (Pete Zaitcev)
- update tg3 driver to version 3.6RH for upcoming chipsets (Dave Miller)
- downgrade several PCI cache line size debugging messages (Jim Paradis)
- correct x86_64 32-bit-compat support for AIO syscalls (Jeff Moyer)
- prevent FPU exception handling hangs on x86/x86_64 (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.10.EL" date="1086948000">- give wait.func highest priority in wake_up_filtered() (Larry Woodman)
- reduce system time when using sys_remap_file_pages() (Larry Woodman)
- enable CONFIG_SOFT_WATCHDOG module for ppc64 configs (David Howells)
- improve page allocation to avoid unnecessary swapping (Rik van Riel)
- implement diskdump support for ia64 with mptfusion (Tatsuo Uchida)
- disable native ia32 support for ia64 Montecito cpus (Jason Baron)
- save/restore P4/ia32e perf registers for oprofile (Will Cohen)
- fix oprofile ESCR_SET_EVENT_SELECT() event mask (Will Cohen)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.9.EL" date="1086775200">- update s390 zcrypt driver to version 1.2.1 (Pete Zaitcev)
- update network tg3 driver to version 3.5RH (Dave Miller)
- eliminate separate ia32e oprofile processor id (Will Cohen)
- update SCSI whitelist for IBM 2105/2145 devs (Doug Ledford)
- avoid EAGAIN errors on blocking UDP sockets (Steve Dickson)
- avoid putting locked inodes on dirty list (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.8.EL" date="1086688800">- decouple NFS O_DIRECT handling for performance gain (Steve Dickson)
- export page_is_ram() interface for amd64/ia32e arch (Jim Paradis)
- enable CONFIG_SCSI_SATA_* options in x86_64 configs (Jim Paradis)
- update mptfusion driver to 2.05.16 w/2.05.11.03 backup (Adam Manthei)
- fix nopage_sequential_readahead() and filemap_sync() (Larry Woodman)
- fix USB EHCI driver to avoid Squadrons install oops (Pete Zaitcev)
- add x86 NMI trigger switch support for debugging (Yuichi Nagahama)
- add dmi_blacklist[] entry for "Intel NA440BX DP" (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.7.EL" date="1086602400">- apply some minor scsi_dump_status() format tweaks (Doug Ledford)
- implement SCSI support for dynamic add (hot plug) (Doug Ledford)
- upgrade lvm driver logic to version 1.0.8-2 (Heinz Mauelshagen)
- fix x86_64 definition for inlined ffs() function (Jim Paradis)
- preserve VM_MAYEXEC for executable stack support (Jim Paradis)
- add extra SLBIEs for ppc64 Power5 DD2.0 errata (David Howells)
- add ppc64 32-bit compat for TIOCGICOUNT/MIWAIT (David Howells)
- hold file struct ref when removing POSIX locks (Steve Dickson)
- fix window scaling bug in tcp_ack_update_window() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.6.EL" date="1086343200">- make fsync() flush all pending NFS updates to disk (Steve Dickson)
- complete ia64 support for multiple I/O port spaces (Larry Woodman)
- fix sending of IP broadcast frames with TTL of zero (Neil Horman)
- prevent context switch storms under high VM loads (Larry Woodman)
- fix sigaltstack() errors w/JVM on hugemem kernels (Roland McGrath)
- add locking and improve output in scsi_dump_status() (Doug Ledford)
- add size boundary checking in scsi_resize_dma_pool() (Doug Ledford)
- fix SCSI request struct leak on command init failures (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.5.EL" date="1084528800">- overhaul ia64 SAL/MCA subsystem (Ben Woodard)
- enable x86_64 32-bit UID support (Jim Paradis)
- add initial diskdump support (Nobuhiro Tachino)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.4.EL" date="1084356000">- reduce chance of "VFS: Busy inodes after unmount." errs (Steve Dickson)
- convert "uaddr2" arg ptr in s390x futex() compat syscall (Pete Zaitcev)
- add ppc64 32-bit compat handler for PE_LOCKED_COPY ioctl (David Howells)
- update s390 dasd driver with several recent bug fixes (Pete Zaitcev)
- fix amd64 NUMA node scanning for Northbridge systems (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.3.EL" date="1084183200">- prevent exp_stopfodrop() oops during cluster failover (Steve Dickson)
- make nfs_file_commit() always flush the entire file (Steve Dickson)
- fix pcnet32 driver's MAC address selection on ppc64 (Julie DeWandel)
- backport /dev/random driver fixes for missed wakeups (Mark DeWandel)
- fix hang w/SoundBlaster 16-bit sampling w/odd count (Ernie Petrides)
- make s390 tape driver specify GPL module license type (Pete Zaitcev)
- correct buffer len value in ppc64 pSeries ipr driver (David Howells)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.2.EL" date="1083664800">- enable booting on 8-way Opteron systems (Jim Paradis)
- fix 32-bit-compat truncate64() on x86_64 (Jim Paradis)
- correct promiscuous mode counter handling (Dave Miller)
- support 128-GB ia64 systems w/HP zx1 chipset (Larry Woodman)
- add export of sys_ioctl() global symbol on s390x (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.1.EL" date="1083578400">- (this is the first build for RHEL 3 Update 3)
- reenable/fix linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- clean up file locks when NFS clients receive signals (Steve Dickson)
- complete ia64-specific LAuS syscall auditing support (Mark DeWandel)
- prevent NULL pointer dereference in page_referenced() (Rik van Riel)
- fix max sectors argument in lvm_snapshot_alloc() (Heinz Mauelshagen)
- allow AGP bus scanning to execute for all architectures (John Dennis)
- fix page_referenced() rss limit checks w/unmapped pages (Rik van Riel)
- correct locking and cr/lf problems in usbserial driver (Pete Zaitcev)
- add /proc/cpuinfo support for new ppc64 processors (Julie DeWandel)
- fix sense data handling on certain SCSI cmd retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.EL" date="1082541600">- fix clobbering of /proc/cpuinfo vendor_id on x86_64 (Jim Paradis)
- correct MCAST_MSFILTER/IP_MSFILTER size checking (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-14.EL" date="1081936800">- disable linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- prevent symlink buffer overflow in ISO-9660 fs (Ernie Petrides)
- check for skb overrun in IPV4/IPV6 IGMP handling (Dave Miller)
- fix possible hang in rebalance_laundry_zone() (Larry Woodman)
- correct zone_wired[] initialization for NUMA (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-13.EL" date="1081332000">- fix several critical libata bugs (Jeff Garzik)
- correct IPSEC XFRM policy ref counting (Dave Miller)
- add amd64/ia32e parsing for "acpi=off" arg (Jim Paradis)
- update tg3 driver to v3.1 for several fixes (Dave Miller)
- fix SCSI whitelist for Hitachi/HP DFx00, Apple Xserve (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-12.EL" date="1080295200">- add USB support for Handspring Treo 600 PDA syncing (Matthew Galgoci)
- clear state for CPEs during ia64 MCA SAL error logging (Ben Woodard)
- prevent DMA resource leak in QLogic driver error path (Tom Coughlan)
- change default QLogic driver device queue depth to 64 (Tom Coughlan)
- replace fabricated cciss drive geometry w/ENXIO error (Tom Coughlan)
- update SCSI whitelist for HP SureStore/StorageWorks (Tom Coughlan)
- disable CONFIG_ACPI_DEBUG in amd64/ia32e configs (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-11.EL" date="1078740000">- add yet another Intel ICH6 SATA PCI id (Jeff Garzik)
- fix ref counting in copy_process() error path (Larry Woodman)
- remove ia64 support for /proc/bus/mckinley/bitmap (Jason Baron)
- correct depmod versioning for unsupported modules (Ernie Petrides)
- prevent data corruption in ia32e phys_proc_id[] info (Larry Woodman)
- change default value for inactive_clean_percent to 30 (Larry Woodman)
- enable improved version of s390 on-demand timer patch (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-10.EL" date="1078221600">- incorporate late-breaking libata fixes (Jeff Garzik)
- enable amd64 syscall for tux support (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.17.EL" date="1078135200">- reduce s390 idle overhead with on-demand timer patch (Pete Zaitcev)
- complete ia64 NPTL support for 32-bit-EL executables (Jason Baron)
- add several ia64 syscall table entries for 32-bit-EL (Jason Baron)
- upgrade libata/SATA support, delete ich5-sata.patch (Jeff Garzik)
- check for mremap/vmtruncate race in move_one_page() (Jason Baron)
- prevent ia64 NaT-bit corruption during sig catching (Jason Baron)
- fix amd64 get_mtrr() parsing error with &gt;4GB memory (Jim Paradis)
- change amd64 default behavior to avoid TSC timer use (Jim Paradis)
- force s390utils upgrade to prevent zipl seg fault (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.16.EL" date="1078048800">- restore varyio capability in mptfusion driver update (Adam Manthei)
- enhance SCSI mid-layer queuing for indefinite retries (Doug Ledford)
- add ia64 reg reloads for 32-bit-EL strace -f support (Jason Baron)
- fix ia64 core dump support for 32-bit-EL executables (Jason Baron)
- add SCSI whitelist devs with BLIST_RETRY_ABORTED_CMD (Doug Ledford)
- remove stack-in-interpreter check in binfmt_elf.c (Julie DeWandel)
- clear all flags in exec_usermodehelper() for kmod (Alexander Viro)
- fix aacraid command completion (rq corruption) bugs (Tom Coughlan)
- correct cciss_proc_tape_report() type in flags decl (Tom Coughlan)
- enable USB-2.0-hub-based mice/keyboards to function (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.15.EL" date="1077962400">- fix amd64 oprofile linkage problem in ia32e support (Ernie Petrides)
- update ips driver to version 6.11.07 w/6.10.52 backup (Tom Coughlan)
- add size checks to DRM ATI r128 driver ioctl handling (John Dennis)
- avoid megaraid2 irq_disable calls for mem-mapped ctlrs (Tom Coughlan)
- upgrade firmware imbedded in QLogic driver to 3.02.24 (Tom Coughlan)
- correct ia64 memory accounting in overcommit mode 2 (Larry Woodman)
- implement softirq deferral to limit kernel stack depth (Ingo Molnar)
- reduce kernel stack usage in a couple of tux functions (Ingo Molnar)
- fix shared extended attribute ref counting in ext3 (Stephen Tweedie)
- clear SCSI sense data buffer between eh retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.14.EL" date="1077789600">- add .RH1 suffix to cciss driver version v2.4.50 (Tom Coughlan)
- implement initial LAuS syscall auditing support (Mark DeWandel)
- introduce GFS enablers for locking and sendfile ops (Ken Preslan)
- update QLogic driver to 6.07.01 w/6.06.00b11 backup (Tom Coughlan)
- improve netdump reliability w/asynchronous IPI param (Jeff Moyer)
- add ICH6 DSP audio support to i810_audio driver (Jeff Garzik)
- apply SCSI whitelist updates for several devices (Tom Coughlan)
- fix odd byte tape i/o handling in sym53c8xx driver (Tom Coughlan)
- correct minimum nfsd version that supports acls (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.13.EL" date="1077703200">- allow concurrent NFS direct i/o to same file if !append (Steve Dickson)
- introduce support for new Intel 64-bit ia32e processor (Larry Woodman)
- update mptfusion driver to 2.05.11.03 w/2.05.05 backup (Adam Manthei)
- remove fs/binfmt_misc.o from linux-modules-unsupported (Jason Baron)
- fix ia64 predicate register use in sig trampoline code (Jason Baron)
- add oprofile cpu type recognition for ia32e processor (Will Cohen)
- update e1000 network driver to version 5.2.30.1-k1 (Jeff Garzik)
- add more Intel PCI ids to match upstream 2.4 (Jeff Garzik)
- add ICH6 PATA support, PCI ids, irq routing (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.12.EL" date="1077530400">- add deferred page freeing for intr-context unmap_kvec() (Jeff Moyer)
- update megaraid2 driver to v2.10.1.1 w/v2.00.9 backup (Tom Coughlan)
- fix ppc64 pte hash table locking to avoid deadlocks (Julie DeWandel)
- fix ia64 data TLB init to prevent random boot-up hangs (Jason Baron)
- fix ia64 RNat register corruption with alt sig stacks (Jason Baron)
- allow smaller ia64 sig stacks in ia32 emulation layer (Jason Baron)
- backport ncpfs fixes to eliminate var-length arrays (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.11.EL" date="1077271200">- backport cisco aironet driver from 2.6.3-rc4 (Matthew Galgoci)
- update tg3 driver to v2.7 to fix status reg handling (Dave Miller)
- correct lost jiffies logic for x440/5 cyclone timer (Bernd Schmidt)
- fix open() error clean-up for unsupported O_DIRECT (Stephen Tweedie)
- prevent ia64 crashes when unmapping hugetlb pages (Jason Baron)
- add ppc64 processor support for future PPC970+ (Julie DeWandel)
- rework ppc64 32-bit-compat iptables support (Julie DeWandel)
- fix func ptr test in ethtool_set_ringparam() (Jeff Garzik)
- disable linux-2.4.21-scsi-affine-queue.patch (Doug Ledford)
- improve scsi_allow_ghost_devices description (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.10.EL" date="1077098400">- fix amd64 iommu bug causing data corruption on &gt;4GB systems (Jim Paradis)
- return EINVAL for unsupported ioctl32 syscalls on ppc64 (Julie DeWandel)
- remove incorrect BUG() call in __remove_inode_page() (Stephen Tweedie)
- fix s390 ctc driver problem causing build system hangs (Pete Zaitcev)
- fix s390 qeth driver error path to reset write_busy (Pete Zaitcev)
- update s390 zfcp driver to fix miscellaneous bugs (Pete Zaitcev)
- apply upstream nfs fixes for acl error handling (Steve Dickson)
- prevent kernel stack data leak via /dev/rtc (Ernie Petrides)
- allow AIO operations on sockets for non-inet (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.9.EL" date="1076925600">- restore genksyms_smp_prefix setting for non-x86 builds (Ernie Petrides)
- display/log memory stats whenever there's an OOM kill (Larry Woodman)
- update tg3 driver to v2.6, the latest upstream version (Jeff Garzik)
- update net bonding driver to v2.4.1, latest upstream (Jeff Garzik)
- fix irq, mem, printk, strtol bugs in cciss driver (Tom Coughlan)
- wait for board ready after hot add, cciss driver (Tom Coughlan)
- enable cciss adapter prefetch for x86 platforms (Tom Coughlan)
- add preserve_arg0 handling for ia32 emulation (Larry Woodman)
- fix ppc64 compat support for quota syscall (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.8.EL" date="1076580000">- remove Power-Blade-specific def for USB TEAC floppy (Julie DeWandel)
- fix s390 crash in iucv driver on connection shutdown (Pete Zaitcev)
- fix ia64 ACPI parsing for multinode IDE devs on x455 (Jim Paradis)
- fix amd64 core dumping of multithreaded 32-bit apps (Jim Paradis)
- fix s390 oprofile conditional and zero top addr bits (Will Cohen)
- add ipr driver v1.0.3 for IBM's PPC RAID adapters (Tom Coughlan)
- add {alloc,free}_netdev(), list macro, tg3 PCI ids (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.7.EL" date="1076407200">- restrict /proc/tty/driver directory access to root (Jeff Moyer)
- allow non-standard usr/sys VM splits at 2G/2G, 1G/3G (Ingo Molnar)
- extend existing ppc64 RTAS firmware flash interface (Mark DeWandel)
- fix ppc64 version of strncpy() to zero-pad buffers (Julie DeWandel)
- fix s390/x version of strncpy() to zero-pad buffers (Pete Zaitcev)
- fix generic version of strncpy() to zero-pad buffers (Jim Paradis)
- improve ppc64 segment table entry replacement logic (Julie DeWandel)
- correct type/cast of "len" in ppc64/kernel/nvram.c (Julie DeWandel)
- implement new ppc64 RTAS system call interface (Julie DeWandel)
- increase x86 RSDT table limit in ACPI parsing (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.6.EL" date="1076320800">- fix more usb-storage bugs for Power Blade support (Julie DeWandel)
- remove extra inactive_clean_pages-- in reclaim_page() (Larry Woodman)
- return proper error codes for do_munmap() failure in mremap (Dave Jones)
- fix binfmt_elf.c problems for apps with huge bss regions (Julie DeWandel)
- update cciss driver to v2.4.50 for Smart Array 6i support (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.5.EL" date="1075975200">- prevent netdump progress output from filling up log_buf (Jeff Moyer)
- add ppc64 RAS hook at end of panic() processing (Julie DeWandel)
- correct source IP address in ICMP error message (Dave Miller)
- fix smp deadlock with pdeath_signal posting (Roland McGrath)
- add ppc64 support for /proc/ppc64/lparcfg (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.4.EL" date="1075888800">- update nfsd mode-with-acls fix for upstream conformance (Steve Dickson)
- rework usb-storage locking to avoid hangs on disconnect (Pete Zaitcev)
- fix mmio alignment error in olympic token ring driver (Julie DeWandel)
- prevent tux logger-thread shutdown problems on ppc64 (Ingo Molnar)
- add ppc64 AltiVec chip support for Power Blades (Julie DeWandel)
- eliminate multi-threaded coredump hang potential (Ingo Molnar)
- fix ppc64 segfaults with tasks &gt; 2GB in size (Julie DeWandel)
- fix usb-storage memory-allocation/iowait deadlock (Alan Cox)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.3.EL" date="1075716000">- add amd64 support for PT_GNU_STACK with exec shield (Jim Paradis)
- fix s390 raid1 sync problem w/writes at end of dev (Pete Zaitcev)
- update s390 zcrypt driver to version 1.1.4 (Pete Zaitcev)
- fix output of large /proc/pid/statm values (Mark DeWandel)
- fix output of large /proc/partitions values (Mark DeWandel)
- enable ppc64 support for JS20 Power Blades (Julie DeWandel)
- fix kernel stack memory leak on fork failures (Dave Anderson)
- fix ipv6 packet quoting problem in icmpv6_send() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.2.EL" date="1075370400">- apply Intel's x86 microcode loader update (Jim Paradis)
- enhance PCI multifunction support for ppc64 (Julie DeWandel)
- fix nfsd returning bad mode bits when acls set (Steve Dickson)
- prevent unkillable zombies from detached NPTL threads (Ingo Molnar)
- avoid missing scsi disks in /proc/partitions on detach (Jason Baron)
- correct pte calculation inside zeromap_pte_range() loop (Ben Woodard)
- add inline function PDE() to help driver backporting (Matthew Galgoci)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.1.EL" date="1074679200">- (this is the first build for RHEL 3 Update 2)
- relocate various pieces of the "undo" patch (Patch Review Committee)
- rename s390 zcrypt and zfcp driver patches (Pete Zaitcev)
- add LKML discussion to COPYING.modules (Arjan van de Ven)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.EL" date="1073556000">- fix race condition between thread creation and signals (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-8.EL" date="1073469600">- fix amd64 eflags masking in 32-bit emulation of ptrace (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-7.EL" date="1073383200">- fix numerous ppc64 problems with /proc access (Julie DeWandel)
- allow user core files larger than 2GB in size (Dave Anderson)
- add ia64 support for Crestone Peak AGP bridges (John Dennis)
- fix unaligned kernel accesses in nfs_readdir() (Steve Dickson)
- add new_len/new_addr checks in do_mremap() (Ernie Petrides)
- fix nfs O_DIRECT corruption with &gt;4GB files (Steve Dickson)
- enable bus scan for AGP ctlrs on amd64 systems (John Dennis)
- limit PCI-alloc'ed physaddrs to 4GB on HP ia64 (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-6.EL" date="1070877600">- fix ppc64 firmware updates (Julie DeWandel)
- fix sync wakeup problem (Ingo Molnar)
- add ia64 cyclone support (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-5.EL" date="1070272800">- undo rejected patches (Stephen Tweedie, Arjan van de Ven, Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.20.EL" date="1069840800">- enable NUMA support in amd64 smp configs (Jim Paradis)
- prevent oopses with tux in OOM scenarios (Ingo Molnar)
- apply several ipv6 multicast bug fixes (Dave Miller)
- assign retval in copy_process() error path (Ingo Molnar)
- add lseek-in-/proc support for s390x "ps" (Pete Zaitcev)
- redefine zone_is_highmem() for Celestica (Dave Anderson)
- fix unresolved symbols in amd64 modules (Bill Nottingham)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.19.EL" date="1069754400">- fix tg3 rx_pending limit for BCM5705/BCM5782 chips (Jeff Garzik)
- reset page error flag prior to read of new contents (Jeff Moyer)
- enable CONFIG_HOTPLUG_PCI option for ia64 configs (Doug Ledford)
- fix inactive laundry list race in ramfs_writepage() (Dave Anderson)
- avoid out_of_memory() for wired pages when there's lomem (Dave Anderson)
- conditionalize ppc64 machdep_calls change for KMI compat (Ernie Petrides)
- limit anon/cache pages scanned in refill_inactive_zone() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.18.EL" date="1069668000">- create old version (rev. 5.64) of cmpci sound driver (Tom Coughlan)
- remove ac97.o, ad1848.o, cs4232.o from unsupported (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.17.EL" date="1069063200">- fix missing use of __GFP_HIGHMEM flag in pte_alloc_one() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.16.EL" date="1068890400">- rework scsi mid-layer queuing logic to fix error handling (Doug Ledford)
- fix pci_dma_sync_sg() scatterlist arg in megaraid2 driver (Tom Coughlan)
- move more-ptes-in-rmap-pte-chain logic to its own patch (Ernie Petrides)
- tag uses of __GENKSYMS__ with KMI/ABI compat comment (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.15.EL" date="1068804000">- fix MD multipath bugs causing crashes during fail-overs (Doug Ledford)
- add chain_ptep_t and revert pte_addr_t for KMI compat (Ernie Petrides)
- restore sub-timer-tick time-of-day granularity for ia64 (Jason Baron)
- modify agpgart and drm drivers for ia64 HP ZX1 support (John Dennis)
- fix ia64 32-bit emulation for several stat-related calls (Jason Baron)
- enable amd64 use of new ips driver w/config separation (Tom Coughlan)
- update e100 network driver to version 2.3.30-k1 (Jeff Garzik)
- update e1000 network driver to version 5.2.20-k1 (Jeff Garzik)
- apply scsi whitelist updates for IBM/CNSi/NEC devices (Tom Coughlan)
- reenable varyio for aic7xxx driver (hangs were unrelated) (Jeff Moyer)
- conditionalize NVIDIA_NFORCE3 to restore KMI compat (Ernie Petrides)
- prevent two ext3 panics on corrupted filesystems (Stephen Tweedie)
- apply two minor fixes to ppc64 RAS nvram reading (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.14.EL" date="1068717600">- update ServeRAID (ips) driver to version 6.10.52 (Tom Coughlan)
- configure xmon on by default in ppc64 configs (Julie DeWandel)
- create initial s390 zcrypt driver, version 1.1.2 (Pete Zaitcev)
- remove zfcp driver from linux-modules-unsupported (Pete Zaitcev)
- revise ppc64 reliability/serviceability support (Julie DeWandel)
- reduce kernel stack usage inside nfs_readdir() (Steve Dickson)
- add gameport dependency to cmpci driver config (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.13.EL" date="1068631200">- reduce UDP retransmissions and fix slow reads for NFS (Steve Dickson)
- implement wired page lists for better ramfs handling (Larry Woodman)
- fix vfork deadlock when child process causes core dump (Ingo Molnar)
- enhance AltSysRq-M output and fix deadlock potential (Larry Woodman)
- update cmpci sound driver for some HP IPF workstations (Tom Coughlan)
- correct tq_struct struct initialization in tg3 driver (Jeff Garzik)
- fix NFS file attribute inconsistency after rename (Steve Dickson)
- prevent ia64 machine checks w/sysreport on Olympia (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.12.EL" date="1068544800">- redesign refill_inactive_zone() for smarter deactivation (Larry Woodman)
- improve page deactivation scalability w/delayed laundering (Larry Woodman)
- rework locking and timer usage in s390 ctc network driver (Pete Zaitcev)
- allow xmon to be enabled at boot-time for ppc64 debugging (Julie DeWandel)
- reverse kscand's order of anon/cache active list traversal (Larry Woodman)
- force in-lining of br_read/write_lock/unlock routines (Julie DeWandel)
- fix mistaken fall-through cases in s390 chandev driver (Pete Zaitcev)
- make a few exported symbols available to OpenGFS (Stephen Tweedie)
- fix ld/st ordering bug causing lost signal wakeups (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.11.EL" date="1068112800">- make profile=X imply nmi_watchdog=1 and fix NMI w/d bugs (Ernie Petrides)
- add lock init in scsi_get_host_dev() to fix shutdown hang (Doug Ledford)
- enable distributed interrupts by default on ppc64 iSeries (Julie DeWandel)
- improve amd64 reporting of machine check errors (Jim Paradis)
- fix disabling of autonegotiation in tg3 driver (Dave Miller)
- add image name to s390 ioctl32 debug message (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.10.EL" date="1068026400">- fix file lock ownership by NPTL threads to be process-wide (Ernie Petrides)
- upgrade megaraid driver to version 1.18k and fix isr/fw sync (Tom Coughlan)
- upgrade megaraid2 driver to version 2.00.9 and enable varyio (Tom Coughlan)
- improve scsi mlqueue handling to enable BUSY/QUEUE_FULL fix (Doug Ledford)
- correct reporting of i/o errors in ppc64 viodasd driver (Julie DeWandel)
- update acenic driver to handle enabling of jumbo frame mode (Jeff Moyer)
- fix i386 PAGE_NONE bits to prevent get_user_page() hang (Roland McGrath)
- fix ia64 show_mem() handler to use efi_memmap_walk() call (Dave Anderson)
- replace spaces in slabinfo entry name for async poll table (Matt Wilson)
- fix race condition in buffer-head memory footprint patch (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.9.EL" date="1067940000">- improve spec file robustness in %post/%preun stanzas (Florian La Roche)
- add s390x iovec length checking for 32-bit reads/writes (Matt Wilson)
- use highmem for pte/ramfs page allocation w/__GFP_WIRED (Larry Woodman)
- upgrade oprofile support with bug fixes and enhancements (Will Cohen)
- fix infinite recursion in SCSI mid-layer post-processing (Jeff Moyer)
- introduce no-auto-start-on-add handling for SCSI blacklist (Jeff Moyer)
- enable s390 support for blk stats handling for iostat -x (Pete Zaitcev)
- fix LVS timer-related hang from ip_vs_conn_expire() bug (Ernie Petrides)
- correct module init in cpqarray driver to fix insmod crash (Tom Coughlan)
- incorporate ESB PATA support and fix a pirq_routers PCI id (Jeff Garzik)
- fix nfs async write deadlock potential w/nfs_writepage() (Steve Dickson)
- fix SCSI error handling for BUSY queue status messages (Doug Ledford)
- improve ppc64 32-bit ioctl support for use by ethtool (Julie DeWandel)
- add missing unlock in ip_mc_del_src() to fix IGMP deadlock (Dave Miller)
- change ppc64 reporting of floppy capacity to be 1.44 MB (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.8.EL" date="1067421600">- fix up various problems on Nforce3-based amd64 systems (Jim Paradis)
- double number of pte addrs in rmap pte_chain structs (Larry Woodman)
- restrict slab size for kernel data structs to 2 pages (Larry Woodman)
- clean up obsolete quicklist usage for ppc64 pte pages [rejected]
- prevent readdirplus from returning hidden mount points (Steve Dickson)
- prevent lockd deadlocks caused by export table locking (Steve Dickson)
- eliminate use of parallel task_struct init macro on ia64 [rejected]
- fix broken s390x overflow checks with 32-bit F_GETLK use (Matt Wilson)
- fix SCSI errors with "mt stoptions" and IDE tape drives (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.7.EL" date="1067162400">- fix bad checksumming interaction between e100 and bridge (Jeff Garzik)
- prevent system hang by OOM killing when overcommitted (Larry Woodman)
- un-inline ext3 error function to reduce stack usage (Stephen Tweedie)
- fix several ppc64 problems with interrupt handling (Julie DeWandel)
- correct amd64 identification in /dev/oprofile/cpu_type (Jim Paradis)
- move fput() call in do_tty_hangup() to avoid oops w/kon (Alexander Viro)
- eliminate creation of never-used task_struct slab cache (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.6.EL" date="1066903200">- reduce buffer-head memory footprint from read-only files (Ingo Molnar)
- update qeth driver for reduced stack usage and bug fixes (Pete Zaitcev)
- fix s390 qeth driver again to allow tcpdump to function (Pete Zaitcev)
- add exec_mmap() locking to prevent vma lookup races (Ernie Petrides)
- rework RPC slot allocation for further NFS improvements (Steve Dickson)
- reduce frequency of RPC retransmits during NFS writes (Steve Dickson)
- make generic/ext3 file system write handling 64-bit clean (Jeff Moyer)
- allow SMP scheduling rebalancing to occur every 200 msecs (Ingo Molnar)
- prevent races during IPC semaphore set and msg queue removal (Ingo Molnar)
- fix ACPI handling to identify trigger/polarity of PCI IRQs (Jim Paradis)
- correct amd64/ia64 acpi_disabled decls for post-boot access (Jeff Moyer)
- update ppc64 viocons driver with several bug fixes (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.5.EL" date="1066298400">- move fix for PPR use in sym53c8xx driver to its own patch (Ernie Petrides)
- correct pids exported by msgctl/semctl/shmctl/fcntl calls (Ulrich Drepper)
- apply s390 lcs driver wait queue init and locking updates (Pete Zaitcev)
- enable dummy network driver use in generic s390 config file (Pete Zaitcev)
- add missing ptrace hooks for exec and vfork-done events (Bill Nottingham)
- fix SMP timer race that triggered BUG_ON() in add_timer() (Ingo Molnar)
- fix several bogus ipvs boundary checks in ftp module [rejected]
- fix vfsmount queuing in attach_mnt() for CLONE_NEWNS [rejected]
- add net_device check to prevent oops in pppoe driver [rejected]
- fix memory leak in symlink error path of /proc driver [rejected]
- fix overflow in v1_disk2mem_dqblk() quota calculation [rejected]
- increase ppc64 ramdisk size to 8192k in p/iSeries configs (Jeremy Katz)
- lower amd64 TASK_UNMAPPED_32 to increase avail address space (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.4.EL" date="1066039200">- fix ppc64 stack pointer alignment in user signal handlers (Jakub Jelinek)
- increase amd64 exception stack size to 4k to avoid overflow (Jim Paradis)
- fix ppc64 interrupt rate accounting for vmstat and /proc (Julie DeWandel)
- extend amd64 NMI watchdog timeouts to tolerate bad 2nd cpu (Jim Paradis)
- allow s390 dasd driver to use noop elevator module (Pete Zaitcev)
- add free_irq() in error path of olympic token ring driver (Matt Wilson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.3.EL" date="1065866400">- make pid fields in ucred structures hold tgid values (Ulrich Drepper)
- prevent ppc64 iSeries virtual console writes &gt; 4k (Julie DeWandel)
- control ia64 unaligned access messages with new sysctl (Jeff Moyer)
- correct SCSI data direction on cmd to spin up disks (Pete Zaitcev)
- add do_brk() TASK_SIZE and address space wrap checks (Arjan van de Ven)
- limit PPR use in sym53c8xx driver for ppc64 Zapata drives (Doug Ledford)
- list ac97.o, ad1848.o, and cs4232.o modules as unsupported (Jeff Moyer)
- clean up conditional compilation in s390 zfcp driver (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.2.EL" date="1065693600">- identify whether i686 or athlon config in oops output (Arjan van de Ven)
- remove warning in reclaim_page() unmapped page path (Ernie Petrides)
- fix several lvm error handling paths causing memory leaks [rejected]
- correct i386 smp shutdown logic when netdump is enabled (Jeff Moyer)
- fix amd64 potential data leaks on FPU save/restore errors (Jim Paradis)
- prevent aic7xxx chip resets leading to PCI parity errors (Tom Coughlan)
- remove ia64 user tty warning on unaligned accesses (Arjan van de Ven)
- fix ppc64 /proc file buf overruns in viodasd driver (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.1.EL" date="1065607200">- (this is the first build for RHEL 3 Update 1)
- avoid m/ctime update for pipe writes on r/o file systems (Stephen Tweedie)
- prevent theoretical ext3 fs corruption in ext3_read_inode (Stephen Tweedie)
- enable AGRESSIVE_IDLE_STEAL to improve scheduler balancing (Ingo Molnar)
- fix potential ppc64 lock-up on ioctl32 un/reregistering (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.EL" date="1065175200">- extend ppc64 scsi timeout values for Zapata DVD-ROM drives (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-3.EL" date="1063965600">- make sure to release viotape op structure after use (Julie DeWandel)
- disable pgd/pmd quicklists on ppc64 (Mark DeWandel)
- temporarily disable aio on sockets (Jeff Moyer)
- correctly refile inodes to make them reclaimable (Harald Hoyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-2.EL" date="1063792800">- S390: update zfcp and cio drivers (Pete Zaitcev)
- IA64: add extra check to virtual mem_map (Larry Woodman, Dave Anderson)
- initialise local variables in ide-tape &amp; ide-scsi
- cap qla2200 tcq depth to 255
- switch version number scheme to kernel-2.4.21-N.EL</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063706400">- PPC64: invalidate evicted sbl entries in the erat (Julie DeWandel)
- increase ethernet tx_queue_len to 1000 (David Miller)
- in udp_{v6_}flush_pending_frames, reset up-&gt;len too (David Miller)
- S390: CMS reserved minidisk detection (Pete Zaitcev)
- call recount_segments() on a different occasion (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063620000">- really disable exec-shield (Roland McGrath)
- reduce stack randomisation, disable brk randomisation (Ingo Molnar)
- make e1000 driver 64 bit clean (Julie DeWandel)
- minor aio corner case error condition fix (Jeff Moyer)
- AMD64: more lenient check for call workaround (Ernie Petrides)
- PPC64: disable CONFIG_XMON (Mark DeWandel)
- S390: fix CCW slab selection (Pete Zaitcev)
- fix two-disk combined mode sata (Jeff Garzik)
- move buslogic scsi driver to supported, for vmware only (Tom Coughlan)
- change viocons message from KERN_WARNING to KERN_INFO (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063360800">- VM: handle race condition in reclaim_page (Stephen Tweedie, Larry Woodman)
- PPC64: fix "log_buffer broken" xmon issue (Julie DeWandel)
- fix compiler warnings in netdump (Jeff Moyer)
- AMD64: workaround for 32 bit compat mode page fault problem (Ernie Petrides)
- IA64: make perfmon root-only (Jason Baron)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063274400">- fix smp race in rebalance_laundry_zone()</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063188000">- fix compiler warnings when hugetlbfs is disabled (Pete Zaitcev)
- fix tux performance bug (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063101600">- don't evict kernel stack seg translation on ppc64 (Julie DeWandel)
- fix callers of do_page_fault on ppc64 (Mark DeWandel)
- AMD64 munmap return value, fix lsb failure (Jeff Moyer)
- fix for PPC64 32-bit ioctl (Jim Paradis)
- bring IA64 value of MINSIGSTKSZ in line with upstream (Jakub Jelinek)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063015200">- fix potential datacorruptor in viodasd driver (Julie DeWandel)
- fix race condition in s390 dirty bit handling (Pete Zaitcev)
- limit per-cpu slab cache size
- correct 32-bit readv/writev border cases on ppc64 (Matt Wilson)
- AMD Golem IO-APIC fixup for i686 kernel on AMD64 (Jeremy Katz)
- NFS Solaris 8 acl fix (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062756000">- minor nfs permissions bugfix (Steve Dickson)
- change mprotect return value to SuS mandated value (Arjan van de Ven)
- kernel-unsupported now provides kernel-modules (Jeremy Katz)
- correct __hugemem__modules typos in rhkernel.h
- fix subtle pmd corruption error (Larry Woodman, Dave Anderson)
- fix cut'n'paste error in SATA io port reservation
- restore NFSEXP_CROSSMNT ABI compatibility (Steve Dickson)
- round up executable name field length in core file (Jakub Jelinek)
- switch off exception_trace on amd64 (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062496800">- patch to access odd last sector on ia64 (Jason Baron)
- misc fixes from upstream (Arjan van de Ven)
- fix audigy driver (Jeff Garzik)
- tunable dcache reclaim priority for tux (Ingo Molnar)
- tg3 driver update (Jeff Garzik)
- ipv6 and icmp network bugfixes (David Miller)
- fix ppc64 memory access security bug (Julie DeWandel)
- reduce memory allocated for skb (Ingo Molnar)
- small smp fix for scalable timers (Ingo Molnar)
- make s390 recognise MSDOS partitions (Pete Zaitcev)
- small smp fixes in tux (Ingo Molnar)
- make mptfusion drivers supported on 4/4 split kernel (Tom Coughlan)
- add entries to scsi whitelist (Tom Coughlan)
- minor sata/ata driver updates (Jeff Garzik)
- small fixes to viodasd driver (Julie DeWandel)
- nfs_get_root and nfs access bit patches (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062064800">- don't show interrupts in /proc/stat for ppc64 (Matt Wilson)
- make sure sync returns in a reasonable time
- PPC64: fix for boot cpu not being cpu 0 (Julie DeWandel)
- zero sized write no longer updates mtime (Matt Wilson)
- fix video bios read corruption on ia64 (Larry Woodman)
- network fixes to tg3, bonding (Jeff Garzik)
- properly reserve legacy IDE regions in sata driver (Jeff Garzik)
- fix ppc64 signal handling bugs (Mark DeWandel)
- tux fixes (Ingo Molnar)
- tgkill syscall for s390(x) (Pete Zaitcev)
- amd64 32 bit compatibility fixes (Jim Paradis)
- ppc64 32 bit compatibility fixes (Julie DeWandel)
- fix 4G/4G follow_page problem (Ingo Molnar)
- reduce memory used by VMAs and dentries (Arjan van de Ven)
- make LVM snapshotting of ext3 work reliably (Stephen Tweedie)
- make netdump play better with the nmi watchdog (Jeff Moyer)
- QLA2200: disable irq mitigation, fix off-by-one (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061805600">- seq_file /proc/interrupts for x86 too (Ingo Molnar)
- fix memory leak in ia64 exec of ia32 binaries
- check tgid not pid in scm_check_creds()  (David Miller)
- VM fixes: shm swap priority, zeromap_page_range
- workaround VFS limitations for VXFS NFS export</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061546400">- use personality for 3GB userspace on x86 -hugemem (Ingo Molnar)
- add sysctl interface for lockd (Steve Dickson)
- don't prod VGA space on HP Pinnacle systems (Larry Woodman)
- fix for 32 bit binaries on amd64 (Jim Paradis)
- add preemption point to write_some_buffers (Julie DeWandel)
- sort ACPI table to get correct device ordering on HP (Larry Woodman)
- fix refcounting bug with ipv6 addresses on netdevs (David Miller)
- add s390 syscalls for tux (Pete Zaitcev)
- md multipath enablers (Doug Ledford)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061460000">- fix process and nice time accounting (Doug Ledford)
- amd64: syscall table updates, timer robustness (Jim Paradis)
- amd64 3GB personality for 32-bit processes (Jim Paradis)
- use 256MB pagesize for hugetlbfs on ia64 (Larry Woodman)
- make sure e100 only claims ipv4 checksumming
- igmpv3/mldv2 OOPS'er fix (David Miller)
- hugetlbfs: make chown work and allow uid=X,gid=Y mount options
- make larger mmap windows work (Ernie Petrides, Ingo Molnar)
- ia64: improve ia32 compatibility (Larry Woodman)
- fix bug in rpc retry code (Steve Dickson)
- make acpi pci hotplug modulable (Jeff Moyer)
- update (trivial) to megaraid 1.18j (Tom Coughlan) 
- enable varyio on mptfusion (Tom Coughlan)
- panic on oops to prevent data corruption opportunities (Ernie Petrides)
- small iorl locking fix (Doug Ledford)
- fix ppc64 get_wchan() bad deref (Mark DeWandel)
- fix aio read into mmap()d PROT_WRITE (Jeff Moyer, Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061373600">- libata update (Jeff Garzik)
- amd64 syscalls for xattrs &amp; ACLs (Jim Paradis)
- tux fixes (Julie DeWandel, Ingo Molnar)
- via &amp; i810 audio fixes (Jeff Garzik)
- small 4G/4G split bugfixes (Ingo Molnar)
- fix sigsuspend race on x86, amd64, ia64 (Mark DeWandel)
- ia32 behavior for FP denormal exceptions on ia64 (Jason Baron)
- get the set/get of NAT bits for ia64 correct (Jason Baron)
- ipsec update, adds cast6 encryption (David Miller)
- VM update: OOM bugfix &amp; page-&gt;flags atomic updates (Rik van Riel)
- reenable serpent encryption on ppc64
- bladecenter usb-ohci support (Pete Zaitcev)
- iorl fixes (Doug Ledford)
- network bonding driver oops fix (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060768800">- DAC960 back to bigmem supported, ne2k-pci &amp; usb audio to bigmem unsupported
- netdump updates for tg3 and e1000 (Jeff Moyer)
- put a hole between stack and mmap area (Ernie Petrides)
- process time accounting updates (Doug Ledford)
- fix null characters in TUX header (Julie DeWandel, Ingo Molnar)
- display correct executable when running interpreted script
- zfcp zSeries fibrechannel driver (Pete Zaitcev)
- ipsec updates (David Miller)
- fix 4G/4G race conditions (Ingo Molnar)
- rename -bigmem kernel to -hugemem to reflect changed tradeoffs
- optionally show task states from hangcheck timer (Jason Baron)
- various small bugfixes from upstream</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060423200">- fix scalable timer race condition  (Julie DeWandel, Ingo Molnar)
- print warning on boot with &gt;16GB RAM on -smp kernel (Arjan van de Ven)
- fix for xapic issue with ServerWorks chipsets (Ernie Petrides)
- remove spurious ioctl printk on ppc64 (Mark DeWandel)
- ppc64 wchan improvement (Mark DeWandel)
- hint @pause changes for ia64
- longer scsi scan timeout on ppc64 (Julie DeWandel)
- readv/writev for raw IO (Stephen Tweedie)
- fix for easy stack/mmap collisions (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060164000">- various XAPIC related fixes (Ingo Molnar)
- correct context switch and iowait stats with HT shared runqueues
- ext3 obscure deadlock fixes (Stephen Tweedie)
- knfsd fixes: blocked lock, symlink error &amp; missing bkl  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060077600">- de_thread bugfix from 2.6 upstream  (Matt Wilson)
- viocons driver update (Julie DeWandel)
- fix VM non-overcommit mode (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059991200">- plug data leak in aio code (Jeff Moyer)
- initial list of 4G/4G unsupported modules (Tom Coughlan)
- nfs softirq race fix (Steve Dickson)
- updated IPSEC patch (David Miller)
- networking updates/fixes from 2.4.22-preX (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059904800">- drop orlov allocator for now (Arjan van de Ven)
- correct HT cpu pair detection (Arjan van de Ven)
- build zImage.partial for netbooting on pSeries (Matt Wilson)
- fix missing symbols</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059818400">- export two AIO symbols for OCFS
- disable CONFIG_DEBUG_SLAB so performance testing can start
- crosshost mmap hooks for distributed filesystems (Stephen Tweedie)
- include partially linked zImage for pSeries netboot (Matt Wilson)
- nfs highmem fix, unmap when xdr_kmap() fails (Steve Dickson)
- update megaraid2 locking to work with IORL (Com Coughlan)
- make sure to build the qla2100 driver (Tom Coughlan)
- fix cdrom ioctl 32 bit compatibility for ppc64, amd64 (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059645600">- run depmod on install of unsupported modules (Arjan van de Ven)
- fix register corruption in IA64 lazy fpu handling (Larry Woodman)
- add b44 network driver (Jeff Garzik)
- make ppc64 pci interface routines compatible (Julie DeWandel)
- allow 32 bit userland on AMD64 and PPC64 to use volumes &gt; 2GB (Jeff Moyer)
- nfsd: acl related mount and export flags (Steve Dickson)
- fix nfs exp_fodrop oops (Steve Dickson)
- fix missed signal wakeups on ppc64 (Mark DeWandel)
- smp scalable timer bugfixes (Ingo Molnar)
- workaround for a prefetch bug in some Athlon CPUs (Ernie Petrides)
- code to make more modules unsupported for 4/4 split (Arjan van de Ven)
- various spec file and config cleanups
- viopath driver fix (Julie DeWandel)
- add match for 440gx chipset bioses (Arjan van de Ven)
- move epic100 and ne2k-pci back to supported (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059472800">- updated finegrained process accounting patch (Doug Ledford)
- make iSeries compile without CONFIG_ICOM (Julie DeWandel)
- nfsd: only set -&gt;reuse for tcp sockets, not udp  (Steve Dickson)
- enable the 4G/4G split on the i686-bigmem kernel only
- sysrq support for viocons (Julie DeWandel)
- limit pci_bus size changes to ppc64 (Jeff Garzik)
- fix for signal delivery race (Ernie Petrides, Mark DeWandel)
- add ShdPnd to /proc (Ingo Molnar)
- fix de_thread() hang (Ingo Molnar)
- add kernel support for CLONE_STOPPED (Ernie Petrides)
- make sure to initialise HVC console (Julie DeWandel)
- fix _SEG abort hit in ACPI code (Larry Woodman)
- build addon drivers on amd64 and ppc64 too (Tom Coughlan)
- build IPS driver on all architectures (Tom Coughlan)
- fix a few ia32 emulation bugs for IA64 (Larry Woodman)
- enable correct/new __clear_bit macro for IA64 (Larry Woodman)
- flexible mmap allows mappings of huge executable segments (Larry Woodman)
- sysrq-w for s390 (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058436000">- have s390 cpu_relax() also include barrier  (Pete Zaitcev)
- convert ppc64 xmon traceback code to ksymoops (Matt Wilson)
- rename kstat_sum() variable with aliasing problems  (Ingo Molnar)
- fix AIO-on-hugetlbfs crash (Ingo Molnar)
- update support for IA64 Long's Peak ACPI serial ports  (Larry Woodman)
- turn on xmon for both iSeries and pSeries (Matt Wilson)
- bugfix to make CLI work correctly on iSeries (Julie DeWandel)
- SATA bugfixes (Jeff Garzik)
- enable 4G/4G split in -BOOT kernel, due to syslinux trouble</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058349600">- fix s390 compile (Pete Zaitcev)
- taint the kernel on sii6512 driver link, GPL but no source available
- handle debug registers with 4G/4G split (Ingo Molnar)
- tgkill syscall for ppc64 (Julie DeWandel)
- fix NFSD/ACL/ext3/jbd deadlock (Stephen Tweedie, Steve Dickson)
- fix maxcpus=1 installation panic fix for ppc64 (Julie DeWandel)
- IDE byteswapping io functions for ppc64 (Julie DeWandel)
- update sata driver (Jeff Garzik)
- raise the number of /proc entries (Julie DeWandel)
- sticky sysrq key with timeout (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058263200">- make SysRq-W useable on s390 (Pete Zaitcev)
- updated process accounting patch (Doug Ledford)
- siginfo_t fixes for s390x and amd64 (Jakub Jelinek)
- clustered NFS fail-over support (Steve Dickson)
- autofs4 updates and fixes
- ia64 patches to reduce cpu power/temp in idle loop (Larry Woodman)
- add irqsafe up() for LVM locking (Stephen Tweedie)
- O_DIRECT fallback to synchronous allocation in holes (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058176800">- ia64 HP iommu: add sx1000 detection
- possible bug in s390x 32-bit emulation  (Roland McGrath)
- updated ipsec patch, should fix all current ipv6 bugs  (David Miller)
- finegrained process accounting (Doug Ledford)
- ICH5 pci irq routing, and associated ids (Jeff Garzik)
- fix the machine_real_restart() reboot path on 4G/4G (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057917600">- fix amd64 agp-gart code to work around hugetlbfs debug code (Jim Paradis)
- fix ppc32 pthread_cancel (Jakub Jelinek) 
- Do not sent IGMP leave messages unless IFF_UP  (David Miller)
- software iommu for ia64 systems without hardware iommu (Jason Baron)
- fix ext3 oops fix during dio, LTP failure (Arjan van de Ven, Stephen Tweedie)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057831200">- Remove illegal calls to dst_link_failure</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057831200">- enable HT scheduler for bigmem kernel
- add tgkill syscall for x86 and ia64
- make -BOOT kernel smaller w/ modular md and CONFIG_SMALL
- rmap VM updates
- 4G/4G agpgart potential corruption fix (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057744800">- switch off exec shield everywhere
- eliminate hostfs for amd64 (Jim Paradis)
- megaraid update, mostly vendor ID (Tom Coughlan)
- shrink boot kernel by disabling some config options
- additions for the SCSI whitelist (Tom Coughlan)
- ia64 extable fix (Jason Baron)
- viocons driver upgrade (Julie DeWandel)
- another ia64 mmu context wraparound deadlock fix (Larry Woodman)
- iSeries icom debugger patch (Julie DeWandel)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057658400">- Drop io_request_lock in usb scsiglue.c:device_reset</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057658400">- fix cpu_relax for amd64 and ia64 to include a barrier (Ingo Molnar)
- restore o_direct api compatibility (Stephen Tweedie)
- fix possible ext3 deadlock in o_direct patches (Stephen Tweedie)
- ACLs for JFS (Stephen Tweedie)
- fix /proc/cpuinfo runqueue printing (Ingo Molnar)
- via audio fixes, smaller emu10k1 patch (Alan Cox, Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057572000">- fix process accounting, tux ftp passwords and si_pid (Ingo Molnar)
- 32bit compat statfs fix (Guy Streeter)
- don't serialise exit on BKL when accounting is off (Ingo Molnar)
- truncate timeouts to 32 bits on 64bit systems (Ingo Molnar)
- fix network channel bonding (Jeff Garzik)
- split netdump patch into core and net-drivers (Jeff Garzik)
- delayed tlb flushing for ia64 (Larry Woodman)
- emu10k1 driver fixes
- kksymoops for AMD64 (Jim Paradis)
- select bugfixes from 2.4 upstream (Jeff Garzik)
- OOM tweaks (Rik van Riel)
- use seq_file for /proc/interrupts on ppc64 (Mark DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057140000">- add qdio and qeth drivers for s390(x)  (Phil Knirsch)
- slab cache scale bugfix (Larry Woodman)
- S390: qdio &amp; qeth drivers (Phil Knirsch)
- hangcheck timer for ppc64 (Julie DeWandel)
- fix race conditions in ia64 ia32 compat layer (Larry Woodman)
- update megaraid, aic7xxx, cciss and cpqarray drivers (Tom Coughlan)
- nfs xdr_shift_buf, tcp client corruption and alignment (Steve Dickson)
- rhconfig.h stuff for ppc64, s390 and s390x (Matt Wilson)
- AIO on sockets</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057053600">- kiobuf optimisations (Stephen Tweedie, Larry Woodman)
- ipsec update (David Miller)
- ipvs update to deal with timer changes (David Miller)
- 4G/4G split patch optimisations (Ingo Molnar)
- hangcheck timer (Jason Baron)
- recent (AGP 3.0) agpgart support (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056967200">- semtimedop() support on s390/s390x  (Ernie Petrides)
- fix a 4G bug that triggers on systems with &gt;30 CPUs (Ingo Molnar)
- updated SCSI SMP affine queueing patch  (Arjan van de Ven)
- page hash prefetch in do_generic_file_read bugfix (Julie DeWandel)
- updates the qlogic driver to the latest (Arjan van de Ven)
- slab cache SMP scalability tweaks (Ingo Molnar)
- ACPI 2.0 for IPF and AMD64 (Jim Paradis, Larry Woodman)
- statm fixes for hugetlbfs and remap_file_pages (Jason Baron)
- acpi serial port detection (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056708000">- iseries driver updates (Julie DeWandel)
- aio scalability and 2.5 backports  (Ingo Molnar)
- SMP scalable timers (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056621600">- make qlogic driver use new scsi infrastructure (Arjan van de Ven)
- export aio kvec functions
- fix statm oops
- compile fixes 
- NFS ACL over the wire protocol extensions (Steve Dickson)
- rate limit slab pruning, to limit IPI load on SMP systems (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056448800">- scsi request lock scaling (Ingo Molnar)
- cpu affinity for scsi command processing (Ingo Molnar)
- use softirqs instead of bhs for the scsi layer (Doug Ledford)
- igmpv3 fixes and improvements (David Miller)
- oprofile for ppc64 (Will Cohen)
- Increase MAX_ADDR_LEN from 8 to 32 for Infiniband over IP (Tom Coughlan)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056362400">- per-cpu kstat arrays (Ingo Molnar)
- optimise 4G/4G tlb flushing (Ingo Molnar)
- kiobuf reclaim together with buffer reclaim (Arjan van de Ven)
- more scalable gendisk statistics (Ingo Molnar)
- nfs reconnect fixes (Steve Dickson)
- add 32-bit compatibility for ustat system call on ppc64 (Julie DeWandel)
- scalable gettimeofday (Ingo Molnar)
- hugetlbfs ppc64 &amp; s390 bits (Mark DeWandel, Pete Zaitcev)
- hugetlbfs for ia64 (Jason Baron)
- qlogic scsi driver update (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056189600">- nfs patches (Steve Dickson)
- xapic improvements, summit support (Ingo Molnar)
- fix core dump name for multithreaded programs (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056103200">- merge up to marcelo's latest</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056016800">- oom killer fixes (Larry Woodman, Rik van Riel)
- tunable VM overcommit (Rik van Riel)
- hugetlbfs for amd64 (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055930400">- updated iseries virtual drivers (Julie DeWandel)
- nfs lockd improvements (Steve Dickson)
- remap_file_pages improvements (Ingo Molnar)
- /proc/efi/symtab patch for ia64 (Larry Woodman)
- disable O_PROFILE on UP x86 machines
- allow NMI watchdog profiling frequencies up to 10kHz (Ingo Molnar)
- statm (Jason Baron)
- hugetlbfs (Ingo Molnar)
- have nfsd honour ACLs on a per-export basis (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055844000">- Enable O_PROFILE on non-SMP configs (Stephen Tweedie)
- more conservative AIC config options
- Fix BOOT kernel panic while mounting /dev/cdrom (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055757600">- merge to 2.4.21 + selected ac bits
- ipsec upgrade (David Miller)
- HT scheduler patch fix (correct sibling counting)
- make bdflush writeout smoother
- AMD64 gdb fix (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055412000">- don't include unsupported drivers in -BOOT kernel
- merge up to 2.4.21-rc8 + selected ac bits
- FIXME: sysrq for 3170, dasd, odirect &amp; odirect for nfs</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com" date="1055412000">- oprofile for s390</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055239200">- statm (Jason Baron / Julie DeWandel)
- AIO 32-bit compat for 64-bit machines (Julie DeWandel)
- only do bufferhead reclaim in extreme situations (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055152800">- Serial ATA support (Jeff Garzik)
- mtp fusion 2.05.05+ (Dave Maley)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054893600">- XATTR/ACL patches, except NFS over the wire (Stephen Tweedie)
- ipsec module autoloading (David Miller)
- remap_file_pages (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054807200">- upgrade to latest -rmap with Ernie's fixes
- sysrq+C shows the stack dump of all CPUs
- ext3 truncate fix (Stephen Tweedie)
- NFS fixes for HZ=1000 machines (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054720800">- 4G/4G split fix (Ingo Molnar)
- ppc64 fixes (Guy Streeter, Rik van Riel)
- enable oprofile on amd64
- ipsec updates (David Miller)
- fork returns pid instead of task_struct* (Julie DeWandel)
- ia64 ptrace bugfixes (Dave Anderson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054634400">- HP diva serial driver (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054548000">- NFS over TCP patches (Steve Dickson)
- switch to using ppc64pseries/ppc64iseries arches instead of
  kernel-pseries and kernel-iseries (Jeremy Katz)
- egenera scsi bus rescan patch (Jeff Garzik)
- oprofile (Graydon Hoare)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054288800">- futex requeue (Ingo Molnar)
- enable NAPI for E1000
- signal latency and scheduler improvements (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054202400">- kscand oops fix (Ingo Molnar, Rik van Riel)
- pcnet32 fixes (Julie Dewandel)
- raid autorun (Pete Zaitcev)
- turn off CONFIG_SUNDANCE_MMIO (Jeff Garzik)
- flexible mmap (Larry Woodman)
- ppc64 fixes (Matt Wilson, Guy Streeter)
- loop softirq 10 times before giving up (Ingo Molnar)
- O_DIRECT for NFS (Steve Dickson)
- prevent md from shutting down active arrays (Doug Ledford)
- rmap updates, inode reclaim &amp; higher order allocations (Rik van Riel)
- network channel bonding (Jeff Garzik)</changelog><changelog author="Jim Paradis &lt;jparadis@redhat.com&gt;" date="1054116000">- Re-enable x86_64 in build
- x86_64-specific updates for exec-shield
- Bring in improved "nonx" support for x86_64 from upstream</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1054116000">- Hush s390 printks upon user SIGSEGV by default. It can be enabled back with
  a sysctl kernel.userprocess_debug.
- Enable optional 3270 console mode on s390.</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053684000">- get rid of vsyscall page (Arjan van de Ven)
- fix missing symbol copy_str_fromuser_size</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053424800">- exec-shield updates to fix hang-on-boot on some systems (Ingo Molnar)
- temporarily disabled the architectures, which got broken by exec-shield updates
- fix for LTP sigprocmask02 failure (Matt Wilson)
- ppc64 updates (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053338400">- pagecache scalability patch (Ingo Molnar)
- IPC semaphore scalability patch (Ingo Molnar)
- ppc64 updates (Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052992800">- exec-shield (Ingo Molnar)
- AMD64 ACPI updates (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052906400">- reenable O_DIRECT, O_DIRECT fixes and superbh-aio (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052820000">- vma merging (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052733600">- nmi profiler
- VM updates: rmap, dma zone isolation
- tux (Ingo Molnar)
- ext3 stall fixes (Ingo Molnar)
- e1000 fixes (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052474400">- config files overhaul (Arjan van de Ven)
- fix bug in mlock patch
- IPVS (Dave Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052388000">- import IO elevator changes from gingin
- critical VM fix
- matrox framebuffer patch for pseries (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052301600">- hammer nptl fixes (Ulrich Drepper)
- 4G/4G split (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052215200">- upgrade to 2.4.21-rc1-ac4 (minus -ac acpi and xapic changes)
- drop nfs patches since those seem to be in -ac</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052128800">- larger message buffer size + boot option (Mark DeWandel)
- AMD64: tls handling, coredump fixes (Jim Paradis)
- SMP &amp; highmem VM fixes (Ben LaHaise)
- HT+NUMA scheduler (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051956000">- ext3 orphan cleanup fix (Ernie Petrides)
- s390 affinity fixes (Pete Zaitcev)
- i386 vsyscall DSO changes (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051869600">- bugfixes and config changes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051783200">- enable semtimedop for other architectures (Ernie Petrides)
- large pci bus numbers (Julie DeWandel)
- bugfixes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051610400">- igmpv3 (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051524000">- generic 32bit compat stuff + amd64/ppc64/ipf pieces (Matt Wilson)
- clustered apic (XAPIC) support (Ingo Molnar)
- ppc64 architecture updates (Matt Wilson, Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051264800">- ppc64 fixes</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051178400">- collapse ipsec into one patch (David Miller)
- ppc64 build fix (Matt Wilson)
- improve smp scheduler fairness (Ingo Molnar)
- allow mlock for normal users, up to ulimit (Ingo Molnar)
- AMD64 port (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051092000">- clean up mechanism to pass extra CFLAGS so we don't override what's
  already there
- merge ia64 build stuff (Larry Woodman)
- merge varyio + superbh (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051005600">- merge up to 2.4.21-rc1
- IA64: virtual mem_map, acpi updates, netdump update, pte-highmem &amp; fealnx
- IA64: architecture specific patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050919200">- import davem's ipsec patch pile
- ppc64 kallsyms and dump_fpu patches (Matt Wilson)
- rmap updates (x86_64 &amp; bufferhead reclaim)
- ppc64 ptrace patch (Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050660000">- open up patch namespace 2000-5000 for network protocol changes
- renumber existing patches in that range</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050573600">- make sure to actually apply the rmap-updates patch
- iowait statistics
- ppc64 code merge (Mark &amp; Julie DeWandel)
- ppc64 build scripts (Matt Wilson)
- raise symlink recursion level to 8 (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050487200">- merge up to marcelo's latest
- pte-highmem bits for x86-64 and ppc64</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050400800">- merge up to 2.4.21-pre7-ac1
- drop semtimedop patches (now in -ac)
- drop nfs xprt_fixes, fix_softirq, d_drop and nfs-readeof (merged in -pre7)
- add !CONFIG_QUOTA compile fix for 2.4.21-pre7-ac1</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1050314400">- add LCS driver (endemic to s390)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050314400">- add rmap VM
- add kunmap_atomic debugging patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050141600">- remove dir.c part of NFS kmap_atomic patch for now
- using strlen as local variable name in nfs code kills, literally</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050055200">- merge S390(x) back in  (Pete Zaitcev)
- fix NFS kmap_atomic patch
- sched.c patch to disable interrupts in wake_forked_task  (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049968800">- AIO infrastructure  (Ben LaHaise)
- update NFS kmap_atomic patch  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049882400">- semtimedop patches  (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049796000">- I know understand linux-2.4.20-nfs-readeof.patch, so I merged it
- netdump update (Dave Anderson)
- 64 bit pci &amp; elf loader fix (Mark &amp; Julie)
- nptl whitespace patches, folded into nptl patch (Arjan van de Ven)
- rediff linux-2.4.18-smallpatches.patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049709600">- merge NFS patches by Steve Dickson (blame me for NFS kmap_atomic patch)
- split x86 syscall stuff out into separate patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049536800">- fix nptl patch, now it boots</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049450400">- port linux-2.4.20-o1-nptl.patch from gingin
- rediff a few patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049277600">- update linux-modules-unsupported (with Arjan)
- fix up the list a second time to fix module dependencies</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049191200">- copy -head into new AS3 branch
- remove i586 build
- remove 7.x compatibility (linux-2.4.9-fstat.patch)
- architecture patches get more breathing room (100 - 500)
- reserve patch numbers 1000 - 2000 for VM
- patch numbers 2000 - 5000 for bugfixes, changes and updates to
  existing drivers and filesystems
- remove inode reclaim patch (will be merged later as part of rmap)
- remove io priority scheduler (still experimental)
- remove nfs patches (linux-2.4.20-nfs-cto.patch,
  linux-2.4.20-nfs-access.patch &amp; linux-2.4.20-nfs-rdplus.patch)
- remove linux-2.4.18-gericom.patch
- update netdump from RH9 branch</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1048240800">- Added three NFS performance patches</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048240800">- add a timer for aging requests up</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048154400">- fix the sorting in the io elevator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048068000">- remerge ext3 orlov allocator and enable
- more priority io elevator infrastructure work</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1047117600">- merge ext3 orlov allocator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046772000">- go to 2.4.21-pre5-ac1
- split the rpm into a primary fileset and secondary (rare modules) fileset</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046253600">- go to 2.4.21-pre4-ac6
- drop lots of patches
- trim changelog to not have 2000, 2001 and 2002 anymore</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045476000">- downgrade pwc webcam driver one notch to the last known working version
- work around vm livelock
- make the cciss driver not enable irq's in it's irq handler</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1045130400">- fix for shared statistic &lt; 0</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045130400">- Signal fixes for LSB testsuite
- merge patch to fix init=/bin/sh
- 2.4.21-pre4-ac4 bugfixes (mostly IDE crashes)</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044784800">- merge 2.4.21-pre4-ac3 bugfixes</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1044352800">- Add ext3 fix for truncating negative i_blocks</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1044266400">- add oopsmeharder for debugging hard hangs</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044266400">- merge rmap15d
- set the sbp2 command buffer to 64 elements instead of 8</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1043834400">- merge tcp stall fix from DaveM
- merge bugfixes from 2.4.21-pre4</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1042452000">- Merge in the ACL and XATTR patches from the UL and BestBits trees.</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1042279200">- Merge in the LVM pvmove fix to current tree</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1042020000">- add AMD Golem fixup</changelog></package>
<package pkgid="a1d7d6c9b814a3f75534d26893364d6a406dbaae" name="kernel-doc" arch="x86_64"><version epoch="0" ver="2.4.21" rel="37.EL.XFS"/><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1128420000">- added SGI XFS patch set</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-37.EL" date="1126087200">- fix latent sendmsg() cmsghdr32 bug exposed in -36.EL (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-36.EL" date="1125655200">- fix sync() hangs from NFS file create/delete races (Steve Dickson)
- add support for HP Smart Array E400i in cciss driver (Tom Coughlan)
- defend against cmsghdr32 changes in sendmsg() handling (Dave Miller)
- correct OpenIPMI module version strings (v35 -&gt; 35.4) (Brian Maly)
- fix intermittent build failures under lpfc subdir (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-35.EL" date="1124445600">- disable FAN processing in Emulex driver (7.3.2) (Tom Coughlan)
- update cciss disk driver to version 2.4.58.RH1 (Tom Coughlan)
- update SCSI whitelist for EMC Invista devices (Tom Coughlan)
- fix diskdump regression w/module CRC errors (Nobuhiro Tachino)
- update SCSI whitelist for IBM ULT3580 TapeLibrary (Wendy Cheng)
- fix f/w upgrade hang, dmi_table bug in IPMI (Peter Martuccelli)
- fix x86_64 machine check regression from -32.10.EL (Brian Maly)
- validate XFRM policy in IPSEC setsockopt() calls (John Linville)
- fix intr kiobuf_init() regression from -32.11.EL (Larry Woodman)
- fix pollcomplete error in cciss diskdump support (Tom Coughlan)
- enforce CAP_NET_ADMIN perms for policy creation (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-34.EL" date="1122544800">- fix O_SYNC EIO error propagation through ext3/jbd (Stephen Tweedie)
- add support for Enterprise Southbridge II (ESB2) (Geoff Gustafson)
- implement devname callback for block device drivers (Doug Ledford)
- upgrade SATA support (core, libata, and drivers) (Jeff Garzik)
- add ia64 export of (*pm_power_off)() for IPMI (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-33.EL" date="1121767200">- update 3w-9xxx driver to version 2.24.03.008RH (Tom Coughlan)
- revise reserved port avoidance added in -32.8.EL (Steve Dickson)
- update OpenIPMI driver/configs to version v35 (Peter Martuccelli)
- add handling for NEC vendor ID in megaraid2 driver (Tom Coughlan)
- update SCSI whitelist for 3PARdata/Dell/SGI devices (Tom Coughlan)
- add support for netdump over bonded interfaces (Jeff Moyer)
- implement diskdump support for cciss devices (Tom Coughlan)
- add x86_64 ACPI Power Management timer support (Jim Paradis)
- add dual-core support on x86 and x86_64 arches (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.12.EL" date="1121421600">- constrain x86_64 MSR writes based on cpu model (Larry Woodman)
- correct smbfs mounts to support 32-bit uids/guids (Peter Staubach)
- eliminate long system pauses when kscand is running (Larry Woodman)
- update Emulex driver to 7.3.1, ioctl module to 1.2.1 (Tom Coughlan)
- update QLogic driver to 7.05.00-RH1 (w/new firmware) (Tom Coughlan)
- prevent ext3 EA/ACL block sharing/deletion races (Stephen Tweedie)
- fix dpt_i2o insmod oops during adpt_info() lookup (Neil Horman)
- fix dpt_i2o timeouts during long tape commands (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.11.EL" date="1121248800">- downgrade blk_queue_bounce_limit() msg to KERN_INFO (Neil Horman)
- update cciss disk driver to version 2.4.56.RH1 (Adam Manthei)
- update mptfusion driver to version 2.06.16i.01 (Tom Coughlan)
- prevent expand_kiobuf() calls during interrupts (Larry Woodman)
- update iscsi_sfnet driver to version 3.6.2.1 (Mike Christie)
- account for system ticks in ITIMER_PROF sig delivery (Don Howard)
- correct superbh ptr arg to superbh_will_bounce() (Stephen Tweedie)
- fix ext3 symlink perms created w/i386-BOOT kernels (Stephen Tweedie)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.10.EL" date="1121076000">- prevent bogus GART errs from amd64 Northbridge handling (Brian Maly)
- get correct link status in b44 driver's open routine (John Linville)
- check for missing EM64T support for better panic msg (Ernie Petrides)
- fix ref counting bug in x86[_64] __change_page_attr() (Dave Anderson)
- fix memory leak in success path of sys_init_module() (John Linville)
- add ia64 ptrace/sigreturn RSC reg priv level validation (Jason Baron)
- prevent connection list corruption in ip_vs_conn_flush() (Neil Horman)
- limit arg/env ptrs for x86_64/ia64 32-bit-compat execs (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.9.EL" date="1119002400">- fix crashes from failed ACPI root bus additions (Jim Paradis)
- correct insufficient lock owner checks in DRM code (Don Howard)
- add missing sanity checks in Coda ioctl handling (Alexander Viro)
- fix autofs errors with ghosting and expire event races (Jeff Moyer)
- reset ppc64 signal handler correctly for SA_ONESHOT (David Howells)
- store prev user stack pointer in ppc64 signal frames (David Howells)
- fix kernel_lock deadlock between sd_open()/sd_ioctl() (Larry Woodman)
- add ht flag in /proc/cpuinfo for EM64Ts w/hyperthreading (Brian Maly)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.8.EL" date="1118743200">- update e100 network driver to version 3.4.8-k2 (John Linville)
- preserve x86_64 32-bit-compat ptrace reg changes (Roland McGrath)
- add missing x86_64 support for PTRACE_SETOPTIONS (Roland McGrath)
- avoid using reserved ports for portmapper connections (Steve Dickson)
- prevent non-canonical %rip in x86_64 ptrace reg mods (Jim Paradis)
- prevent invalid fs/gs_base in x86_64 ptrace reg mods (Ernie Petrides)
- improve ISO-9660 fs robustness against bad CD formats (Peter Staubach)
- correct __get_user_pages() ref counting w/PG_reserved (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.7.EL" date="1118224800">- fix IPV6 isRouter flag and default router list handling (John Linville)
- eliminate unexpected IO-APIC msg from x86 kernel on amd64 (Jim Paradis)
- switch to reg stack on user-mode x86_64 stk seg faults (Dave Anderson)
- fix two time-related problems in the netconsole module (Dave Anderson)
- remove microcode.o from x86 hugemem unsupported list (Ernie Petrides)
- fix x86_64 committed space accounting w/overcommit=2 (Larry Woodman)
- enforce page locking resource limit in expand_stack() (Jason Baron)
- fix SCSI command block leak w/off-line non-zero LUNs (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.6.EL" date="1117533600">- fix races between POSIX locking and file closes (Peter Staubach)
- update tg3 network driver to version 3.27RH (John Linville)
- add ia64 frame size validation in syscall handling (Jason Baron)
- prevent info leaks into JFS metadata disk blocks (Stephen Tweedie)
- fix ext2 fast-symlink/EA compatibility problem (Stephen Tweedie)
- add x86_64 32-bit-compat SO_{SND,RCV}TIMEO support (Guy Streeter)
- add piix driver PCI device ids for ICH4-L support (John Linville)
- validate "ndigis" value in addition of ROSE routes (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.5.EL" date="1117101600">- update e1000 network driver to version 6.0.54-k2 (John Linville)
- fix arp_ip_traget failover with bonding driver mode 1 (Eric Paris)
- prevent indefinite postponement under __alloc_pages() (Ernie Petrides)
- capture ia64 reg state on all cpus for OS_INIT dumps (Nobuhiro Tachino)
- add documentation listing which drivers support netconsole (Jeff Moyer)
- fail opens of removable media drives if media not present (Pete Zaitcev)
- fix x86_64 find_target() oops in 32-bit-compat ptrace() (Ernie Petrides)
- prevent info leaks into ext2 directory entry blocks (Stephen Tweedie)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.4.EL" date="1115978400">- limit concurrent OOM kills using /proc/sys/vm/oom-kill (Ernie Petrides)
- rework ppc64 wchan fix to avoid module install crashes (David Woodhouse)
- fix diskdump signature check failures w/block_order=8 (Nobuhiro Tachino)
- fix data corruption from pte_clear() races on &gt;4GB x86's (Larry Woodman)
- avoid s390,x kernel stack overflows in network ctc driver (Pete Zaitcev)
- add description of /proc/stat to file system documentation (Brian Maly)
- avoid inode races in __refile_inode() and clear_inode() (Larry Woodman)
- fix arg/env access in ELF core dumping and /proc reads (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.3.EL" date="1115200800">- remove extra chars from scsi_logging_level mod param (Ernie Petrides)
- use GFP_NOFS allocs to avoid kswapd/rpciod deadlocks (Steve Dickson)
- fix ia64 kernel thread creation to force 64-bit tasks (Jason Baron)
- fix data corruption from 4K overflow in /proc/devices (Neil Horman)
- prevent mlock() resource limit bypass w/shm locking (Ernie Petrides)
- restrict MOXA ctlr firmware updates to privileged users (Brian Maly)
- support EM64T systems with mix of cpus with/without NX (Jim Paradis)
- allow modules to use get/put_task_struct() macros (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.2.EL" date="1114164000">- fix IDE disk accounting bug from wrong ios_in_flight (Larry Woodman)
- limit IGMP traffic to active link in bond_alb_xmit() (John Linville)
- fix audit refs to permit /var unmounting on shutdown (Dave Anderson)
- prevent IP4/6 output memory leaks of dst_entry structs (Dave Miller)
- enhance support for ethtool in 3c59x network driver (John Linville)
- fix launder_page() locking to avoid kswapd deadlock (Larry Woodman)
- suppress ide-floppy I/O errors when media isn't present (Brian Maly)
- make netdump more reliable on NAPI-enabled controllers (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.1.EL" date="1113991200">- (this is the first build for RHEL 3 Update 6)
- fix oops when io_setup() is called w/unwritable addr (Jeff Moyer)
- prevent kswapd hangs under launder_page() w/no bufs (Larry Woodman)
- fix autofs memory leaks when events share wait queues (Jeff Moyer)
- change IBM veth driver to indicate link is always up (David Howells)
- fix error resets and TF reg reads in SATA AHCI driver (Jeff Garzik)
- avoid dropping &gt;200-byte frames in sk98lin driver (John Linville)
- prevent shared memory lock/unlock w/o permissions (Dave Anderson)
- remove duplicate USB ESSENTIAL_REALITY defines (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.EL" date="1113559200">- fix data corruption w/ext3 xattr on 64-bit arches (Jason Baron)
- validate LCP frame lengths in PPP async handling (Dave Miller)
- enable forcedeth net driver builds in x86 configs (Jim Paradis)
- isolate IP fragment queues among various callers (Dave Miller)
- prevent busy inodes for symlinks after unmounts (Don Howard)
- revise PCI device ids extending ICH7 support (John Linville)
- work around broken xw4300 BIOS AHCI BAR setup (John Linville)
- add protocol validation in net bluetooth driver (John Linville)
- enable software watchdog timer in s390,x configs (Jan Glauber)
- fix data corruption w/uselib() on bad ELF libs (Ernie Petrides)
- add USB tablet init delay in wacom_probe() (Kristian Høgsberg)
- prevent core dumps with non-readable ELF interps (Dave Anderson)
- add maxevents validation in epoll_wait() handling (Ernie Petrides)
- add len validation in /dev/random poolsize sysctl (Ernie Petrides)
- correct size of ia64 syscall table initialization (Jason Baron)
- correct x86_64 user-mode i/o port validation (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-31.EL" date="1110448800">- fix missing ppc64 netdump/diskdump symbols (Nobuhiro Tachino)
- prevent ia64 unwind from traversing off stack (Jason Baron)
- disable 3w-9xxx driver builds on ppc64 (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-30.EL" date="1110362400">- fix obscure oops in tty init_dev() handling (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-29.EL" date="1109844000">- incorporate urgent late-breaking SATA fixes (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-28.EL" date="1109152800">- add more USB device support to visor driver (Pete Zaitcev)
- implement clustered APIC support for x86_64 (Larry Woodman)
- constrain x86 MSR writes based on cpu model (Jason Baron)
- increase max superbh size for performance (Stephen Tweedie)
- add locking to prevent oops in md_seq_show() (Doug Ledford)
- restore missing ia64 panic_on_oops handling (Tatsuo Uchida)
- implement Ethernet PCI quirk for HP xw9300 (Jim Paradis)
- revert NFS flock() avoidance to -27.7.EL (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.17.EL" date="1108980000">- rework NFS flock() avoidance w/FS_WANT_FLOCK for GFS (Ken Preslan)
- prevent inode corruption from delete/lookup races (Wendy Cheng)
- preserve registers for ia64 16-byte atomic ops (Geoff Gustafson)
- update SCSI whitelist for LSI/HP/STK/EMC devices (Tom Coughlan)
- disable vary_io in ips driver to avoid ctlr hangs (Tom Coughlan)
- correct handling of 2-TB device partitions (Peter Martuccelli)
- update support for ia64 perfmon facility (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.16.EL" date="1108720800">- implement diskdump support for SATA piix/promise (Nobuhiro Tachino)
- correct /proc/mtrr size values on EM64T platforms (Larry Woodman)
- restore page permissions after writes from ptrace() (Don Howard)
- fix /proc parent pids from multi-threaded forks (Ernie Petrides)
- enable software watchdog timer support on s390,x (Jan Glauber)
- update tg3 network driver to version 3.22RH (John Linville)
- incorporate 3w-9xxx driver version 2.24.00.011fw (Adam Manthei)
- correct ending boundary check in filemap_sync() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.15.EL" date="1108548000">- add e100 driver PCI device ids for ICH7 support (John Linville)
- restore obsolete but ignored e100 module params (John Linville)
- implement user-mode (gdb) access to ia64 gate page (Jason Baron)
- fix x86_64 FPU IP and DP values in SIGFPE context (Larry Woodman)
- add qla2200 module parameter to use NVRAM RIO val (Tom Coughlan)
- update 3w-xxxx driver to 1.02.00.037 w/.033 backup (Adam Manthei)
- fix crashes in video Firewire (ieee1394) driver (Bastien Nocera)
- prevent info leaks into ext3 journal disk blocks (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.14.EL" date="1108461600">- enhance AIO performance over NFS w/FS_AIO_SYNC hook (Steve Dickson)
- defer e100_tx_timeout() work from interrupt context (John Linville)
- correct IPV6 DST entry release to prevent route leak (Dave Miller)
- ignore MTU updates from invalid IPV6 ndisc packets (Dave Miller)
- add relevant PCI device ids to extend ICH7 support (John Linville)
- reduce system pauses during heavy page laundering (Larry Woodman)
- fix audit logging of paths w/predicate filter usage (Neil Horman)
- enable building of unsupported fusion isense module (Adam Manthei)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.13.EL" date="1108375200">- increase dxfer size limit for ppc64 SG_IO ioctl32 (David Howells)
- eliminate tty line discipline usage/switching races (Jason Baron)
- fix autofs recognition of ghosted direct map updates (Jeff Moyer)
- fix sg driver race between cmd completion and close (Tom Coughlan)
- prevent e100 data corruption from v.3.0.27-k2 update (John Linville)
- upgrade SATA support (core, libata, new/old drivers) (John Linville)
- implement diskdump support for sym53c8xx adapter (Yuichi Nagahama)
- add USB support for Wacom Cintiq/Intuos3 tablets (Kristian Høgsberg)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.12.EL" date="1107943200">- update e100 network driver to version 3.3.6-k2 (John Linville)
- correct cpu id macro for dual-core Opteron support (Jim Paradis)
- add "numa=off" message on x86_64 OOM kills w/NUMA (Larry Woodman)
- improve user/system timer tick accounting on s390,x (Pete Zaitcev)
- prevent EAGAIN errs from interrupted TCP recv() calls (Dave Miller)
- update cciss disk driver to version v2.4.54.RH1 (Adam Manthei)
- eliminate diskdump cpu id from frozen list (Nobuhiro Tachino)
- fix user-space access bug in USB vicam ioctl (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.11.EL" date="1107424800">- incorporate Emulex driver ioctl module version 1.0.13 (Tom Coughlan)
- eliminate potential call_lock deadlock with diskdump (Tatsuo Uchida)
- fix potential kiobuf_lock deadlock in free_kiovec() (Larry Woodman)
- add L2 cache descriptor for EM64T Irwindale processor (Neil Horman)
- prevent mmap() syscalls from choosing NULL mappings (Rik van Riel)
- include bounce buffer pages in show_mem() output (Larry Woodman)
- add I2C driver support for ICH5 in i2c-i801.c (John Linville)
- correct parport_pc errors on insmod failures (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.10.EL" date="1106906400">- fix futex_wait() race condition that allowed app hang (Ingo Molnar)
- add/correct write barrier placement in timer routines (David Howells)
- add x86_64 NMI switch support to debug kernel hangs (Yuichi Nagahama)
- restore CIV/LVI offset operation in i810_audio driver (John Linville)
- update e1000 network driver to version 5.6.10.1-k2 (John Linville)
- prevent bogus BUG_ON during multi-threaded core dump (Roland McGrath)
- fix x86_64 crash in huge_page_release() w/SHM_HUGETLB (Larry Woodman)
- fix possible mem corruption from /proc/kcore access (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.9.EL" date="1106647200">- fix core dumping over NFS mounts with "intr" option (Roland McGrath)
- prevent multi-threaded app hang from sys_wait4() race (Ingo Molnar)
- restore e1000 support for Intel PCI device id 1014 (John Linville)
- add ac97 quirk entries for HP xw6000/xw6200/xw8000 (John Linville)
- update b44 network driver to upstream version 0.95 (John Linville)
- revert NFS silly-delete and rpciod-hang patches (Steve Dickson)
- fix panics while backing up LVM snapshots (Heinz Mauelshagen)
- fix oops in redirect_target() on DHCP refresh (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.8.EL" date="1105696800">- rework ia64 INIT switch stacks for clean tracebacks (Tatsuo Uchida)
- fix USB raced timeout errors and ohci_complete_add() (Pete Zaitcev)
- add O_DIRECT handling in LVM driver handling (Heinz Mauelshagen)
- downgrade wait4() SIGCHLD/SIG_IGN warning message (Ingo Molnar)
- eliminate potential VMA list races with do_brk() (Dave Anderson)
- ignore ICMP Source Quench messages in tcp_v4_err() (Dave Miller)
- prevent VMA overlap crashes in insert_vm_struct() (Jason Baron)
- move flock() avoidance from NFS up to F/S layer (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.7.EL" date="1105437600">- fix 32-compat alt-stack signal handling on x86_64 (Geoff Gustafson)
- add initialization of ppc64 EEH error buffer size (David Howells)
- make ppc64 xmon work properly with Power5 console (David Howells)
- prevent infinite sync loop from NFS ESTALE writes (Steve Dickson)
- update 8139too network driver w/recent 2.4 fixes (John Linville)
- avoid netfilter oops when ip_conntrack is unloaded (Dave Miller)
- fix potential rpciod hangs during NFS sillydelete (Steve Dickson)
- avoid "No locks available" errors w/flock() on NFS (Ken Preslan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.6.EL" date="1104919200">- fix x86 phys proc ids for non-clustered APIC systems (Geoff Gustafson)
- return EINVAL on e100/e1000 rx-mini/rx-jumbo settings (John Linville)
- fix i810_audio regression from modified ICH6 PCI ids (John Linville)
- prevent race conditions in add_wait_queue_cond() macros (Jeff Moyer)
- fix FAT32 file system corruption w/writing 8M files (Alexander Viro)
- fix derivation/presentation of PHB unit ids on ppc64 (David Howells)
- close OpenFirmware stdin device at boot on ppc64 (David Woodhouse)
- fix 32-bit-compat regression in CMSG validations (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.5.EL" date="1103796000">- add "CommitLimit" data to /proc/meminfo output (Frank Hirtz)
- allow autofs to expire mounts on ppc64 arch (Jeff Moyer)
- add 3c59x EEPROM_RESET for 3c900 Boomerang (John Linville)
- ignore PTE mapping status in page_anon() (Larry Woodman)
- fix SIOCGIFHWADDR handling for zero addr_len (Dave Miller)
- add netdump support for x86_64, ia64, ppc64 (Dave Anderson)
- correct overcommit accounting on fork failure (Frank Hirtz)
- raise default ia64/ia32e swiotlb size to 64M (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.4.EL" date="1103709600">- add network CMSG validation checks (Dave Miller)
- fix data struct leak in ip_options_get() (Dave Miller)
- fix IGMP vulnerabilities in ip[6]_mc_source() (Dave Miller)
- fix e_phnum binfmt_elf loader vulnerability (Dave Anderson)
- clean x86_64 32-bit-compat syscall numbers (Jim Paradis)
- prevent ia64 floating point reg val leakage (Jason Baron)
- add USB io_edgeport driver size check (Peter Martuccelli)
- enable softirq deferral for x86_64 arch (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.3.EL" date="1102586400">- add data/param length sanity checks in smbfs (Alexander Viro)
- prevent /proc/&lt;PID&gt;/cmdline env data disclosure (Dave Anderson)
- make tulip_stop_rxtx() wait for DMA termination (John Linville)
- fix mm_stat regression introduced in -20.13.EL (Rik van Riel)
- correct return value from vlan_dev_change_mtu() (John Linville)
- serialize datagram read w/appropriate semaphore (Dave Miller)
- fix keyboard regression introduced in -24.EL (Peter Martuccelli)
- enable mmap/mprotect PROT_EXEC for legacy apps (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-26.2.EL" date="1101722400">- fix USB problems with keyboards and ia64 oopses (Pete Zaitcev)
- add i810 PCI IDs for nforce3/CK804 audio devices (Jim Paradis)
- fix ppc64 viodasd driver dev naming/limit bugs (David Howells)
- prevent tg3 fiber link bounces w/auto-negotiation (Dave Miller)
- add ac97 quirk handling for i810_audio driver (John Linville)
- prevent incorrect OOM killing with iscsi usage (Larry Woodman)
- create kiobuf cache to reduce lowmem contention (Larry Woodman)
- fix yet another binfmt_elf loader vulnerability (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.1.EL" date="1100512800">- (this is the first build for RHEL 3 Update 5)
- implement open() recovery from NFS ESTALE errors (Neil Horman)
- clean up warnings from lpfc and lpfc_703 Makefiles (Tom Coughlan)
- fix nessus-induced kernel panic with auditing (Peter Martuccelli)
- update 3c59x driver to LK1.1.18 and fix reset bug (John Linville)
- fix ext3 O_DIRECT bug in orphan list handling (Stephen Tweedie)
- flush cached dirty pages on NFS reads w/O_DIRECT (Steve Dickson)
- allow ia64 kernel unaligned access msg suppression (Neil Horman)
- correct test for performing buffer-head reclaim (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.EL" date="1100253600">- fix binfmt_elf loader vulnerabilities (Jim Paradis, Dave Anderson)
- limit kernel data struct slabs to single-page allocs (Larry Woodman)
- update Emulex driver to 7.1.14 (backup still 7.0.3) (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-24.EL" date="1100080800">- fix several ppc64 problems with signal catching (David Woodhouse)
- fix several bugs in /proc/ppc64/lparcfg driver (David Howells)
- fix possible diskdump hangs w/megaraid2 driver (Tatsuo Uchida)
- add support for IBM EM64T-based Groucho blade (Peter Martuccelli)
- fix regression in USB BIOS-&gt;kernel hand-off support (Pete Zaitcev)
- fix regression in ia64 kernel stack unwind handling (Don Howard)
- fix regression w/agpgart support of i8xx chipsets (Larry Woodman)
- add support for BLKSSZGET ioctl in cciss driver (Tom Coughlan)
- disable iSCSI builds in ppc64 and s390* configs (Tom Coughlan)
- update Emulex driver to 7.1.13 (backup still 7.0.3) (Tom Coughlan)
- correct SCSI whitelist for Chaparral FR1422 devices (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-23.EL" date="1098957600">- prevent kswapd from getting stuck in prune_icache() (Larry Woodman)
- fix ppc64 single-stepping into signal handlers (David Woodhouse)
- fix corruption from user stack expansion races (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-22.EL" date="1098093600">- prevent add/removal races in SCSI open handling (Doug Ledford)
- fix U3 agpgart regression with Intel i8xx chipsets (Dave Jones)
- update SCSI whitelist for IBM 1722/1724 devices (Tom Coughlan)
- correct TSS descriptor limit checking for x86_64 (Jim Paradis)
- add nforce3/CK804 device support and fix ACPI bug (Jim Paradis)
- add support for "forcedeth" net driver version 0.28 (Jim Paradis)
- enable diskdump support in amd64/ia32e configs (Nobuhiro Tachino)
- restore/improve linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- add missing page_cache_release() in launder_page() (Larry Woodman)
- update Emulex driver to 7.1.11 (backup still 7.0.3) (Tom Coughlan)
- add new USB ids to support latest Wacom tablets (Kristian Høgsberg)
- remove drivers/net/tun.o from unsupported list (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-21.EL" date="1096538400">- fix potential PTE race in do_anonymous_page() (Rik van Riel)
- add "Committed_AS" data to /proc/meminfo output (Frank Hirtz)
- revise DMA zone paging thresholds for x86_64 (Larry Woodman)
- prevent /proc/scsi/scsi oops during probes (David Woodhouse)
- avoid kswapd hangs via free_more_memory() hooks (Rik van Riel)
- update megaraid2 driver to 2.10.8.2 w/2.10.6 backup (Adam Manthei)
- fix do_notify_parent() panic from ptrace death race (Roland McGrath)
- fix large core file support on 64-bit architectures (Dave Anderson)
- enable tux on ia64 and increase max tux threads to 16 (Ingo Molnar)
- fix ia64/s390,x single-stepping w/signal handlers (David Woodhouse)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.14.EL" date="1096452000">- fix hang in SCSI starvation management code (David Howells)
- update SCSI whitelist for NETAPP LUN devices (Wendy Cheng)
- fix s390 cio handling during ESS fail-overs (Pete Zaitcev)
- update Emulex driver to 7.1.8 w/7.0.3 backup (Tom Coughlan)
- update Qlogic driver to 7.01.01 w/7.00.03 backup (Tom Coughlan)
- correct unlock/free order in proc_lookupfd() (Ernie Petrides)
- use ACPI for PCI interrupt routing on ia32e (Jim Paradis)
- allow cpus to boot w/APIC IDs &gt; 8 on ia32e (Jim Paradis)
- fix pid allocation when pid_max &gt; 32768 (Ernie Petrides)
- fix regs in multi-threaded ia64 core dumps (Keiichi Mori)
- enable sym53c8xx driver for ppc64 iSeries (David Howells)
- fix ac97 depmod errors w/hugemem configs (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.13.EL" date="1096365600">- fix aic79xx_osm.h/3c59x.c changes in prior rev (Tachino/Linville)
- allow for larger nfsd block sizes on some archs (Steve Dickson)
- fix possible aacraid driver panic in aac_info() (Tom Coughlan)
- fix xdr argsize check to handle writes &gt;= 2^31 (Steve Dickson)
- update e1000 network driver to version 5.3.19-k2 (John Linville)
- apply several cciss driver fixes (to 2.4.52.RH2) (Adam Manthei)
- fix x86_64 versions of cpu capability test macros (Jim Paradis)
- fix ppc64 HPTE memory corruption race condition (Rik van Riel)
- add sys_epoll support on s390,x (Stephen Tweedie, Pete Zaitcev)
- prevent keyboard.c warnings from mouse clicks (Norm Murray)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.12.EL" date="1096279200">- improve slab cache page reaping heuristics (Larry Woodman)
- implement diskdump support for x86_64 arch (Nobuhiro Tachino)
- add ia64 INIT trigger switch support for debugging (Tatsuo Uchida)
- fix several problems in handling of AIO on pipes (Jeff Moyer)
- update fixes for LTP read02 test hangs with tmpfs (Alexander Viro)
- fix x86_64 single-stepping out of signal handlers (Jim Paradis)
- increase size of ppc64 RTAS error log buffer (David Howells)
- increase max possible kNFSD lockd cookie size (Steve Dickson)
- backport 3c59x fixes for mii-tool problems w/10Mb (John Linville)
- incorporate Cisco's iscsi_sfnet initiator driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.11.EL" date="1095933600">- implement diskdump support for megaraid2 adapter (Tatsuo Uchida)
- update ips driver to version 7.10.18 w/7.00.15 backup (Tom Coughlan)
- correct max page aging interval boundary in kscand() (Larry Woodman)
- add ppc64 support for ptrace() with PT_SINGLESTEP (David Woodhouse)
- update e100 network driver to version 3.0.27-k2 (John Linville)
- fix LTP read02 test hangs when tmpfs is in use (Alexander Viro)
- get proc_dir_entry reference in proc_lookup() (Alexander Viro)
- add exports of several AIO-related interfaces (Larry Woodman)
- reduce swapping during excessive pagecache use (Larry Woodman)
- implement statfs64() syscall on x86 for NFS use (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.10.EL" date="1095847200">- implement early USB hand-off (BIOS-&gt;kernel) support (Pete Zaitcev)
- fix stack pointer calculation in x86 show() handling (Jeff Moyer)
- prevent interference between flock/POSIX lock types (Frank Hirtz)
- update pcnet32 network driver to version 1.30c (John Linville)
- add export of block_commit_write() f/s interface (Larry Woodman)
- implement diskdump support for dpt_i2o adapter (Tatsuo Uchida)
- update mptfusion driver to version 2.05.16.02 (Adam Manthei)
- move disk_dump_notifier_list to diskdumplib.c (Nobuhiro Tachino)
- update s390 zfcp driver to revision 5.31.2.11+ (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.9.EL" date="1095674400">- fix occasional ibmvscsic driver insmod crash (David Howells)
- disable linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- prevent double slashes in symlink auditing (Peter Martuccelli)
- fix overzealous compat32 setsockopt conversions (David Woodhouse)
- backport tulip driver fixes from upstream 2.4.28 (John Linville)
- update tg3 network driver to version 3.10RH (John Linville)
- implement sysctl to force igmp protocol versions (Neil Horman)
- add diskdump performance improvement info (Nobuhiro Tachino)
- fix s390 iucv lost connections and ping hangs (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.8.EL" date="1095588000">- prevent diskdump deadlock in case of die() recursion (Tatsuo Uchida)
- add x86/x86_64 support for ptrace() w/PT_SINGLESTEP (Roland McGrath)
- fix x86/x86_64 single-stepping into signal handlers (Roland McGrath)
- increase x86 value for MAX_MP_BUSSES definition to 260 (Ingo Molnar)
- eliminate ia64 potential for scheduler runq deadlock (Larry Woodman)
- add support for /proc/sys/kernel/mem_nmi_panic sysctl (Dave Anderson)
- prevent keyboard-initiated sysrq hangs in handle_sysrq() (Jeff Moyer)
- fix intermittent netdump hangs from cpu-frozen messages (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.7.EL" date="1095415200">- fix premature OOM killing change added in prior rev (Larry Woodman)
- backport vlan driver fixes from upstream 2.4.28-rc1 (John Linville)
- add _sb_findmap symbol export in s390/s390x kernels (Pete Zaitcev)
- add ppc64 support for 32-bit sendfile64() syscall (David Howells)
- fix 32-bit IPC_INFO shmctl() syscalls for ppc64 (David Howells)
- upgrade libata/SATA support to current 2.4 bits (John Linville)
- avoid USB device resets of shared/busy interfaces (Pete Zaitcev)
- fix miscellaneous problems in ppc64 icom driver (David Howells)
- fix ip_queue_maxlen sysctl for ip[6]_queue modules (Neil Horman)
- add module parm for max entries in NFS_ACL replies (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.6.EL" date="1095156000">- prevent OOM killer from kicking in prematurely (Larry Woodman)
- avoid NMI watchdog crashes during sysrq-m usage (Wendy Cheng)
- add auditing support for ia64 clone2 syscall (Peter Martuccelli)
- correct sign of auditing error codes for ia64 (Peter Martuccelli)
- implement ia64 auditing 32-bit-disable sysctl (Peter Martuccelli)
- fix ia64 faults w/stale VHPT-generated TLB entries (Dave Anderson)
- fix invalid x86_64 checksums for multicast packets (Mike Gahagan)
- fix incorrect blocking bug inside wakeup_kswapd() (Larry Woodman)
- validate appropriate media type in DVD drives (Doug Ledford)
- reduce s390 stack usage in qeth/qdio drivers (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.5.EL" date="1094810400">- prevent scenarios that lead to hang of kswapd (Larry Woodman)
- add locking for access to /proc/bus/usb/devices (Pete Zaitcev)
- correct x86 rescheduling to handle apm=power-off (Ingo Molnar)
- fix OOM killer locking and mm referencing holes (Larry Woodman)
- pin ia64 mapping for idle proc stack during boot (Larry Woodman)
- fix warning throttle for amd64 stack overflow check (Neil Horman)
- fix content lengths when using tux gzip compression (Ingo Molnar)
- add auditing support for pread/pwrite syscalls (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.4.EL" date="1094724000">- prevent bogus data in /proc/scsi/ibmvscsi/* (David Howells)
- update tg3 network driver to version 3.9RH (John Linville)
- improve ramfs memory alloc w/scarce highmem (Larry Woodman)
- correct several values in /proc/ppc64/lparcfg (David Howells)
- allow dirty page rebalancing under mem pressure (Rik van Riel)
- prevent memory leak in scsi_build_commandblocks() (Doug Ledford)
- fix potential kswapd deadlock w/disk quota usage (Larry Woodman)
- increase MAX_IO_APICS from 8 to 32 for x86_64 arch (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.3.EL" date="1094205600">- fix various error path bugs in bcm5820 driver (John Linville)
- validate addresses used with /dev/kmem accesses (Neil Horman)
- eliminate IPSEC tunnel leaks when using IPComp (Dave Miller)
- add auditing support for utimes() syscalls (Peter Martuccelli)
- prevent netconsole freeze w/cable dis-/re-connect (Jeff Moyer)
- correct reboot_cpu validation for "reboot=s&lt;n&gt;" (Doug Ledford)
- fix mem/irq clean-up in olympic tokenring driver (Neil Horman)
- update network bonding driver to version 2.6.0 (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.2.EL" date="1094032800">- add maps/rlimits output with print-fatal-signals=2 (Ingo Molnar)
- backport ac97 sound support from upstream 2.4.27 (John Linville)
- eliminate kernel stack data leaks from USB drivers (Mark Cox)
- fix interrupt status mask in AMD PCnet32 driver (David Howells)
- fix module loading problems in ibmvscsic driver (David Howells)
- fix x86 shared runq mapping when ACPI data is bad (Bernd Schmidt)
- disable enhanced error handling on PCI-ISA bridges (David Howells)
- add memory-mapped i/o support to i810_audio driver (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.1.EL" date="1093860000">- (this is the first build for RHEL 3 Update 4)
- backport r8169 network driver changes from 2.4 (John Linville)
- update i810_audio sound driver to version 1.01 (John Linville)
- convert USB UHCI driver warning to debug message (Pete Zaitcev)
- backport 2.6 PROT_GROWSDOWN/UP mprotect() support (Jakub Jelinek)
- lower ppc64 console logging level of RTAS messages (David Howells)
- fix ppc64 handling of "smt-emabled=off" boot option (David Howells)
- correct socket sndbuf accounting w/IP_MULTICAST_LOOP (Neil Horman)
- reduce x86_64 user stack start randomization to 16K (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.EL" date="1092823200">- change TARGET_CPUS on x86_64 to include all on-line cpus (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-19.EL" date="1092304800">- fix possible races/overflows in file offset handling (Alexander Viro)
- correct logging of boot progress messages on Power5 (David Howells)
- extend ppc64 EEH support for other types of devices (David Howells)
- fix ibmveth driver to properly shut down and restart (David Howells)
- fix several races and overflows in ppc64 RTAS driver (David Howells)
- backport "acpi=noirq" support to work around Nocona hangs (Don Howard)
- conditionalize pbn_hp_diva to fix serial driver oops (Matthew Galgoci)
- add amd64 GART entry guard mappings for PCI mis-prefetch (Jim Paradis)
- upgrade SATA support again to resolve several problems (Jeff Garzik)
- qualify ia32e IRQ affinity disable with BIOS flag check (Jim Paradis)
- fix eeh_check_failure() on ppc64 to be interrupt safe (David Howells)
- correct ppc64 EEH macros to use appropriate data size (David Howells)
- fix x86/ia64 no-wait handling in smp_call_function() (Larry Woodman)
- fix "Filter target 0x203 not known ..." audit msgs (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-18.EL" date="1090404000">- prevent s390 mlock hangs with follow_page() rework (Ernie Petrides)
- fix Power5 initialization and handling of RAS IRQs (David Howells)
- fix ppc64 viocons driver deadlocks with printk() (David Howells)
- apply eh_timeout, netdump, cli fixes in diskdump (Tatsuo Uchida)
- add skip_mapped_pages tuning for page eviction (Stephen Tweedie)
- fix initrd's effect on ppc64 mem_end calculation (David Howells)
- allow HT support on ppc64 systems with single cpu (David Howells)
- backport v2.0.8 aic7xxx driver h/w support for Dell (Tom Coughlan)
- correct ppc64 device node searching in hvsi driver (David Howells)
- fix KMI compat problem w/pgprot_t in x86 NX support (Jim Paradis)
- resurrect mptfusion driver backup version 2.05.05 (Tom Coughlan)
- disable IRQ affinity setting on some ia32e systems (Jim Paradis)
- update SCSI whitelist for Dot Hill SANnet/StorEdge (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-17.EL" date="1089280800">- account for zone holes in big hash table allocator (Stephen Tweedie)
- prevent reserved stack space overflow of mmap_top (Ernie Petrides)
- fix USB crash in scan_async() with EHCI hardware (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-16.EL" date="1088848800">- enable exec-shield and add x86 NX support (Ingo Molnar, Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.19.EL" date="1088762400">- add owner check in inode_change_ok() for gid changes (Ernie Petrides)
- fix race in finish_task_switch() between wakeup/exit (Ernie Petrides)
- remove Samsung CD-ROM SN-124 from IDE DMA blacklist (Tom Coughlan)
- update e1000 network driver to version 5.2.52-k3 (John Linville)
- add auditing support for semtimedop syscalls (Peter Martuccelli)
- fix tasklet and locking bugs in Power5 hvsi driver (David Howells)
- fix megaraid2 handling of TUR cmds with SCSI CD-ROM (Adam Manthei)
- update SCSI whitelist for HP NS E1200-160 router (Tom Coughlan)
- prevent x86 read_ldt() from reading beyond kmap (Ernie Petrides)
- force single loadable segment in ia64 kernels (Jakub Jelinek)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.18.EL" date="1088157600">- implement ia64 work-around for TLB fetch timeout MCA (Larry Woodman)
- fix Power3 interrupt initialization in ppc64 setup (David Howells)
- correct info msg, prevent double panic in diskdump (Tatsuo Uchida)
- defend against NULL "mm" ptrs in page_referenced() (Rik van Riel)
- fix miscellaneous audit subsystem problems (Peter Martuccelli)
- prevent crash with tux CGI execution on x86_64 (Ingo Molnar)
- add installer info to SATA sx8 block driver (Jeff Garzik)
- turn on vary_io flag in SCSI ips driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.17.EL" date="1087984800">- allocate big system hash tables w/bootmem allocator (David Howells)
- prevent loading aic7xxx_old when aic7xxx is in use (Doug Ledford)
- implement stat() recovery from NFS ESTALE errors (Steve Dickson)
- fix raw/O_DIRECT i/o bug with unmapped pages (Stephen Tweedie)
- correct another locking hole in RAID1 handling (Doug Ledford)
- fix __x86_64__ conditional in megaraid2.c driver (Adam Manthei)
- fix unresolved symbols on ia64 in cciss driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.16.EL" date="1087898400">- make NFS sillydelete wait for unlink completion (Steve Dickson)
- prevent EIO w/concurrent O_DIRECT+buffered i/o (Stephen Tweedie)
- upgrade SATA support (core, libata, and drivers) (Jeff Garzik)
- implement futex() FUTEX_CMP_REQUEUE op (Al Viro, Pete Zaitcev)
- update b44 network driver to version 0.93 (John Linville)
- avoid unix_stream_sendmsg() ENOBUFS errors (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.15.EL" date="1087812000">- improve SCSI mid-layer error handling w/sdev_retry_q (Doug Ledford)
- eliminate rw-semaphore races between waiter/wakeup (David Howells)
- add locking and fix accounting bug in RAID1 handling (Doug Ledford)
- backport Carmel sx8.c driver from upstream 2.4 base (John Linville)
- rename ppc64-squadrons-* patches to ppc64-power5-* (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.14.EL" date="1087639200">- introduce support for IBM Squadrons/Power5 systems (David Howells)
- update aacraid driver to 1.1.5-2339 w/1.1.2 backup (Adam Manthei)
- allow sys_remap_file_pages() on unlocked ramfs VMAs (Larry Woodman)
- fix diskdump hangs during resets with aic79xx driver (Tatsuo Uchida)
- fix possible data corruption when using SHM_HUGETLB (Larry Woodman)
- set QLogic HbaApiNode proc file permissions to 0600 (Tom Coughlan)
- add IRQ blocking/restoring in add_gendisk/del_gendisk (Jeff Needle)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.13.EL" date="1087466400">- fix problem causing PCI bus 255 to be missing on ia64 (Ben Woodard)
- make nfs_statfs() recognize/handle fs size overflows (Steve Dickson)
- update QLogic driver to 7.00.03-RH1 w/6.07.02 backup (Tom Coughlan)
- allow procfs to utilize more dynamic inode numbers (David Howells)
- prevent inappropriate "unexpected IO-APIC" messages (Ernie Petrides)
- avoid lost dirty page bits in s390/s390x VM handling (Pete Zaitcev)
- fix ACPI SCI interrupt defaults and add kernel params (Jim Paradis)
- fix user-space access bugs in acpi/airo/decnet/sound (Alexander Viro)
- remove drivers/net/starfire.o from unsupported list (Ernie Petrides)
- fix mm_struct mem leak in copy_process() error path (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.12.EL" date="1087293600">- correct s390/s390x tests for PT_AUDITED flag (Peter Martuccelli)
- update e100 network driver to version 2.3.43-k1 (John Linville)
- update megaraid2 driver to 2.10.6 w/2.10.1.1 backup (Adam Manthei)
- add x86_64 auditing support for 32-bit-compat (Peter Martuccelli)
- fix ia64 unwind handling for UNW_INSN_SETNAT_MEMSTK (Jason Baron)
- update cciss driver to v2.4.52 for several fixes (Tom Coughlan)
- fix variable block mode tape handling in st driver (Tom Coughlan)
- incorporate latest Emulex fibre channel driver (Tom Coughlan)
- fix USB EHCI problem with BIOS-to-host handoff (Pete Zaitcev)
- update SCSI whitelist for DDN/Xyratex/SanDisk/CBOX3 (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.11.EL" date="1087207200">- upgrade to latest autofs4, remove from unsupported list (Jeff Moyer)
- fix memory corruption bug in audit driver code (Peter Martuccelli)
- store adjusted KSP value in ia64 diskdump support (Tatsuo Uchida)
- update e1000 network driver to version 5.2.52-k1 (John Linville)
- update ips driver to version 7.00.15 w/6.11.07 backup (Adam Manthei)
- implement USB device interlock between ioctls/SCSI-ops (Pete Zaitcev)
- update tg3 driver to version 3.6RH for upcoming chipsets (Dave Miller)
- downgrade several PCI cache line size debugging messages (Jim Paradis)
- correct x86_64 32-bit-compat support for AIO syscalls (Jeff Moyer)
- prevent FPU exception handling hangs on x86/x86_64 (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.10.EL" date="1086948000">- give wait.func highest priority in wake_up_filtered() (Larry Woodman)
- reduce system time when using sys_remap_file_pages() (Larry Woodman)
- enable CONFIG_SOFT_WATCHDOG module for ppc64 configs (David Howells)
- improve page allocation to avoid unnecessary swapping (Rik van Riel)
- implement diskdump support for ia64 with mptfusion (Tatsuo Uchida)
- disable native ia32 support for ia64 Montecito cpus (Jason Baron)
- save/restore P4/ia32e perf registers for oprofile (Will Cohen)
- fix oprofile ESCR_SET_EVENT_SELECT() event mask (Will Cohen)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.9.EL" date="1086775200">- update s390 zcrypt driver to version 1.2.1 (Pete Zaitcev)
- update network tg3 driver to version 3.5RH (Dave Miller)
- eliminate separate ia32e oprofile processor id (Will Cohen)
- update SCSI whitelist for IBM 2105/2145 devs (Doug Ledford)
- avoid EAGAIN errors on blocking UDP sockets (Steve Dickson)
- avoid putting locked inodes on dirty list (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.8.EL" date="1086688800">- decouple NFS O_DIRECT handling for performance gain (Steve Dickson)
- export page_is_ram() interface for amd64/ia32e arch (Jim Paradis)
- enable CONFIG_SCSI_SATA_* options in x86_64 configs (Jim Paradis)
- update mptfusion driver to 2.05.16 w/2.05.11.03 backup (Adam Manthei)
- fix nopage_sequential_readahead() and filemap_sync() (Larry Woodman)
- fix USB EHCI driver to avoid Squadrons install oops (Pete Zaitcev)
- add x86 NMI trigger switch support for debugging (Yuichi Nagahama)
- add dmi_blacklist[] entry for "Intel NA440BX DP" (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.7.EL" date="1086602400">- apply some minor scsi_dump_status() format tweaks (Doug Ledford)
- implement SCSI support for dynamic add (hot plug) (Doug Ledford)
- upgrade lvm driver logic to version 1.0.8-2 (Heinz Mauelshagen)
- fix x86_64 definition for inlined ffs() function (Jim Paradis)
- preserve VM_MAYEXEC for executable stack support (Jim Paradis)
- add extra SLBIEs for ppc64 Power5 DD2.0 errata (David Howells)
- add ppc64 32-bit compat for TIOCGICOUNT/MIWAIT (David Howells)
- hold file struct ref when removing POSIX locks (Steve Dickson)
- fix window scaling bug in tcp_ack_update_window() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.6.EL" date="1086343200">- make fsync() flush all pending NFS updates to disk (Steve Dickson)
- complete ia64 support for multiple I/O port spaces (Larry Woodman)
- fix sending of IP broadcast frames with TTL of zero (Neil Horman)
- prevent context switch storms under high VM loads (Larry Woodman)
- fix sigaltstack() errors w/JVM on hugemem kernels (Roland McGrath)
- add locking and improve output in scsi_dump_status() (Doug Ledford)
- add size boundary checking in scsi_resize_dma_pool() (Doug Ledford)
- fix SCSI request struct leak on command init failures (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.5.EL" date="1084528800">- overhaul ia64 SAL/MCA subsystem (Ben Woodard)
- enable x86_64 32-bit UID support (Jim Paradis)
- add initial diskdump support (Nobuhiro Tachino)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.4.EL" date="1084356000">- reduce chance of "VFS: Busy inodes after unmount." errs (Steve Dickson)
- convert "uaddr2" arg ptr in s390x futex() compat syscall (Pete Zaitcev)
- add ppc64 32-bit compat handler for PE_LOCKED_COPY ioctl (David Howells)
- update s390 dasd driver with several recent bug fixes (Pete Zaitcev)
- fix amd64 NUMA node scanning for Northbridge systems (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.3.EL" date="1084183200">- prevent exp_stopfodrop() oops during cluster failover (Steve Dickson)
- make nfs_file_commit() always flush the entire file (Steve Dickson)
- fix pcnet32 driver's MAC address selection on ppc64 (Julie DeWandel)
- backport /dev/random driver fixes for missed wakeups (Mark DeWandel)
- fix hang w/SoundBlaster 16-bit sampling w/odd count (Ernie Petrides)
- make s390 tape driver specify GPL module license type (Pete Zaitcev)
- correct buffer len value in ppc64 pSeries ipr driver (David Howells)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.2.EL" date="1083664800">- enable booting on 8-way Opteron systems (Jim Paradis)
- fix 32-bit-compat truncate64() on x86_64 (Jim Paradis)
- correct promiscuous mode counter handling (Dave Miller)
- support 128-GB ia64 systems w/HP zx1 chipset (Larry Woodman)
- add export of sys_ioctl() global symbol on s390x (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.1.EL" date="1083578400">- (this is the first build for RHEL 3 Update 3)
- reenable/fix linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- clean up file locks when NFS clients receive signals (Steve Dickson)
- complete ia64-specific LAuS syscall auditing support (Mark DeWandel)
- prevent NULL pointer dereference in page_referenced() (Rik van Riel)
- fix max sectors argument in lvm_snapshot_alloc() (Heinz Mauelshagen)
- allow AGP bus scanning to execute for all architectures (John Dennis)
- fix page_referenced() rss limit checks w/unmapped pages (Rik van Riel)
- correct locking and cr/lf problems in usbserial driver (Pete Zaitcev)
- add /proc/cpuinfo support for new ppc64 processors (Julie DeWandel)
- fix sense data handling on certain SCSI cmd retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.EL" date="1082541600">- fix clobbering of /proc/cpuinfo vendor_id on x86_64 (Jim Paradis)
- correct MCAST_MSFILTER/IP_MSFILTER size checking (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-14.EL" date="1081936800">- disable linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- prevent symlink buffer overflow in ISO-9660 fs (Ernie Petrides)
- check for skb overrun in IPV4/IPV6 IGMP handling (Dave Miller)
- fix possible hang in rebalance_laundry_zone() (Larry Woodman)
- correct zone_wired[] initialization for NUMA (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-13.EL" date="1081332000">- fix several critical libata bugs (Jeff Garzik)
- correct IPSEC XFRM policy ref counting (Dave Miller)
- add amd64/ia32e parsing for "acpi=off" arg (Jim Paradis)
- update tg3 driver to v3.1 for several fixes (Dave Miller)
- fix SCSI whitelist for Hitachi/HP DFx00, Apple Xserve (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-12.EL" date="1080295200">- add USB support for Handspring Treo 600 PDA syncing (Matthew Galgoci)
- clear state for CPEs during ia64 MCA SAL error logging (Ben Woodard)
- prevent DMA resource leak in QLogic driver error path (Tom Coughlan)
- change default QLogic driver device queue depth to 64 (Tom Coughlan)
- replace fabricated cciss drive geometry w/ENXIO error (Tom Coughlan)
- update SCSI whitelist for HP SureStore/StorageWorks (Tom Coughlan)
- disable CONFIG_ACPI_DEBUG in amd64/ia32e configs (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-11.EL" date="1078740000">- add yet another Intel ICH6 SATA PCI id (Jeff Garzik)
- fix ref counting in copy_process() error path (Larry Woodman)
- remove ia64 support for /proc/bus/mckinley/bitmap (Jason Baron)
- correct depmod versioning for unsupported modules (Ernie Petrides)
- prevent data corruption in ia32e phys_proc_id[] info (Larry Woodman)
- change default value for inactive_clean_percent to 30 (Larry Woodman)
- enable improved version of s390 on-demand timer patch (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-10.EL" date="1078221600">- incorporate late-breaking libata fixes (Jeff Garzik)
- enable amd64 syscall for tux support (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.17.EL" date="1078135200">- reduce s390 idle overhead with on-demand timer patch (Pete Zaitcev)
- complete ia64 NPTL support for 32-bit-EL executables (Jason Baron)
- add several ia64 syscall table entries for 32-bit-EL (Jason Baron)
- upgrade libata/SATA support, delete ich5-sata.patch (Jeff Garzik)
- check for mremap/vmtruncate race in move_one_page() (Jason Baron)
- prevent ia64 NaT-bit corruption during sig catching (Jason Baron)
- fix amd64 get_mtrr() parsing error with &gt;4GB memory (Jim Paradis)
- change amd64 default behavior to avoid TSC timer use (Jim Paradis)
- force s390utils upgrade to prevent zipl seg fault (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.16.EL" date="1078048800">- restore varyio capability in mptfusion driver update (Adam Manthei)
- enhance SCSI mid-layer queuing for indefinite retries (Doug Ledford)
- add ia64 reg reloads for 32-bit-EL strace -f support (Jason Baron)
- fix ia64 core dump support for 32-bit-EL executables (Jason Baron)
- add SCSI whitelist devs with BLIST_RETRY_ABORTED_CMD (Doug Ledford)
- remove stack-in-interpreter check in binfmt_elf.c (Julie DeWandel)
- clear all flags in exec_usermodehelper() for kmod (Alexander Viro)
- fix aacraid command completion (rq corruption) bugs (Tom Coughlan)
- correct cciss_proc_tape_report() type in flags decl (Tom Coughlan)
- enable USB-2.0-hub-based mice/keyboards to function (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.15.EL" date="1077962400">- fix amd64 oprofile linkage problem in ia32e support (Ernie Petrides)
- update ips driver to version 6.11.07 w/6.10.52 backup (Tom Coughlan)
- add size checks to DRM ATI r128 driver ioctl handling (John Dennis)
- avoid megaraid2 irq_disable calls for mem-mapped ctlrs (Tom Coughlan)
- upgrade firmware imbedded in QLogic driver to 3.02.24 (Tom Coughlan)
- correct ia64 memory accounting in overcommit mode 2 (Larry Woodman)
- implement softirq deferral to limit kernel stack depth (Ingo Molnar)
- reduce kernel stack usage in a couple of tux functions (Ingo Molnar)
- fix shared extended attribute ref counting in ext3 (Stephen Tweedie)
- clear SCSI sense data buffer between eh retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.14.EL" date="1077789600">- add .RH1 suffix to cciss driver version v2.4.50 (Tom Coughlan)
- implement initial LAuS syscall auditing support (Mark DeWandel)
- introduce GFS enablers for locking and sendfile ops (Ken Preslan)
- update QLogic driver to 6.07.01 w/6.06.00b11 backup (Tom Coughlan)
- improve netdump reliability w/asynchronous IPI param (Jeff Moyer)
- add ICH6 DSP audio support to i810_audio driver (Jeff Garzik)
- apply SCSI whitelist updates for several devices (Tom Coughlan)
- fix odd byte tape i/o handling in sym53c8xx driver (Tom Coughlan)
- correct minimum nfsd version that supports acls (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.13.EL" date="1077703200">- allow concurrent NFS direct i/o to same file if !append (Steve Dickson)
- introduce support for new Intel 64-bit ia32e processor (Larry Woodman)
- update mptfusion driver to 2.05.11.03 w/2.05.05 backup (Adam Manthei)
- remove fs/binfmt_misc.o from linux-modules-unsupported (Jason Baron)
- fix ia64 predicate register use in sig trampoline code (Jason Baron)
- add oprofile cpu type recognition for ia32e processor (Will Cohen)
- update e1000 network driver to version 5.2.30.1-k1 (Jeff Garzik)
- add more Intel PCI ids to match upstream 2.4 (Jeff Garzik)
- add ICH6 PATA support, PCI ids, irq routing (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.12.EL" date="1077530400">- add deferred page freeing for intr-context unmap_kvec() (Jeff Moyer)
- update megaraid2 driver to v2.10.1.1 w/v2.00.9 backup (Tom Coughlan)
- fix ppc64 pte hash table locking to avoid deadlocks (Julie DeWandel)
- fix ia64 data TLB init to prevent random boot-up hangs (Jason Baron)
- fix ia64 RNat register corruption with alt sig stacks (Jason Baron)
- allow smaller ia64 sig stacks in ia32 emulation layer (Jason Baron)
- backport ncpfs fixes to eliminate var-length arrays (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.11.EL" date="1077271200">- backport cisco aironet driver from 2.6.3-rc4 (Matthew Galgoci)
- update tg3 driver to v2.7 to fix status reg handling (Dave Miller)
- correct lost jiffies logic for x440/5 cyclone timer (Bernd Schmidt)
- fix open() error clean-up for unsupported O_DIRECT (Stephen Tweedie)
- prevent ia64 crashes when unmapping hugetlb pages (Jason Baron)
- add ppc64 processor support for future PPC970+ (Julie DeWandel)
- rework ppc64 32-bit-compat iptables support (Julie DeWandel)
- fix func ptr test in ethtool_set_ringparam() (Jeff Garzik)
- disable linux-2.4.21-scsi-affine-queue.patch (Doug Ledford)
- improve scsi_allow_ghost_devices description (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.10.EL" date="1077098400">- fix amd64 iommu bug causing data corruption on &gt;4GB systems (Jim Paradis)
- return EINVAL for unsupported ioctl32 syscalls on ppc64 (Julie DeWandel)
- remove incorrect BUG() call in __remove_inode_page() (Stephen Tweedie)
- fix s390 ctc driver problem causing build system hangs (Pete Zaitcev)
- fix s390 qeth driver error path to reset write_busy (Pete Zaitcev)
- update s390 zfcp driver to fix miscellaneous bugs (Pete Zaitcev)
- apply upstream nfs fixes for acl error handling (Steve Dickson)
- prevent kernel stack data leak via /dev/rtc (Ernie Petrides)
- allow AIO operations on sockets for non-inet (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.9.EL" date="1076925600">- restore genksyms_smp_prefix setting for non-x86 builds (Ernie Petrides)
- display/log memory stats whenever there's an OOM kill (Larry Woodman)
- update tg3 driver to v2.6, the latest upstream version (Jeff Garzik)
- update net bonding driver to v2.4.1, latest upstream (Jeff Garzik)
- fix irq, mem, printk, strtol bugs in cciss driver (Tom Coughlan)
- wait for board ready after hot add, cciss driver (Tom Coughlan)
- enable cciss adapter prefetch for x86 platforms (Tom Coughlan)
- add preserve_arg0 handling for ia32 emulation (Larry Woodman)
- fix ppc64 compat support for quota syscall (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.8.EL" date="1076580000">- remove Power-Blade-specific def for USB TEAC floppy (Julie DeWandel)
- fix s390 crash in iucv driver on connection shutdown (Pete Zaitcev)
- fix ia64 ACPI parsing for multinode IDE devs on x455 (Jim Paradis)
- fix amd64 core dumping of multithreaded 32-bit apps (Jim Paradis)
- fix s390 oprofile conditional and zero top addr bits (Will Cohen)
- add ipr driver v1.0.3 for IBM's PPC RAID adapters (Tom Coughlan)
- add {alloc,free}_netdev(), list macro, tg3 PCI ids (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.7.EL" date="1076407200">- restrict /proc/tty/driver directory access to root (Jeff Moyer)
- allow non-standard usr/sys VM splits at 2G/2G, 1G/3G (Ingo Molnar)
- extend existing ppc64 RTAS firmware flash interface (Mark DeWandel)
- fix ppc64 version of strncpy() to zero-pad buffers (Julie DeWandel)
- fix s390/x version of strncpy() to zero-pad buffers (Pete Zaitcev)
- fix generic version of strncpy() to zero-pad buffers (Jim Paradis)
- improve ppc64 segment table entry replacement logic (Julie DeWandel)
- correct type/cast of "len" in ppc64/kernel/nvram.c (Julie DeWandel)
- implement new ppc64 RTAS system call interface (Julie DeWandel)
- increase x86 RSDT table limit in ACPI parsing (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.6.EL" date="1076320800">- fix more usb-storage bugs for Power Blade support (Julie DeWandel)
- remove extra inactive_clean_pages-- in reclaim_page() (Larry Woodman)
- return proper error codes for do_munmap() failure in mremap (Dave Jones)
- fix binfmt_elf.c problems for apps with huge bss regions (Julie DeWandel)
- update cciss driver to v2.4.50 for Smart Array 6i support (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.5.EL" date="1075975200">- prevent netdump progress output from filling up log_buf (Jeff Moyer)
- add ppc64 RAS hook at end of panic() processing (Julie DeWandel)
- correct source IP address in ICMP error message (Dave Miller)
- fix smp deadlock with pdeath_signal posting (Roland McGrath)
- add ppc64 support for /proc/ppc64/lparcfg (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.4.EL" date="1075888800">- update nfsd mode-with-acls fix for upstream conformance (Steve Dickson)
- rework usb-storage locking to avoid hangs on disconnect (Pete Zaitcev)
- fix mmio alignment error in olympic token ring driver (Julie DeWandel)
- prevent tux logger-thread shutdown problems on ppc64 (Ingo Molnar)
- add ppc64 AltiVec chip support for Power Blades (Julie DeWandel)
- eliminate multi-threaded coredump hang potential (Ingo Molnar)
- fix ppc64 segfaults with tasks &gt; 2GB in size (Julie DeWandel)
- fix usb-storage memory-allocation/iowait deadlock (Alan Cox)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.3.EL" date="1075716000">- add amd64 support for PT_GNU_STACK with exec shield (Jim Paradis)
- fix s390 raid1 sync problem w/writes at end of dev (Pete Zaitcev)
- update s390 zcrypt driver to version 1.1.4 (Pete Zaitcev)
- fix output of large /proc/pid/statm values (Mark DeWandel)
- fix output of large /proc/partitions values (Mark DeWandel)
- enable ppc64 support for JS20 Power Blades (Julie DeWandel)
- fix kernel stack memory leak on fork failures (Dave Anderson)
- fix ipv6 packet quoting problem in icmpv6_send() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.2.EL" date="1075370400">- apply Intel's x86 microcode loader update (Jim Paradis)
- enhance PCI multifunction support for ppc64 (Julie DeWandel)
- fix nfsd returning bad mode bits when acls set (Steve Dickson)
- prevent unkillable zombies from detached NPTL threads (Ingo Molnar)
- avoid missing scsi disks in /proc/partitions on detach (Jason Baron)
- correct pte calculation inside zeromap_pte_range() loop (Ben Woodard)
- add inline function PDE() to help driver backporting (Matthew Galgoci)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.1.EL" date="1074679200">- (this is the first build for RHEL 3 Update 2)
- relocate various pieces of the "undo" patch (Patch Review Committee)
- rename s390 zcrypt and zfcp driver patches (Pete Zaitcev)
- add LKML discussion to COPYING.modules (Arjan van de Ven)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.EL" date="1073556000">- fix race condition between thread creation and signals (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-8.EL" date="1073469600">- fix amd64 eflags masking in 32-bit emulation of ptrace (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-7.EL" date="1073383200">- fix numerous ppc64 problems with /proc access (Julie DeWandel)
- allow user core files larger than 2GB in size (Dave Anderson)
- add ia64 support for Crestone Peak AGP bridges (John Dennis)
- fix unaligned kernel accesses in nfs_readdir() (Steve Dickson)
- add new_len/new_addr checks in do_mremap() (Ernie Petrides)
- fix nfs O_DIRECT corruption with &gt;4GB files (Steve Dickson)
- enable bus scan for AGP ctlrs on amd64 systems (John Dennis)
- limit PCI-alloc'ed physaddrs to 4GB on HP ia64 (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-6.EL" date="1070877600">- fix ppc64 firmware updates (Julie DeWandel)
- fix sync wakeup problem (Ingo Molnar)
- add ia64 cyclone support (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-5.EL" date="1070272800">- undo rejected patches (Stephen Tweedie, Arjan van de Ven, Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.20.EL" date="1069840800">- enable NUMA support in amd64 smp configs (Jim Paradis)
- prevent oopses with tux in OOM scenarios (Ingo Molnar)
- apply several ipv6 multicast bug fixes (Dave Miller)
- assign retval in copy_process() error path (Ingo Molnar)
- add lseek-in-/proc support for s390x "ps" (Pete Zaitcev)
- redefine zone_is_highmem() for Celestica (Dave Anderson)
- fix unresolved symbols in amd64 modules (Bill Nottingham)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.19.EL" date="1069754400">- fix tg3 rx_pending limit for BCM5705/BCM5782 chips (Jeff Garzik)
- reset page error flag prior to read of new contents (Jeff Moyer)
- enable CONFIG_HOTPLUG_PCI option for ia64 configs (Doug Ledford)
- fix inactive laundry list race in ramfs_writepage() (Dave Anderson)
- avoid out_of_memory() for wired pages when there's lomem (Dave Anderson)
- conditionalize ppc64 machdep_calls change for KMI compat (Ernie Petrides)
- limit anon/cache pages scanned in refill_inactive_zone() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.18.EL" date="1069668000">- create old version (rev. 5.64) of cmpci sound driver (Tom Coughlan)
- remove ac97.o, ad1848.o, cs4232.o from unsupported (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.17.EL" date="1069063200">- fix missing use of __GFP_HIGHMEM flag in pte_alloc_one() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.16.EL" date="1068890400">- rework scsi mid-layer queuing logic to fix error handling (Doug Ledford)
- fix pci_dma_sync_sg() scatterlist arg in megaraid2 driver (Tom Coughlan)
- move more-ptes-in-rmap-pte-chain logic to its own patch (Ernie Petrides)
- tag uses of __GENKSYMS__ with KMI/ABI compat comment (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.15.EL" date="1068804000">- fix MD multipath bugs causing crashes during fail-overs (Doug Ledford)
- add chain_ptep_t and revert pte_addr_t for KMI compat (Ernie Petrides)
- restore sub-timer-tick time-of-day granularity for ia64 (Jason Baron)
- modify agpgart and drm drivers for ia64 HP ZX1 support (John Dennis)
- fix ia64 32-bit emulation for several stat-related calls (Jason Baron)
- enable amd64 use of new ips driver w/config separation (Tom Coughlan)
- update e100 network driver to version 2.3.30-k1 (Jeff Garzik)
- update e1000 network driver to version 5.2.20-k1 (Jeff Garzik)
- apply scsi whitelist updates for IBM/CNSi/NEC devices (Tom Coughlan)
- reenable varyio for aic7xxx driver (hangs were unrelated) (Jeff Moyer)
- conditionalize NVIDIA_NFORCE3 to restore KMI compat (Ernie Petrides)
- prevent two ext3 panics on corrupted filesystems (Stephen Tweedie)
- apply two minor fixes to ppc64 RAS nvram reading (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.14.EL" date="1068717600">- update ServeRAID (ips) driver to version 6.10.52 (Tom Coughlan)
- configure xmon on by default in ppc64 configs (Julie DeWandel)
- create initial s390 zcrypt driver, version 1.1.2 (Pete Zaitcev)
- remove zfcp driver from linux-modules-unsupported (Pete Zaitcev)
- revise ppc64 reliability/serviceability support (Julie DeWandel)
- reduce kernel stack usage inside nfs_readdir() (Steve Dickson)
- add gameport dependency to cmpci driver config (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.13.EL" date="1068631200">- reduce UDP retransmissions and fix slow reads for NFS (Steve Dickson)
- implement wired page lists for better ramfs handling (Larry Woodman)
- fix vfork deadlock when child process causes core dump (Ingo Molnar)
- enhance AltSysRq-M output and fix deadlock potential (Larry Woodman)
- update cmpci sound driver for some HP IPF workstations (Tom Coughlan)
- correct tq_struct struct initialization in tg3 driver (Jeff Garzik)
- fix NFS file attribute inconsistency after rename (Steve Dickson)
- prevent ia64 machine checks w/sysreport on Olympia (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.12.EL" date="1068544800">- redesign refill_inactive_zone() for smarter deactivation (Larry Woodman)
- improve page deactivation scalability w/delayed laundering (Larry Woodman)
- rework locking and timer usage in s390 ctc network driver (Pete Zaitcev)
- allow xmon to be enabled at boot-time for ppc64 debugging (Julie DeWandel)
- reverse kscand's order of anon/cache active list traversal (Larry Woodman)
- force in-lining of br_read/write_lock/unlock routines (Julie DeWandel)
- fix mistaken fall-through cases in s390 chandev driver (Pete Zaitcev)
- make a few exported symbols available to OpenGFS (Stephen Tweedie)
- fix ld/st ordering bug causing lost signal wakeups (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.11.EL" date="1068112800">- make profile=X imply nmi_watchdog=1 and fix NMI w/d bugs (Ernie Petrides)
- add lock init in scsi_get_host_dev() to fix shutdown hang (Doug Ledford)
- enable distributed interrupts by default on ppc64 iSeries (Julie DeWandel)
- improve amd64 reporting of machine check errors (Jim Paradis)
- fix disabling of autonegotiation in tg3 driver (Dave Miller)
- add image name to s390 ioctl32 debug message (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.10.EL" date="1068026400">- fix file lock ownership by NPTL threads to be process-wide (Ernie Petrides)
- upgrade megaraid driver to version 1.18k and fix isr/fw sync (Tom Coughlan)
- upgrade megaraid2 driver to version 2.00.9 and enable varyio (Tom Coughlan)
- improve scsi mlqueue handling to enable BUSY/QUEUE_FULL fix (Doug Ledford)
- correct reporting of i/o errors in ppc64 viodasd driver (Julie DeWandel)
- update acenic driver to handle enabling of jumbo frame mode (Jeff Moyer)
- fix i386 PAGE_NONE bits to prevent get_user_page() hang (Roland McGrath)
- fix ia64 show_mem() handler to use efi_memmap_walk() call (Dave Anderson)
- replace spaces in slabinfo entry name for async poll table (Matt Wilson)
- fix race condition in buffer-head memory footprint patch (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.9.EL" date="1067940000">- improve spec file robustness in %post/%preun stanzas (Florian La Roche)
- add s390x iovec length checking for 32-bit reads/writes (Matt Wilson)
- use highmem for pte/ramfs page allocation w/__GFP_WIRED (Larry Woodman)
- upgrade oprofile support with bug fixes and enhancements (Will Cohen)
- fix infinite recursion in SCSI mid-layer post-processing (Jeff Moyer)
- introduce no-auto-start-on-add handling for SCSI blacklist (Jeff Moyer)
- enable s390 support for blk stats handling for iostat -x (Pete Zaitcev)
- fix LVS timer-related hang from ip_vs_conn_expire() bug (Ernie Petrides)
- correct module init in cpqarray driver to fix insmod crash (Tom Coughlan)
- incorporate ESB PATA support and fix a pirq_routers PCI id (Jeff Garzik)
- fix nfs async write deadlock potential w/nfs_writepage() (Steve Dickson)
- fix SCSI error handling for BUSY queue status messages (Doug Ledford)
- improve ppc64 32-bit ioctl support for use by ethtool (Julie DeWandel)
- add missing unlock in ip_mc_del_src() to fix IGMP deadlock (Dave Miller)
- change ppc64 reporting of floppy capacity to be 1.44 MB (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.8.EL" date="1067421600">- fix up various problems on Nforce3-based amd64 systems (Jim Paradis)
- double number of pte addrs in rmap pte_chain structs (Larry Woodman)
- restrict slab size for kernel data structs to 2 pages (Larry Woodman)
- clean up obsolete quicklist usage for ppc64 pte pages [rejected]
- prevent readdirplus from returning hidden mount points (Steve Dickson)
- prevent lockd deadlocks caused by export table locking (Steve Dickson)
- eliminate use of parallel task_struct init macro on ia64 [rejected]
- fix broken s390x overflow checks with 32-bit F_GETLK use (Matt Wilson)
- fix SCSI errors with "mt stoptions" and IDE tape drives (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.7.EL" date="1067162400">- fix bad checksumming interaction between e100 and bridge (Jeff Garzik)
- prevent system hang by OOM killing when overcommitted (Larry Woodman)
- un-inline ext3 error function to reduce stack usage (Stephen Tweedie)
- fix several ppc64 problems with interrupt handling (Julie DeWandel)
- correct amd64 identification in /dev/oprofile/cpu_type (Jim Paradis)
- move fput() call in do_tty_hangup() to avoid oops w/kon (Alexander Viro)
- eliminate creation of never-used task_struct slab cache (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.6.EL" date="1066903200">- reduce buffer-head memory footprint from read-only files (Ingo Molnar)
- update qeth driver for reduced stack usage and bug fixes (Pete Zaitcev)
- fix s390 qeth driver again to allow tcpdump to function (Pete Zaitcev)
- add exec_mmap() locking to prevent vma lookup races (Ernie Petrides)
- rework RPC slot allocation for further NFS improvements (Steve Dickson)
- reduce frequency of RPC retransmits during NFS writes (Steve Dickson)
- make generic/ext3 file system write handling 64-bit clean (Jeff Moyer)
- allow SMP scheduling rebalancing to occur every 200 msecs (Ingo Molnar)
- prevent races during IPC semaphore set and msg queue removal (Ingo Molnar)
- fix ACPI handling to identify trigger/polarity of PCI IRQs (Jim Paradis)
- correct amd64/ia64 acpi_disabled decls for post-boot access (Jeff Moyer)
- update ppc64 viocons driver with several bug fixes (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.5.EL" date="1066298400">- move fix for PPR use in sym53c8xx driver to its own patch (Ernie Petrides)
- correct pids exported by msgctl/semctl/shmctl/fcntl calls (Ulrich Drepper)
- apply s390 lcs driver wait queue init and locking updates (Pete Zaitcev)
- enable dummy network driver use in generic s390 config file (Pete Zaitcev)
- add missing ptrace hooks for exec and vfork-done events (Bill Nottingham)
- fix SMP timer race that triggered BUG_ON() in add_timer() (Ingo Molnar)
- fix several bogus ipvs boundary checks in ftp module [rejected]
- fix vfsmount queuing in attach_mnt() for CLONE_NEWNS [rejected]
- add net_device check to prevent oops in pppoe driver [rejected]
- fix memory leak in symlink error path of /proc driver [rejected]
- fix overflow in v1_disk2mem_dqblk() quota calculation [rejected]
- increase ppc64 ramdisk size to 8192k in p/iSeries configs (Jeremy Katz)
- lower amd64 TASK_UNMAPPED_32 to increase avail address space (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.4.EL" date="1066039200">- fix ppc64 stack pointer alignment in user signal handlers (Jakub Jelinek)
- increase amd64 exception stack size to 4k to avoid overflow (Jim Paradis)
- fix ppc64 interrupt rate accounting for vmstat and /proc (Julie DeWandel)
- extend amd64 NMI watchdog timeouts to tolerate bad 2nd cpu (Jim Paradis)
- allow s390 dasd driver to use noop elevator module (Pete Zaitcev)
- add free_irq() in error path of olympic token ring driver (Matt Wilson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.3.EL" date="1065866400">- make pid fields in ucred structures hold tgid values (Ulrich Drepper)
- prevent ppc64 iSeries virtual console writes &gt; 4k (Julie DeWandel)
- control ia64 unaligned access messages with new sysctl (Jeff Moyer)
- correct SCSI data direction on cmd to spin up disks (Pete Zaitcev)
- add do_brk() TASK_SIZE and address space wrap checks (Arjan van de Ven)
- limit PPR use in sym53c8xx driver for ppc64 Zapata drives (Doug Ledford)
- list ac97.o, ad1848.o, and cs4232.o modules as unsupported (Jeff Moyer)
- clean up conditional compilation in s390 zfcp driver (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.2.EL" date="1065693600">- identify whether i686 or athlon config in oops output (Arjan van de Ven)
- remove warning in reclaim_page() unmapped page path (Ernie Petrides)
- fix several lvm error handling paths causing memory leaks [rejected]
- correct i386 smp shutdown logic when netdump is enabled (Jeff Moyer)
- fix amd64 potential data leaks on FPU save/restore errors (Jim Paradis)
- prevent aic7xxx chip resets leading to PCI parity errors (Tom Coughlan)
- remove ia64 user tty warning on unaligned accesses (Arjan van de Ven)
- fix ppc64 /proc file buf overruns in viodasd driver (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.1.EL" date="1065607200">- (this is the first build for RHEL 3 Update 1)
- avoid m/ctime update for pipe writes on r/o file systems (Stephen Tweedie)
- prevent theoretical ext3 fs corruption in ext3_read_inode (Stephen Tweedie)
- enable AGRESSIVE_IDLE_STEAL to improve scheduler balancing (Ingo Molnar)
- fix potential ppc64 lock-up on ioctl32 un/reregistering (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.EL" date="1065175200">- extend ppc64 scsi timeout values for Zapata DVD-ROM drives (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-3.EL" date="1063965600">- make sure to release viotape op structure after use (Julie DeWandel)
- disable pgd/pmd quicklists on ppc64 (Mark DeWandel)
- temporarily disable aio on sockets (Jeff Moyer)
- correctly refile inodes to make them reclaimable (Harald Hoyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-2.EL" date="1063792800">- S390: update zfcp and cio drivers (Pete Zaitcev)
- IA64: add extra check to virtual mem_map (Larry Woodman, Dave Anderson)
- initialise local variables in ide-tape &amp; ide-scsi
- cap qla2200 tcq depth to 255
- switch version number scheme to kernel-2.4.21-N.EL</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063706400">- PPC64: invalidate evicted sbl entries in the erat (Julie DeWandel)
- increase ethernet tx_queue_len to 1000 (David Miller)
- in udp_{v6_}flush_pending_frames, reset up-&gt;len too (David Miller)
- S390: CMS reserved minidisk detection (Pete Zaitcev)
- call recount_segments() on a different occasion (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063620000">- really disable exec-shield (Roland McGrath)
- reduce stack randomisation, disable brk randomisation (Ingo Molnar)
- make e1000 driver 64 bit clean (Julie DeWandel)
- minor aio corner case error condition fix (Jeff Moyer)
- AMD64: more lenient check for call workaround (Ernie Petrides)
- PPC64: disable CONFIG_XMON (Mark DeWandel)
- S390: fix CCW slab selection (Pete Zaitcev)
- fix two-disk combined mode sata (Jeff Garzik)
- move buslogic scsi driver to supported, for vmware only (Tom Coughlan)
- change viocons message from KERN_WARNING to KERN_INFO (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063360800">- VM: handle race condition in reclaim_page (Stephen Tweedie, Larry Woodman)
- PPC64: fix "log_buffer broken" xmon issue (Julie DeWandel)
- fix compiler warnings in netdump (Jeff Moyer)
- AMD64: workaround for 32 bit compat mode page fault problem (Ernie Petrides)
- IA64: make perfmon root-only (Jason Baron)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063274400">- fix smp race in rebalance_laundry_zone()</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063188000">- fix compiler warnings when hugetlbfs is disabled (Pete Zaitcev)
- fix tux performance bug (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063101600">- don't evict kernel stack seg translation on ppc64 (Julie DeWandel)
- fix callers of do_page_fault on ppc64 (Mark DeWandel)
- AMD64 munmap return value, fix lsb failure (Jeff Moyer)
- fix for PPC64 32-bit ioctl (Jim Paradis)
- bring IA64 value of MINSIGSTKSZ in line with upstream (Jakub Jelinek)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063015200">- fix potential datacorruptor in viodasd driver (Julie DeWandel)
- fix race condition in s390 dirty bit handling (Pete Zaitcev)
- limit per-cpu slab cache size
- correct 32-bit readv/writev border cases on ppc64 (Matt Wilson)
- AMD Golem IO-APIC fixup for i686 kernel on AMD64 (Jeremy Katz)
- NFS Solaris 8 acl fix (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062756000">- minor nfs permissions bugfix (Steve Dickson)
- change mprotect return value to SuS mandated value (Arjan van de Ven)
- kernel-unsupported now provides kernel-modules (Jeremy Katz)
- correct __hugemem__modules typos in rhkernel.h
- fix subtle pmd corruption error (Larry Woodman, Dave Anderson)
- fix cut'n'paste error in SATA io port reservation
- restore NFSEXP_CROSSMNT ABI compatibility (Steve Dickson)
- round up executable name field length in core file (Jakub Jelinek)
- switch off exception_trace on amd64 (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062496800">- patch to access odd last sector on ia64 (Jason Baron)
- misc fixes from upstream (Arjan van de Ven)
- fix audigy driver (Jeff Garzik)
- tunable dcache reclaim priority for tux (Ingo Molnar)
- tg3 driver update (Jeff Garzik)
- ipv6 and icmp network bugfixes (David Miller)
- fix ppc64 memory access security bug (Julie DeWandel)
- reduce memory allocated for skb (Ingo Molnar)
- small smp fix for scalable timers (Ingo Molnar)
- make s390 recognise MSDOS partitions (Pete Zaitcev)
- small smp fixes in tux (Ingo Molnar)
- make mptfusion drivers supported on 4/4 split kernel (Tom Coughlan)
- add entries to scsi whitelist (Tom Coughlan)
- minor sata/ata driver updates (Jeff Garzik)
- small fixes to viodasd driver (Julie DeWandel)
- nfs_get_root and nfs access bit patches (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062064800">- don't show interrupts in /proc/stat for ppc64 (Matt Wilson)
- make sure sync returns in a reasonable time
- PPC64: fix for boot cpu not being cpu 0 (Julie DeWandel)
- zero sized write no longer updates mtime (Matt Wilson)
- fix video bios read corruption on ia64 (Larry Woodman)
- network fixes to tg3, bonding (Jeff Garzik)
- properly reserve legacy IDE regions in sata driver (Jeff Garzik)
- fix ppc64 signal handling bugs (Mark DeWandel)
- tux fixes (Ingo Molnar)
- tgkill syscall for s390(x) (Pete Zaitcev)
- amd64 32 bit compatibility fixes (Jim Paradis)
- ppc64 32 bit compatibility fixes (Julie DeWandel)
- fix 4G/4G follow_page problem (Ingo Molnar)
- reduce memory used by VMAs and dentries (Arjan van de Ven)
- make LVM snapshotting of ext3 work reliably (Stephen Tweedie)
- make netdump play better with the nmi watchdog (Jeff Moyer)
- QLA2200: disable irq mitigation, fix off-by-one (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061805600">- seq_file /proc/interrupts for x86 too (Ingo Molnar)
- fix memory leak in ia64 exec of ia32 binaries
- check tgid not pid in scm_check_creds()  (David Miller)
- VM fixes: shm swap priority, zeromap_page_range
- workaround VFS limitations for VXFS NFS export</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061546400">- use personality for 3GB userspace on x86 -hugemem (Ingo Molnar)
- add sysctl interface for lockd (Steve Dickson)
- don't prod VGA space on HP Pinnacle systems (Larry Woodman)
- fix for 32 bit binaries on amd64 (Jim Paradis)
- add preemption point to write_some_buffers (Julie DeWandel)
- sort ACPI table to get correct device ordering on HP (Larry Woodman)
- fix refcounting bug with ipv6 addresses on netdevs (David Miller)
- add s390 syscalls for tux (Pete Zaitcev)
- md multipath enablers (Doug Ledford)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061460000">- fix process and nice time accounting (Doug Ledford)
- amd64: syscall table updates, timer robustness (Jim Paradis)
- amd64 3GB personality for 32-bit processes (Jim Paradis)
- use 256MB pagesize for hugetlbfs on ia64 (Larry Woodman)
- make sure e100 only claims ipv4 checksumming
- igmpv3/mldv2 OOPS'er fix (David Miller)
- hugetlbfs: make chown work and allow uid=X,gid=Y mount options
- make larger mmap windows work (Ernie Petrides, Ingo Molnar)
- ia64: improve ia32 compatibility (Larry Woodman)
- fix bug in rpc retry code (Steve Dickson)
- make acpi pci hotplug modulable (Jeff Moyer)
- update (trivial) to megaraid 1.18j (Tom Coughlan) 
- enable varyio on mptfusion (Tom Coughlan)
- panic on oops to prevent data corruption opportunities (Ernie Petrides)
- small iorl locking fix (Doug Ledford)
- fix ppc64 get_wchan() bad deref (Mark DeWandel)
- fix aio read into mmap()d PROT_WRITE (Jeff Moyer, Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061373600">- libata update (Jeff Garzik)
- amd64 syscalls for xattrs &amp; ACLs (Jim Paradis)
- tux fixes (Julie DeWandel, Ingo Molnar)
- via &amp; i810 audio fixes (Jeff Garzik)
- small 4G/4G split bugfixes (Ingo Molnar)
- fix sigsuspend race on x86, amd64, ia64 (Mark DeWandel)
- ia32 behavior for FP denormal exceptions on ia64 (Jason Baron)
- get the set/get of NAT bits for ia64 correct (Jason Baron)
- ipsec update, adds cast6 encryption (David Miller)
- VM update: OOM bugfix &amp; page-&gt;flags atomic updates (Rik van Riel)
- reenable serpent encryption on ppc64
- bladecenter usb-ohci support (Pete Zaitcev)
- iorl fixes (Doug Ledford)
- network bonding driver oops fix (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060768800">- DAC960 back to bigmem supported, ne2k-pci &amp; usb audio to bigmem unsupported
- netdump updates for tg3 and e1000 (Jeff Moyer)
- put a hole between stack and mmap area (Ernie Petrides)
- process time accounting updates (Doug Ledford)
- fix null characters in TUX header (Julie DeWandel, Ingo Molnar)
- display correct executable when running interpreted script
- zfcp zSeries fibrechannel driver (Pete Zaitcev)
- ipsec updates (David Miller)
- fix 4G/4G race conditions (Ingo Molnar)
- rename -bigmem kernel to -hugemem to reflect changed tradeoffs
- optionally show task states from hangcheck timer (Jason Baron)
- various small bugfixes from upstream</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060423200">- fix scalable timer race condition  (Julie DeWandel, Ingo Molnar)
- print warning on boot with &gt;16GB RAM on -smp kernel (Arjan van de Ven)
- fix for xapic issue with ServerWorks chipsets (Ernie Petrides)
- remove spurious ioctl printk on ppc64 (Mark DeWandel)
- ppc64 wchan improvement (Mark DeWandel)
- hint @pause changes for ia64
- longer scsi scan timeout on ppc64 (Julie DeWandel)
- readv/writev for raw IO (Stephen Tweedie)
- fix for easy stack/mmap collisions (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060164000">- various XAPIC related fixes (Ingo Molnar)
- correct context switch and iowait stats with HT shared runqueues
- ext3 obscure deadlock fixes (Stephen Tweedie)
- knfsd fixes: blocked lock, symlink error &amp; missing bkl  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060077600">- de_thread bugfix from 2.6 upstream  (Matt Wilson)
- viocons driver update (Julie DeWandel)
- fix VM non-overcommit mode (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059991200">- plug data leak in aio code (Jeff Moyer)
- initial list of 4G/4G unsupported modules (Tom Coughlan)
- nfs softirq race fix (Steve Dickson)
- updated IPSEC patch (David Miller)
- networking updates/fixes from 2.4.22-preX (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059904800">- drop orlov allocator for now (Arjan van de Ven)
- correct HT cpu pair detection (Arjan van de Ven)
- build zImage.partial for netbooting on pSeries (Matt Wilson)
- fix missing symbols</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059818400">- export two AIO symbols for OCFS
- disable CONFIG_DEBUG_SLAB so performance testing can start
- crosshost mmap hooks for distributed filesystems (Stephen Tweedie)
- include partially linked zImage for pSeries netboot (Matt Wilson)
- nfs highmem fix, unmap when xdr_kmap() fails (Steve Dickson)
- update megaraid2 locking to work with IORL (Com Coughlan)
- make sure to build the qla2100 driver (Tom Coughlan)
- fix cdrom ioctl 32 bit compatibility for ppc64, amd64 (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059645600">- run depmod on install of unsupported modules (Arjan van de Ven)
- fix register corruption in IA64 lazy fpu handling (Larry Woodman)
- add b44 network driver (Jeff Garzik)
- make ppc64 pci interface routines compatible (Julie DeWandel)
- allow 32 bit userland on AMD64 and PPC64 to use volumes &gt; 2GB (Jeff Moyer)
- nfsd: acl related mount and export flags (Steve Dickson)
- fix nfs exp_fodrop oops (Steve Dickson)
- fix missed signal wakeups on ppc64 (Mark DeWandel)
- smp scalable timer bugfixes (Ingo Molnar)
- workaround for a prefetch bug in some Athlon CPUs (Ernie Petrides)
- code to make more modules unsupported for 4/4 split (Arjan van de Ven)
- various spec file and config cleanups
- viopath driver fix (Julie DeWandel)
- add match for 440gx chipset bioses (Arjan van de Ven)
- move epic100 and ne2k-pci back to supported (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059472800">- updated finegrained process accounting patch (Doug Ledford)
- make iSeries compile without CONFIG_ICOM (Julie DeWandel)
- nfsd: only set -&gt;reuse for tcp sockets, not udp  (Steve Dickson)
- enable the 4G/4G split on the i686-bigmem kernel only
- sysrq support for viocons (Julie DeWandel)
- limit pci_bus size changes to ppc64 (Jeff Garzik)
- fix for signal delivery race (Ernie Petrides, Mark DeWandel)
- add ShdPnd to /proc (Ingo Molnar)
- fix de_thread() hang (Ingo Molnar)
- add kernel support for CLONE_STOPPED (Ernie Petrides)
- make sure to initialise HVC console (Julie DeWandel)
- fix _SEG abort hit in ACPI code (Larry Woodman)
- build addon drivers on amd64 and ppc64 too (Tom Coughlan)
- build IPS driver on all architectures (Tom Coughlan)
- fix a few ia32 emulation bugs for IA64 (Larry Woodman)
- enable correct/new __clear_bit macro for IA64 (Larry Woodman)
- flexible mmap allows mappings of huge executable segments (Larry Woodman)
- sysrq-w for s390 (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058436000">- have s390 cpu_relax() also include barrier  (Pete Zaitcev)
- convert ppc64 xmon traceback code to ksymoops (Matt Wilson)
- rename kstat_sum() variable with aliasing problems  (Ingo Molnar)
- fix AIO-on-hugetlbfs crash (Ingo Molnar)
- update support for IA64 Long's Peak ACPI serial ports  (Larry Woodman)
- turn on xmon for both iSeries and pSeries (Matt Wilson)
- bugfix to make CLI work correctly on iSeries (Julie DeWandel)
- SATA bugfixes (Jeff Garzik)
- enable 4G/4G split in -BOOT kernel, due to syslinux trouble</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058349600">- fix s390 compile (Pete Zaitcev)
- taint the kernel on sii6512 driver link, GPL but no source available
- handle debug registers with 4G/4G split (Ingo Molnar)
- tgkill syscall for ppc64 (Julie DeWandel)
- fix NFSD/ACL/ext3/jbd deadlock (Stephen Tweedie, Steve Dickson)
- fix maxcpus=1 installation panic fix for ppc64 (Julie DeWandel)
- IDE byteswapping io functions for ppc64 (Julie DeWandel)
- update sata driver (Jeff Garzik)
- raise the number of /proc entries (Julie DeWandel)
- sticky sysrq key with timeout (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058263200">- make SysRq-W useable on s390 (Pete Zaitcev)
- updated process accounting patch (Doug Ledford)
- siginfo_t fixes for s390x and amd64 (Jakub Jelinek)
- clustered NFS fail-over support (Steve Dickson)
- autofs4 updates and fixes
- ia64 patches to reduce cpu power/temp in idle loop (Larry Woodman)
- add irqsafe up() for LVM locking (Stephen Tweedie)
- O_DIRECT fallback to synchronous allocation in holes (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058176800">- ia64 HP iommu: add sx1000 detection
- possible bug in s390x 32-bit emulation  (Roland McGrath)
- updated ipsec patch, should fix all current ipv6 bugs  (David Miller)
- finegrained process accounting (Doug Ledford)
- ICH5 pci irq routing, and associated ids (Jeff Garzik)
- fix the machine_real_restart() reboot path on 4G/4G (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057917600">- fix amd64 agp-gart code to work around hugetlbfs debug code (Jim Paradis)
- fix ppc32 pthread_cancel (Jakub Jelinek) 
- Do not sent IGMP leave messages unless IFF_UP  (David Miller)
- software iommu for ia64 systems without hardware iommu (Jason Baron)
- fix ext3 oops fix during dio, LTP failure (Arjan van de Ven, Stephen Tweedie)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057831200">- Remove illegal calls to dst_link_failure</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057831200">- enable HT scheduler for bigmem kernel
- add tgkill syscall for x86 and ia64
- make -BOOT kernel smaller w/ modular md and CONFIG_SMALL
- rmap VM updates
- 4G/4G agpgart potential corruption fix (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057744800">- switch off exec shield everywhere
- eliminate hostfs for amd64 (Jim Paradis)
- megaraid update, mostly vendor ID (Tom Coughlan)
- shrink boot kernel by disabling some config options
- additions for the SCSI whitelist (Tom Coughlan)
- ia64 extable fix (Jason Baron)
- viocons driver upgrade (Julie DeWandel)
- another ia64 mmu context wraparound deadlock fix (Larry Woodman)
- iSeries icom debugger patch (Julie DeWandel)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057658400">- Drop io_request_lock in usb scsiglue.c:device_reset</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057658400">- fix cpu_relax for amd64 and ia64 to include a barrier (Ingo Molnar)
- restore o_direct api compatibility (Stephen Tweedie)
- fix possible ext3 deadlock in o_direct patches (Stephen Tweedie)
- ACLs for JFS (Stephen Tweedie)
- fix /proc/cpuinfo runqueue printing (Ingo Molnar)
- via audio fixes, smaller emu10k1 patch (Alan Cox, Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057572000">- fix process accounting, tux ftp passwords and si_pid (Ingo Molnar)
- 32bit compat statfs fix (Guy Streeter)
- don't serialise exit on BKL when accounting is off (Ingo Molnar)
- truncate timeouts to 32 bits on 64bit systems (Ingo Molnar)
- fix network channel bonding (Jeff Garzik)
- split netdump patch into core and net-drivers (Jeff Garzik)
- delayed tlb flushing for ia64 (Larry Woodman)
- emu10k1 driver fixes
- kksymoops for AMD64 (Jim Paradis)
- select bugfixes from 2.4 upstream (Jeff Garzik)
- OOM tweaks (Rik van Riel)
- use seq_file for /proc/interrupts on ppc64 (Mark DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057140000">- add qdio and qeth drivers for s390(x)  (Phil Knirsch)
- slab cache scale bugfix (Larry Woodman)
- S390: qdio &amp; qeth drivers (Phil Knirsch)
- hangcheck timer for ppc64 (Julie DeWandel)
- fix race conditions in ia64 ia32 compat layer (Larry Woodman)
- update megaraid, aic7xxx, cciss and cpqarray drivers (Tom Coughlan)
- nfs xdr_shift_buf, tcp client corruption and alignment (Steve Dickson)
- rhconfig.h stuff for ppc64, s390 and s390x (Matt Wilson)
- AIO on sockets</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057053600">- kiobuf optimisations (Stephen Tweedie, Larry Woodman)
- ipsec update (David Miller)
- ipvs update to deal with timer changes (David Miller)
- 4G/4G split patch optimisations (Ingo Molnar)
- hangcheck timer (Jason Baron)
- recent (AGP 3.0) agpgart support (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056967200">- semtimedop() support on s390/s390x  (Ernie Petrides)
- fix a 4G bug that triggers on systems with &gt;30 CPUs (Ingo Molnar)
- updated SCSI SMP affine queueing patch  (Arjan van de Ven)
- page hash prefetch in do_generic_file_read bugfix (Julie DeWandel)
- updates the qlogic driver to the latest (Arjan van de Ven)
- slab cache SMP scalability tweaks (Ingo Molnar)
- ACPI 2.0 for IPF and AMD64 (Jim Paradis, Larry Woodman)
- statm fixes for hugetlbfs and remap_file_pages (Jason Baron)
- acpi serial port detection (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056708000">- iseries driver updates (Julie DeWandel)
- aio scalability and 2.5 backports  (Ingo Molnar)
- SMP scalable timers (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056621600">- make qlogic driver use new scsi infrastructure (Arjan van de Ven)
- export aio kvec functions
- fix statm oops
- compile fixes 
- NFS ACL over the wire protocol extensions (Steve Dickson)
- rate limit slab pruning, to limit IPI load on SMP systems (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056448800">- scsi request lock scaling (Ingo Molnar)
- cpu affinity for scsi command processing (Ingo Molnar)
- use softirqs instead of bhs for the scsi layer (Doug Ledford)
- igmpv3 fixes and improvements (David Miller)
- oprofile for ppc64 (Will Cohen)
- Increase MAX_ADDR_LEN from 8 to 32 for Infiniband over IP (Tom Coughlan)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056362400">- per-cpu kstat arrays (Ingo Molnar)
- optimise 4G/4G tlb flushing (Ingo Molnar)
- kiobuf reclaim together with buffer reclaim (Arjan van de Ven)
- more scalable gendisk statistics (Ingo Molnar)
- nfs reconnect fixes (Steve Dickson)
- add 32-bit compatibility for ustat system call on ppc64 (Julie DeWandel)
- scalable gettimeofday (Ingo Molnar)
- hugetlbfs ppc64 &amp; s390 bits (Mark DeWandel, Pete Zaitcev)
- hugetlbfs for ia64 (Jason Baron)
- qlogic scsi driver update (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056189600">- nfs patches (Steve Dickson)
- xapic improvements, summit support (Ingo Molnar)
- fix core dump name for multithreaded programs (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056103200">- merge up to marcelo's latest</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056016800">- oom killer fixes (Larry Woodman, Rik van Riel)
- tunable VM overcommit (Rik van Riel)
- hugetlbfs for amd64 (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055930400">- updated iseries virtual drivers (Julie DeWandel)
- nfs lockd improvements (Steve Dickson)
- remap_file_pages improvements (Ingo Molnar)
- /proc/efi/symtab patch for ia64 (Larry Woodman)
- disable O_PROFILE on UP x86 machines
- allow NMI watchdog profiling frequencies up to 10kHz (Ingo Molnar)
- statm (Jason Baron)
- hugetlbfs (Ingo Molnar)
- have nfsd honour ACLs on a per-export basis (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055844000">- Enable O_PROFILE on non-SMP configs (Stephen Tweedie)
- more conservative AIC config options
- Fix BOOT kernel panic while mounting /dev/cdrom (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055757600">- merge to 2.4.21 + selected ac bits
- ipsec upgrade (David Miller)
- HT scheduler patch fix (correct sibling counting)
- make bdflush writeout smoother
- AMD64 gdb fix (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055412000">- don't include unsupported drivers in -BOOT kernel
- merge up to 2.4.21-rc8 + selected ac bits
- FIXME: sysrq for 3170, dasd, odirect &amp; odirect for nfs</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com" date="1055412000">- oprofile for s390</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055239200">- statm (Jason Baron / Julie DeWandel)
- AIO 32-bit compat for 64-bit machines (Julie DeWandel)
- only do bufferhead reclaim in extreme situations (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055152800">- Serial ATA support (Jeff Garzik)
- mtp fusion 2.05.05+ (Dave Maley)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054893600">- XATTR/ACL patches, except NFS over the wire (Stephen Tweedie)
- ipsec module autoloading (David Miller)
- remap_file_pages (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054807200">- upgrade to latest -rmap with Ernie's fixes
- sysrq+C shows the stack dump of all CPUs
- ext3 truncate fix (Stephen Tweedie)
- NFS fixes for HZ=1000 machines (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054720800">- 4G/4G split fix (Ingo Molnar)
- ppc64 fixes (Guy Streeter, Rik van Riel)
- enable oprofile on amd64
- ipsec updates (David Miller)
- fork returns pid instead of task_struct* (Julie DeWandel)
- ia64 ptrace bugfixes (Dave Anderson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054634400">- HP diva serial driver (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054548000">- NFS over TCP patches (Steve Dickson)
- switch to using ppc64pseries/ppc64iseries arches instead of
  kernel-pseries and kernel-iseries (Jeremy Katz)
- egenera scsi bus rescan patch (Jeff Garzik)
- oprofile (Graydon Hoare)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054288800">- futex requeue (Ingo Molnar)
- enable NAPI for E1000
- signal latency and scheduler improvements (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054202400">- kscand oops fix (Ingo Molnar, Rik van Riel)
- pcnet32 fixes (Julie Dewandel)
- raid autorun (Pete Zaitcev)
- turn off CONFIG_SUNDANCE_MMIO (Jeff Garzik)
- flexible mmap (Larry Woodman)
- ppc64 fixes (Matt Wilson, Guy Streeter)
- loop softirq 10 times before giving up (Ingo Molnar)
- O_DIRECT for NFS (Steve Dickson)
- prevent md from shutting down active arrays (Doug Ledford)
- rmap updates, inode reclaim &amp; higher order allocations (Rik van Riel)
- network channel bonding (Jeff Garzik)</changelog><changelog author="Jim Paradis &lt;jparadis@redhat.com&gt;" date="1054116000">- Re-enable x86_64 in build
- x86_64-specific updates for exec-shield
- Bring in improved "nonx" support for x86_64 from upstream</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1054116000">- Hush s390 printks upon user SIGSEGV by default. It can be enabled back with
  a sysctl kernel.userprocess_debug.
- Enable optional 3270 console mode on s390.</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053684000">- get rid of vsyscall page (Arjan van de Ven)
- fix missing symbol copy_str_fromuser_size</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053424800">- exec-shield updates to fix hang-on-boot on some systems (Ingo Molnar)
- temporarily disabled the architectures, which got broken by exec-shield updates
- fix for LTP sigprocmask02 failure (Matt Wilson)
- ppc64 updates (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053338400">- pagecache scalability patch (Ingo Molnar)
- IPC semaphore scalability patch (Ingo Molnar)
- ppc64 updates (Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052992800">- exec-shield (Ingo Molnar)
- AMD64 ACPI updates (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052906400">- reenable O_DIRECT, O_DIRECT fixes and superbh-aio (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052820000">- vma merging (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052733600">- nmi profiler
- VM updates: rmap, dma zone isolation
- tux (Ingo Molnar)
- ext3 stall fixes (Ingo Molnar)
- e1000 fixes (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052474400">- config files overhaul (Arjan van de Ven)
- fix bug in mlock patch
- IPVS (Dave Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052388000">- import IO elevator changes from gingin
- critical VM fix
- matrox framebuffer patch for pseries (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052301600">- hammer nptl fixes (Ulrich Drepper)
- 4G/4G split (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052215200">- upgrade to 2.4.21-rc1-ac4 (minus -ac acpi and xapic changes)
- drop nfs patches since those seem to be in -ac</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052128800">- larger message buffer size + boot option (Mark DeWandel)
- AMD64: tls handling, coredump fixes (Jim Paradis)
- SMP &amp; highmem VM fixes (Ben LaHaise)
- HT+NUMA scheduler (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051956000">- ext3 orphan cleanup fix (Ernie Petrides)
- s390 affinity fixes (Pete Zaitcev)
- i386 vsyscall DSO changes (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051869600">- bugfixes and config changes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051783200">- enable semtimedop for other architectures (Ernie Petrides)
- large pci bus numbers (Julie DeWandel)
- bugfixes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051610400">- igmpv3 (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051524000">- generic 32bit compat stuff + amd64/ppc64/ipf pieces (Matt Wilson)
- clustered apic (XAPIC) support (Ingo Molnar)
- ppc64 architecture updates (Matt Wilson, Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051264800">- ppc64 fixes</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051178400">- collapse ipsec into one patch (David Miller)
- ppc64 build fix (Matt Wilson)
- improve smp scheduler fairness (Ingo Molnar)
- allow mlock for normal users, up to ulimit (Ingo Molnar)
- AMD64 port (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051092000">- clean up mechanism to pass extra CFLAGS so we don't override what's
  already there
- merge ia64 build stuff (Larry Woodman)
- merge varyio + superbh (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051005600">- merge up to 2.4.21-rc1
- IA64: virtual mem_map, acpi updates, netdump update, pte-highmem &amp; fealnx
- IA64: architecture specific patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050919200">- import davem's ipsec patch pile
- ppc64 kallsyms and dump_fpu patches (Matt Wilson)
- rmap updates (x86_64 &amp; bufferhead reclaim)
- ppc64 ptrace patch (Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050660000">- open up patch namespace 2000-5000 for network protocol changes
- renumber existing patches in that range</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050573600">- make sure to actually apply the rmap-updates patch
- iowait statistics
- ppc64 code merge (Mark &amp; Julie DeWandel)
- ppc64 build scripts (Matt Wilson)
- raise symlink recursion level to 8 (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050487200">- merge up to marcelo's latest
- pte-highmem bits for x86-64 and ppc64</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050400800">- merge up to 2.4.21-pre7-ac1
- drop semtimedop patches (now in -ac)
- drop nfs xprt_fixes, fix_softirq, d_drop and nfs-readeof (merged in -pre7)
- add !CONFIG_QUOTA compile fix for 2.4.21-pre7-ac1</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1050314400">- add LCS driver (endemic to s390)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050314400">- add rmap VM
- add kunmap_atomic debugging patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050141600">- remove dir.c part of NFS kmap_atomic patch for now
- using strlen as local variable name in nfs code kills, literally</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050055200">- merge S390(x) back in  (Pete Zaitcev)
- fix NFS kmap_atomic patch
- sched.c patch to disable interrupts in wake_forked_task  (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049968800">- AIO infrastructure  (Ben LaHaise)
- update NFS kmap_atomic patch  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049882400">- semtimedop patches  (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049796000">- I know understand linux-2.4.20-nfs-readeof.patch, so I merged it
- netdump update (Dave Anderson)
- 64 bit pci &amp; elf loader fix (Mark &amp; Julie)
- nptl whitespace patches, folded into nptl patch (Arjan van de Ven)
- rediff linux-2.4.18-smallpatches.patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049709600">- merge NFS patches by Steve Dickson (blame me for NFS kmap_atomic patch)
- split x86 syscall stuff out into separate patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049536800">- fix nptl patch, now it boots</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049450400">- port linux-2.4.20 o1-nptl.patch from gingin
- rediff a few patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049277600">- update linux-modules-unsupported (with Arjan)
- fix up the list a second time to fix module dependencies</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049191200">- copy -head into new AS3 branch
- remove i586 build
- remove 7.x compatibility (linux-2.4.9-fstat.patch)
- architecture patches get more breathing room (100 - 500)
- reserve patch numbers 1000 - 2000 for VM
- patch numbers 2000 - 5000 for bugfixes, changes and updates to
  existing drivers and filesystems
- remove inode reclaim patch (will be merged later as part of rmap)
- remove io priority scheduler (still experimental)
- remove nfs patches (linux-2.4.20-nfs-cto.patch,
  linux-2.4.20-nfs-access.patch &amp; linux-2.4.20-nfs-rdplus.patch)
- remove linux-2.4.18-gericom.patch
- update netdump from RH9 branch</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1048240800">- Added three NFS performance patches</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048240800">- add a timer for aging requests up</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048154400">- fix the sorting in the io elevator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048068000">- remerge ext3 orlov allocator and enable
- more priority io elevator infrastructure work</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1047117600">- merge ext3 orlov allocator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046772000">- go to 2.4.21-pre5-ac1
- split the rpm into a primary fileset and secondary (rare modules) fileset</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046253600">- go to 2.4.21-pre4-ac6
- drop lots of patches
- trim changelog to not have 2000, 2001 and 2002 anymore</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045476000">- downgrade pwc webcam driver one notch to the last known working version
- work around vm livelock
- make the cciss driver not enable irq's in it's irq handler</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1045130400">- fix for shared statistic &lt; 0</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045130400">- Signal fixes for LSB testsuite
- merge patch to fix init=/bin/sh
- 2.4.21-pre4-ac4 bugfixes (mostly IDE crashes)</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044784800">- merge 2.4.21-pre4-ac3 bugfixes</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1044352800">- Add ext3 fix for truncating negative i_blocks</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1044266400">- add oopsmeharder for debugging hard hangs</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044266400">- merge rmap15d
- set the sbp2 command buffer to 64 elements instead of 8</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1043834400">- merge tcp stall fix from DaveM
- merge bugfixes from 2.4.21-pre4</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1042452000">- Merge in the ACL and XATTR patches from the UL and BestBits trees.</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1042279200">- Merge in the LVM pvmove fix to current tree</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1042020000">- add AMD Golem fixup</changelog></package>
<package pkgid="2d5ebc2f38409508f862b54d4d778986e5638a5a" name="kernel-module-openafs-2.4.21-32.0.1.EL.XFS" arch="ia32e"><version epoch="0" ver="1.2.11" rel="15.12.SL"/><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1108720800">- added build of ia32e kernel module</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 15.12.SL" date="1107165600">- All changes came from Stephan Wiesand.  Many thanks for his pointers
- afsd options chaned in spec file
- /etc/sysconfig/afs set to be %config(noreplace)
- requires wget
- removed openafs-compat %pre scripts
- Added CellAlias file, with commented out example</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 15.11.SL" date="1106128800">- Put LC_ALL=C into the startup server test. This helps with 
  internationalization. Submitted by Jaroslaw Polok</changelog><changelog author="Enrico M.V. Fasanelli &lt;enrico@le.infn.it&gt; 15.10.SL" date="1105956000">- applied patch from Chris Wing for 64bit aklog &amp; Co.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 15.7.SL" date="1092304800">- Put -fakestat in as a default option</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 15.6.SL" date="1092132000">- Updated CellServDB
- Put -dynroot in as a default option</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 15.4.SL" date="1087639200">- Made more changes to startup script. Does sanity checks of ThisCell</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 15.3.SL" date="1087552800">- Made change to /etc/init.d/afs startup script</changelog><changelog author="Jaroslaw.Polok@cern.ch" date="1085911200">- rebuilt for Scientific Linux without site-specific setup
- kerberos 5 enabled in build</changelog><changelog author="Jaroslaw.Polok@cern.ch" date="1082109600">- changed packaging of modules again: to followup Fedora Core
  (draft) rules and allow yum/apt/up2date to handle these</changelog><changelog author="Jaroslaw.Polok@cern.ch" date="1081245600">- changed packaging of modules</changelog><changelog author="Jaroslaw.Polok@cern.ch" date="1077444000">- Rebuilt for CERN E. Linux (ix86/ia64/x86_64)</changelog><changelog author="David Howells &lt;dhowells@redhat.com&gt;&gt; 1.2.10-4" date="1062669600">- don't use rpm from within spec file as this can cause problems</changelog><changelog author="David Howells &lt;dhowells@redhat.com&gt; 1.2.10-4" date="1062583200">- added ia64 to the ExclusiveArch list</changelog><changelog author="&lt;David Howells &lt;dhowells@redhat.com&gt;&gt; 1.2.10-3" date="1062151200">- get rid of a %else that causes problems with rpm-4.0.4</changelog><changelog author="David Howells &lt;dhowells@redhat.com&gt; 1.2.10-3" date="1061546400">- added rpmbuild cmdline defines to control which bits to build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1061373600">- obey CFLAGS set at configure-time on i386/x86_64 linux
- openafs-krb5: look in $krb5_prefix/lib64 for Kerberos libraries if they are
  not found in $krb5_prefix/lib
- build the modules for PAM on x86_64
- when checking for res_search, try to link with it instead of checking for it
  in libraries, in case it's a macro or redefined by a macro
- use %{ix86} instead of %{all_x86} where appropriate
- install AFS libraries into %{_libdir} instead of %{_prefix}/lib</changelog><changelog author="&lt;David Howells &lt;dhowells@redhat.com&gt;&gt; 1.2.10-3" date="1060941600">- permit the kernel-to-build-against to be selected by cmdline argument to
  rpmbuild if preferred</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1060855200">- fix compilation of openafs-krb5 bits against krb5 1.3</changelog><changelog author="&lt;David Howells &lt;dhowells@redhat.com&gt;&gt; 1.2.10-2" date="1060596000">- got rid of all rpmlint errors
- delete certain tags (Packager/Vendor/Distribution)</changelog><changelog author="&lt;David Howells &lt;dhowells@redhat.com&gt;&gt; 1.2.10-1" date="1060336800">- Adapted OpenAFS version 1.2.10 to compile in beehive</changelog></package>
<package pkgid="56a287c8172803fc12b865c5ec8bec0f0c4f3006" name="kernel-module-openafs-2.4.21-32.0.1.EL.XFS" arch="x86_64"><version epoch="0" ver="1.2.11" rel="15.12.SL"/><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1108720800">- added build of ia32e kernel module</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 15.12.SL" date="1107165600">- All changes came from Stephan Wiesand.  Many thanks for his pointers
- afsd options chaned in spec file
- /etc/sysconfig/afs set to be %config(noreplace)
- requires wget
- removed openafs-compat %pre scripts
- Added CellAlias file, with commented out example</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 15.11.SL" date="1106128800">- Put LC_ALL=C into the startup server test. This helps with 
  internationalization. Submitted by Jaroslaw Polok</changelog><changelog author="Enrico M.V. Fasanelli &lt;enrico@le.infn.it&gt; 15.10.SL" date="1105956000">- applied patch from Chris Wing for 64bit aklog &amp; Co.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 15.7.SL" date="1092304800">- Put -fakestat in as a default option</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 15.6.SL" date="1092132000">- Updated CellServDB
- Put -dynroot in as a default option</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 15.4.SL" date="1087639200">- Made more changes to startup script. Does sanity checks of ThisCell</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 15.3.SL" date="1087552800">- Made change to /etc/init.d/afs startup script</changelog><changelog author="Jaroslaw.Polok@cern.ch" date="1085911200">- rebuilt for Scientific Linux without site-specific setup
- kerberos 5 enabled in build</changelog><changelog author="Jaroslaw.Polok@cern.ch" date="1082109600">- changed packaging of modules again: to followup Fedora Core
  (draft) rules and allow yum/apt/up2date to handle these</changelog><changelog author="Jaroslaw.Polok@cern.ch" date="1081245600">- changed packaging of modules</changelog><changelog author="Jaroslaw.Polok@cern.ch" date="1077444000">- Rebuilt for CERN E. Linux (ix86/ia64/x86_64)</changelog><changelog author="David Howells &lt;dhowells@redhat.com&gt;&gt; 1.2.10-4" date="1062669600">- don't use rpm from within spec file as this can cause problems</changelog><changelog author="David Howells &lt;dhowells@redhat.com&gt; 1.2.10-4" date="1062583200">- added ia64 to the ExclusiveArch list</changelog><changelog author="&lt;David Howells &lt;dhowells@redhat.com&gt;&gt; 1.2.10-3" date="1062151200">- get rid of a %else that causes problems with rpm-4.0.4</changelog><changelog author="David Howells &lt;dhowells@redhat.com&gt; 1.2.10-3" date="1061546400">- added rpmbuild cmdline defines to control which bits to build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1061373600">- obey CFLAGS set at configure-time on i386/x86_64 linux
- openafs-krb5: look in $krb5_prefix/lib64 for Kerberos libraries if they are
  not found in $krb5_prefix/lib
- build the modules for PAM on x86_64
- when checking for res_search, try to link with it instead of checking for it
  in libraries, in case it's a macro or redefined by a macro
- use %{ix86} instead of %{all_x86} where appropriate
- install AFS libraries into %{_libdir} instead of %{_prefix}/lib</changelog><changelog author="&lt;David Howells &lt;dhowells@redhat.com&gt;&gt; 1.2.10-3" date="1060941600">- permit the kernel-to-build-against to be selected by cmdline argument to
  rpmbuild if preferred</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1060855200">- fix compilation of openafs-krb5 bits against krb5 1.3</changelog><changelog author="&lt;David Howells &lt;dhowells@redhat.com&gt;&gt; 1.2.10-2" date="1060596000">- got rid of all rpmlint errors
- delete certain tags (Packager/Vendor/Distribution)</changelog><changelog author="&lt;David Howells &lt;dhowells@redhat.com&gt;&gt; 1.2.10-1" date="1060336800">- Adapted OpenAFS version 1.2.10 to compile in beehive</changelog></package>
<package pkgid="222be91435b33c0a560e7ab6280ad2ac5009afb8" name="kernel-module-openafs-2.4.21-32.0.1.EL.XFSsmp" arch="x86_64"><version epoch="0" ver="1.2.11" rel="15.12.SL"/><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1108720800">- added build of ia32e kernel module</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 15.12.SL" date="1107165600">- All changes came from Stephan Wiesand.  Many thanks for his pointers
- afsd options chaned in spec file
- /etc/sysconfig/afs set to be %config(noreplace)
- requires wget
- removed openafs-compat %pre scripts
- Added CellAlias file, with commented out example</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 15.11.SL" date="1106128800">- Put LC_ALL=C into the startup server test. This helps with 
  internationalization. Submitted by Jaroslaw Polok</changelog><changelog author="Enrico M.V. Fasanelli &lt;enrico@le.infn.it&gt; 15.10.SL" date="1105956000">- applied patch from Chris Wing for 64bit aklog &amp; Co.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 15.7.SL" date="1092304800">- Put -fakestat in as a default option</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 15.6.SL" date="1092132000">- Updated CellServDB
- Put -dynroot in as a default option</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 15.4.SL" date="1087639200">- Made more changes to startup script. Does sanity checks of ThisCell</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 15.3.SL" date="1087552800">- Made change to /etc/init.d/afs startup script</changelog><changelog author="Jaroslaw.Polok@cern.ch" date="1085911200">- rebuilt for Scientific Linux without site-specific setup
- kerberos 5 enabled in build</changelog><changelog author="Jaroslaw.Polok@cern.ch" date="1082109600">- changed packaging of modules again: to followup Fedora Core
  (draft) rules and allow yum/apt/up2date to handle these</changelog><changelog author="Jaroslaw.Polok@cern.ch" date="1081245600">- changed packaging of modules</changelog><changelog author="Jaroslaw.Polok@cern.ch" date="1077444000">- Rebuilt for CERN E. Linux (ix86/ia64/x86_64)</changelog><changelog author="David Howells &lt;dhowells@redhat.com&gt;&gt; 1.2.10-4" date="1062669600">- don't use rpm from within spec file as this can cause problems</changelog><changelog author="David Howells &lt;dhowells@redhat.com&gt; 1.2.10-4" date="1062583200">- added ia64 to the ExclusiveArch list</changelog><changelog author="&lt;David Howells &lt;dhowells@redhat.com&gt;&gt; 1.2.10-3" date="1062151200">- get rid of a %else that causes problems with rpm-4.0.4</changelog><changelog author="David Howells &lt;dhowells@redhat.com&gt; 1.2.10-3" date="1061546400">- added rpmbuild cmdline defines to control which bits to build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1061373600">- obey CFLAGS set at configure-time on i386/x86_64 linux
- openafs-krb5: look in $krb5_prefix/lib64 for Kerberos libraries if they are
  not found in $krb5_prefix/lib
- build the modules for PAM on x86_64
- when checking for res_search, try to link with it instead of checking for it
  in libraries, in case it's a macro or redefined by a macro
- use %{ix86} instead of %{all_x86} where appropriate
- install AFS libraries into %{_libdir} instead of %{_prefix}/lib</changelog><changelog author="&lt;David Howells &lt;dhowells@redhat.com&gt;&gt; 1.2.10-3" date="1060941600">- permit the kernel-to-build-against to be selected by cmdline argument to
  rpmbuild if preferred</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1060855200">- fix compilation of openafs-krb5 bits against krb5 1.3</changelog><changelog author="&lt;David Howells &lt;dhowells@redhat.com&gt;&gt; 1.2.10-2" date="1060596000">- got rid of all rpmlint errors
- delete certain tags (Packager/Vendor/Distribution)</changelog><changelog author="&lt;David Howells &lt;dhowells@redhat.com&gt;&gt; 1.2.10-1" date="1060336800">- Adapted OpenAFS version 1.2.10 to compile in beehive</changelog></package>
<package pkgid="6f22ad866230edd32654d8544cd7018b3a113814" name="kernel-module-xfs-2.4.21-32.0.1.EL.XFS" arch="x86_64"><version epoch="1" ver="1.3.3" rel="1.SL"/><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1086170400">- repackaged to followup Fedora Core guidelines</changelog><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1081245600">- initial build</changelog></package>
<package pkgid="4f5ec754bdcec6c5f128c3572648b0830f5babe0" name="kernel-module-xfs-2.4.21-32.0.1.EL.XFSsmp" arch="x86_64"><version epoch="1" ver="1.3.3" rel="1.SL"/><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1086170400">- repackaged to followup Fedora Core guidelines</changelog><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1081245600">- initial build</changelog></package>
<package pkgid="f97127d8bc85ef347b4bc6cdbc22359699d7845c" name="kernel-module-xfs-2.4.21-37.EL.XFS" arch="ia32e"><version epoch="1" ver="1.3.3" rel="1.SL"/><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1086170400">- repackaged to followup Fedora Core guidelines</changelog><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1081245600">- initial build</changelog></package>
<package pkgid="84065337dd43ebe358cade82da4687e601443dac" name="kernel-module-xfs-2.4.21-37.EL.XFS" arch="x86_64"><version epoch="1" ver="1.3.3" rel="1.SL"/><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1086170400">- repackaged to followup Fedora Core guidelines</changelog><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1081245600">- initial build</changelog></package>
<package pkgid="6e9d9ce586b3a1caa9736910844d55d1779b8cb4" name="kernel-module-xfs-2.4.21-37.EL.XFSsmp" arch="x86_64"><version epoch="1" ver="1.3.3" rel="1.SL"/><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1086170400">- repackaged to followup Fedora Core guidelines</changelog><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1081245600">- initial build</changelog></package>
<package pkgid="502c052e5e1bd2929a8bb6945690c4a83faf5d7c" name="kernel-smp" arch="x86_64"><version epoch="0" ver="2.4.21" rel="32.0.1.EL.XFS"/><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1117101600">- added SGI XFS patch set</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.0.1.EL" date="1116237600">- prevent shared memory lock/unlock w/o permissions (Dave Anderson)
- prevent mlock() resource limit bypass w/shm locking (Ernie Petrides)
- fix data corruption from pte_clear() races on &gt;4GB x86's (Larry Woodman)
- fix arg/env access in ELF core dumping and /proc reads (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.EL" date="1113559200">- fix data corruption w/ext3 xattr on 64-bit arches (Jason Baron)
- validate LCP frame lengths in PPP async handling (Dave Miller)
- enable forcedeth net driver builds in x86 configs (Jim Paradis)
- isolate IP fragment queues among various callers (Dave Miller)
- prevent busy inodes for symlinks after unmounts (Don Howard)
- revise PCI device ids extending ICH7 support (John Linville)
- work around broken xw4300 BIOS AHCI BAR setup (John Linville)
- add protocol validation in net bluetooth driver (John Linville)
- enable software watchdog timer in s390,x configs (Jan Glauber)
- fix data corruption w/uselib() on bad ELF libs (Ernie Petrides)
- add USB tablet init delay in wacom_probe() (Kristian Høgsberg)
- prevent core dumps with non-readable ELF interps (Dave Anderson)
- add maxevents validation in epoll_wait() handling (Ernie Petrides)
- add len validation in /dev/random poolsize sysctl (Ernie Petrides)
- correct size of ia64 syscall table initialization (Jason Baron)
- correct x86_64 user-mode i/o port validation (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-31.EL" date="1110448800">- fix missing ppc64 netdump/diskdump symbols (Nobuhiro Tachino)
- prevent ia64 unwind from traversing off stack (Jason Baron)
- disable 3w-9xxx driver builds on ppc64 (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-30.EL" date="1110362400">- fix obscure oops in tty init_dev() handling (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-29.EL" date="1109844000">- incorporate urgent late-breaking SATA fixes (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-28.EL" date="1109152800">- add more USB device support to visor driver (Pete Zaitcev)
- implement clustered APIC support for x86_64 (Larry Woodman)
- constrain x86 MSR writes based on cpu model (Jason Baron)
- increase max superbh size for performance (Stephen Tweedie)
- add locking to prevent oops in md_seq_show() (Doug Ledford)
- restore missing ia64 panic_on_oops handling (Tatsuo Uchida)
- implement Ethernet PCI quirk for HP xw9300 (Jim Paradis)
- revert NFS flock() avoidance to -27.7.EL (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.17.EL" date="1108980000">- rework NFS flock() avoidance w/FS_WANT_FLOCK for GFS (Ken Preslan)
- prevent inode corruption from delete/lookup races (Wendy Cheng)
- preserve registers for ia64 16-byte atomic ops (Geoff Gustafson)
- update SCSI whitelist for LSI/HP/STK/EMC devices (Tom Coughlan)
- disable vary_io in ips driver to avoid ctlr hangs (Tom Coughlan)
- correct handling of 2-TB device partitions (Peter Martuccelli)
- update support for ia64 perfmon facility (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.16.EL" date="1108720800">- implement diskdump support for SATA piix/promise (Nobuhiro Tachino)
- correct /proc/mtrr size values on EM64T platforms (Larry Woodman)
- restore page permissions after writes from ptrace() (Don Howard)
- fix /proc parent pids from multi-threaded forks (Ernie Petrides)
- enable software watchdog timer support on s390,x (Jan Glauber)
- update tg3 network driver to version 3.22RH (John Linville)
- incorporate 3w-9xxx driver version 2.24.00.011fw (Adam Manthei)
- correct ending boundary check in filemap_sync() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.15.EL" date="1108548000">- add e100 driver PCI device ids for ICH7 support (John Linville)
- restore obsolete but ignored e100 module params (John Linville)
- implement user-mode (gdb) access to ia64 gate page (Jason Baron)
- fix x86_64 FPU IP and DP values in SIGFPE context (Larry Woodman)
- add qla2200 module parameter to use NVRAM RIO val (Tom Coughlan)
- update 3w-xxxx driver to 1.02.00.037 w/.033 backup (Adam Manthei)
- fix crashes in video Firewire (ieee1394) driver (Bastien Nocera)
- prevent info leaks into ext3 journal disk blocks (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.14.EL" date="1108461600">- enhance AIO performance over NFS w/FS_AIO_SYNC hook (Steve Dickson)
- defer e100_tx_timeout() work from interrupt context (John Linville)
- correct IPV6 DST entry release to prevent route leak (Dave Miller)
- ignore MTU updates from invalid IPV6 ndisc packets (Dave Miller)
- add relevant PCI device ids to extend ICH7 support (John Linville)
- reduce system pauses during heavy page laundering (Larry Woodman)
- fix audit logging of paths w/predicate filter usage (Neil Horman)
- enable building of unsupported fusion isense module (Adam Manthei)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.13.EL" date="1108375200">- increase dxfer size limit for ppc64 SG_IO ioctl32 (David Howells)
- eliminate tty line discipline usage/switching races (Jason Baron)
- fix autofs recognition of ghosted direct map updates (Jeff Moyer)
- fix sg driver race between cmd completion and close (Tom Coughlan)
- prevent e100 data corruption from v.3.0.27-k2 update (John Linville)
- upgrade SATA support (core, libata, new/old drivers) (John Linville)
- implement diskdump support for sym53c8xx adapter (Yuichi Nagahama)
- add USB support for Wacom Cintiq/Intuos3 tablets (Kristian Høgsberg)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.12.EL" date="1107943200">- update e100 network driver to version 3.3.6-k2 (John Linville)
- correct cpu id macro for dual-core Opteron support (Jim Paradis)
- add "numa=off" message on x86_64 OOM kills w/NUMA (Larry Woodman)
- improve user/system timer tick accounting on s390,x (Pete Zaitcev)
- prevent EAGAIN errs from interrupted TCP recv() calls (Dave Miller)
- update cciss disk driver to version v2.4.54.RH1 (Adam Manthei)
- eliminate diskdump cpu id from frozen list (Nobuhiro Tachino)
- fix user-space access bug in USB vicam ioctl (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.11.EL" date="1107424800">- incorporate Emulex driver ioctl module version 1.0.13 (Tom Coughlan)
- eliminate potential call_lock deadlock with diskdump (Tatsuo Uchida)
- fix potential kiobuf_lock deadlock in free_kiovec() (Larry Woodman)
- add L2 cache descriptor for EM64T Irwindale processor (Neil Horman)
- prevent mmap() syscalls from choosing NULL mappings (Rik van Riel)
- include bounce buffer pages in show_mem() output (Larry Woodman)
- add I2C driver support for ICH5 in i2c-i801.c (John Linville)
- correct parport_pc errors on insmod failures (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.10.EL" date="1106906400">- fix futex_wait() race condition that allowed app hang (Ingo Molnar)
- add/correct write barrier placement in timer routines (David Howells)
- add x86_64 NMI switch support to debug kernel hangs (Yuichi Nagahama)
- restore CIV/LVI offset operation in i810_audio driver (John Linville)
- update e1000 network driver to version 5.6.10.1-k2 (John Linville)
- prevent bogus BUG_ON during multi-threaded core dump (Roland McGrath)
- fix x86_64 crash in huge_page_release() w/SHM_HUGETLB (Larry Woodman)
- fix possible mem corruption from /proc/kcore access (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.9.EL" date="1106647200">- fix core dumping over NFS mounts with "intr" option (Roland McGrath)
- prevent multi-threaded app hang from sys_wait4() race (Ingo Molnar)
- restore e1000 support for Intel PCI device id 1014 (John Linville)
- add ac97 quirk entries for HP xw6000/xw6200/xw8000 (John Linville)
- update b44 network driver to upstream version 0.95 (John Linville)
- revert NFS silly-delete and rpciod-hang patches (Steve Dickson)
- fix panics while backing up LVM snapshots (Heinz Mauelshagen)
- fix oops in redirect_target() on DHCP refresh (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.8.EL" date="1105696800">- rework ia64 INIT switch stacks for clean tracebacks (Tatsuo Uchida)
- fix USB raced timeout errors and ohci_complete_add() (Pete Zaitcev)
- add O_DIRECT handling in LVM driver handling (Heinz Mauelshagen)
- downgrade wait4() SIGCHLD/SIG_IGN warning message (Ingo Molnar)
- eliminate potential VMA list races with do_brk() (Dave Anderson)
- ignore ICMP Source Quench messages in tcp_v4_err() (Dave Miller)
- prevent VMA overlap crashes in insert_vm_struct() (Jason Baron)
- move flock() avoidance from NFS up to F/S layer (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.7.EL" date="1105437600">- fix 32-compat alt-stack signal handling on x86_64 (Geoff Gustafson)
- add initialization of ppc64 EEH error buffer size (David Howells)
- make ppc64 xmon work properly with Power5 console (David Howells)
- prevent infinite sync loop from NFS ESTALE writes (Steve Dickson)
- update 8139too network driver w/recent 2.4 fixes (John Linville)
- avoid netfilter oops when ip_conntrack is unloaded (Dave Miller)
- fix potential rpciod hangs during NFS sillydelete (Steve Dickson)
- avoid "No locks available" errors w/flock() on NFS (Ken Preslan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.6.EL" date="1104919200">- fix x86 phys proc ids for non-clustered APIC systems (Geoff Gustafson)
- return EINVAL on e100/e1000 rx-mini/rx-jumbo settings (John Linville)
- fix i810_audio regression from modified ICH6 PCI ids (John Linville)
- prevent race conditions in add_wait_queue_cond() macros (Jeff Moyer)
- fix FAT32 file system corruption w/writing 8M files (Alexander Viro)
- fix derivation/presentation of PHB unit ids on ppc64 (David Howells)
- close OpenFirmware stdin device at boot on ppc64 (David Woodhouse)
- fix 32-bit-compat regression in CMSG validations (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.5.EL" date="1103796000">- add "CommitLimit" data to /proc/meminfo output (Frank Hirtz)
- allow autofs to expire mounts on ppc64 arch (Jeff Moyer)
- add 3c59x EEPROM_RESET for 3c900 Boomerang (John Linville)
- ignore PTE mapping status in page_anon() (Larry Woodman)
- fix SIOCGIFHWADDR handling for zero addr_len (Dave Miller)
- add netdump support for x86_64, ia64, ppc64 (Dave Anderson)
- correct overcommit accounting on fork failure (Frank Hirtz)
- raise default ia64/ia32e swiotlb size to 64M (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.4.EL" date="1103709600">- add network CMSG validation checks (Dave Miller)
- fix data struct leak in ip_options_get() (Dave Miller)
- fix IGMP vulnerabilities in ip[6]_mc_source() (Dave Miller)
- fix e_phnum binfmt_elf loader vulnerability (Dave Anderson)
- clean x86_64 32-bit-compat syscall numbers (Jim Paradis)
- prevent ia64 floating point reg val leakage (Jason Baron)
- add USB io_edgeport driver size check (Peter Martuccelli)
- enable softirq deferral for x86_64 arch (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.3.EL" date="1102586400">- add data/param length sanity checks in smbfs (Alexander Viro)
- prevent /proc/&lt;PID&gt;/cmdline env data disclosure (Dave Anderson)
- make tulip_stop_rxtx() wait for DMA termination (John Linville)
- fix mm_stat regression introduced in -20.13.EL (Rik van Riel)
- correct return value from vlan_dev_change_mtu() (John Linville)
- serialize datagram read w/appropriate semaphore (Dave Miller)
- fix keyboard regression introduced in -24.EL (Peter Martuccelli)
- enable mmap/mprotect PROT_EXEC for legacy apps (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-26.2.EL" date="1101722400">- fix USB problems with keyboards and ia64 oopses (Pete Zaitcev)
- add i810 PCI IDs for nforce3/CK804 audio devices (Jim Paradis)
- fix ppc64 viodasd driver dev naming/limit bugs (David Howells)
- prevent tg3 fiber link bounces w/auto-negotiation (Dave Miller)
- add ac97 quirk handling for i810_audio driver (John Linville)
- prevent incorrect OOM killing with iscsi usage (Larry Woodman)
- create kiobuf cache to reduce lowmem contention (Larry Woodman)
- fix yet another binfmt_elf loader vulnerability (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.1.EL" date="1100512800">- (this is the first build for RHEL 3 Update 5)
- implement open() recovery from NFS ESTALE errors (Neil Horman)
- clean up warnings from lpfc and lpfc_703 Makefiles (Tom Coughlan)
- fix nessus-induced kernel panic with auditing (Peter Martuccelli)
- update 3c59x driver to LK1.1.18 and fix reset bug (John Linville)
- fix ext3 O_DIRECT bug in orphan list handling (Stephen Tweedie)
- flush cached dirty pages on NFS reads w/O_DIRECT (Steve Dickson)
- allow ia64 kernel unaligned access msg suppression (Neil Horman)
- correct test for performing buffer-head reclaim (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.EL" date="1100253600">- fix binfmt_elf loader vulnerabilities (Jim Paradis, Dave Anderson)
- limit kernel data struct slabs to single-page allocs (Larry Woodman)
- update Emulex driver to 7.1.14 (backup still 7.0.3) (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-24.EL" date="1100080800">- fix several ppc64 problems with signal catching (David Woodhouse)
- fix several bugs in /proc/ppc64/lparcfg driver (David Howells)
- fix possible diskdump hangs w/megaraid2 driver (Tatsuo Uchida)
- add support for IBM EM64T-based Groucho blade (Peter Martuccelli)
- fix regression in USB BIOS-&gt;kernel hand-off support (Pete Zaitcev)
- fix regression in ia64 kernel stack unwind handling (Don Howard)
- fix regression w/agpgart support of i8xx chipsets (Larry Woodman)
- add support for BLKSSZGET ioctl in cciss driver (Tom Coughlan)
- disable iSCSI builds in ppc64 and s390* configs (Tom Coughlan)
- update Emulex driver to 7.1.13 (backup still 7.0.3) (Tom Coughlan)
- correct SCSI whitelist for Chaparral FR1422 devices (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-23.EL" date="1098957600">- prevent kswapd from getting stuck in prune_icache() (Larry Woodman)
- fix ppc64 single-stepping into signal handlers (David Woodhouse)
- fix corruption from user stack expansion races (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-22.EL" date="1098093600">- prevent add/removal races in SCSI open handling (Doug Ledford)
- fix U3 agpgart regression with Intel i8xx chipsets (Dave Jones)
- update SCSI whitelist for IBM 1722/1724 devices (Tom Coughlan)
- correct TSS descriptor limit checking for x86_64 (Jim Paradis)
- add nforce3/CK804 device support and fix ACPI bug (Jim Paradis)
- add support for "forcedeth" net driver version 0.28 (Jim Paradis)
- enable diskdump support in amd64/ia32e configs (Nobuhiro Tachino)
- restore/improve linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- add missing page_cache_release() in launder_page() (Larry Woodman)
- update Emulex driver to 7.1.11 (backup still 7.0.3) (Tom Coughlan)
- add new USB ids to support latest Wacom tablets (Kristian Høgsberg)
- remove drivers/net/tun.o from unsupported list (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-21.EL" date="1096538400">- fix potential PTE race in do_anonymous_page() (Rik van Riel)
- add "Committed_AS" data to /proc/meminfo output (Frank Hirtz)
- revise DMA zone paging thresholds for x86_64 (Larry Woodman)
- prevent /proc/scsi/scsi oops during probes (David Woodhouse)
- avoid kswapd hangs via free_more_memory() hooks (Rik van Riel)
- update megaraid2 driver to 2.10.8.2 w/2.10.6 backup (Adam Manthei)
- fix do_notify_parent() panic from ptrace death race (Roland McGrath)
- fix large core file support on 64-bit architectures (Dave Anderson)
- enable tux on ia64 and increase max tux threads to 16 (Ingo Molnar)
- fix ia64/s390,x single-stepping w/signal handlers (David Woodhouse)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.14.EL" date="1096452000">- fix hang in SCSI starvation management code (David Howells)
- update SCSI whitelist for NETAPP LUN devices (Wendy Cheng)
- fix s390 cio handling during ESS fail-overs (Pete Zaitcev)
- update Emulex driver to 7.1.8 w/7.0.3 backup (Tom Coughlan)
- update Qlogic driver to 7.01.01 w/7.00.03 backup (Tom Coughlan)
- correct unlock/free order in proc_lookupfd() (Ernie Petrides)
- use ACPI for PCI interrupt routing on ia32e (Jim Paradis)
- allow cpus to boot w/APIC IDs &gt; 8 on ia32e (Jim Paradis)
- fix pid allocation when pid_max &gt; 32768 (Ernie Petrides)
- fix regs in multi-threaded ia64 core dumps (Keiichi Mori)
- enable sym53c8xx driver for ppc64 iSeries (David Howells)
- fix ac97 depmod errors w/hugemem configs (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.13.EL" date="1096365600">- fix aic79xx_osm.h/3c59x.c changes in prior rev (Tachino/Linville)
- allow for larger nfsd block sizes on some archs (Steve Dickson)
- fix possible aacraid driver panic in aac_info() (Tom Coughlan)
- fix xdr argsize check to handle writes &gt;= 2^31 (Steve Dickson)
- update e1000 network driver to version 5.3.19-k2 (John Linville)
- apply several cciss driver fixes (to 2.4.52.RH2) (Adam Manthei)
- fix x86_64 versions of cpu capability test macros (Jim Paradis)
- fix ppc64 HPTE memory corruption race condition (Rik van Riel)
- add sys_epoll support on s390,x (Stephen Tweedie, Pete Zaitcev)
- prevent keyboard.c warnings from mouse clicks (Norm Murray)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.12.EL" date="1096279200">- improve slab cache page reaping heuristics (Larry Woodman)
- implement diskdump support for x86_64 arch (Nobuhiro Tachino)
- add ia64 INIT trigger switch support for debugging (Tatsuo Uchida)
- fix several problems in handling of AIO on pipes (Jeff Moyer)
- update fixes for LTP read02 test hangs with tmpfs (Alexander Viro)
- fix x86_64 single-stepping out of signal handlers (Jim Paradis)
- increase size of ppc64 RTAS error log buffer (David Howells)
- increase max possible kNFSD lockd cookie size (Steve Dickson)
- backport 3c59x fixes for mii-tool problems w/10Mb (John Linville)
- incorporate Cisco's iscsi_sfnet initiator driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.11.EL" date="1095933600">- implement diskdump support for megaraid2 adapter (Tatsuo Uchida)
- update ips driver to version 7.10.18 w/7.00.15 backup (Tom Coughlan)
- correct max page aging interval boundary in kscand() (Larry Woodman)
- add ppc64 support for ptrace() with PT_SINGLESTEP (David Woodhouse)
- update e100 network driver to version 3.0.27-k2 (John Linville)
- fix LTP read02 test hangs when tmpfs is in use (Alexander Viro)
- get proc_dir_entry reference in proc_lookup() (Alexander Viro)
- add exports of several AIO-related interfaces (Larry Woodman)
- reduce swapping during excessive pagecache use (Larry Woodman)
- implement statfs64() syscall on x86 for NFS use (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.10.EL" date="1095847200">- implement early USB hand-off (BIOS-&gt;kernel) support (Pete Zaitcev)
- fix stack pointer calculation in x86 show() handling (Jeff Moyer)
- prevent interference between flock/POSIX lock types (Frank Hirtz)
- update pcnet32 network driver to version 1.30c (John Linville)
- add export of block_commit_write() f/s interface (Larry Woodman)
- implement diskdump support for dpt_i2o adapter (Tatsuo Uchida)
- update mptfusion driver to version 2.05.16.02 (Adam Manthei)
- move disk_dump_notifier_list to diskdumplib.c (Nobuhiro Tachino)
- update s390 zfcp driver to revision 5.31.2.11+ (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.9.EL" date="1095674400">- fix occasional ibmvscsic driver insmod crash (David Howells)
- disable linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- prevent double slashes in symlink auditing (Peter Martuccelli)
- fix overzealous compat32 setsockopt conversions (David Woodhouse)
- backport tulip driver fixes from upstream 2.4.28 (John Linville)
- update tg3 network driver to version 3.10RH (John Linville)
- implement sysctl to force igmp protocol versions (Neil Horman)
- add diskdump performance improvement info (Nobuhiro Tachino)
- fix s390 iucv lost connections and ping hangs (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.8.EL" date="1095588000">- prevent diskdump deadlock in case of die() recursion (Tatsuo Uchida)
- add x86/x86_64 support for ptrace() w/PT_SINGLESTEP (Roland McGrath)
- fix x86/x86_64 single-stepping into signal handlers (Roland McGrath)
- increase x86 value for MAX_MP_BUSSES definition to 260 (Ingo Molnar)
- eliminate ia64 potential for scheduler runq deadlock (Larry Woodman)
- add support for /proc/sys/kernel/mem_nmi_panic sysctl (Dave Anderson)
- prevent keyboard-initiated sysrq hangs in handle_sysrq() (Jeff Moyer)
- fix intermittent netdump hangs from cpu-frozen messages (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.7.EL" date="1095415200">- fix premature OOM killing change added in prior rev (Larry Woodman)
- backport vlan driver fixes from upstream 2.4.28-rc1 (John Linville)
- add _sb_findmap symbol export in s390/s390x kernels (Pete Zaitcev)
- add ppc64 support for 32-bit sendfile64() syscall (David Howells)
- fix 32-bit IPC_INFO shmctl() syscalls for ppc64 (David Howells)
- upgrade libata/SATA support to current 2.4 bits (John Linville)
- avoid USB device resets of shared/busy interfaces (Pete Zaitcev)
- fix miscellaneous problems in ppc64 icom driver (David Howells)
- fix ip_queue_maxlen sysctl for ip[6]_queue modules (Neil Horman)
- add module parm for max entries in NFS_ACL replies (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.6.EL" date="1095156000">- prevent OOM killer from kicking in prematurely (Larry Woodman)
- avoid NMI watchdog crashes during sysrq-m usage (Wendy Cheng)
- add auditing support for ia64 clone2 syscall (Peter Martuccelli)
- correct sign of auditing error codes for ia64 (Peter Martuccelli)
- implement ia64 auditing 32-bit-disable sysctl (Peter Martuccelli)
- fix ia64 faults w/stale VHPT-generated TLB entries (Dave Anderson)
- fix invalid x86_64 checksums for multicast packets (Mike Gahagan)
- fix incorrect blocking bug inside wakeup_kswapd() (Larry Woodman)
- validate appropriate media type in DVD drives (Doug Ledford)
- reduce s390 stack usage in qeth/qdio drivers (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.5.EL" date="1094810400">- prevent scenarios that lead to hang of kswapd (Larry Woodman)
- add locking for access to /proc/bus/usb/devices (Pete Zaitcev)
- correct x86 rescheduling to handle apm=power-off (Ingo Molnar)
- fix OOM killer locking and mm referencing holes (Larry Woodman)
- pin ia64 mapping for idle proc stack during boot (Larry Woodman)
- fix warning throttle for amd64 stack overflow check (Neil Horman)
- fix content lengths when using tux gzip compression (Ingo Molnar)
- add auditing support for pread/pwrite syscalls (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.4.EL" date="1094724000">- prevent bogus data in /proc/scsi/ibmvscsi/* (David Howells)
- update tg3 network driver to version 3.9RH (John Linville)
- improve ramfs memory alloc w/scarce highmem (Larry Woodman)
- correct several values in /proc/ppc64/lparcfg (David Howells)
- allow dirty page rebalancing under mem pressure (Rik van Riel)
- prevent memory leak in scsi_build_commandblocks() (Doug Ledford)
- fix potential kswapd deadlock w/disk quota usage (Larry Woodman)
- increase MAX_IO_APICS from 8 to 32 for x86_64 arch (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.3.EL" date="1094205600">- fix various error path bugs in bcm5820 driver (John Linville)
- validate addresses used with /dev/kmem accesses (Neil Horman)
- eliminate IPSEC tunnel leaks when using IPComp (Dave Miller)
- add auditing support for utimes() syscalls (Peter Martuccelli)
- prevent netconsole freeze w/cable dis-/re-connect (Jeff Moyer)
- correct reboot_cpu validation for "reboot=s&lt;n&gt;" (Doug Ledford)
- fix mem/irq clean-up in olympic tokenring driver (Neil Horman)
- update network bonding driver to version 2.6.0 (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.2.EL" date="1094032800">- add maps/rlimits output with print-fatal-signals=2 (Ingo Molnar)
- backport ac97 sound support from upstream 2.4.27 (John Linville)
- eliminate kernel stack data leaks from USB drivers (Mark Cox)
- fix interrupt status mask in AMD PCnet32 driver (David Howells)
- fix module loading problems in ibmvscsic driver (David Howells)
- fix x86 shared runq mapping when ACPI data is bad (Bernd Schmidt)
- disable enhanced error handling on PCI-ISA bridges (David Howells)
- add memory-mapped i/o support to i810_audio driver (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.1.EL" date="1093860000">- (this is the first build for RHEL 3 Update 4)
- backport r8169 network driver changes from 2.4 (John Linville)
- update i810_audio sound driver to version 1.01 (John Linville)
- convert USB UHCI driver warning to debug message (Pete Zaitcev)
- backport 2.6 PROT_GROWSDOWN/UP mprotect() support (Jakub Jelinek)
- lower ppc64 console logging level of RTAS messages (David Howells)
- fix ppc64 handling of "smt-emabled=off" boot option (David Howells)
- correct socket sndbuf accounting w/IP_MULTICAST_LOOP (Neil Horman)
- reduce x86_64 user stack start randomization to 16K (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.EL" date="1092823200">- change TARGET_CPUS on x86_64 to include all on-line cpus (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-19.EL" date="1092304800">- fix possible races/overflows in file offset handling (Alexander Viro)
- correct logging of boot progress messages on Power5 (David Howells)
- extend ppc64 EEH support for other types of devices (David Howells)
- fix ibmveth driver to properly shut down and restart (David Howells)
- fix several races and overflows in ppc64 RTAS driver (David Howells)
- backport "acpi=noirq" support to work around Nocona hangs (Don Howard)
- conditionalize pbn_hp_diva to fix serial driver oops (Matthew Galgoci)
- add amd64 GART entry guard mappings for PCI mis-prefetch (Jim Paradis)
- upgrade SATA support again to resolve several problems (Jeff Garzik)
- qualify ia32e IRQ affinity disable with BIOS flag check (Jim Paradis)
- fix eeh_check_failure() on ppc64 to be interrupt safe (David Howells)
- correct ppc64 EEH macros to use appropriate data size (David Howells)
- fix x86/ia64 no-wait handling in smp_call_function() (Larry Woodman)
- fix "Filter target 0x203 not known ..." audit msgs (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-18.EL" date="1090404000">- prevent s390 mlock hangs with follow_page() rework (Ernie Petrides)
- fix Power5 initialization and handling of RAS IRQs (David Howells)
- fix ppc64 viocons driver deadlocks with printk() (David Howells)
- apply eh_timeout, netdump, cli fixes in diskdump (Tatsuo Uchida)
- add skip_mapped_pages tuning for page eviction (Stephen Tweedie)
- fix initrd's effect on ppc64 mem_end calculation (David Howells)
- allow HT support on ppc64 systems with single cpu (David Howells)
- backport v2.0.8 aic7xxx driver h/w support for Dell (Tom Coughlan)
- correct ppc64 device node searching in hvsi driver (David Howells)
- fix KMI compat problem w/pgprot_t in x86 NX support (Jim Paradis)
- resurrect mptfusion driver backup version 2.05.05 (Tom Coughlan)
- disable IRQ affinity setting on some ia32e systems (Jim Paradis)
- update SCSI whitelist for Dot Hill SANnet/StorEdge (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-17.EL" date="1089280800">- account for zone holes in big hash table allocator (Stephen Tweedie)
- prevent reserved stack space overflow of mmap_top (Ernie Petrides)
- fix USB crash in scan_async() with EHCI hardware (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-16.EL" date="1088848800">- enable exec-shield and add x86 NX support (Ingo Molnar, Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.19.EL" date="1088762400">- add owner check in inode_change_ok() for gid changes (Ernie Petrides)
- fix race in finish_task_switch() between wakeup/exit (Ernie Petrides)
- remove Samsung CD-ROM SN-124 from IDE DMA blacklist (Tom Coughlan)
- update e1000 network driver to version 5.2.52-k3 (John Linville)
- add auditing support for semtimedop syscalls (Peter Martuccelli)
- fix tasklet and locking bugs in Power5 hvsi driver (David Howells)
- fix megaraid2 handling of TUR cmds with SCSI CD-ROM (Adam Manthei)
- update SCSI whitelist for HP NS E1200-160 router (Tom Coughlan)
- prevent x86 read_ldt() from reading beyond kmap (Ernie Petrides)
- force single loadable segment in ia64 kernels (Jakub Jelinek)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.18.EL" date="1088157600">- implement ia64 work-around for TLB fetch timeout MCA (Larry Woodman)
- fix Power3 interrupt initialization in ppc64 setup (David Howells)
- correct info msg, prevent double panic in diskdump (Tatsuo Uchida)
- defend against NULL "mm" ptrs in page_referenced() (Rik van Riel)
- fix miscellaneous audit subsystem problems (Peter Martuccelli)
- prevent crash with tux CGI execution on x86_64 (Ingo Molnar)
- add installer info to SATA sx8 block driver (Jeff Garzik)
- turn on vary_io flag in SCSI ips driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.17.EL" date="1087984800">- allocate big system hash tables w/bootmem allocator (David Howells)
- prevent loading aic7xxx_old when aic7xxx is in use (Doug Ledford)
- implement stat() recovery from NFS ESTALE errors (Steve Dickson)
- fix raw/O_DIRECT i/o bug with unmapped pages (Stephen Tweedie)
- correct another locking hole in RAID1 handling (Doug Ledford)
- fix __x86_64__ conditional in megaraid2.c driver (Adam Manthei)
- fix unresolved symbols on ia64 in cciss driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.16.EL" date="1087898400">- make NFS sillydelete wait for unlink completion (Steve Dickson)
- prevent EIO w/concurrent O_DIRECT+buffered i/o (Stephen Tweedie)
- upgrade SATA support (core, libata, and drivers) (Jeff Garzik)
- implement futex() FUTEX_CMP_REQUEUE op (Al Viro, Pete Zaitcev)
- update b44 network driver to version 0.93 (John Linville)
- avoid unix_stream_sendmsg() ENOBUFS errors (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.15.EL" date="1087812000">- improve SCSI mid-layer error handling w/sdev_retry_q (Doug Ledford)
- eliminate rw-semaphore races between waiter/wakeup (David Howells)
- add locking and fix accounting bug in RAID1 handling (Doug Ledford)
- backport Carmel sx8.c driver from upstream 2.4 base (John Linville)
- rename ppc64-squadrons-* patches to ppc64-power5-* (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.14.EL" date="1087639200">- introduce support for IBM Squadrons/Power5 systems (David Howells)
- update aacraid driver to 1.1.5-2339 w/1.1.2 backup (Adam Manthei)
- allow sys_remap_file_pages() on unlocked ramfs VMAs (Larry Woodman)
- fix diskdump hangs during resets with aic79xx driver (Tatsuo Uchida)
- fix possible data corruption when using SHM_HUGETLB (Larry Woodman)
- set QLogic HbaApiNode proc file permissions to 0600 (Tom Coughlan)
- add IRQ blocking/restoring in add_gendisk/del_gendisk (Jeff Needle)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.13.EL" date="1087466400">- fix problem causing PCI bus 255 to be missing on ia64 (Ben Woodard)
- make nfs_statfs() recognize/handle fs size overflows (Steve Dickson)
- update QLogic driver to 7.00.03-RH1 w/6.07.02 backup (Tom Coughlan)
- allow procfs to utilize more dynamic inode numbers (David Howells)
- prevent inappropriate "unexpected IO-APIC" messages (Ernie Petrides)
- avoid lost dirty page bits in s390/s390x VM handling (Pete Zaitcev)
- fix ACPI SCI interrupt defaults and add kernel params (Jim Paradis)
- fix user-space access bugs in acpi/airo/decnet/sound (Alexander Viro)
- remove drivers/net/starfire.o from unsupported list (Ernie Petrides)
- fix mm_struct mem leak in copy_process() error path (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.12.EL" date="1087293600">- correct s390/s390x tests for PT_AUDITED flag (Peter Martuccelli)
- update e100 network driver to version 2.3.43-k1 (John Linville)
- update megaraid2 driver to 2.10.6 w/2.10.1.1 backup (Adam Manthei)
- add x86_64 auditing support for 32-bit-compat (Peter Martuccelli)
- fix ia64 unwind handling for UNW_INSN_SETNAT_MEMSTK (Jason Baron)
- update cciss driver to v2.4.52 for several fixes (Tom Coughlan)
- fix variable block mode tape handling in st driver (Tom Coughlan)
- incorporate latest Emulex fibre channel driver (Tom Coughlan)
- fix USB EHCI problem with BIOS-to-host handoff (Pete Zaitcev)
- update SCSI whitelist for DDN/Xyratex/SanDisk/CBOX3 (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.11.EL" date="1087207200">- upgrade to latest autofs4, remove from unsupported list (Jeff Moyer)
- fix memory corruption bug in audit driver code (Peter Martuccelli)
- store adjusted KSP value in ia64 diskdump support (Tatsuo Uchida)
- update e1000 network driver to version 5.2.52-k1 (John Linville)
- update ips driver to version 7.00.15 w/6.11.07 backup (Adam Manthei)
- implement USB device interlock between ioctls/SCSI-ops (Pete Zaitcev)
- update tg3 driver to version 3.6RH for upcoming chipsets (Dave Miller)
- downgrade several PCI cache line size debugging messages (Jim Paradis)
- correct x86_64 32-bit-compat support for AIO syscalls (Jeff Moyer)
- prevent FPU exception handling hangs on x86/x86_64 (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.10.EL" date="1086948000">- give wait.func highest priority in wake_up_filtered() (Larry Woodman)
- reduce system time when using sys_remap_file_pages() (Larry Woodman)
- enable CONFIG_SOFT_WATCHDOG module for ppc64 configs (David Howells)
- improve page allocation to avoid unnecessary swapping (Rik van Riel)
- implement diskdump support for ia64 with mptfusion (Tatsuo Uchida)
- disable native ia32 support for ia64 Montecito cpus (Jason Baron)
- save/restore P4/ia32e perf registers for oprofile (Will Cohen)
- fix oprofile ESCR_SET_EVENT_SELECT() event mask (Will Cohen)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.9.EL" date="1086775200">- update s390 zcrypt driver to version 1.2.1 (Pete Zaitcev)
- update network tg3 driver to version 3.5RH (Dave Miller)
- eliminate separate ia32e oprofile processor id (Will Cohen)
- update SCSI whitelist for IBM 2105/2145 devs (Doug Ledford)
- avoid EAGAIN errors on blocking UDP sockets (Steve Dickson)
- avoid putting locked inodes on dirty list (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.8.EL" date="1086688800">- decouple NFS O_DIRECT handling for performance gain (Steve Dickson)
- export page_is_ram() interface for amd64/ia32e arch (Jim Paradis)
- enable CONFIG_SCSI_SATA_* options in x86_64 configs (Jim Paradis)
- update mptfusion driver to 2.05.16 w/2.05.11.03 backup (Adam Manthei)
- fix nopage_sequential_readahead() and filemap_sync() (Larry Woodman)
- fix USB EHCI driver to avoid Squadrons install oops (Pete Zaitcev)
- add x86 NMI trigger switch support for debugging (Yuichi Nagahama)
- add dmi_blacklist[] entry for "Intel NA440BX DP" (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.7.EL" date="1086602400">- apply some minor scsi_dump_status() format tweaks (Doug Ledford)
- implement SCSI support for dynamic add (hot plug) (Doug Ledford)
- upgrade lvm driver logic to version 1.0.8-2 (Heinz Mauelshagen)
- fix x86_64 definition for inlined ffs() function (Jim Paradis)
- preserve VM_MAYEXEC for executable stack support (Jim Paradis)
- add extra SLBIEs for ppc64 Power5 DD2.0 errata (David Howells)
- add ppc64 32-bit compat for TIOCGICOUNT/MIWAIT (David Howells)
- hold file struct ref when removing POSIX locks (Steve Dickson)
- fix window scaling bug in tcp_ack_update_window() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.6.EL" date="1086343200">- make fsync() flush all pending NFS updates to disk (Steve Dickson)
- complete ia64 support for multiple I/O port spaces (Larry Woodman)
- fix sending of IP broadcast frames with TTL of zero (Neil Horman)
- prevent context switch storms under high VM loads (Larry Woodman)
- fix sigaltstack() errors w/JVM on hugemem kernels (Roland McGrath)
- add locking and improve output in scsi_dump_status() (Doug Ledford)
- add size boundary checking in scsi_resize_dma_pool() (Doug Ledford)
- fix SCSI request struct leak on command init failures (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.5.EL" date="1084528800">- overhaul ia64 SAL/MCA subsystem (Ben Woodard)
- enable x86_64 32-bit UID support (Jim Paradis)
- add initial diskdump support (Nobuhiro Tachino)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.4.EL" date="1084356000">- reduce chance of "VFS: Busy inodes after unmount." errs (Steve Dickson)
- convert "uaddr2" arg ptr in s390x futex() compat syscall (Pete Zaitcev)
- add ppc64 32-bit compat handler for PE_LOCKED_COPY ioctl (David Howells)
- update s390 dasd driver with several recent bug fixes (Pete Zaitcev)
- fix amd64 NUMA node scanning for Northbridge systems (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.3.EL" date="1084183200">- prevent exp_stopfodrop() oops during cluster failover (Steve Dickson)
- make nfs_file_commit() always flush the entire file (Steve Dickson)
- fix pcnet32 driver's MAC address selection on ppc64 (Julie DeWandel)
- backport /dev/random driver fixes for missed wakeups (Mark DeWandel)
- fix hang w/SoundBlaster 16-bit sampling w/odd count (Ernie Petrides)
- make s390 tape driver specify GPL module license type (Pete Zaitcev)
- correct buffer len value in ppc64 pSeries ipr driver (David Howells)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.2.EL" date="1083664800">- enable booting on 8-way Opteron systems (Jim Paradis)
- fix 32-bit-compat truncate64() on x86_64 (Jim Paradis)
- correct promiscuous mode counter handling (Dave Miller)
- support 128-GB ia64 systems w/HP zx1 chipset (Larry Woodman)
- add export of sys_ioctl() global symbol on s390x (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.1.EL" date="1083578400">- (this is the first build for RHEL 3 Update 3)
- reenable/fix linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- clean up file locks when NFS clients receive signals (Steve Dickson)
- complete ia64-specific LAuS syscall auditing support (Mark DeWandel)
- prevent NULL pointer dereference in page_referenced() (Rik van Riel)
- fix max sectors argument in lvm_snapshot_alloc() (Heinz Mauelshagen)
- allow AGP bus scanning to execute for all architectures (John Dennis)
- fix page_referenced() rss limit checks w/unmapped pages (Rik van Riel)
- correct locking and cr/lf problems in usbserial driver (Pete Zaitcev)
- add /proc/cpuinfo support for new ppc64 processors (Julie DeWandel)
- fix sense data handling on certain SCSI cmd retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.EL" date="1082541600">- fix clobbering of /proc/cpuinfo vendor_id on x86_64 (Jim Paradis)
- correct MCAST_MSFILTER/IP_MSFILTER size checking (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-14.EL" date="1081936800">- disable linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- prevent symlink buffer overflow in ISO-9660 fs (Ernie Petrides)
- check for skb overrun in IPV4/IPV6 IGMP handling (Dave Miller)
- fix possible hang in rebalance_laundry_zone() (Larry Woodman)
- correct zone_wired[] initialization for NUMA (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-13.EL" date="1081332000">- fix several critical libata bugs (Jeff Garzik)
- correct IPSEC XFRM policy ref counting (Dave Miller)
- add amd64/ia32e parsing for "acpi=off" arg (Jim Paradis)
- update tg3 driver to v3.1 for several fixes (Dave Miller)
- fix SCSI whitelist for Hitachi/HP DFx00, Apple Xserve (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-12.EL" date="1080295200">- add USB support for Handspring Treo 600 PDA syncing (Matthew Galgoci)
- clear state for CPEs during ia64 MCA SAL error logging (Ben Woodard)
- prevent DMA resource leak in QLogic driver error path (Tom Coughlan)
- change default QLogic driver device queue depth to 64 (Tom Coughlan)
- replace fabricated cciss drive geometry w/ENXIO error (Tom Coughlan)
- update SCSI whitelist for HP SureStore/StorageWorks (Tom Coughlan)
- disable CONFIG_ACPI_DEBUG in amd64/ia32e configs (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-11.EL" date="1078740000">- add yet another Intel ICH6 SATA PCI id (Jeff Garzik)
- fix ref counting in copy_process() error path (Larry Woodman)
- remove ia64 support for /proc/bus/mckinley/bitmap (Jason Baron)
- correct depmod versioning for unsupported modules (Ernie Petrides)
- prevent data corruption in ia32e phys_proc_id[] info (Larry Woodman)
- change default value for inactive_clean_percent to 30 (Larry Woodman)
- enable improved version of s390 on-demand timer patch (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-10.EL" date="1078221600">- incorporate late-breaking libata fixes (Jeff Garzik)
- enable amd64 syscall for tux support (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.17.EL" date="1078135200">- reduce s390 idle overhead with on-demand timer patch (Pete Zaitcev)
- complete ia64 NPTL support for 32-bit-EL executables (Jason Baron)
- add several ia64 syscall table entries for 32-bit-EL (Jason Baron)
- upgrade libata/SATA support, delete ich5-sata.patch (Jeff Garzik)
- check for mremap/vmtruncate race in move_one_page() (Jason Baron)
- prevent ia64 NaT-bit corruption during sig catching (Jason Baron)
- fix amd64 get_mtrr() parsing error with &gt;4GB memory (Jim Paradis)
- change amd64 default behavior to avoid TSC timer use (Jim Paradis)
- force s390utils upgrade to prevent zipl seg fault (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.16.EL" date="1078048800">- restore varyio capability in mptfusion driver update (Adam Manthei)
- enhance SCSI mid-layer queuing for indefinite retries (Doug Ledford)
- add ia64 reg reloads for 32-bit-EL strace -f support (Jason Baron)
- fix ia64 core dump support for 32-bit-EL executables (Jason Baron)
- add SCSI whitelist devs with BLIST_RETRY_ABORTED_CMD (Doug Ledford)
- remove stack-in-interpreter check in binfmt_elf.c (Julie DeWandel)
- clear all flags in exec_usermodehelper() for kmod (Alexander Viro)
- fix aacraid command completion (rq corruption) bugs (Tom Coughlan)
- correct cciss_proc_tape_report() type in flags decl (Tom Coughlan)
- enable USB-2.0-hub-based mice/keyboards to function (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.15.EL" date="1077962400">- fix amd64 oprofile linkage problem in ia32e support (Ernie Petrides)
- update ips driver to version 6.11.07 w/6.10.52 backup (Tom Coughlan)
- add size checks to DRM ATI r128 driver ioctl handling (John Dennis)
- avoid megaraid2 irq_disable calls for mem-mapped ctlrs (Tom Coughlan)
- upgrade firmware imbedded in QLogic driver to 3.02.24 (Tom Coughlan)
- correct ia64 memory accounting in overcommit mode 2 (Larry Woodman)
- implement softirq deferral to limit kernel stack depth (Ingo Molnar)
- reduce kernel stack usage in a couple of tux functions (Ingo Molnar)
- fix shared extended attribute ref counting in ext3 (Stephen Tweedie)
- clear SCSI sense data buffer between eh retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.14.EL" date="1077789600">- add .RH1 suffix to cciss driver version v2.4.50 (Tom Coughlan)
- implement initial LAuS syscall auditing support (Mark DeWandel)
- introduce GFS enablers for locking and sendfile ops (Ken Preslan)
- update QLogic driver to 6.07.01 w/6.06.00b11 backup (Tom Coughlan)
- improve netdump reliability w/asynchronous IPI param (Jeff Moyer)
- add ICH6 DSP audio support to i810_audio driver (Jeff Garzik)
- apply SCSI whitelist updates for several devices (Tom Coughlan)
- fix odd byte tape i/o handling in sym53c8xx driver (Tom Coughlan)
- correct minimum nfsd version that supports acls (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.13.EL" date="1077703200">- allow concurrent NFS direct i/o to same file if !append (Steve Dickson)
- introduce support for new Intel 64-bit ia32e processor (Larry Woodman)
- update mptfusion driver to 2.05.11.03 w/2.05.05 backup (Adam Manthei)
- remove fs/binfmt_misc.o from linux-modules-unsupported (Jason Baron)
- fix ia64 predicate register use in sig trampoline code (Jason Baron)
- add oprofile cpu type recognition for ia32e processor (Will Cohen)
- update e1000 network driver to version 5.2.30.1-k1 (Jeff Garzik)
- add more Intel PCI ids to match upstream 2.4 (Jeff Garzik)
- add ICH6 PATA support, PCI ids, irq routing (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.12.EL" date="1077530400">- add deferred page freeing for intr-context unmap_kvec() (Jeff Moyer)
- update megaraid2 driver to v2.10.1.1 w/v2.00.9 backup (Tom Coughlan)
- fix ppc64 pte hash table locking to avoid deadlocks (Julie DeWandel)
- fix ia64 data TLB init to prevent random boot-up hangs (Jason Baron)
- fix ia64 RNat register corruption with alt sig stacks (Jason Baron)
- allow smaller ia64 sig stacks in ia32 emulation layer (Jason Baron)
- backport ncpfs fixes to eliminate var-length arrays (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.11.EL" date="1077271200">- backport cisco aironet driver from 2.6.3-rc4 (Matthew Galgoci)
- update tg3 driver to v2.7 to fix status reg handling (Dave Miller)
- correct lost jiffies logic for x440/5 cyclone timer (Bernd Schmidt)
- fix open() error clean-up for unsupported O_DIRECT (Stephen Tweedie)
- prevent ia64 crashes when unmapping hugetlb pages (Jason Baron)
- add ppc64 processor support for future PPC970+ (Julie DeWandel)
- rework ppc64 32-bit-compat iptables support (Julie DeWandel)
- fix func ptr test in ethtool_set_ringparam() (Jeff Garzik)
- disable linux-2.4.21-scsi-affine-queue.patch (Doug Ledford)
- improve scsi_allow_ghost_devices description (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.10.EL" date="1077098400">- fix amd64 iommu bug causing data corruption on &gt;4GB systems (Jim Paradis)
- return EINVAL for unsupported ioctl32 syscalls on ppc64 (Julie DeWandel)
- remove incorrect BUG() call in __remove_inode_page() (Stephen Tweedie)
- fix s390 ctc driver problem causing build system hangs (Pete Zaitcev)
- fix s390 qeth driver error path to reset write_busy (Pete Zaitcev)
- update s390 zfcp driver to fix miscellaneous bugs (Pete Zaitcev)
- apply upstream nfs fixes for acl error handling (Steve Dickson)
- prevent kernel stack data leak via /dev/rtc (Ernie Petrides)
- allow AIO operations on sockets for non-inet (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.9.EL" date="1076925600">- restore genksyms_smp_prefix setting for non-x86 builds (Ernie Petrides)
- display/log memory stats whenever there's an OOM kill (Larry Woodman)
- update tg3 driver to v2.6, the latest upstream version (Jeff Garzik)
- update net bonding driver to v2.4.1, latest upstream (Jeff Garzik)
- fix irq, mem, printk, strtol bugs in cciss driver (Tom Coughlan)
- wait for board ready after hot add, cciss driver (Tom Coughlan)
- enable cciss adapter prefetch for x86 platforms (Tom Coughlan)
- add preserve_arg0 handling for ia32 emulation (Larry Woodman)
- fix ppc64 compat support for quota syscall (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.8.EL" date="1076580000">- remove Power-Blade-specific def for USB TEAC floppy (Julie DeWandel)
- fix s390 crash in iucv driver on connection shutdown (Pete Zaitcev)
- fix ia64 ACPI parsing for multinode IDE devs on x455 (Jim Paradis)
- fix amd64 core dumping of multithreaded 32-bit apps (Jim Paradis)
- fix s390 oprofile conditional and zero top addr bits (Will Cohen)
- add ipr driver v1.0.3 for IBM's PPC RAID adapters (Tom Coughlan)
- add {alloc,free}_netdev(), list macro, tg3 PCI ids (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.7.EL" date="1076407200">- restrict /proc/tty/driver directory access to root (Jeff Moyer)
- allow non-standard usr/sys VM splits at 2G/2G, 1G/3G (Ingo Molnar)
- extend existing ppc64 RTAS firmware flash interface (Mark DeWandel)
- fix ppc64 version of strncpy() to zero-pad buffers (Julie DeWandel)
- fix s390/x version of strncpy() to zero-pad buffers (Pete Zaitcev)
- fix generic version of strncpy() to zero-pad buffers (Jim Paradis)
- improve ppc64 segment table entry replacement logic (Julie DeWandel)
- correct type/cast of "len" in ppc64/kernel/nvram.c (Julie DeWandel)
- implement new ppc64 RTAS system call interface (Julie DeWandel)
- increase x86 RSDT table limit in ACPI parsing (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.6.EL" date="1076320800">- fix more usb-storage bugs for Power Blade support (Julie DeWandel)
- remove extra inactive_clean_pages-- in reclaim_page() (Larry Woodman)
- return proper error codes for do_munmap() failure in mremap (Dave Jones)
- fix binfmt_elf.c problems for apps with huge bss regions (Julie DeWandel)
- update cciss driver to v2.4.50 for Smart Array 6i support (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.5.EL" date="1075975200">- prevent netdump progress output from filling up log_buf (Jeff Moyer)
- add ppc64 RAS hook at end of panic() processing (Julie DeWandel)
- correct source IP address in ICMP error message (Dave Miller)
- fix smp deadlock with pdeath_signal posting (Roland McGrath)
- add ppc64 support for /proc/ppc64/lparcfg (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.4.EL" date="1075888800">- update nfsd mode-with-acls fix for upstream conformance (Steve Dickson)
- rework usb-storage locking to avoid hangs on disconnect (Pete Zaitcev)
- fix mmio alignment error in olympic token ring driver (Julie DeWandel)
- prevent tux logger-thread shutdown problems on ppc64 (Ingo Molnar)
- add ppc64 AltiVec chip support for Power Blades (Julie DeWandel)
- eliminate multi-threaded coredump hang potential (Ingo Molnar)
- fix ppc64 segfaults with tasks &gt; 2GB in size (Julie DeWandel)
- fix usb-storage memory-allocation/iowait deadlock (Alan Cox)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.3.EL" date="1075716000">- add amd64 support for PT_GNU_STACK with exec shield (Jim Paradis)
- fix s390 raid1 sync problem w/writes at end of dev (Pete Zaitcev)
- update s390 zcrypt driver to version 1.1.4 (Pete Zaitcev)
- fix output of large /proc/pid/statm values (Mark DeWandel)
- fix output of large /proc/partitions values (Mark DeWandel)
- enable ppc64 support for JS20 Power Blades (Julie DeWandel)
- fix kernel stack memory leak on fork failures (Dave Anderson)
- fix ipv6 packet quoting problem in icmpv6_send() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.2.EL" date="1075370400">- apply Intel's x86 microcode loader update (Jim Paradis)
- enhance PCI multifunction support for ppc64 (Julie DeWandel)
- fix nfsd returning bad mode bits when acls set (Steve Dickson)
- prevent unkillable zombies from detached NPTL threads (Ingo Molnar)
- avoid missing scsi disks in /proc/partitions on detach (Jason Baron)
- correct pte calculation inside zeromap_pte_range() loop (Ben Woodard)
- add inline function PDE() to help driver backporting (Matthew Galgoci)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.1.EL" date="1074679200">- (this is the first build for RHEL 3 Update 2)
- relocate various pieces of the "undo" patch (Patch Review Committee)
- rename s390 zcrypt and zfcp driver patches (Pete Zaitcev)
- add LKML discussion to COPYING.modules (Arjan van de Ven)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.EL" date="1073556000">- fix race condition between thread creation and signals (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-8.EL" date="1073469600">- fix amd64 eflags masking in 32-bit emulation of ptrace (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-7.EL" date="1073383200">- fix numerous ppc64 problems with /proc access (Julie DeWandel)
- allow user core files larger than 2GB in size (Dave Anderson)
- add ia64 support for Crestone Peak AGP bridges (John Dennis)
- fix unaligned kernel accesses in nfs_readdir() (Steve Dickson)
- add new_len/new_addr checks in do_mremap() (Ernie Petrides)
- fix nfs O_DIRECT corruption with &gt;4GB files (Steve Dickson)
- enable bus scan for AGP ctlrs on amd64 systems (John Dennis)
- limit PCI-alloc'ed physaddrs to 4GB on HP ia64 (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-6.EL" date="1070877600">- fix ppc64 firmware updates (Julie DeWandel)
- fix sync wakeup problem (Ingo Molnar)
- add ia64 cyclone support (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-5.EL" date="1070272800">- undo rejected patches (Stephen Tweedie, Arjan van de Ven, Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.20.EL" date="1069840800">- enable NUMA support in amd64 smp configs (Jim Paradis)
- prevent oopses with tux in OOM scenarios (Ingo Molnar)
- apply several ipv6 multicast bug fixes (Dave Miller)
- assign retval in copy_process() error path (Ingo Molnar)
- add lseek-in-/proc support for s390x "ps" (Pete Zaitcev)
- redefine zone_is_highmem() for Celestica (Dave Anderson)
- fix unresolved symbols in amd64 modules (Bill Nottingham)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.19.EL" date="1069754400">- fix tg3 rx_pending limit for BCM5705/BCM5782 chips (Jeff Garzik)
- reset page error flag prior to read of new contents (Jeff Moyer)
- enable CONFIG_HOTPLUG_PCI option for ia64 configs (Doug Ledford)
- fix inactive laundry list race in ramfs_writepage() (Dave Anderson)
- avoid out_of_memory() for wired pages when there's lomem (Dave Anderson)
- conditionalize ppc64 machdep_calls change for KMI compat (Ernie Petrides)
- limit anon/cache pages scanned in refill_inactive_zone() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.18.EL" date="1069668000">- create old version (rev. 5.64) of cmpci sound driver (Tom Coughlan)
- remove ac97.o, ad1848.o, cs4232.o from unsupported (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.17.EL" date="1069063200">- fix missing use of __GFP_HIGHMEM flag in pte_alloc_one() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.16.EL" date="1068890400">- rework scsi mid-layer queuing logic to fix error handling (Doug Ledford)
- fix pci_dma_sync_sg() scatterlist arg in megaraid2 driver (Tom Coughlan)
- move more-ptes-in-rmap-pte-chain logic to its own patch (Ernie Petrides)
- tag uses of __GENKSYMS__ with KMI/ABI compat comment (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.15.EL" date="1068804000">- fix MD multipath bugs causing crashes during fail-overs (Doug Ledford)
- add chain_ptep_t and revert pte_addr_t for KMI compat (Ernie Petrides)
- restore sub-timer-tick time-of-day granularity for ia64 (Jason Baron)
- modify agpgart and drm drivers for ia64 HP ZX1 support (John Dennis)
- fix ia64 32-bit emulation for several stat-related calls (Jason Baron)
- enable amd64 use of new ips driver w/config separation (Tom Coughlan)
- update e100 network driver to version 2.3.30-k1 (Jeff Garzik)
- update e1000 network driver to version 5.2.20-k1 (Jeff Garzik)
- apply scsi whitelist updates for IBM/CNSi/NEC devices (Tom Coughlan)
- reenable varyio for aic7xxx driver (hangs were unrelated) (Jeff Moyer)
- conditionalize NVIDIA_NFORCE3 to restore KMI compat (Ernie Petrides)
- prevent two ext3 panics on corrupted filesystems (Stephen Tweedie)
- apply two minor fixes to ppc64 RAS nvram reading (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.14.EL" date="1068717600">- update ServeRAID (ips) driver to version 6.10.52 (Tom Coughlan)
- configure xmon on by default in ppc64 configs (Julie DeWandel)
- create initial s390 zcrypt driver, version 1.1.2 (Pete Zaitcev)
- remove zfcp driver from linux-modules-unsupported (Pete Zaitcev)
- revise ppc64 reliability/serviceability support (Julie DeWandel)
- reduce kernel stack usage inside nfs_readdir() (Steve Dickson)
- add gameport dependency to cmpci driver config (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.13.EL" date="1068631200">- reduce UDP retransmissions and fix slow reads for NFS (Steve Dickson)
- implement wired page lists for better ramfs handling (Larry Woodman)
- fix vfork deadlock when child process causes core dump (Ingo Molnar)
- enhance AltSysRq-M output and fix deadlock potential (Larry Woodman)
- update cmpci sound driver for some HP IPF workstations (Tom Coughlan)
- correct tq_struct struct initialization in tg3 driver (Jeff Garzik)
- fix NFS file attribute inconsistency after rename (Steve Dickson)
- prevent ia64 machine checks w/sysreport on Olympia (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.12.EL" date="1068544800">- redesign refill_inactive_zone() for smarter deactivation (Larry Woodman)
- improve page deactivation scalability w/delayed laundering (Larry Woodman)
- rework locking and timer usage in s390 ctc network driver (Pete Zaitcev)
- allow xmon to be enabled at boot-time for ppc64 debugging (Julie DeWandel)
- reverse kscand's order of anon/cache active list traversal (Larry Woodman)
- force in-lining of br_read/write_lock/unlock routines (Julie DeWandel)
- fix mistaken fall-through cases in s390 chandev driver (Pete Zaitcev)
- make a few exported symbols available to OpenGFS (Stephen Tweedie)
- fix ld/st ordering bug causing lost signal wakeups (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.11.EL" date="1068112800">- make profile=X imply nmi_watchdog=1 and fix NMI w/d bugs (Ernie Petrides)
- add lock init in scsi_get_host_dev() to fix shutdown hang (Doug Ledford)
- enable distributed interrupts by default on ppc64 iSeries (Julie DeWandel)
- improve amd64 reporting of machine check errors (Jim Paradis)
- fix disabling of autonegotiation in tg3 driver (Dave Miller)
- add image name to s390 ioctl32 debug message (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.10.EL" date="1068026400">- fix file lock ownership by NPTL threads to be process-wide (Ernie Petrides)
- upgrade megaraid driver to version 1.18k and fix isr/fw sync (Tom Coughlan)
- upgrade megaraid2 driver to version 2.00.9 and enable varyio (Tom Coughlan)
- improve scsi mlqueue handling to enable BUSY/QUEUE_FULL fix (Doug Ledford)
- correct reporting of i/o errors in ppc64 viodasd driver (Julie DeWandel)
- update acenic driver to handle enabling of jumbo frame mode (Jeff Moyer)
- fix i386 PAGE_NONE bits to prevent get_user_page() hang (Roland McGrath)
- fix ia64 show_mem() handler to use efi_memmap_walk() call (Dave Anderson)
- replace spaces in slabinfo entry name for async poll table (Matt Wilson)
- fix race condition in buffer-head memory footprint patch (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.9.EL" date="1067940000">- improve spec file robustness in %post/%preun stanzas (Florian La Roche)
- add s390x iovec length checking for 32-bit reads/writes (Matt Wilson)
- use highmem for pte/ramfs page allocation w/__GFP_WIRED (Larry Woodman)
- upgrade oprofile support with bug fixes and enhancements (Will Cohen)
- fix infinite recursion in SCSI mid-layer post-processing (Jeff Moyer)
- introduce no-auto-start-on-add handling for SCSI blacklist (Jeff Moyer)
- enable s390 support for blk stats handling for iostat -x (Pete Zaitcev)
- fix LVS timer-related hang from ip_vs_conn_expire() bug (Ernie Petrides)
- correct module init in cpqarray driver to fix insmod crash (Tom Coughlan)
- incorporate ESB PATA support and fix a pirq_routers PCI id (Jeff Garzik)
- fix nfs async write deadlock potential w/nfs_writepage() (Steve Dickson)
- fix SCSI error handling for BUSY queue status messages (Doug Ledford)
- improve ppc64 32-bit ioctl support for use by ethtool (Julie DeWandel)
- add missing unlock in ip_mc_del_src() to fix IGMP deadlock (Dave Miller)
- change ppc64 reporting of floppy capacity to be 1.44 MB (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.8.EL" date="1067421600">- fix up various problems on Nforce3-based amd64 systems (Jim Paradis)
- double number of pte addrs in rmap pte_chain structs (Larry Woodman)
- restrict slab size for kernel data structs to 2 pages (Larry Woodman)
- clean up obsolete quicklist usage for ppc64 pte pages [rejected]
- prevent readdirplus from returning hidden mount points (Steve Dickson)
- prevent lockd deadlocks caused by export table locking (Steve Dickson)
- eliminate use of parallel task_struct init macro on ia64 [rejected]
- fix broken s390x overflow checks with 32-bit F_GETLK use (Matt Wilson)
- fix SCSI errors with "mt stoptions" and IDE tape drives (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.7.EL" date="1067162400">- fix bad checksumming interaction between e100 and bridge (Jeff Garzik)
- prevent system hang by OOM killing when overcommitted (Larry Woodman)
- un-inline ext3 error function to reduce stack usage (Stephen Tweedie)
- fix several ppc64 problems with interrupt handling (Julie DeWandel)
- correct amd64 identification in /dev/oprofile/cpu_type (Jim Paradis)
- move fput() call in do_tty_hangup() to avoid oops w/kon (Alexander Viro)
- eliminate creation of never-used task_struct slab cache (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.6.EL" date="1066903200">- reduce buffer-head memory footprint from read-only files (Ingo Molnar)
- update qeth driver for reduced stack usage and bug fixes (Pete Zaitcev)
- fix s390 qeth driver again to allow tcpdump to function (Pete Zaitcev)
- add exec_mmap() locking to prevent vma lookup races (Ernie Petrides)
- rework RPC slot allocation for further NFS improvements (Steve Dickson)
- reduce frequency of RPC retransmits during NFS writes (Steve Dickson)
- make generic/ext3 file system write handling 64-bit clean (Jeff Moyer)
- allow SMP scheduling rebalancing to occur every 200 msecs (Ingo Molnar)
- prevent races during IPC semaphore set and msg queue removal (Ingo Molnar)
- fix ACPI handling to identify trigger/polarity of PCI IRQs (Jim Paradis)
- correct amd64/ia64 acpi_disabled decls for post-boot access (Jeff Moyer)
- update ppc64 viocons driver with several bug fixes (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.5.EL" date="1066298400">- move fix for PPR use in sym53c8xx driver to its own patch (Ernie Petrides)
- correct pids exported by msgctl/semctl/shmctl/fcntl calls (Ulrich Drepper)
- apply s390 lcs driver wait queue init and locking updates (Pete Zaitcev)
- enable dummy network driver use in generic s390 config file (Pete Zaitcev)
- add missing ptrace hooks for exec and vfork-done events (Bill Nottingham)
- fix SMP timer race that triggered BUG_ON() in add_timer() (Ingo Molnar)
- fix several bogus ipvs boundary checks in ftp module [rejected]
- fix vfsmount queuing in attach_mnt() for CLONE_NEWNS [rejected]
- add net_device check to prevent oops in pppoe driver [rejected]
- fix memory leak in symlink error path of /proc driver [rejected]
- fix overflow in v1_disk2mem_dqblk() quota calculation [rejected]
- increase ppc64 ramdisk size to 8192k in p/iSeries configs (Jeremy Katz)
- lower amd64 TASK_UNMAPPED_32 to increase avail address space (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.4.EL" date="1066039200">- fix ppc64 stack pointer alignment in user signal handlers (Jakub Jelinek)
- increase amd64 exception stack size to 4k to avoid overflow (Jim Paradis)
- fix ppc64 interrupt rate accounting for vmstat and /proc (Julie DeWandel)
- extend amd64 NMI watchdog timeouts to tolerate bad 2nd cpu (Jim Paradis)
- allow s390 dasd driver to use noop elevator module (Pete Zaitcev)
- add free_irq() in error path of olympic token ring driver (Matt Wilson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.3.EL" date="1065866400">- make pid fields in ucred structures hold tgid values (Ulrich Drepper)
- prevent ppc64 iSeries virtual console writes &gt; 4k (Julie DeWandel)
- control ia64 unaligned access messages with new sysctl (Jeff Moyer)
- correct SCSI data direction on cmd to spin up disks (Pete Zaitcev)
- add do_brk() TASK_SIZE and address space wrap checks (Arjan van de Ven)
- limit PPR use in sym53c8xx driver for ppc64 Zapata drives (Doug Ledford)
- list ac97.o, ad1848.o, and cs4232.o modules as unsupported (Jeff Moyer)
- clean up conditional compilation in s390 zfcp driver (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.2.EL" date="1065693600">- identify whether i686 or athlon config in oops output (Arjan van de Ven)
- remove warning in reclaim_page() unmapped page path (Ernie Petrides)
- fix several lvm error handling paths causing memory leaks [rejected]
- correct i386 smp shutdown logic when netdump is enabled (Jeff Moyer)
- fix amd64 potential data leaks on FPU save/restore errors (Jim Paradis)
- prevent aic7xxx chip resets leading to PCI parity errors (Tom Coughlan)
- remove ia64 user tty warning on unaligned accesses (Arjan van de Ven)
- fix ppc64 /proc file buf overruns in viodasd driver (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.1.EL" date="1065607200">- (this is the first build for RHEL 3 Update 1)
- avoid m/ctime update for pipe writes on r/o file systems (Stephen Tweedie)
- prevent theoretical ext3 fs corruption in ext3_read_inode (Stephen Tweedie)
- enable AGRESSIVE_IDLE_STEAL to improve scheduler balancing (Ingo Molnar)
- fix potential ppc64 lock-up on ioctl32 un/reregistering (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.EL" date="1065175200">- extend ppc64 scsi timeout values for Zapata DVD-ROM drives (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-3.EL" date="1063965600">- make sure to release viotape op structure after use (Julie DeWandel)
- disable pgd/pmd quicklists on ppc64 (Mark DeWandel)
- temporarily disable aio on sockets (Jeff Moyer)
- correctly refile inodes to make them reclaimable (Harald Hoyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-2.EL" date="1063792800">- S390: update zfcp and cio drivers (Pete Zaitcev)
- IA64: add extra check to virtual mem_map (Larry Woodman, Dave Anderson)
- initialise local variables in ide-tape &amp; ide-scsi
- cap qla2200 tcq depth to 255
- switch version number scheme to kernel-2.4.21-N.EL</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063706400">- PPC64: invalidate evicted sbl entries in the erat (Julie DeWandel)
- increase ethernet tx_queue_len to 1000 (David Miller)
- in udp_{v6_}flush_pending_frames, reset up-&gt;len too (David Miller)
- S390: CMS reserved minidisk detection (Pete Zaitcev)
- call recount_segments() on a different occasion (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063620000">- really disable exec-shield (Roland McGrath)
- reduce stack randomisation, disable brk randomisation (Ingo Molnar)
- make e1000 driver 64 bit clean (Julie DeWandel)
- minor aio corner case error condition fix (Jeff Moyer)
- AMD64: more lenient check for call workaround (Ernie Petrides)
- PPC64: disable CONFIG_XMON (Mark DeWandel)
- S390: fix CCW slab selection (Pete Zaitcev)
- fix two-disk combined mode sata (Jeff Garzik)
- move buslogic scsi driver to supported, for vmware only (Tom Coughlan)
- change viocons message from KERN_WARNING to KERN_INFO (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063360800">- VM: handle race condition in reclaim_page (Stephen Tweedie, Larry Woodman)
- PPC64: fix "log_buffer broken" xmon issue (Julie DeWandel)
- fix compiler warnings in netdump (Jeff Moyer)
- AMD64: workaround for 32 bit compat mode page fault problem (Ernie Petrides)
- IA64: make perfmon root-only (Jason Baron)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063274400">- fix smp race in rebalance_laundry_zone()</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063188000">- fix compiler warnings when hugetlbfs is disabled (Pete Zaitcev)
- fix tux performance bug (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063101600">- don't evict kernel stack seg translation on ppc64 (Julie DeWandel)
- fix callers of do_page_fault on ppc64 (Mark DeWandel)
- AMD64 munmap return value, fix lsb failure (Jeff Moyer)
- fix for PPC64 32-bit ioctl (Jim Paradis)
- bring IA64 value of MINSIGSTKSZ in line with upstream (Jakub Jelinek)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063015200">- fix potential datacorruptor in viodasd driver (Julie DeWandel)
- fix race condition in s390 dirty bit handling (Pete Zaitcev)
- limit per-cpu slab cache size
- correct 32-bit readv/writev border cases on ppc64 (Matt Wilson)
- AMD Golem IO-APIC fixup for i686 kernel on AMD64 (Jeremy Katz)
- NFS Solaris 8 acl fix (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062756000">- minor nfs permissions bugfix (Steve Dickson)
- change mprotect return value to SuS mandated value (Arjan van de Ven)
- kernel-unsupported now provides kernel-modules (Jeremy Katz)
- correct __hugemem__modules typos in rhkernel.h
- fix subtle pmd corruption error (Larry Woodman, Dave Anderson)
- fix cut'n'paste error in SATA io port reservation
- restore NFSEXP_CROSSMNT ABI compatibility (Steve Dickson)
- round up executable name field length in core file (Jakub Jelinek)
- switch off exception_trace on amd64 (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062496800">- patch to access odd last sector on ia64 (Jason Baron)
- misc fixes from upstream (Arjan van de Ven)
- fix audigy driver (Jeff Garzik)
- tunable dcache reclaim priority for tux (Ingo Molnar)
- tg3 driver update (Jeff Garzik)
- ipv6 and icmp network bugfixes (David Miller)
- fix ppc64 memory access security bug (Julie DeWandel)
- reduce memory allocated for skb (Ingo Molnar)
- small smp fix for scalable timers (Ingo Molnar)
- make s390 recognise MSDOS partitions (Pete Zaitcev)
- small smp fixes in tux (Ingo Molnar)
- make mptfusion drivers supported on 4/4 split kernel (Tom Coughlan)
- add entries to scsi whitelist (Tom Coughlan)
- minor sata/ata driver updates (Jeff Garzik)
- small fixes to viodasd driver (Julie DeWandel)
- nfs_get_root and nfs access bit patches (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062064800">- don't show interrupts in /proc/stat for ppc64 (Matt Wilson)
- make sure sync returns in a reasonable time
- PPC64: fix for boot cpu not being cpu 0 (Julie DeWandel)
- zero sized write no longer updates mtime (Matt Wilson)
- fix video bios read corruption on ia64 (Larry Woodman)
- network fixes to tg3, bonding (Jeff Garzik)
- properly reserve legacy IDE regions in sata driver (Jeff Garzik)
- fix ppc64 signal handling bugs (Mark DeWandel)
- tux fixes (Ingo Molnar)
- tgkill syscall for s390(x) (Pete Zaitcev)
- amd64 32 bit compatibility fixes (Jim Paradis)
- ppc64 32 bit compatibility fixes (Julie DeWandel)
- fix 4G/4G follow_page problem (Ingo Molnar)
- reduce memory used by VMAs and dentries (Arjan van de Ven)
- make LVM snapshotting of ext3 work reliably (Stephen Tweedie)
- make netdump play better with the nmi watchdog (Jeff Moyer)
- QLA2200: disable irq mitigation, fix off-by-one (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061805600">- seq_file /proc/interrupts for x86 too (Ingo Molnar)
- fix memory leak in ia64 exec of ia32 binaries
- check tgid not pid in scm_check_creds()  (David Miller)
- VM fixes: shm swap priority, zeromap_page_range
- workaround VFS limitations for VXFS NFS export</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061546400">- use personality for 3GB userspace on x86 -hugemem (Ingo Molnar)
- add sysctl interface for lockd (Steve Dickson)
- don't prod VGA space on HP Pinnacle systems (Larry Woodman)
- fix for 32 bit binaries on amd64 (Jim Paradis)
- add preemption point to write_some_buffers (Julie DeWandel)
- sort ACPI table to get correct device ordering on HP (Larry Woodman)
- fix refcounting bug with ipv6 addresses on netdevs (David Miller)
- add s390 syscalls for tux (Pete Zaitcev)
- md multipath enablers (Doug Ledford)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061460000">- fix process and nice time accounting (Doug Ledford)
- amd64: syscall table updates, timer robustness (Jim Paradis)
- amd64 3GB personality for 32-bit processes (Jim Paradis)
- use 256MB pagesize for hugetlbfs on ia64 (Larry Woodman)
- make sure e100 only claims ipv4 checksumming
- igmpv3/mldv2 OOPS'er fix (David Miller)
- hugetlbfs: make chown work and allow uid=X,gid=Y mount options
- make larger mmap windows work (Ernie Petrides, Ingo Molnar)
- ia64: improve ia32 compatibility (Larry Woodman)
- fix bug in rpc retry code (Steve Dickson)
- make acpi pci hotplug modulable (Jeff Moyer)
- update (trivial) to megaraid 1.18j (Tom Coughlan) 
- enable varyio on mptfusion (Tom Coughlan)
- panic on oops to prevent data corruption opportunities (Ernie Petrides)
- small iorl locking fix (Doug Ledford)
- fix ppc64 get_wchan() bad deref (Mark DeWandel)
- fix aio read into mmap()d PROT_WRITE (Jeff Moyer, Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061373600">- libata update (Jeff Garzik)
- amd64 syscalls for xattrs &amp; ACLs (Jim Paradis)
- tux fixes (Julie DeWandel, Ingo Molnar)
- via &amp; i810 audio fixes (Jeff Garzik)
- small 4G/4G split bugfixes (Ingo Molnar)
- fix sigsuspend race on x86, amd64, ia64 (Mark DeWandel)
- ia32 behavior for FP denormal exceptions on ia64 (Jason Baron)
- get the set/get of NAT bits for ia64 correct (Jason Baron)
- ipsec update, adds cast6 encryption (David Miller)
- VM update: OOM bugfix &amp; page-&gt;flags atomic updates (Rik van Riel)
- reenable serpent encryption on ppc64
- bladecenter usb-ohci support (Pete Zaitcev)
- iorl fixes (Doug Ledford)
- network bonding driver oops fix (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060768800">- DAC960 back to bigmem supported, ne2k-pci &amp; usb audio to bigmem unsupported
- netdump updates for tg3 and e1000 (Jeff Moyer)
- put a hole between stack and mmap area (Ernie Petrides)
- process time accounting updates (Doug Ledford)
- fix null characters in TUX header (Julie DeWandel, Ingo Molnar)
- display correct executable when running interpreted script
- zfcp zSeries fibrechannel driver (Pete Zaitcev)
- ipsec updates (David Miller)
- fix 4G/4G race conditions (Ingo Molnar)
- rename -bigmem kernel to -hugemem to reflect changed tradeoffs
- optionally show task states from hangcheck timer (Jason Baron)
- various small bugfixes from upstream</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060423200">- fix scalable timer race condition  (Julie DeWandel, Ingo Molnar)
- print warning on boot with &gt;16GB RAM on -smp kernel (Arjan van de Ven)
- fix for xapic issue with ServerWorks chipsets (Ernie Petrides)
- remove spurious ioctl printk on ppc64 (Mark DeWandel)
- ppc64 wchan improvement (Mark DeWandel)
- hint @pause changes for ia64
- longer scsi scan timeout on ppc64 (Julie DeWandel)
- readv/writev for raw IO (Stephen Tweedie)
- fix for easy stack/mmap collisions (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060164000">- various XAPIC related fixes (Ingo Molnar)
- correct context switch and iowait stats with HT shared runqueues
- ext3 obscure deadlock fixes (Stephen Tweedie)
- knfsd fixes: blocked lock, symlink error &amp; missing bkl  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060077600">- de_thread bugfix from 2.6 upstream  (Matt Wilson)
- viocons driver update (Julie DeWandel)
- fix VM non-overcommit mode (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059991200">- plug data leak in aio code (Jeff Moyer)
- initial list of 4G/4G unsupported modules (Tom Coughlan)
- nfs softirq race fix (Steve Dickson)
- updated IPSEC patch (David Miller)
- networking updates/fixes from 2.4.22-preX (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059904800">- drop orlov allocator for now (Arjan van de Ven)
- correct HT cpu pair detection (Arjan van de Ven)
- build zImage.partial for netbooting on pSeries (Matt Wilson)
- fix missing symbols</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059818400">- export two AIO symbols for OCFS
- disable CONFIG_DEBUG_SLAB so performance testing can start
- crosshost mmap hooks for distributed filesystems (Stephen Tweedie)
- include partially linked zImage for pSeries netboot (Matt Wilson)
- nfs highmem fix, unmap when xdr_kmap() fails (Steve Dickson)
- update megaraid2 locking to work with IORL (Com Coughlan)
- make sure to build the qla2100 driver (Tom Coughlan)
- fix cdrom ioctl 32 bit compatibility for ppc64, amd64 (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059645600">- run depmod on install of unsupported modules (Arjan van de Ven)
- fix register corruption in IA64 lazy fpu handling (Larry Woodman)
- add b44 network driver (Jeff Garzik)
- make ppc64 pci interface routines compatible (Julie DeWandel)
- allow 32 bit userland on AMD64 and PPC64 to use volumes &gt; 2GB (Jeff Moyer)
- nfsd: acl related mount and export flags (Steve Dickson)
- fix nfs exp_fodrop oops (Steve Dickson)
- fix missed signal wakeups on ppc64 (Mark DeWandel)
- smp scalable timer bugfixes (Ingo Molnar)
- workaround for a prefetch bug in some Athlon CPUs (Ernie Petrides)
- code to make more modules unsupported for 4/4 split (Arjan van de Ven)
- various spec file and config cleanups
- viopath driver fix (Julie DeWandel)
- add match for 440gx chipset bioses (Arjan van de Ven)
- move epic100 and ne2k-pci back to supported (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059472800">- updated finegrained process accounting patch (Doug Ledford)
- make iSeries compile without CONFIG_ICOM (Julie DeWandel)
- nfsd: only set -&gt;reuse for tcp sockets, not udp  (Steve Dickson)
- enable the 4G/4G split on the i686-bigmem kernel only
- sysrq support for viocons (Julie DeWandel)
- limit pci_bus size changes to ppc64 (Jeff Garzik)
- fix for signal delivery race (Ernie Petrides, Mark DeWandel)
- add ShdPnd to /proc (Ingo Molnar)
- fix de_thread() hang (Ingo Molnar)
- add kernel support for CLONE_STOPPED (Ernie Petrides)
- make sure to initialise HVC console (Julie DeWandel)
- fix _SEG abort hit in ACPI code (Larry Woodman)
- build addon drivers on amd64 and ppc64 too (Tom Coughlan)
- build IPS driver on all architectures (Tom Coughlan)
- fix a few ia32 emulation bugs for IA64 (Larry Woodman)
- enable correct/new __clear_bit macro for IA64 (Larry Woodman)
- flexible mmap allows mappings of huge executable segments (Larry Woodman)
- sysrq-w for s390 (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058436000">- have s390 cpu_relax() also include barrier  (Pete Zaitcev)
- convert ppc64 xmon traceback code to ksymoops (Matt Wilson)
- rename kstat_sum() variable with aliasing problems  (Ingo Molnar)
- fix AIO-on-hugetlbfs crash (Ingo Molnar)
- update support for IA64 Long's Peak ACPI serial ports  (Larry Woodman)
- turn on xmon for both iSeries and pSeries (Matt Wilson)
- bugfix to make CLI work correctly on iSeries (Julie DeWandel)
- SATA bugfixes (Jeff Garzik)
- enable 4G/4G split in -BOOT kernel, due to syslinux trouble</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058349600">- fix s390 compile (Pete Zaitcev)
- taint the kernel on sii6512 driver link, GPL but no source available
- handle debug registers with 4G/4G split (Ingo Molnar)
- tgkill syscall for ppc64 (Julie DeWandel)
- fix NFSD/ACL/ext3/jbd deadlock (Stephen Tweedie, Steve Dickson)
- fix maxcpus=1 installation panic fix for ppc64 (Julie DeWandel)
- IDE byteswapping io functions for ppc64 (Julie DeWandel)
- update sata driver (Jeff Garzik)
- raise the number of /proc entries (Julie DeWandel)
- sticky sysrq key with timeout (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058263200">- make SysRq-W useable on s390 (Pete Zaitcev)
- updated process accounting patch (Doug Ledford)
- siginfo_t fixes for s390x and amd64 (Jakub Jelinek)
- clustered NFS fail-over support (Steve Dickson)
- autofs4 updates and fixes
- ia64 patches to reduce cpu power/temp in idle loop (Larry Woodman)
- add irqsafe up() for LVM locking (Stephen Tweedie)
- O_DIRECT fallback to synchronous allocation in holes (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058176800">- ia64 HP iommu: add sx1000 detection
- possible bug in s390x 32-bit emulation  (Roland McGrath)
- updated ipsec patch, should fix all current ipv6 bugs  (David Miller)
- finegrained process accounting (Doug Ledford)
- ICH5 pci irq routing, and associated ids (Jeff Garzik)
- fix the machine_real_restart() reboot path on 4G/4G (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057917600">- fix amd64 agp-gart code to work around hugetlbfs debug code (Jim Paradis)
- fix ppc32 pthread_cancel (Jakub Jelinek) 
- Do not sent IGMP leave messages unless IFF_UP  (David Miller)
- software iommu for ia64 systems without hardware iommu (Jason Baron)
- fix ext3 oops fix during dio, LTP failure (Arjan van de Ven, Stephen Tweedie)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057831200">- Remove illegal calls to dst_link_failure</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057831200">- enable HT scheduler for bigmem kernel
- add tgkill syscall for x86 and ia64
- make -BOOT kernel smaller w/ modular md and CONFIG_SMALL
- rmap VM updates
- 4G/4G agpgart potential corruption fix (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057744800">- switch off exec shield everywhere
- eliminate hostfs for amd64 (Jim Paradis)
- megaraid update, mostly vendor ID (Tom Coughlan)
- shrink boot kernel by disabling some config options
- additions for the SCSI whitelist (Tom Coughlan)
- ia64 extable fix (Jason Baron)
- viocons driver upgrade (Julie DeWandel)
- another ia64 mmu context wraparound deadlock fix (Larry Woodman)
- iSeries icom debugger patch (Julie DeWandel)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057658400">- Drop io_request_lock in usb scsiglue.c:device_reset</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057658400">- fix cpu_relax for amd64 and ia64 to include a barrier (Ingo Molnar)
- restore o_direct api compatibility (Stephen Tweedie)
- fix possible ext3 deadlock in o_direct patches (Stephen Tweedie)
- ACLs for JFS (Stephen Tweedie)
- fix /proc/cpuinfo runqueue printing (Ingo Molnar)
- via audio fixes, smaller emu10k1 patch (Alan Cox, Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057572000">- fix process accounting, tux ftp passwords and si_pid (Ingo Molnar)
- 32bit compat statfs fix (Guy Streeter)
- don't serialise exit on BKL when accounting is off (Ingo Molnar)
- truncate timeouts to 32 bits on 64bit systems (Ingo Molnar)
- fix network channel bonding (Jeff Garzik)
- split netdump patch into core and net-drivers (Jeff Garzik)
- delayed tlb flushing for ia64 (Larry Woodman)
- emu10k1 driver fixes
- kksymoops for AMD64 (Jim Paradis)
- select bugfixes from 2.4 upstream (Jeff Garzik)
- OOM tweaks (Rik van Riel)
- use seq_file for /proc/interrupts on ppc64 (Mark DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057140000">- add qdio and qeth drivers for s390(x)  (Phil Knirsch)
- slab cache scale bugfix (Larry Woodman)
- S390: qdio &amp; qeth drivers (Phil Knirsch)
- hangcheck timer for ppc64 (Julie DeWandel)
- fix race conditions in ia64 ia32 compat layer (Larry Woodman)
- update megaraid, aic7xxx, cciss and cpqarray drivers (Tom Coughlan)
- nfs xdr_shift_buf, tcp client corruption and alignment (Steve Dickson)
- rhconfig.h stuff for ppc64, s390 and s390x (Matt Wilson)
- AIO on sockets</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057053600">- kiobuf optimisations (Stephen Tweedie, Larry Woodman)
- ipsec update (David Miller)
- ipvs update to deal with timer changes (David Miller)
- 4G/4G split patch optimisations (Ingo Molnar)
- hangcheck timer (Jason Baron)
- recent (AGP 3.0) agpgart support (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056967200">- semtimedop() support on s390/s390x  (Ernie Petrides)
- fix a 4G bug that triggers on systems with &gt;30 CPUs (Ingo Molnar)
- updated SCSI SMP affine queueing patch  (Arjan van de Ven)
- page hash prefetch in do_generic_file_read bugfix (Julie DeWandel)
- updates the qlogic driver to the latest (Arjan van de Ven)
- slab cache SMP scalability tweaks (Ingo Molnar)
- ACPI 2.0 for IPF and AMD64 (Jim Paradis, Larry Woodman)
- statm fixes for hugetlbfs and remap_file_pages (Jason Baron)
- acpi serial port detection (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056708000">- iseries driver updates (Julie DeWandel)
- aio scalability and 2.5 backports  (Ingo Molnar)
- SMP scalable timers (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056621600">- make qlogic driver use new scsi infrastructure (Arjan van de Ven)
- export aio kvec functions
- fix statm oops
- compile fixes 
- NFS ACL over the wire protocol extensions (Steve Dickson)
- rate limit slab pruning, to limit IPI load on SMP systems (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056448800">- scsi request lock scaling (Ingo Molnar)
- cpu affinity for scsi command processing (Ingo Molnar)
- use softirqs instead of bhs for the scsi layer (Doug Ledford)
- igmpv3 fixes and improvements (David Miller)
- oprofile for ppc64 (Will Cohen)
- Increase MAX_ADDR_LEN from 8 to 32 for Infiniband over IP (Tom Coughlan)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056362400">- per-cpu kstat arrays (Ingo Molnar)
- optimise 4G/4G tlb flushing (Ingo Molnar)
- kiobuf reclaim together with buffer reclaim (Arjan van de Ven)
- more scalable gendisk statistics (Ingo Molnar)
- nfs reconnect fixes (Steve Dickson)
- add 32-bit compatibility for ustat system call on ppc64 (Julie DeWandel)
- scalable gettimeofday (Ingo Molnar)
- hugetlbfs ppc64 &amp; s390 bits (Mark DeWandel, Pete Zaitcev)
- hugetlbfs for ia64 (Jason Baron)
- qlogic scsi driver update (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056189600">- nfs patches (Steve Dickson)
- xapic improvements, summit support (Ingo Molnar)
- fix core dump name for multithreaded programs (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056103200">- merge up to marcelo's latest</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056016800">- oom killer fixes (Larry Woodman, Rik van Riel)
- tunable VM overcommit (Rik van Riel)
- hugetlbfs for amd64 (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055930400">- updated iseries virtual drivers (Julie DeWandel)
- nfs lockd improvements (Steve Dickson)
- remap_file_pages improvements (Ingo Molnar)
- /proc/efi/symtab patch for ia64 (Larry Woodman)
- disable O_PROFILE on UP x86 machines
- allow NMI watchdog profiling frequencies up to 10kHz (Ingo Molnar)
- statm (Jason Baron)
- hugetlbfs (Ingo Molnar)
- have nfsd honour ACLs on a per-export basis (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055844000">- Enable O_PROFILE on non-SMP configs (Stephen Tweedie)
- more conservative AIC config options
- Fix BOOT kernel panic while mounting /dev/cdrom (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055757600">- merge to 2.4.21 + selected ac bits
- ipsec upgrade (David Miller)
- HT scheduler patch fix (correct sibling counting)
- make bdflush writeout smoother
- AMD64 gdb fix (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055412000">- don't include unsupported drivers in -BOOT kernel
- merge up to 2.4.21-rc8 + selected ac bits
- FIXME: sysrq for 3170, dasd, odirect &amp; odirect for nfs</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com" date="1055412000">- oprofile for s390</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055239200">- statm (Jason Baron / Julie DeWandel)
- AIO 32-bit compat for 64-bit machines (Julie DeWandel)
- only do bufferhead reclaim in extreme situations (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055152800">- Serial ATA support (Jeff Garzik)
- mtp fusion 2.05.05+ (Dave Maley)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054893600">- XATTR/ACL patches, except NFS over the wire (Stephen Tweedie)
- ipsec module autoloading (David Miller)
- remap_file_pages (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054807200">- upgrade to latest -rmap with Ernie's fixes
- sysrq+C shows the stack dump of all CPUs
- ext3 truncate fix (Stephen Tweedie)
- NFS fixes for HZ=1000 machines (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054720800">- 4G/4G split fix (Ingo Molnar)
- ppc64 fixes (Guy Streeter, Rik van Riel)
- enable oprofile on amd64
- ipsec updates (David Miller)
- fork returns pid instead of task_struct* (Julie DeWandel)
- ia64 ptrace bugfixes (Dave Anderson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054634400">- HP diva serial driver (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054548000">- NFS over TCP patches (Steve Dickson)
- switch to using ppc64pseries/ppc64iseries arches instead of
  kernel-pseries and kernel-iseries (Jeremy Katz)
- egenera scsi bus rescan patch (Jeff Garzik)
- oprofile (Graydon Hoare)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054288800">- futex requeue (Ingo Molnar)
- enable NAPI for E1000
- signal latency and scheduler improvements (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054202400">- kscand oops fix (Ingo Molnar, Rik van Riel)
- pcnet32 fixes (Julie Dewandel)
- raid autorun (Pete Zaitcev)
- turn off CONFIG_SUNDANCE_MMIO (Jeff Garzik)
- flexible mmap (Larry Woodman)
- ppc64 fixes (Matt Wilson, Guy Streeter)
- loop softirq 10 times before giving up (Ingo Molnar)
- O_DIRECT for NFS (Steve Dickson)
- prevent md from shutting down active arrays (Doug Ledford)
- rmap updates, inode reclaim &amp; higher order allocations (Rik van Riel)
- network channel bonding (Jeff Garzik)</changelog><changelog author="Jim Paradis &lt;jparadis@redhat.com&gt;" date="1054116000">- Re-enable x86_64 in build
- x86_64-specific updates for exec-shield
- Bring in improved "nonx" support for x86_64 from upstream</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1054116000">- Hush s390 printks upon user SIGSEGV by default. It can be enabled back with
  a sysctl kernel.userprocess_debug.
- Enable optional 3270 console mode on s390.</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053684000">- get rid of vsyscall page (Arjan van de Ven)
- fix missing symbol copy_str_fromuser_size</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053424800">- exec-shield updates to fix hang-on-boot on some systems (Ingo Molnar)
- temporarily disabled the architectures, which got broken by exec-shield updates
- fix for LTP sigprocmask02 failure (Matt Wilson)
- ppc64 updates (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053338400">- pagecache scalability patch (Ingo Molnar)
- IPC semaphore scalability patch (Ingo Molnar)
- ppc64 updates (Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052992800">- exec-shield (Ingo Molnar)
- AMD64 ACPI updates (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052906400">- reenable O_DIRECT, O_DIRECT fixes and superbh-aio (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052820000">- vma merging (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052733600">- nmi profiler
- VM updates: rmap, dma zone isolation
- tux (Ingo Molnar)
- ext3 stall fixes (Ingo Molnar)
- e1000 fixes (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052474400">- config files overhaul (Arjan van de Ven)
- fix bug in mlock patch
- IPVS (Dave Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052388000">- import IO elevator changes from gingin
- critical VM fix
- matrox framebuffer patch for pseries (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052301600">- hammer nptl fixes (Ulrich Drepper)
- 4G/4G split (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052215200">- upgrade to 2.4.21-rc1-ac4 (minus -ac acpi and xapic changes)
- drop nfs patches since those seem to be in -ac</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052128800">- larger message buffer size + boot option (Mark DeWandel)
- AMD64: tls handling, coredump fixes (Jim Paradis)
- SMP &amp; highmem VM fixes (Ben LaHaise)
- HT+NUMA scheduler (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051956000">- ext3 orphan cleanup fix (Ernie Petrides)
- s390 affinity fixes (Pete Zaitcev)
- i386 vsyscall DSO changes (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051869600">- bugfixes and config changes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051783200">- enable semtimedop for other architectures (Ernie Petrides)
- large pci bus numbers (Julie DeWandel)
- bugfixes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051610400">- igmpv3 (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051524000">- generic 32bit compat stuff + amd64/ppc64/ipf pieces (Matt Wilson)
- clustered apic (XAPIC) support (Ingo Molnar)
- ppc64 architecture updates (Matt Wilson, Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051264800">- ppc64 fixes</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051178400">- collapse ipsec into one patch (David Miller)
- ppc64 build fix (Matt Wilson)
- improve smp scheduler fairness (Ingo Molnar)
- allow mlock for normal users, up to ulimit (Ingo Molnar)
- AMD64 port (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051092000">- clean up mechanism to pass extra CFLAGS so we don't override what's
  already there
- merge ia64 build stuff (Larry Woodman)
- merge varyio + superbh (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051005600">- merge up to 2.4.21-rc1
- IA64: virtual mem_map, acpi updates, netdump update, pte-highmem &amp; fealnx
- IA64: architecture specific patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050919200">- import davem's ipsec patch pile
- ppc64 kallsyms and dump_fpu patches (Matt Wilson)
- rmap updates (x86_64 &amp; bufferhead reclaim)
- ppc64 ptrace patch (Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050660000">- open up patch namespace 2000-5000 for network protocol changes
- renumber existing patches in that range</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050573600">- make sure to actually apply the rmap-updates patch
- iowait statistics
- ppc64 code merge (Mark &amp; Julie DeWandel)
- ppc64 build scripts (Matt Wilson)
- raise symlink recursion level to 8 (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050487200">- merge up to marcelo's latest
- pte-highmem bits for x86-64 and ppc64</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050400800">- merge up to 2.4.21-pre7-ac1
- drop semtimedop patches (now in -ac)
- drop nfs xprt_fixes, fix_softirq, d_drop and nfs-readeof (merged in -pre7)
- add !CONFIG_QUOTA compile fix for 2.4.21-pre7-ac1</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1050314400">- add LCS driver (endemic to s390)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050314400">- add rmap VM
- add kunmap_atomic debugging patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050141600">- remove dir.c part of NFS kmap_atomic patch for now
- using strlen as local variable name in nfs code kills, literally</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050055200">- merge S390(x) back in  (Pete Zaitcev)
- fix NFS kmap_atomic patch
- sched.c patch to disable interrupts in wake_forked_task  (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049968800">- AIO infrastructure  (Ben LaHaise)
- update NFS kmap_atomic patch  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049882400">- semtimedop patches  (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049796000">- I know understand linux-2.4.20-nfs-readeof.patch, so I merged it
- netdump update (Dave Anderson)
- 64 bit pci &amp; elf loader fix (Mark &amp; Julie)
- nptl whitespace patches, folded into nptl patch (Arjan van de Ven)
- rediff linux-2.4.18-smallpatches.patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049709600">- merge NFS patches by Steve Dickson (blame me for NFS kmap_atomic patch)
- split x86 syscall stuff out into separate patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049536800">- fix nptl patch, now it boots</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049450400">- port linux-2.4.20-o1-nptl.patch from gingin
- rediff a few patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049277600">- update linux-modules-unsupported (with Arjan)
- fix up the list a second time to fix module dependencies</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049191200">- copy -head into new AS3 branch
- remove i586 build
- remove 7.x compatibility (linux-2.4.9-fstat.patch)
- architecture patches get more breathing room (100 - 500)
- reserve patch numbers 1000 - 2000 for VM
- patch numbers 2000 - 5000 for bugfixes, changes and updates to
  existing drivers and filesystems
- remove inode reclaim patch (will be merged later as part of rmap)
- remove io priority scheduler (still experimental)
- remove nfs patches (linux-2.4.20-nfs-cto.patch,
  linux-2.4.20-nfs-access.patch &amp; linux-2.4.20-nfs-rdplus.patch)
- remove linux-2.4.18-gericom.patch
- update netdump from RH9 branch</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1048240800">- Added three NFS performance patches</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048240800">- add a timer for aging requests up</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048154400">- fix the sorting in the io elevator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048068000">- remerge ext3 orlov allocator and enable
- more priority io elevator infrastructure work</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1047117600">- merge ext3 orlov allocator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046772000">- go to 2.4.21-pre5-ac1
- split the rpm into a primary fileset and secondary (rare modules) fileset</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046253600">- go to 2.4.21-pre4-ac6
- drop lots of patches
- trim changelog to not have 2000, 2001 and 2002 anymore</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045476000">- downgrade pwc webcam driver one notch to the last known working version
- work around vm livelock
- make the cciss driver not enable irq's in it's irq handler</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1045130400">- fix for shared statistic &lt; 0</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045130400">- Signal fixes for LSB testsuite
- merge patch to fix init=/bin/sh
- 2.4.21-pre4-ac4 bugfixes (mostly IDE crashes)</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044784800">- merge 2.4.21-pre4-ac3 bugfixes</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1044352800">- Add ext3 fix for truncating negative i_blocks</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1044266400">- add oopsmeharder for debugging hard hangs</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044266400">- merge rmap15d
- set the sbp2 command buffer to 64 elements instead of 8</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1043834400">- merge tcp stall fix from DaveM
- merge bugfixes from 2.4.21-pre4</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1042452000">- Merge in the ACL and XATTR patches from the UL and BestBits trees.</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1042279200">- Merge in the LVM pvmove fix to current tree</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1042020000">- add AMD Golem fixup</changelog></package>
<package pkgid="d3176ad9bd85f2655b68e8adfcafd51e64a8c5d6" name="libattr" arch="x86_64"><version epoch="0" ver="2.4.16" rel="1"/></package>
<package pkgid="54a537e16e3cf383e8778c4c9dd1fc4f959fc188" name="kernel-smp" arch="x86_64"><version epoch="0" ver="2.4.21" rel="37.EL.XFS"/><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1128420000">- added SGI XFS patch set</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-37.EL" date="1126087200">- fix latent sendmsg() cmsghdr32 bug exposed in -36.EL (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-36.EL" date="1125655200">- fix sync() hangs from NFS file create/delete races (Steve Dickson)
- add support for HP Smart Array E400i in cciss driver (Tom Coughlan)
- defend against cmsghdr32 changes in sendmsg() handling (Dave Miller)
- correct OpenIPMI module version strings (v35 -&gt; 35.4) (Brian Maly)
- fix intermittent build failures under lpfc subdir (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-35.EL" date="1124445600">- disable FAN processing in Emulex driver (7.3.2) (Tom Coughlan)
- update cciss disk driver to version 2.4.58.RH1 (Tom Coughlan)
- update SCSI whitelist for EMC Invista devices (Tom Coughlan)
- fix diskdump regression w/module CRC errors (Nobuhiro Tachino)
- update SCSI whitelist for IBM ULT3580 TapeLibrary (Wendy Cheng)
- fix f/w upgrade hang, dmi_table bug in IPMI (Peter Martuccelli)
- fix x86_64 machine check regression from -32.10.EL (Brian Maly)
- validate XFRM policy in IPSEC setsockopt() calls (John Linville)
- fix intr kiobuf_init() regression from -32.11.EL (Larry Woodman)
- fix pollcomplete error in cciss diskdump support (Tom Coughlan)
- enforce CAP_NET_ADMIN perms for policy creation (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-34.EL" date="1122544800">- fix O_SYNC EIO error propagation through ext3/jbd (Stephen Tweedie)
- add support for Enterprise Southbridge II (ESB2) (Geoff Gustafson)
- implement devname callback for block device drivers (Doug Ledford)
- upgrade SATA support (core, libata, and drivers) (Jeff Garzik)
- add ia64 export of (*pm_power_off)() for IPMI (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-33.EL" date="1121767200">- update 3w-9xxx driver to version 2.24.03.008RH (Tom Coughlan)
- revise reserved port avoidance added in -32.8.EL (Steve Dickson)
- update OpenIPMI driver/configs to version v35 (Peter Martuccelli)
- add handling for NEC vendor ID in megaraid2 driver (Tom Coughlan)
- update SCSI whitelist for 3PARdata/Dell/SGI devices (Tom Coughlan)
- add support for netdump over bonded interfaces (Jeff Moyer)
- implement diskdump support for cciss devices (Tom Coughlan)
- add x86_64 ACPI Power Management timer support (Jim Paradis)
- add dual-core support on x86 and x86_64 arches (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.12.EL" date="1121421600">- constrain x86_64 MSR writes based on cpu model (Larry Woodman)
- correct smbfs mounts to support 32-bit uids/guids (Peter Staubach)
- eliminate long system pauses when kscand is running (Larry Woodman)
- update Emulex driver to 7.3.1, ioctl module to 1.2.1 (Tom Coughlan)
- update QLogic driver to 7.05.00-RH1 (w/new firmware) (Tom Coughlan)
- prevent ext3 EA/ACL block sharing/deletion races (Stephen Tweedie)
- fix dpt_i2o insmod oops during adpt_info() lookup (Neil Horman)
- fix dpt_i2o timeouts during long tape commands (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.11.EL" date="1121248800">- downgrade blk_queue_bounce_limit() msg to KERN_INFO (Neil Horman)
- update cciss disk driver to version 2.4.56.RH1 (Adam Manthei)
- update mptfusion driver to version 2.06.16i.01 (Tom Coughlan)
- prevent expand_kiobuf() calls during interrupts (Larry Woodman)
- update iscsi_sfnet driver to version 3.6.2.1 (Mike Christie)
- account for system ticks in ITIMER_PROF sig delivery (Don Howard)
- correct superbh ptr arg to superbh_will_bounce() (Stephen Tweedie)
- fix ext3 symlink perms created w/i386-BOOT kernels (Stephen Tweedie)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.10.EL" date="1121076000">- prevent bogus GART errs from amd64 Northbridge handling (Brian Maly)
- get correct link status in b44 driver's open routine (John Linville)
- check for missing EM64T support for better panic msg (Ernie Petrides)
- fix ref counting bug in x86[_64] __change_page_attr() (Dave Anderson)
- fix memory leak in success path of sys_init_module() (John Linville)
- add ia64 ptrace/sigreturn RSC reg priv level validation (Jason Baron)
- prevent connection list corruption in ip_vs_conn_flush() (Neil Horman)
- limit arg/env ptrs for x86_64/ia64 32-bit-compat execs (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.9.EL" date="1119002400">- fix crashes from failed ACPI root bus additions (Jim Paradis)
- correct insufficient lock owner checks in DRM code (Don Howard)
- add missing sanity checks in Coda ioctl handling (Alexander Viro)
- fix autofs errors with ghosting and expire event races (Jeff Moyer)
- reset ppc64 signal handler correctly for SA_ONESHOT (David Howells)
- store prev user stack pointer in ppc64 signal frames (David Howells)
- fix kernel_lock deadlock between sd_open()/sd_ioctl() (Larry Woodman)
- add ht flag in /proc/cpuinfo for EM64Ts w/hyperthreading (Brian Maly)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.8.EL" date="1118743200">- update e100 network driver to version 3.4.8-k2 (John Linville)
- preserve x86_64 32-bit-compat ptrace reg changes (Roland McGrath)
- add missing x86_64 support for PTRACE_SETOPTIONS (Roland McGrath)
- avoid using reserved ports for portmapper connections (Steve Dickson)
- prevent non-canonical %rip in x86_64 ptrace reg mods (Jim Paradis)
- prevent invalid fs/gs_base in x86_64 ptrace reg mods (Ernie Petrides)
- improve ISO-9660 fs robustness against bad CD formats (Peter Staubach)
- correct __get_user_pages() ref counting w/PG_reserved (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.7.EL" date="1118224800">- fix IPV6 isRouter flag and default router list handling (John Linville)
- eliminate unexpected IO-APIC msg from x86 kernel on amd64 (Jim Paradis)
- switch to reg stack on user-mode x86_64 stk seg faults (Dave Anderson)
- fix two time-related problems in the netconsole module (Dave Anderson)
- remove microcode.o from x86 hugemem unsupported list (Ernie Petrides)
- fix x86_64 committed space accounting w/overcommit=2 (Larry Woodman)
- enforce page locking resource limit in expand_stack() (Jason Baron)
- fix SCSI command block leak w/off-line non-zero LUNs (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.6.EL" date="1117533600">- fix races between POSIX locking and file closes (Peter Staubach)
- update tg3 network driver to version 3.27RH (John Linville)
- add ia64 frame size validation in syscall handling (Jason Baron)
- prevent info leaks into JFS metadata disk blocks (Stephen Tweedie)
- fix ext2 fast-symlink/EA compatibility problem (Stephen Tweedie)
- add x86_64 32-bit-compat SO_{SND,RCV}TIMEO support (Guy Streeter)
- add piix driver PCI device ids for ICH4-L support (John Linville)
- validate "ndigis" value in addition of ROSE routes (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.5.EL" date="1117101600">- update e1000 network driver to version 6.0.54-k2 (John Linville)
- fix arp_ip_traget failover with bonding driver mode 1 (Eric Paris)
- prevent indefinite postponement under __alloc_pages() (Ernie Petrides)
- capture ia64 reg state on all cpus for OS_INIT dumps (Nobuhiro Tachino)
- add documentation listing which drivers support netconsole (Jeff Moyer)
- fail opens of removable media drives if media not present (Pete Zaitcev)
- fix x86_64 find_target() oops in 32-bit-compat ptrace() (Ernie Petrides)
- prevent info leaks into ext2 directory entry blocks (Stephen Tweedie)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.4.EL" date="1115978400">- limit concurrent OOM kills using /proc/sys/vm/oom-kill (Ernie Petrides)
- rework ppc64 wchan fix to avoid module install crashes (David Woodhouse)
- fix diskdump signature check failures w/block_order=8 (Nobuhiro Tachino)
- fix data corruption from pte_clear() races on &gt;4GB x86's (Larry Woodman)
- avoid s390,x kernel stack overflows in network ctc driver (Pete Zaitcev)
- add description of /proc/stat to file system documentation (Brian Maly)
- avoid inode races in __refile_inode() and clear_inode() (Larry Woodman)
- fix arg/env access in ELF core dumping and /proc reads (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.3.EL" date="1115200800">- remove extra chars from scsi_logging_level mod param (Ernie Petrides)
- use GFP_NOFS allocs to avoid kswapd/rpciod deadlocks (Steve Dickson)
- fix ia64 kernel thread creation to force 64-bit tasks (Jason Baron)
- fix data corruption from 4K overflow in /proc/devices (Neil Horman)
- prevent mlock() resource limit bypass w/shm locking (Ernie Petrides)
- restrict MOXA ctlr firmware updates to privileged users (Brian Maly)
- support EM64T systems with mix of cpus with/without NX (Jim Paradis)
- allow modules to use get/put_task_struct() macros (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.2.EL" date="1114164000">- fix IDE disk accounting bug from wrong ios_in_flight (Larry Woodman)
- limit IGMP traffic to active link in bond_alb_xmit() (John Linville)
- fix audit refs to permit /var unmounting on shutdown (Dave Anderson)
- prevent IP4/6 output memory leaks of dst_entry structs (Dave Miller)
- enhance support for ethtool in 3c59x network driver (John Linville)
- fix launder_page() locking to avoid kswapd deadlock (Larry Woodman)
- suppress ide-floppy I/O errors when media isn't present (Brian Maly)
- make netdump more reliable on NAPI-enabled controllers (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.1.EL" date="1113991200">- (this is the first build for RHEL 3 Update 6)
- fix oops when io_setup() is called w/unwritable addr (Jeff Moyer)
- prevent kswapd hangs under launder_page() w/no bufs (Larry Woodman)
- fix autofs memory leaks when events share wait queues (Jeff Moyer)
- change IBM veth driver to indicate link is always up (David Howells)
- fix error resets and TF reg reads in SATA AHCI driver (Jeff Garzik)
- avoid dropping &gt;200-byte frames in sk98lin driver (John Linville)
- prevent shared memory lock/unlock w/o permissions (Dave Anderson)
- remove duplicate USB ESSENTIAL_REALITY defines (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.EL" date="1113559200">- fix data corruption w/ext3 xattr on 64-bit arches (Jason Baron)
- validate LCP frame lengths in PPP async handling (Dave Miller)
- enable forcedeth net driver builds in x86 configs (Jim Paradis)
- isolate IP fragment queues among various callers (Dave Miller)
- prevent busy inodes for symlinks after unmounts (Don Howard)
- revise PCI device ids extending ICH7 support (John Linville)
- work around broken xw4300 BIOS AHCI BAR setup (John Linville)
- add protocol validation in net bluetooth driver (John Linville)
- enable software watchdog timer in s390,x configs (Jan Glauber)
- fix data corruption w/uselib() on bad ELF libs (Ernie Petrides)
- add USB tablet init delay in wacom_probe() (Kristian Høgsberg)
- prevent core dumps with non-readable ELF interps (Dave Anderson)
- add maxevents validation in epoll_wait() handling (Ernie Petrides)
- add len validation in /dev/random poolsize sysctl (Ernie Petrides)
- correct size of ia64 syscall table initialization (Jason Baron)
- correct x86_64 user-mode i/o port validation (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-31.EL" date="1110448800">- fix missing ppc64 netdump/diskdump symbols (Nobuhiro Tachino)
- prevent ia64 unwind from traversing off stack (Jason Baron)
- disable 3w-9xxx driver builds on ppc64 (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-30.EL" date="1110362400">- fix obscure oops in tty init_dev() handling (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-29.EL" date="1109844000">- incorporate urgent late-breaking SATA fixes (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-28.EL" date="1109152800">- add more USB device support to visor driver (Pete Zaitcev)
- implement clustered APIC support for x86_64 (Larry Woodman)
- constrain x86 MSR writes based on cpu model (Jason Baron)
- increase max superbh size for performance (Stephen Tweedie)
- add locking to prevent oops in md_seq_show() (Doug Ledford)
- restore missing ia64 panic_on_oops handling (Tatsuo Uchida)
- implement Ethernet PCI quirk for HP xw9300 (Jim Paradis)
- revert NFS flock() avoidance to -27.7.EL (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.17.EL" date="1108980000">- rework NFS flock() avoidance w/FS_WANT_FLOCK for GFS (Ken Preslan)
- prevent inode corruption from delete/lookup races (Wendy Cheng)
- preserve registers for ia64 16-byte atomic ops (Geoff Gustafson)
- update SCSI whitelist for LSI/HP/STK/EMC devices (Tom Coughlan)
- disable vary_io in ips driver to avoid ctlr hangs (Tom Coughlan)
- correct handling of 2-TB device partitions (Peter Martuccelli)
- update support for ia64 perfmon facility (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.16.EL" date="1108720800">- implement diskdump support for SATA piix/promise (Nobuhiro Tachino)
- correct /proc/mtrr size values on EM64T platforms (Larry Woodman)
- restore page permissions after writes from ptrace() (Don Howard)
- fix /proc parent pids from multi-threaded forks (Ernie Petrides)
- enable software watchdog timer support on s390,x (Jan Glauber)
- update tg3 network driver to version 3.22RH (John Linville)
- incorporate 3w-9xxx driver version 2.24.00.011fw (Adam Manthei)
- correct ending boundary check in filemap_sync() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.15.EL" date="1108548000">- add e100 driver PCI device ids for ICH7 support (John Linville)
- restore obsolete but ignored e100 module params (John Linville)
- implement user-mode (gdb) access to ia64 gate page (Jason Baron)
- fix x86_64 FPU IP and DP values in SIGFPE context (Larry Woodman)
- add qla2200 module parameter to use NVRAM RIO val (Tom Coughlan)
- update 3w-xxxx driver to 1.02.00.037 w/.033 backup (Adam Manthei)
- fix crashes in video Firewire (ieee1394) driver (Bastien Nocera)
- prevent info leaks into ext3 journal disk blocks (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.14.EL" date="1108461600">- enhance AIO performance over NFS w/FS_AIO_SYNC hook (Steve Dickson)
- defer e100_tx_timeout() work from interrupt context (John Linville)
- correct IPV6 DST entry release to prevent route leak (Dave Miller)
- ignore MTU updates from invalid IPV6 ndisc packets (Dave Miller)
- add relevant PCI device ids to extend ICH7 support (John Linville)
- reduce system pauses during heavy page laundering (Larry Woodman)
- fix audit logging of paths w/predicate filter usage (Neil Horman)
- enable building of unsupported fusion isense module (Adam Manthei)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.13.EL" date="1108375200">- increase dxfer size limit for ppc64 SG_IO ioctl32 (David Howells)
- eliminate tty line discipline usage/switching races (Jason Baron)
- fix autofs recognition of ghosted direct map updates (Jeff Moyer)
- fix sg driver race between cmd completion and close (Tom Coughlan)
- prevent e100 data corruption from v.3.0.27-k2 update (John Linville)
- upgrade SATA support (core, libata, new/old drivers) (John Linville)
- implement diskdump support for sym53c8xx adapter (Yuichi Nagahama)
- add USB support for Wacom Cintiq/Intuos3 tablets (Kristian Høgsberg)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.12.EL" date="1107943200">- update e100 network driver to version 3.3.6-k2 (John Linville)
- correct cpu id macro for dual-core Opteron support (Jim Paradis)
- add "numa=off" message on x86_64 OOM kills w/NUMA (Larry Woodman)
- improve user/system timer tick accounting on s390,x (Pete Zaitcev)
- prevent EAGAIN errs from interrupted TCP recv() calls (Dave Miller)
- update cciss disk driver to version v2.4.54.RH1 (Adam Manthei)
- eliminate diskdump cpu id from frozen list (Nobuhiro Tachino)
- fix user-space access bug in USB vicam ioctl (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.11.EL" date="1107424800">- incorporate Emulex driver ioctl module version 1.0.13 (Tom Coughlan)
- eliminate potential call_lock deadlock with diskdump (Tatsuo Uchida)
- fix potential kiobuf_lock deadlock in free_kiovec() (Larry Woodman)
- add L2 cache descriptor for EM64T Irwindale processor (Neil Horman)
- prevent mmap() syscalls from choosing NULL mappings (Rik van Riel)
- include bounce buffer pages in show_mem() output (Larry Woodman)
- add I2C driver support for ICH5 in i2c-i801.c (John Linville)
- correct parport_pc errors on insmod failures (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.10.EL" date="1106906400">- fix futex_wait() race condition that allowed app hang (Ingo Molnar)
- add/correct write barrier placement in timer routines (David Howells)
- add x86_64 NMI switch support to debug kernel hangs (Yuichi Nagahama)
- restore CIV/LVI offset operation in i810_audio driver (John Linville)
- update e1000 network driver to version 5.6.10.1-k2 (John Linville)
- prevent bogus BUG_ON during multi-threaded core dump (Roland McGrath)
- fix x86_64 crash in huge_page_release() w/SHM_HUGETLB (Larry Woodman)
- fix possible mem corruption from /proc/kcore access (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.9.EL" date="1106647200">- fix core dumping over NFS mounts with "intr" option (Roland McGrath)
- prevent multi-threaded app hang from sys_wait4() race (Ingo Molnar)
- restore e1000 support for Intel PCI device id 1014 (John Linville)
- add ac97 quirk entries for HP xw6000/xw6200/xw8000 (John Linville)
- update b44 network driver to upstream version 0.95 (John Linville)
- revert NFS silly-delete and rpciod-hang patches (Steve Dickson)
- fix panics while backing up LVM snapshots (Heinz Mauelshagen)
- fix oops in redirect_target() on DHCP refresh (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.8.EL" date="1105696800">- rework ia64 INIT switch stacks for clean tracebacks (Tatsuo Uchida)
- fix USB raced timeout errors and ohci_complete_add() (Pete Zaitcev)
- add O_DIRECT handling in LVM driver handling (Heinz Mauelshagen)
- downgrade wait4() SIGCHLD/SIG_IGN warning message (Ingo Molnar)
- eliminate potential VMA list races with do_brk() (Dave Anderson)
- ignore ICMP Source Quench messages in tcp_v4_err() (Dave Miller)
- prevent VMA overlap crashes in insert_vm_struct() (Jason Baron)
- move flock() avoidance from NFS up to F/S layer (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.7.EL" date="1105437600">- fix 32-compat alt-stack signal handling on x86_64 (Geoff Gustafson)
- add initialization of ppc64 EEH error buffer size (David Howells)
- make ppc64 xmon work properly with Power5 console (David Howells)
- prevent infinite sync loop from NFS ESTALE writes (Steve Dickson)
- update 8139too network driver w/recent 2.4 fixes (John Linville)
- avoid netfilter oops when ip_conntrack is unloaded (Dave Miller)
- fix potential rpciod hangs during NFS sillydelete (Steve Dickson)
- avoid "No locks available" errors w/flock() on NFS (Ken Preslan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.6.EL" date="1104919200">- fix x86 phys proc ids for non-clustered APIC systems (Geoff Gustafson)
- return EINVAL on e100/e1000 rx-mini/rx-jumbo settings (John Linville)
- fix i810_audio regression from modified ICH6 PCI ids (John Linville)
- prevent race conditions in add_wait_queue_cond() macros (Jeff Moyer)
- fix FAT32 file system corruption w/writing 8M files (Alexander Viro)
- fix derivation/presentation of PHB unit ids on ppc64 (David Howells)
- close OpenFirmware stdin device at boot on ppc64 (David Woodhouse)
- fix 32-bit-compat regression in CMSG validations (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.5.EL" date="1103796000">- add "CommitLimit" data to /proc/meminfo output (Frank Hirtz)
- allow autofs to expire mounts on ppc64 arch (Jeff Moyer)
- add 3c59x EEPROM_RESET for 3c900 Boomerang (John Linville)
- ignore PTE mapping status in page_anon() (Larry Woodman)
- fix SIOCGIFHWADDR handling for zero addr_len (Dave Miller)
- add netdump support for x86_64, ia64, ppc64 (Dave Anderson)
- correct overcommit accounting on fork failure (Frank Hirtz)
- raise default ia64/ia32e swiotlb size to 64M (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.4.EL" date="1103709600">- add network CMSG validation checks (Dave Miller)
- fix data struct leak in ip_options_get() (Dave Miller)
- fix IGMP vulnerabilities in ip[6]_mc_source() (Dave Miller)
- fix e_phnum binfmt_elf loader vulnerability (Dave Anderson)
- clean x86_64 32-bit-compat syscall numbers (Jim Paradis)
- prevent ia64 floating point reg val leakage (Jason Baron)
- add USB io_edgeport driver size check (Peter Martuccelli)
- enable softirq deferral for x86_64 arch (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.3.EL" date="1102586400">- add data/param length sanity checks in smbfs (Alexander Viro)
- prevent /proc/&lt;PID&gt;/cmdline env data disclosure (Dave Anderson)
- make tulip_stop_rxtx() wait for DMA termination (John Linville)
- fix mm_stat regression introduced in -20.13.EL (Rik van Riel)
- correct return value from vlan_dev_change_mtu() (John Linville)
- serialize datagram read w/appropriate semaphore (Dave Miller)
- fix keyboard regression introduced in -24.EL (Peter Martuccelli)
- enable mmap/mprotect PROT_EXEC for legacy apps (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-26.2.EL" date="1101722400">- fix USB problems with keyboards and ia64 oopses (Pete Zaitcev)
- add i810 PCI IDs for nforce3/CK804 audio devices (Jim Paradis)
- fix ppc64 viodasd driver dev naming/limit bugs (David Howells)
- prevent tg3 fiber link bounces w/auto-negotiation (Dave Miller)
- add ac97 quirk handling for i810_audio driver (John Linville)
- prevent incorrect OOM killing with iscsi usage (Larry Woodman)
- create kiobuf cache to reduce lowmem contention (Larry Woodman)
- fix yet another binfmt_elf loader vulnerability (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.1.EL" date="1100512800">- (this is the first build for RHEL 3 Update 5)
- implement open() recovery from NFS ESTALE errors (Neil Horman)
- clean up warnings from lpfc and lpfc_703 Makefiles (Tom Coughlan)
- fix nessus-induced kernel panic with auditing (Peter Martuccelli)
- update 3c59x driver to LK1.1.18 and fix reset bug (John Linville)
- fix ext3 O_DIRECT bug in orphan list handling (Stephen Tweedie)
- flush cached dirty pages on NFS reads w/O_DIRECT (Steve Dickson)
- allow ia64 kernel unaligned access msg suppression (Neil Horman)
- correct test for performing buffer-head reclaim (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.EL" date="1100253600">- fix binfmt_elf loader vulnerabilities (Jim Paradis, Dave Anderson)
- limit kernel data struct slabs to single-page allocs (Larry Woodman)
- update Emulex driver to 7.1.14 (backup still 7.0.3) (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-24.EL" date="1100080800">- fix several ppc64 problems with signal catching (David Woodhouse)
- fix several bugs in /proc/ppc64/lparcfg driver (David Howells)
- fix possible diskdump hangs w/megaraid2 driver (Tatsuo Uchida)
- add support for IBM EM64T-based Groucho blade (Peter Martuccelli)
- fix regression in USB BIOS-&gt;kernel hand-off support (Pete Zaitcev)
- fix regression in ia64 kernel stack unwind handling (Don Howard)
- fix regression w/agpgart support of i8xx chipsets (Larry Woodman)
- add support for BLKSSZGET ioctl in cciss driver (Tom Coughlan)
- disable iSCSI builds in ppc64 and s390* configs (Tom Coughlan)
- update Emulex driver to 7.1.13 (backup still 7.0.3) (Tom Coughlan)
- correct SCSI whitelist for Chaparral FR1422 devices (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-23.EL" date="1098957600">- prevent kswapd from getting stuck in prune_icache() (Larry Woodman)
- fix ppc64 single-stepping into signal handlers (David Woodhouse)
- fix corruption from user stack expansion races (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-22.EL" date="1098093600">- prevent add/removal races in SCSI open handling (Doug Ledford)
- fix U3 agpgart regression with Intel i8xx chipsets (Dave Jones)
- update SCSI whitelist for IBM 1722/1724 devices (Tom Coughlan)
- correct TSS descriptor limit checking for x86_64 (Jim Paradis)
- add nforce3/CK804 device support and fix ACPI bug (Jim Paradis)
- add support for "forcedeth" net driver version 0.28 (Jim Paradis)
- enable diskdump support in amd64/ia32e configs (Nobuhiro Tachino)
- restore/improve linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- add missing page_cache_release() in launder_page() (Larry Woodman)
- update Emulex driver to 7.1.11 (backup still 7.0.3) (Tom Coughlan)
- add new USB ids to support latest Wacom tablets (Kristian Høgsberg)
- remove drivers/net/tun.o from unsupported list (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-21.EL" date="1096538400">- fix potential PTE race in do_anonymous_page() (Rik van Riel)
- add "Committed_AS" data to /proc/meminfo output (Frank Hirtz)
- revise DMA zone paging thresholds for x86_64 (Larry Woodman)
- prevent /proc/scsi/scsi oops during probes (David Woodhouse)
- avoid kswapd hangs via free_more_memory() hooks (Rik van Riel)
- update megaraid2 driver to 2.10.8.2 w/2.10.6 backup (Adam Manthei)
- fix do_notify_parent() panic from ptrace death race (Roland McGrath)
- fix large core file support on 64-bit architectures (Dave Anderson)
- enable tux on ia64 and increase max tux threads to 16 (Ingo Molnar)
- fix ia64/s390,x single-stepping w/signal handlers (David Woodhouse)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.14.EL" date="1096452000">- fix hang in SCSI starvation management code (David Howells)
- update SCSI whitelist for NETAPP LUN devices (Wendy Cheng)
- fix s390 cio handling during ESS fail-overs (Pete Zaitcev)
- update Emulex driver to 7.1.8 w/7.0.3 backup (Tom Coughlan)
- update Qlogic driver to 7.01.01 w/7.00.03 backup (Tom Coughlan)
- correct unlock/free order in proc_lookupfd() (Ernie Petrides)
- use ACPI for PCI interrupt routing on ia32e (Jim Paradis)
- allow cpus to boot w/APIC IDs &gt; 8 on ia32e (Jim Paradis)
- fix pid allocation when pid_max &gt; 32768 (Ernie Petrides)
- fix regs in multi-threaded ia64 core dumps (Keiichi Mori)
- enable sym53c8xx driver for ppc64 iSeries (David Howells)
- fix ac97 depmod errors w/hugemem configs (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.13.EL" date="1096365600">- fix aic79xx_osm.h/3c59x.c changes in prior rev (Tachino/Linville)
- allow for larger nfsd block sizes on some archs (Steve Dickson)
- fix possible aacraid driver panic in aac_info() (Tom Coughlan)
- fix xdr argsize check to handle writes &gt;= 2^31 (Steve Dickson)
- update e1000 network driver to version 5.3.19-k2 (John Linville)
- apply several cciss driver fixes (to 2.4.52.RH2) (Adam Manthei)
- fix x86_64 versions of cpu capability test macros (Jim Paradis)
- fix ppc64 HPTE memory corruption race condition (Rik van Riel)
- add sys_epoll support on s390,x (Stephen Tweedie, Pete Zaitcev)
- prevent keyboard.c warnings from mouse clicks (Norm Murray)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.12.EL" date="1096279200">- improve slab cache page reaping heuristics (Larry Woodman)
- implement diskdump support for x86_64 arch (Nobuhiro Tachino)
- add ia64 INIT trigger switch support for debugging (Tatsuo Uchida)
- fix several problems in handling of AIO on pipes (Jeff Moyer)
- update fixes for LTP read02 test hangs with tmpfs (Alexander Viro)
- fix x86_64 single-stepping out of signal handlers (Jim Paradis)
- increase size of ppc64 RTAS error log buffer (David Howells)
- increase max possible kNFSD lockd cookie size (Steve Dickson)
- backport 3c59x fixes for mii-tool problems w/10Mb (John Linville)
- incorporate Cisco's iscsi_sfnet initiator driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.11.EL" date="1095933600">- implement diskdump support for megaraid2 adapter (Tatsuo Uchida)
- update ips driver to version 7.10.18 w/7.00.15 backup (Tom Coughlan)
- correct max page aging interval boundary in kscand() (Larry Woodman)
- add ppc64 support for ptrace() with PT_SINGLESTEP (David Woodhouse)
- update e100 network driver to version 3.0.27-k2 (John Linville)
- fix LTP read02 test hangs when tmpfs is in use (Alexander Viro)
- get proc_dir_entry reference in proc_lookup() (Alexander Viro)
- add exports of several AIO-related interfaces (Larry Woodman)
- reduce swapping during excessive pagecache use (Larry Woodman)
- implement statfs64() syscall on x86 for NFS use (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.10.EL" date="1095847200">- implement early USB hand-off (BIOS-&gt;kernel) support (Pete Zaitcev)
- fix stack pointer calculation in x86 show() handling (Jeff Moyer)
- prevent interference between flock/POSIX lock types (Frank Hirtz)
- update pcnet32 network driver to version 1.30c (John Linville)
- add export of block_commit_write() f/s interface (Larry Woodman)
- implement diskdump support for dpt_i2o adapter (Tatsuo Uchida)
- update mptfusion driver to version 2.05.16.02 (Adam Manthei)
- move disk_dump_notifier_list to diskdumplib.c (Nobuhiro Tachino)
- update s390 zfcp driver to revision 5.31.2.11+ (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.9.EL" date="1095674400">- fix occasional ibmvscsic driver insmod crash (David Howells)
- disable linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- prevent double slashes in symlink auditing (Peter Martuccelli)
- fix overzealous compat32 setsockopt conversions (David Woodhouse)
- backport tulip driver fixes from upstream 2.4.28 (John Linville)
- update tg3 network driver to version 3.10RH (John Linville)
- implement sysctl to force igmp protocol versions (Neil Horman)
- add diskdump performance improvement info (Nobuhiro Tachino)
- fix s390 iucv lost connections and ping hangs (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.8.EL" date="1095588000">- prevent diskdump deadlock in case of die() recursion (Tatsuo Uchida)
- add x86/x86_64 support for ptrace() w/PT_SINGLESTEP (Roland McGrath)
- fix x86/x86_64 single-stepping into signal handlers (Roland McGrath)
- increase x86 value for MAX_MP_BUSSES definition to 260 (Ingo Molnar)
- eliminate ia64 potential for scheduler runq deadlock (Larry Woodman)
- add support for /proc/sys/kernel/mem_nmi_panic sysctl (Dave Anderson)
- prevent keyboard-initiated sysrq hangs in handle_sysrq() (Jeff Moyer)
- fix intermittent netdump hangs from cpu-frozen messages (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.7.EL" date="1095415200">- fix premature OOM killing change added in prior rev (Larry Woodman)
- backport vlan driver fixes from upstream 2.4.28-rc1 (John Linville)
- add _sb_findmap symbol export in s390/s390x kernels (Pete Zaitcev)
- add ppc64 support for 32-bit sendfile64() syscall (David Howells)
- fix 32-bit IPC_INFO shmctl() syscalls for ppc64 (David Howells)
- upgrade libata/SATA support to current 2.4 bits (John Linville)
- avoid USB device resets of shared/busy interfaces (Pete Zaitcev)
- fix miscellaneous problems in ppc64 icom driver (David Howells)
- fix ip_queue_maxlen sysctl for ip[6]_queue modules (Neil Horman)
- add module parm for max entries in NFS_ACL replies (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.6.EL" date="1095156000">- prevent OOM killer from kicking in prematurely (Larry Woodman)
- avoid NMI watchdog crashes during sysrq-m usage (Wendy Cheng)
- add auditing support for ia64 clone2 syscall (Peter Martuccelli)
- correct sign of auditing error codes for ia64 (Peter Martuccelli)
- implement ia64 auditing 32-bit-disable sysctl (Peter Martuccelli)
- fix ia64 faults w/stale VHPT-generated TLB entries (Dave Anderson)
- fix invalid x86_64 checksums for multicast packets (Mike Gahagan)
- fix incorrect blocking bug inside wakeup_kswapd() (Larry Woodman)
- validate appropriate media type in DVD drives (Doug Ledford)
- reduce s390 stack usage in qeth/qdio drivers (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.5.EL" date="1094810400">- prevent scenarios that lead to hang of kswapd (Larry Woodman)
- add locking for access to /proc/bus/usb/devices (Pete Zaitcev)
- correct x86 rescheduling to handle apm=power-off (Ingo Molnar)
- fix OOM killer locking and mm referencing holes (Larry Woodman)
- pin ia64 mapping for idle proc stack during boot (Larry Woodman)
- fix warning throttle for amd64 stack overflow check (Neil Horman)
- fix content lengths when using tux gzip compression (Ingo Molnar)
- add auditing support for pread/pwrite syscalls (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.4.EL" date="1094724000">- prevent bogus data in /proc/scsi/ibmvscsi/* (David Howells)
- update tg3 network driver to version 3.9RH (John Linville)
- improve ramfs memory alloc w/scarce highmem (Larry Woodman)
- correct several values in /proc/ppc64/lparcfg (David Howells)
- allow dirty page rebalancing under mem pressure (Rik van Riel)
- prevent memory leak in scsi_build_commandblocks() (Doug Ledford)
- fix potential kswapd deadlock w/disk quota usage (Larry Woodman)
- increase MAX_IO_APICS from 8 to 32 for x86_64 arch (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.3.EL" date="1094205600">- fix various error path bugs in bcm5820 driver (John Linville)
- validate addresses used with /dev/kmem accesses (Neil Horman)
- eliminate IPSEC tunnel leaks when using IPComp (Dave Miller)
- add auditing support for utimes() syscalls (Peter Martuccelli)
- prevent netconsole freeze w/cable dis-/re-connect (Jeff Moyer)
- correct reboot_cpu validation for "reboot=s&lt;n&gt;" (Doug Ledford)
- fix mem/irq clean-up in olympic tokenring driver (Neil Horman)
- update network bonding driver to version 2.6.0 (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.2.EL" date="1094032800">- add maps/rlimits output with print-fatal-signals=2 (Ingo Molnar)
- backport ac97 sound support from upstream 2.4.27 (John Linville)
- eliminate kernel stack data leaks from USB drivers (Mark Cox)
- fix interrupt status mask in AMD PCnet32 driver (David Howells)
- fix module loading problems in ibmvscsic driver (David Howells)
- fix x86 shared runq mapping when ACPI data is bad (Bernd Schmidt)
- disable enhanced error handling on PCI-ISA bridges (David Howells)
- add memory-mapped i/o support to i810_audio driver (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.1.EL" date="1093860000">- (this is the first build for RHEL 3 Update 4)
- backport r8169 network driver changes from 2.4 (John Linville)
- update i810_audio sound driver to version 1.01 (John Linville)
- convert USB UHCI driver warning to debug message (Pete Zaitcev)
- backport 2.6 PROT_GROWSDOWN/UP mprotect() support (Jakub Jelinek)
- lower ppc64 console logging level of RTAS messages (David Howells)
- fix ppc64 handling of "smt-emabled=off" boot option (David Howells)
- correct socket sndbuf accounting w/IP_MULTICAST_LOOP (Neil Horman)
- reduce x86_64 user stack start randomization to 16K (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.EL" date="1092823200">- change TARGET_CPUS on x86_64 to include all on-line cpus (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-19.EL" date="1092304800">- fix possible races/overflows in file offset handling (Alexander Viro)
- correct logging of boot progress messages on Power5 (David Howells)
- extend ppc64 EEH support for other types of devices (David Howells)
- fix ibmveth driver to properly shut down and restart (David Howells)
- fix several races and overflows in ppc64 RTAS driver (David Howells)
- backport "acpi=noirq" support to work around Nocona hangs (Don Howard)
- conditionalize pbn_hp_diva to fix serial driver oops (Matthew Galgoci)
- add amd64 GART entry guard mappings for PCI mis-prefetch (Jim Paradis)
- upgrade SATA support again to resolve several problems (Jeff Garzik)
- qualify ia32e IRQ affinity disable with BIOS flag check (Jim Paradis)
- fix eeh_check_failure() on ppc64 to be interrupt safe (David Howells)
- correct ppc64 EEH macros to use appropriate data size (David Howells)
- fix x86/ia64 no-wait handling in smp_call_function() (Larry Woodman)
- fix "Filter target 0x203 not known ..." audit msgs (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-18.EL" date="1090404000">- prevent s390 mlock hangs with follow_page() rework (Ernie Petrides)
- fix Power5 initialization and handling of RAS IRQs (David Howells)
- fix ppc64 viocons driver deadlocks with printk() (David Howells)
- apply eh_timeout, netdump, cli fixes in diskdump (Tatsuo Uchida)
- add skip_mapped_pages tuning for page eviction (Stephen Tweedie)
- fix initrd's effect on ppc64 mem_end calculation (David Howells)
- allow HT support on ppc64 systems with single cpu (David Howells)
- backport v2.0.8 aic7xxx driver h/w support for Dell (Tom Coughlan)
- correct ppc64 device node searching in hvsi driver (David Howells)
- fix KMI compat problem w/pgprot_t in x86 NX support (Jim Paradis)
- resurrect mptfusion driver backup version 2.05.05 (Tom Coughlan)
- disable IRQ affinity setting on some ia32e systems (Jim Paradis)
- update SCSI whitelist for Dot Hill SANnet/StorEdge (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-17.EL" date="1089280800">- account for zone holes in big hash table allocator (Stephen Tweedie)
- prevent reserved stack space overflow of mmap_top (Ernie Petrides)
- fix USB crash in scan_async() with EHCI hardware (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-16.EL" date="1088848800">- enable exec-shield and add x86 NX support (Ingo Molnar, Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.19.EL" date="1088762400">- add owner check in inode_change_ok() for gid changes (Ernie Petrides)
- fix race in finish_task_switch() between wakeup/exit (Ernie Petrides)
- remove Samsung CD-ROM SN-124 from IDE DMA blacklist (Tom Coughlan)
- update e1000 network driver to version 5.2.52-k3 (John Linville)
- add auditing support for semtimedop syscalls (Peter Martuccelli)
- fix tasklet and locking bugs in Power5 hvsi driver (David Howells)
- fix megaraid2 handling of TUR cmds with SCSI CD-ROM (Adam Manthei)
- update SCSI whitelist for HP NS E1200-160 router (Tom Coughlan)
- prevent x86 read_ldt() from reading beyond kmap (Ernie Petrides)
- force single loadable segment in ia64 kernels (Jakub Jelinek)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.18.EL" date="1088157600">- implement ia64 work-around for TLB fetch timeout MCA (Larry Woodman)
- fix Power3 interrupt initialization in ppc64 setup (David Howells)
- correct info msg, prevent double panic in diskdump (Tatsuo Uchida)
- defend against NULL "mm" ptrs in page_referenced() (Rik van Riel)
- fix miscellaneous audit subsystem problems (Peter Martuccelli)
- prevent crash with tux CGI execution on x86_64 (Ingo Molnar)
- add installer info to SATA sx8 block driver (Jeff Garzik)
- turn on vary_io flag in SCSI ips driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.17.EL" date="1087984800">- allocate big system hash tables w/bootmem allocator (David Howells)
- prevent loading aic7xxx_old when aic7xxx is in use (Doug Ledford)
- implement stat() recovery from NFS ESTALE errors (Steve Dickson)
- fix raw/O_DIRECT i/o bug with unmapped pages (Stephen Tweedie)
- correct another locking hole in RAID1 handling (Doug Ledford)
- fix __x86_64__ conditional in megaraid2.c driver (Adam Manthei)
- fix unresolved symbols on ia64 in cciss driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.16.EL" date="1087898400">- make NFS sillydelete wait for unlink completion (Steve Dickson)
- prevent EIO w/concurrent O_DIRECT+buffered i/o (Stephen Tweedie)
- upgrade SATA support (core, libata, and drivers) (Jeff Garzik)
- implement futex() FUTEX_CMP_REQUEUE op (Al Viro, Pete Zaitcev)
- update b44 network driver to version 0.93 (John Linville)
- avoid unix_stream_sendmsg() ENOBUFS errors (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.15.EL" date="1087812000">- improve SCSI mid-layer error handling w/sdev_retry_q (Doug Ledford)
- eliminate rw-semaphore races between waiter/wakeup (David Howells)
- add locking and fix accounting bug in RAID1 handling (Doug Ledford)
- backport Carmel sx8.c driver from upstream 2.4 base (John Linville)
- rename ppc64-squadrons-* patches to ppc64-power5-* (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.14.EL" date="1087639200">- introduce support for IBM Squadrons/Power5 systems (David Howells)
- update aacraid driver to 1.1.5-2339 w/1.1.2 backup (Adam Manthei)
- allow sys_remap_file_pages() on unlocked ramfs VMAs (Larry Woodman)
- fix diskdump hangs during resets with aic79xx driver (Tatsuo Uchida)
- fix possible data corruption when using SHM_HUGETLB (Larry Woodman)
- set QLogic HbaApiNode proc file permissions to 0600 (Tom Coughlan)
- add IRQ blocking/restoring in add_gendisk/del_gendisk (Jeff Needle)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.13.EL" date="1087466400">- fix problem causing PCI bus 255 to be missing on ia64 (Ben Woodard)
- make nfs_statfs() recognize/handle fs size overflows (Steve Dickson)
- update QLogic driver to 7.00.03-RH1 w/6.07.02 backup (Tom Coughlan)
- allow procfs to utilize more dynamic inode numbers (David Howells)
- prevent inappropriate "unexpected IO-APIC" messages (Ernie Petrides)
- avoid lost dirty page bits in s390/s390x VM handling (Pete Zaitcev)
- fix ACPI SCI interrupt defaults and add kernel params (Jim Paradis)
- fix user-space access bugs in acpi/airo/decnet/sound (Alexander Viro)
- remove drivers/net/starfire.o from unsupported list (Ernie Petrides)
- fix mm_struct mem leak in copy_process() error path (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.12.EL" date="1087293600">- correct s390/s390x tests for PT_AUDITED flag (Peter Martuccelli)
- update e100 network driver to version 2.3.43-k1 (John Linville)
- update megaraid2 driver to 2.10.6 w/2.10.1.1 backup (Adam Manthei)
- add x86_64 auditing support for 32-bit-compat (Peter Martuccelli)
- fix ia64 unwind handling for UNW_INSN_SETNAT_MEMSTK (Jason Baron)
- update cciss driver to v2.4.52 for several fixes (Tom Coughlan)
- fix variable block mode tape handling in st driver (Tom Coughlan)
- incorporate latest Emulex fibre channel driver (Tom Coughlan)
- fix USB EHCI problem with BIOS-to-host handoff (Pete Zaitcev)
- update SCSI whitelist for DDN/Xyratex/SanDisk/CBOX3 (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.11.EL" date="1087207200">- upgrade to latest autofs4, remove from unsupported list (Jeff Moyer)
- fix memory corruption bug in audit driver code (Peter Martuccelli)
- store adjusted KSP value in ia64 diskdump support (Tatsuo Uchida)
- update e1000 network driver to version 5.2.52-k1 (John Linville)
- update ips driver to version 7.00.15 w/6.11.07 backup (Adam Manthei)
- implement USB device interlock between ioctls/SCSI-ops (Pete Zaitcev)
- update tg3 driver to version 3.6RH for upcoming chipsets (Dave Miller)
- downgrade several PCI cache line size debugging messages (Jim Paradis)
- correct x86_64 32-bit-compat support for AIO syscalls (Jeff Moyer)
- prevent FPU exception handling hangs on x86/x86_64 (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.10.EL" date="1086948000">- give wait.func highest priority in wake_up_filtered() (Larry Woodman)
- reduce system time when using sys_remap_file_pages() (Larry Woodman)
- enable CONFIG_SOFT_WATCHDOG module for ppc64 configs (David Howells)
- improve page allocation to avoid unnecessary swapping (Rik van Riel)
- implement diskdump support for ia64 with mptfusion (Tatsuo Uchida)
- disable native ia32 support for ia64 Montecito cpus (Jason Baron)
- save/restore P4/ia32e perf registers for oprofile (Will Cohen)
- fix oprofile ESCR_SET_EVENT_SELECT() event mask (Will Cohen)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.9.EL" date="1086775200">- update s390 zcrypt driver to version 1.2.1 (Pete Zaitcev)
- update network tg3 driver to version 3.5RH (Dave Miller)
- eliminate separate ia32e oprofile processor id (Will Cohen)
- update SCSI whitelist for IBM 2105/2145 devs (Doug Ledford)
- avoid EAGAIN errors on blocking UDP sockets (Steve Dickson)
- avoid putting locked inodes on dirty list (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.8.EL" date="1086688800">- decouple NFS O_DIRECT handling for performance gain (Steve Dickson)
- export page_is_ram() interface for amd64/ia32e arch (Jim Paradis)
- enable CONFIG_SCSI_SATA_* options in x86_64 configs (Jim Paradis)
- update mptfusion driver to 2.05.16 w/2.05.11.03 backup (Adam Manthei)
- fix nopage_sequential_readahead() and filemap_sync() (Larry Woodman)
- fix USB EHCI driver to avoid Squadrons install oops (Pete Zaitcev)
- add x86 NMI trigger switch support for debugging (Yuichi Nagahama)
- add dmi_blacklist[] entry for "Intel NA440BX DP" (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.7.EL" date="1086602400">- apply some minor scsi_dump_status() format tweaks (Doug Ledford)
- implement SCSI support for dynamic add (hot plug) (Doug Ledford)
- upgrade lvm driver logic to version 1.0.8-2 (Heinz Mauelshagen)
- fix x86_64 definition for inlined ffs() function (Jim Paradis)
- preserve VM_MAYEXEC for executable stack support (Jim Paradis)
- add extra SLBIEs for ppc64 Power5 DD2.0 errata (David Howells)
- add ppc64 32-bit compat for TIOCGICOUNT/MIWAIT (David Howells)
- hold file struct ref when removing POSIX locks (Steve Dickson)
- fix window scaling bug in tcp_ack_update_window() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.6.EL" date="1086343200">- make fsync() flush all pending NFS updates to disk (Steve Dickson)
- complete ia64 support for multiple I/O port spaces (Larry Woodman)
- fix sending of IP broadcast frames with TTL of zero (Neil Horman)
- prevent context switch storms under high VM loads (Larry Woodman)
- fix sigaltstack() errors w/JVM on hugemem kernels (Roland McGrath)
- add locking and improve output in scsi_dump_status() (Doug Ledford)
- add size boundary checking in scsi_resize_dma_pool() (Doug Ledford)
- fix SCSI request struct leak on command init failures (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.5.EL" date="1084528800">- overhaul ia64 SAL/MCA subsystem (Ben Woodard)
- enable x86_64 32-bit UID support (Jim Paradis)
- add initial diskdump support (Nobuhiro Tachino)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.4.EL" date="1084356000">- reduce chance of "VFS: Busy inodes after unmount." errs (Steve Dickson)
- convert "uaddr2" arg ptr in s390x futex() compat syscall (Pete Zaitcev)
- add ppc64 32-bit compat handler for PE_LOCKED_COPY ioctl (David Howells)
- update s390 dasd driver with several recent bug fixes (Pete Zaitcev)
- fix amd64 NUMA node scanning for Northbridge systems (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.3.EL" date="1084183200">- prevent exp_stopfodrop() oops during cluster failover (Steve Dickson)
- make nfs_file_commit() always flush the entire file (Steve Dickson)
- fix pcnet32 driver's MAC address selection on ppc64 (Julie DeWandel)
- backport /dev/random driver fixes for missed wakeups (Mark DeWandel)
- fix hang w/SoundBlaster 16-bit sampling w/odd count (Ernie Petrides)
- make s390 tape driver specify GPL module license type (Pete Zaitcev)
- correct buffer len value in ppc64 pSeries ipr driver (David Howells)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.2.EL" date="1083664800">- enable booting on 8-way Opteron systems (Jim Paradis)
- fix 32-bit-compat truncate64() on x86_64 (Jim Paradis)
- correct promiscuous mode counter handling (Dave Miller)
- support 128-GB ia64 systems w/HP zx1 chipset (Larry Woodman)
- add export of sys_ioctl() global symbol on s390x (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.1.EL" date="1083578400">- (this is the first build for RHEL 3 Update 3)
- reenable/fix linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- clean up file locks when NFS clients receive signals (Steve Dickson)
- complete ia64-specific LAuS syscall auditing support (Mark DeWandel)
- prevent NULL pointer dereference in page_referenced() (Rik van Riel)
- fix max sectors argument in lvm_snapshot_alloc() (Heinz Mauelshagen)
- allow AGP bus scanning to execute for all architectures (John Dennis)
- fix page_referenced() rss limit checks w/unmapped pages (Rik van Riel)
- correct locking and cr/lf problems in usbserial driver (Pete Zaitcev)
- add /proc/cpuinfo support for new ppc64 processors (Julie DeWandel)
- fix sense data handling on certain SCSI cmd retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.EL" date="1082541600">- fix clobbering of /proc/cpuinfo vendor_id on x86_64 (Jim Paradis)
- correct MCAST_MSFILTER/IP_MSFILTER size checking (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-14.EL" date="1081936800">- disable linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- prevent symlink buffer overflow in ISO-9660 fs (Ernie Petrides)
- check for skb overrun in IPV4/IPV6 IGMP handling (Dave Miller)
- fix possible hang in rebalance_laundry_zone() (Larry Woodman)
- correct zone_wired[] initialization for NUMA (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-13.EL" date="1081332000">- fix several critical libata bugs (Jeff Garzik)
- correct IPSEC XFRM policy ref counting (Dave Miller)
- add amd64/ia32e parsing for "acpi=off" arg (Jim Paradis)
- update tg3 driver to v3.1 for several fixes (Dave Miller)
- fix SCSI whitelist for Hitachi/HP DFx00, Apple Xserve (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-12.EL" date="1080295200">- add USB support for Handspring Treo 600 PDA syncing (Matthew Galgoci)
- clear state for CPEs during ia64 MCA SAL error logging (Ben Woodard)
- prevent DMA resource leak in QLogic driver error path (Tom Coughlan)
- change default QLogic driver device queue depth to 64 (Tom Coughlan)
- replace fabricated cciss drive geometry w/ENXIO error (Tom Coughlan)
- update SCSI whitelist for HP SureStore/StorageWorks (Tom Coughlan)
- disable CONFIG_ACPI_DEBUG in amd64/ia32e configs (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-11.EL" date="1078740000">- add yet another Intel ICH6 SATA PCI id (Jeff Garzik)
- fix ref counting in copy_process() error path (Larry Woodman)
- remove ia64 support for /proc/bus/mckinley/bitmap (Jason Baron)
- correct depmod versioning for unsupported modules (Ernie Petrides)
- prevent data corruption in ia32e phys_proc_id[] info (Larry Woodman)
- change default value for inactive_clean_percent to 30 (Larry Woodman)
- enable improved version of s390 on-demand timer patch (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-10.EL" date="1078221600">- incorporate late-breaking libata fixes (Jeff Garzik)
- enable amd64 syscall for tux support (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.17.EL" date="1078135200">- reduce s390 idle overhead with on-demand timer patch (Pete Zaitcev)
- complete ia64 NPTL support for 32-bit-EL executables (Jason Baron)
- add several ia64 syscall table entries for 32-bit-EL (Jason Baron)
- upgrade libata/SATA support, delete ich5-sata.patch (Jeff Garzik)
- check for mremap/vmtruncate race in move_one_page() (Jason Baron)
- prevent ia64 NaT-bit corruption during sig catching (Jason Baron)
- fix amd64 get_mtrr() parsing error with &gt;4GB memory (Jim Paradis)
- change amd64 default behavior to avoid TSC timer use (Jim Paradis)
- force s390utils upgrade to prevent zipl seg fault (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.16.EL" date="1078048800">- restore varyio capability in mptfusion driver update (Adam Manthei)
- enhance SCSI mid-layer queuing for indefinite retries (Doug Ledford)
- add ia64 reg reloads for 32-bit-EL strace -f support (Jason Baron)
- fix ia64 core dump support for 32-bit-EL executables (Jason Baron)
- add SCSI whitelist devs with BLIST_RETRY_ABORTED_CMD (Doug Ledford)
- remove stack-in-interpreter check in binfmt_elf.c (Julie DeWandel)
- clear all flags in exec_usermodehelper() for kmod (Alexander Viro)
- fix aacraid command completion (rq corruption) bugs (Tom Coughlan)
- correct cciss_proc_tape_report() type in flags decl (Tom Coughlan)
- enable USB-2.0-hub-based mice/keyboards to function (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.15.EL" date="1077962400">- fix amd64 oprofile linkage problem in ia32e support (Ernie Petrides)
- update ips driver to version 6.11.07 w/6.10.52 backup (Tom Coughlan)
- add size checks to DRM ATI r128 driver ioctl handling (John Dennis)
- avoid megaraid2 irq_disable calls for mem-mapped ctlrs (Tom Coughlan)
- upgrade firmware imbedded in QLogic driver to 3.02.24 (Tom Coughlan)
- correct ia64 memory accounting in overcommit mode 2 (Larry Woodman)
- implement softirq deferral to limit kernel stack depth (Ingo Molnar)
- reduce kernel stack usage in a couple of tux functions (Ingo Molnar)
- fix shared extended attribute ref counting in ext3 (Stephen Tweedie)
- clear SCSI sense data buffer between eh retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.14.EL" date="1077789600">- add .RH1 suffix to cciss driver version v2.4.50 (Tom Coughlan)
- implement initial LAuS syscall auditing support (Mark DeWandel)
- introduce GFS enablers for locking and sendfile ops (Ken Preslan)
- update QLogic driver to 6.07.01 w/6.06.00b11 backup (Tom Coughlan)
- improve netdump reliability w/asynchronous IPI param (Jeff Moyer)
- add ICH6 DSP audio support to i810_audio driver (Jeff Garzik)
- apply SCSI whitelist updates for several devices (Tom Coughlan)
- fix odd byte tape i/o handling in sym53c8xx driver (Tom Coughlan)
- correct minimum nfsd version that supports acls (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.13.EL" date="1077703200">- allow concurrent NFS direct i/o to same file if !append (Steve Dickson)
- introduce support for new Intel 64-bit ia32e processor (Larry Woodman)
- update mptfusion driver to 2.05.11.03 w/2.05.05 backup (Adam Manthei)
- remove fs/binfmt_misc.o from linux-modules-unsupported (Jason Baron)
- fix ia64 predicate register use in sig trampoline code (Jason Baron)
- add oprofile cpu type recognition for ia32e processor (Will Cohen)
- update e1000 network driver to version 5.2.30.1-k1 (Jeff Garzik)
- add more Intel PCI ids to match upstream 2.4 (Jeff Garzik)
- add ICH6 PATA support, PCI ids, irq routing (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.12.EL" date="1077530400">- add deferred page freeing for intr-context unmap_kvec() (Jeff Moyer)
- update megaraid2 driver to v2.10.1.1 w/v2.00.9 backup (Tom Coughlan)
- fix ppc64 pte hash table locking to avoid deadlocks (Julie DeWandel)
- fix ia64 data TLB init to prevent random boot-up hangs (Jason Baron)
- fix ia64 RNat register corruption with alt sig stacks (Jason Baron)
- allow smaller ia64 sig stacks in ia32 emulation layer (Jason Baron)
- backport ncpfs fixes to eliminate var-length arrays (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.11.EL" date="1077271200">- backport cisco aironet driver from 2.6.3-rc4 (Matthew Galgoci)
- update tg3 driver to v2.7 to fix status reg handling (Dave Miller)
- correct lost jiffies logic for x440/5 cyclone timer (Bernd Schmidt)
- fix open() error clean-up for unsupported O_DIRECT (Stephen Tweedie)
- prevent ia64 crashes when unmapping hugetlb pages (Jason Baron)
- add ppc64 processor support for future PPC970+ (Julie DeWandel)
- rework ppc64 32-bit-compat iptables support (Julie DeWandel)
- fix func ptr test in ethtool_set_ringparam() (Jeff Garzik)
- disable linux-2.4.21-scsi-affine-queue.patch (Doug Ledford)
- improve scsi_allow_ghost_devices description (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.10.EL" date="1077098400">- fix amd64 iommu bug causing data corruption on &gt;4GB systems (Jim Paradis)
- return EINVAL for unsupported ioctl32 syscalls on ppc64 (Julie DeWandel)
- remove incorrect BUG() call in __remove_inode_page() (Stephen Tweedie)
- fix s390 ctc driver problem causing build system hangs (Pete Zaitcev)
- fix s390 qeth driver error path to reset write_busy (Pete Zaitcev)
- update s390 zfcp driver to fix miscellaneous bugs (Pete Zaitcev)
- apply upstream nfs fixes for acl error handling (Steve Dickson)
- prevent kernel stack data leak via /dev/rtc (Ernie Petrides)
- allow AIO operations on sockets for non-inet (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.9.EL" date="1076925600">- restore genksyms_smp_prefix setting for non-x86 builds (Ernie Petrides)
- display/log memory stats whenever there's an OOM kill (Larry Woodman)
- update tg3 driver to v2.6, the latest upstream version (Jeff Garzik)
- update net bonding driver to v2.4.1, latest upstream (Jeff Garzik)
- fix irq, mem, printk, strtol bugs in cciss driver (Tom Coughlan)
- wait for board ready after hot add, cciss driver (Tom Coughlan)
- enable cciss adapter prefetch for x86 platforms (Tom Coughlan)
- add preserve_arg0 handling for ia32 emulation (Larry Woodman)
- fix ppc64 compat support for quota syscall (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.8.EL" date="1076580000">- remove Power-Blade-specific def for USB TEAC floppy (Julie DeWandel)
- fix s390 crash in iucv driver on connection shutdown (Pete Zaitcev)
- fix ia64 ACPI parsing for multinode IDE devs on x455 (Jim Paradis)
- fix amd64 core dumping of multithreaded 32-bit apps (Jim Paradis)
- fix s390 oprofile conditional and zero top addr bits (Will Cohen)
- add ipr driver v1.0.3 for IBM's PPC RAID adapters (Tom Coughlan)
- add {alloc,free}_netdev(), list macro, tg3 PCI ids (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.7.EL" date="1076407200">- restrict /proc/tty/driver directory access to root (Jeff Moyer)
- allow non-standard usr/sys VM splits at 2G/2G, 1G/3G (Ingo Molnar)
- extend existing ppc64 RTAS firmware flash interface (Mark DeWandel)
- fix ppc64 version of strncpy() to zero-pad buffers (Julie DeWandel)
- fix s390/x version of strncpy() to zero-pad buffers (Pete Zaitcev)
- fix generic version of strncpy() to zero-pad buffers (Jim Paradis)
- improve ppc64 segment table entry replacement logic (Julie DeWandel)
- correct type/cast of "len" in ppc64/kernel/nvram.c (Julie DeWandel)
- implement new ppc64 RTAS system call interface (Julie DeWandel)
- increase x86 RSDT table limit in ACPI parsing (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.6.EL" date="1076320800">- fix more usb-storage bugs for Power Blade support (Julie DeWandel)
- remove extra inactive_clean_pages-- in reclaim_page() (Larry Woodman)
- return proper error codes for do_munmap() failure in mremap (Dave Jones)
- fix binfmt_elf.c problems for apps with huge bss regions (Julie DeWandel)
- update cciss driver to v2.4.50 for Smart Array 6i support (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.5.EL" date="1075975200">- prevent netdump progress output from filling up log_buf (Jeff Moyer)
- add ppc64 RAS hook at end of panic() processing (Julie DeWandel)
- correct source IP address in ICMP error message (Dave Miller)
- fix smp deadlock with pdeath_signal posting (Roland McGrath)
- add ppc64 support for /proc/ppc64/lparcfg (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.4.EL" date="1075888800">- update nfsd mode-with-acls fix for upstream conformance (Steve Dickson)
- rework usb-storage locking to avoid hangs on disconnect (Pete Zaitcev)
- fix mmio alignment error in olympic token ring driver (Julie DeWandel)
- prevent tux logger-thread shutdown problems on ppc64 (Ingo Molnar)
- add ppc64 AltiVec chip support for Power Blades (Julie DeWandel)
- eliminate multi-threaded coredump hang potential (Ingo Molnar)
- fix ppc64 segfaults with tasks &gt; 2GB in size (Julie DeWandel)
- fix usb-storage memory-allocation/iowait deadlock (Alan Cox)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.3.EL" date="1075716000">- add amd64 support for PT_GNU_STACK with exec shield (Jim Paradis)
- fix s390 raid1 sync problem w/writes at end of dev (Pete Zaitcev)
- update s390 zcrypt driver to version 1.1.4 (Pete Zaitcev)
- fix output of large /proc/pid/statm values (Mark DeWandel)
- fix output of large /proc/partitions values (Mark DeWandel)
- enable ppc64 support for JS20 Power Blades (Julie DeWandel)
- fix kernel stack memory leak on fork failures (Dave Anderson)
- fix ipv6 packet quoting problem in icmpv6_send() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.2.EL" date="1075370400">- apply Intel's x86 microcode loader update (Jim Paradis)
- enhance PCI multifunction support for ppc64 (Julie DeWandel)
- fix nfsd returning bad mode bits when acls set (Steve Dickson)
- prevent unkillable zombies from detached NPTL threads (Ingo Molnar)
- avoid missing scsi disks in /proc/partitions on detach (Jason Baron)
- correct pte calculation inside zeromap_pte_range() loop (Ben Woodard)
- add inline function PDE() to help driver backporting (Matthew Galgoci)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.1.EL" date="1074679200">- (this is the first build for RHEL 3 Update 2)
- relocate various pieces of the "undo" patch (Patch Review Committee)
- rename s390 zcrypt and zfcp driver patches (Pete Zaitcev)
- add LKML discussion to COPYING.modules (Arjan van de Ven)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.EL" date="1073556000">- fix race condition between thread creation and signals (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-8.EL" date="1073469600">- fix amd64 eflags masking in 32-bit emulation of ptrace (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-7.EL" date="1073383200">- fix numerous ppc64 problems with /proc access (Julie DeWandel)
- allow user core files larger than 2GB in size (Dave Anderson)
- add ia64 support for Crestone Peak AGP bridges (John Dennis)
- fix unaligned kernel accesses in nfs_readdir() (Steve Dickson)
- add new_len/new_addr checks in do_mremap() (Ernie Petrides)
- fix nfs O_DIRECT corruption with &gt;4GB files (Steve Dickson)
- enable bus scan for AGP ctlrs on amd64 systems (John Dennis)
- limit PCI-alloc'ed physaddrs to 4GB on HP ia64 (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-6.EL" date="1070877600">- fix ppc64 firmware updates (Julie DeWandel)
- fix sync wakeup problem (Ingo Molnar)
- add ia64 cyclone support (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-5.EL" date="1070272800">- undo rejected patches (Stephen Tweedie, Arjan van de Ven, Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.20.EL" date="1069840800">- enable NUMA support in amd64 smp configs (Jim Paradis)
- prevent oopses with tux in OOM scenarios (Ingo Molnar)
- apply several ipv6 multicast bug fixes (Dave Miller)
- assign retval in copy_process() error path (Ingo Molnar)
- add lseek-in-/proc support for s390x "ps" (Pete Zaitcev)
- redefine zone_is_highmem() for Celestica (Dave Anderson)
- fix unresolved symbols in amd64 modules (Bill Nottingham)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.19.EL" date="1069754400">- fix tg3 rx_pending limit for BCM5705/BCM5782 chips (Jeff Garzik)
- reset page error flag prior to read of new contents (Jeff Moyer)
- enable CONFIG_HOTPLUG_PCI option for ia64 configs (Doug Ledford)
- fix inactive laundry list race in ramfs_writepage() (Dave Anderson)
- avoid out_of_memory() for wired pages when there's lomem (Dave Anderson)
- conditionalize ppc64 machdep_calls change for KMI compat (Ernie Petrides)
- limit anon/cache pages scanned in refill_inactive_zone() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.18.EL" date="1069668000">- create old version (rev. 5.64) of cmpci sound driver (Tom Coughlan)
- remove ac97.o, ad1848.o, cs4232.o from unsupported (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.17.EL" date="1069063200">- fix missing use of __GFP_HIGHMEM flag in pte_alloc_one() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.16.EL" date="1068890400">- rework scsi mid-layer queuing logic to fix error handling (Doug Ledford)
- fix pci_dma_sync_sg() scatterlist arg in megaraid2 driver (Tom Coughlan)
- move more-ptes-in-rmap-pte-chain logic to its own patch (Ernie Petrides)
- tag uses of __GENKSYMS__ with KMI/ABI compat comment (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.15.EL" date="1068804000">- fix MD multipath bugs causing crashes during fail-overs (Doug Ledford)
- add chain_ptep_t and revert pte_addr_t for KMI compat (Ernie Petrides)
- restore sub-timer-tick time-of-day granularity for ia64 (Jason Baron)
- modify agpgart and drm drivers for ia64 HP ZX1 support (John Dennis)
- fix ia64 32-bit emulation for several stat-related calls (Jason Baron)
- enable amd64 use of new ips driver w/config separation (Tom Coughlan)
- update e100 network driver to version 2.3.30-k1 (Jeff Garzik)
- update e1000 network driver to version 5.2.20-k1 (Jeff Garzik)
- apply scsi whitelist updates for IBM/CNSi/NEC devices (Tom Coughlan)
- reenable varyio for aic7xxx driver (hangs were unrelated) (Jeff Moyer)
- conditionalize NVIDIA_NFORCE3 to restore KMI compat (Ernie Petrides)
- prevent two ext3 panics on corrupted filesystems (Stephen Tweedie)
- apply two minor fixes to ppc64 RAS nvram reading (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.14.EL" date="1068717600">- update ServeRAID (ips) driver to version 6.10.52 (Tom Coughlan)
- configure xmon on by default in ppc64 configs (Julie DeWandel)
- create initial s390 zcrypt driver, version 1.1.2 (Pete Zaitcev)
- remove zfcp driver from linux-modules-unsupported (Pete Zaitcev)
- revise ppc64 reliability/serviceability support (Julie DeWandel)
- reduce kernel stack usage inside nfs_readdir() (Steve Dickson)
- add gameport dependency to cmpci driver config (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.13.EL" date="1068631200">- reduce UDP retransmissions and fix slow reads for NFS (Steve Dickson)
- implement wired page lists for better ramfs handling (Larry Woodman)
- fix vfork deadlock when child process causes core dump (Ingo Molnar)
- enhance AltSysRq-M output and fix deadlock potential (Larry Woodman)
- update cmpci sound driver for some HP IPF workstations (Tom Coughlan)
- correct tq_struct struct initialization in tg3 driver (Jeff Garzik)
- fix NFS file attribute inconsistency after rename (Steve Dickson)
- prevent ia64 machine checks w/sysreport on Olympia (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.12.EL" date="1068544800">- redesign refill_inactive_zone() for smarter deactivation (Larry Woodman)
- improve page deactivation scalability w/delayed laundering (Larry Woodman)
- rework locking and timer usage in s390 ctc network driver (Pete Zaitcev)
- allow xmon to be enabled at boot-time for ppc64 debugging (Julie DeWandel)
- reverse kscand's order of anon/cache active list traversal (Larry Woodman)
- force in-lining of br_read/write_lock/unlock routines (Julie DeWandel)
- fix mistaken fall-through cases in s390 chandev driver (Pete Zaitcev)
- make a few exported symbols available to OpenGFS (Stephen Tweedie)
- fix ld/st ordering bug causing lost signal wakeups (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.11.EL" date="1068112800">- make profile=X imply nmi_watchdog=1 and fix NMI w/d bugs (Ernie Petrides)
- add lock init in scsi_get_host_dev() to fix shutdown hang (Doug Ledford)
- enable distributed interrupts by default on ppc64 iSeries (Julie DeWandel)
- improve amd64 reporting of machine check errors (Jim Paradis)
- fix disabling of autonegotiation in tg3 driver (Dave Miller)
- add image name to s390 ioctl32 debug message (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.10.EL" date="1068026400">- fix file lock ownership by NPTL threads to be process-wide (Ernie Petrides)
- upgrade megaraid driver to version 1.18k and fix isr/fw sync (Tom Coughlan)
- upgrade megaraid2 driver to version 2.00.9 and enable varyio (Tom Coughlan)
- improve scsi mlqueue handling to enable BUSY/QUEUE_FULL fix (Doug Ledford)
- correct reporting of i/o errors in ppc64 viodasd driver (Julie DeWandel)
- update acenic driver to handle enabling of jumbo frame mode (Jeff Moyer)
- fix i386 PAGE_NONE bits to prevent get_user_page() hang (Roland McGrath)
- fix ia64 show_mem() handler to use efi_memmap_walk() call (Dave Anderson)
- replace spaces in slabinfo entry name for async poll table (Matt Wilson)
- fix race condition in buffer-head memory footprint patch (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.9.EL" date="1067940000">- improve spec file robustness in %post/%preun stanzas (Florian La Roche)
- add s390x iovec length checking for 32-bit reads/writes (Matt Wilson)
- use highmem for pte/ramfs page allocation w/__GFP_WIRED (Larry Woodman)
- upgrade oprofile support with bug fixes and enhancements (Will Cohen)
- fix infinite recursion in SCSI mid-layer post-processing (Jeff Moyer)
- introduce no-auto-start-on-add handling for SCSI blacklist (Jeff Moyer)
- enable s390 support for blk stats handling for iostat -x (Pete Zaitcev)
- fix LVS timer-related hang from ip_vs_conn_expire() bug (Ernie Petrides)
- correct module init in cpqarray driver to fix insmod crash (Tom Coughlan)
- incorporate ESB PATA support and fix a pirq_routers PCI id (Jeff Garzik)
- fix nfs async write deadlock potential w/nfs_writepage() (Steve Dickson)
- fix SCSI error handling for BUSY queue status messages (Doug Ledford)
- improve ppc64 32-bit ioctl support for use by ethtool (Julie DeWandel)
- add missing unlock in ip_mc_del_src() to fix IGMP deadlock (Dave Miller)
- change ppc64 reporting of floppy capacity to be 1.44 MB (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.8.EL" date="1067421600">- fix up various problems on Nforce3-based amd64 systems (Jim Paradis)
- double number of pte addrs in rmap pte_chain structs (Larry Woodman)
- restrict slab size for kernel data structs to 2 pages (Larry Woodman)
- clean up obsolete quicklist usage for ppc64 pte pages [rejected]
- prevent readdirplus from returning hidden mount points (Steve Dickson)
- prevent lockd deadlocks caused by export table locking (Steve Dickson)
- eliminate use of parallel task_struct init macro on ia64 [rejected]
- fix broken s390x overflow checks with 32-bit F_GETLK use (Matt Wilson)
- fix SCSI errors with "mt stoptions" and IDE tape drives (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.7.EL" date="1067162400">- fix bad checksumming interaction between e100 and bridge (Jeff Garzik)
- prevent system hang by OOM killing when overcommitted (Larry Woodman)
- un-inline ext3 error function to reduce stack usage (Stephen Tweedie)
- fix several ppc64 problems with interrupt handling (Julie DeWandel)
- correct amd64 identification in /dev/oprofile/cpu_type (Jim Paradis)
- move fput() call in do_tty_hangup() to avoid oops w/kon (Alexander Viro)
- eliminate creation of never-used task_struct slab cache (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.6.EL" date="1066903200">- reduce buffer-head memory footprint from read-only files (Ingo Molnar)
- update qeth driver for reduced stack usage and bug fixes (Pete Zaitcev)
- fix s390 qeth driver again to allow tcpdump to function (Pete Zaitcev)
- add exec_mmap() locking to prevent vma lookup races (Ernie Petrides)
- rework RPC slot allocation for further NFS improvements (Steve Dickson)
- reduce frequency of RPC retransmits during NFS writes (Steve Dickson)
- make generic/ext3 file system write handling 64-bit clean (Jeff Moyer)
- allow SMP scheduling rebalancing to occur every 200 msecs (Ingo Molnar)
- prevent races during IPC semaphore set and msg queue removal (Ingo Molnar)
- fix ACPI handling to identify trigger/polarity of PCI IRQs (Jim Paradis)
- correct amd64/ia64 acpi_disabled decls for post-boot access (Jeff Moyer)
- update ppc64 viocons driver with several bug fixes (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.5.EL" date="1066298400">- move fix for PPR use in sym53c8xx driver to its own patch (Ernie Petrides)
- correct pids exported by msgctl/semctl/shmctl/fcntl calls (Ulrich Drepper)
- apply s390 lcs driver wait queue init and locking updates (Pete Zaitcev)
- enable dummy network driver use in generic s390 config file (Pete Zaitcev)
- add missing ptrace hooks for exec and vfork-done events (Bill Nottingham)
- fix SMP timer race that triggered BUG_ON() in add_timer() (Ingo Molnar)
- fix several bogus ipvs boundary checks in ftp module [rejected]
- fix vfsmount queuing in attach_mnt() for CLONE_NEWNS [rejected]
- add net_device check to prevent oops in pppoe driver [rejected]
- fix memory leak in symlink error path of /proc driver [rejected]
- fix overflow in v1_disk2mem_dqblk() quota calculation [rejected]
- increase ppc64 ramdisk size to 8192k in p/iSeries configs (Jeremy Katz)
- lower amd64 TASK_UNMAPPED_32 to increase avail address space (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.4.EL" date="1066039200">- fix ppc64 stack pointer alignment in user signal handlers (Jakub Jelinek)
- increase amd64 exception stack size to 4k to avoid overflow (Jim Paradis)
- fix ppc64 interrupt rate accounting for vmstat and /proc (Julie DeWandel)
- extend amd64 NMI watchdog timeouts to tolerate bad 2nd cpu (Jim Paradis)
- allow s390 dasd driver to use noop elevator module (Pete Zaitcev)
- add free_irq() in error path of olympic token ring driver (Matt Wilson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.3.EL" date="1065866400">- make pid fields in ucred structures hold tgid values (Ulrich Drepper)
- prevent ppc64 iSeries virtual console writes &gt; 4k (Julie DeWandel)
- control ia64 unaligned access messages with new sysctl (Jeff Moyer)
- correct SCSI data direction on cmd to spin up disks (Pete Zaitcev)
- add do_brk() TASK_SIZE and address space wrap checks (Arjan van de Ven)
- limit PPR use in sym53c8xx driver for ppc64 Zapata drives (Doug Ledford)
- list ac97.o, ad1848.o, and cs4232.o modules as unsupported (Jeff Moyer)
- clean up conditional compilation in s390 zfcp driver (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.2.EL" date="1065693600">- identify whether i686 or athlon config in oops output (Arjan van de Ven)
- remove warning in reclaim_page() unmapped page path (Ernie Petrides)
- fix several lvm error handling paths causing memory leaks [rejected]
- correct i386 smp shutdown logic when netdump is enabled (Jeff Moyer)
- fix amd64 potential data leaks on FPU save/restore errors (Jim Paradis)
- prevent aic7xxx chip resets leading to PCI parity errors (Tom Coughlan)
- remove ia64 user tty warning on unaligned accesses (Arjan van de Ven)
- fix ppc64 /proc file buf overruns in viodasd driver (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.1.EL" date="1065607200">- (this is the first build for RHEL 3 Update 1)
- avoid m/ctime update for pipe writes on r/o file systems (Stephen Tweedie)
- prevent theoretical ext3 fs corruption in ext3_read_inode (Stephen Tweedie)
- enable AGRESSIVE_IDLE_STEAL to improve scheduler balancing (Ingo Molnar)
- fix potential ppc64 lock-up on ioctl32 un/reregistering (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.EL" date="1065175200">- extend ppc64 scsi timeout values for Zapata DVD-ROM drives (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-3.EL" date="1063965600">- make sure to release viotape op structure after use (Julie DeWandel)
- disable pgd/pmd quicklists on ppc64 (Mark DeWandel)
- temporarily disable aio on sockets (Jeff Moyer)
- correctly refile inodes to make them reclaimable (Harald Hoyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-2.EL" date="1063792800">- S390: update zfcp and cio drivers (Pete Zaitcev)
- IA64: add extra check to virtual mem_map (Larry Woodman, Dave Anderson)
- initialise local variables in ide-tape &amp; ide-scsi
- cap qla2200 tcq depth to 255
- switch version number scheme to kernel-2.4.21-N.EL</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063706400">- PPC64: invalidate evicted sbl entries in the erat (Julie DeWandel)
- increase ethernet tx_queue_len to 1000 (David Miller)
- in udp_{v6_}flush_pending_frames, reset up-&gt;len too (David Miller)
- S390: CMS reserved minidisk detection (Pete Zaitcev)
- call recount_segments() on a different occasion (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063620000">- really disable exec-shield (Roland McGrath)
- reduce stack randomisation, disable brk randomisation (Ingo Molnar)
- make e1000 driver 64 bit clean (Julie DeWandel)
- minor aio corner case error condition fix (Jeff Moyer)
- AMD64: more lenient check for call workaround (Ernie Petrides)
- PPC64: disable CONFIG_XMON (Mark DeWandel)
- S390: fix CCW slab selection (Pete Zaitcev)
- fix two-disk combined mode sata (Jeff Garzik)
- move buslogic scsi driver to supported, for vmware only (Tom Coughlan)
- change viocons message from KERN_WARNING to KERN_INFO (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063360800">- VM: handle race condition in reclaim_page (Stephen Tweedie, Larry Woodman)
- PPC64: fix "log_buffer broken" xmon issue (Julie DeWandel)
- fix compiler warnings in netdump (Jeff Moyer)
- AMD64: workaround for 32 bit compat mode page fault problem (Ernie Petrides)
- IA64: make perfmon root-only (Jason Baron)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063274400">- fix smp race in rebalance_laundry_zone()</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063188000">- fix compiler warnings when hugetlbfs is disabled (Pete Zaitcev)
- fix tux performance bug (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063101600">- don't evict kernel stack seg translation on ppc64 (Julie DeWandel)
- fix callers of do_page_fault on ppc64 (Mark DeWandel)
- AMD64 munmap return value, fix lsb failure (Jeff Moyer)
- fix for PPC64 32-bit ioctl (Jim Paradis)
- bring IA64 value of MINSIGSTKSZ in line with upstream (Jakub Jelinek)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063015200">- fix potential datacorruptor in viodasd driver (Julie DeWandel)
- fix race condition in s390 dirty bit handling (Pete Zaitcev)
- limit per-cpu slab cache size
- correct 32-bit readv/writev border cases on ppc64 (Matt Wilson)
- AMD Golem IO-APIC fixup for i686 kernel on AMD64 (Jeremy Katz)
- NFS Solaris 8 acl fix (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062756000">- minor nfs permissions bugfix (Steve Dickson)
- change mprotect return value to SuS mandated value (Arjan van de Ven)
- kernel-unsupported now provides kernel-modules (Jeremy Katz)
- correct __hugemem__modules typos in rhkernel.h
- fix subtle pmd corruption error (Larry Woodman, Dave Anderson)
- fix cut'n'paste error in SATA io port reservation
- restore NFSEXP_CROSSMNT ABI compatibility (Steve Dickson)
- round up executable name field length in core file (Jakub Jelinek)
- switch off exception_trace on amd64 (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062496800">- patch to access odd last sector on ia64 (Jason Baron)
- misc fixes from upstream (Arjan van de Ven)
- fix audigy driver (Jeff Garzik)
- tunable dcache reclaim priority for tux (Ingo Molnar)
- tg3 driver update (Jeff Garzik)
- ipv6 and icmp network bugfixes (David Miller)
- fix ppc64 memory access security bug (Julie DeWandel)
- reduce memory allocated for skb (Ingo Molnar)
- small smp fix for scalable timers (Ingo Molnar)
- make s390 recognise MSDOS partitions (Pete Zaitcev)
- small smp fixes in tux (Ingo Molnar)
- make mptfusion drivers supported on 4/4 split kernel (Tom Coughlan)
- add entries to scsi whitelist (Tom Coughlan)
- minor sata/ata driver updates (Jeff Garzik)
- small fixes to viodasd driver (Julie DeWandel)
- nfs_get_root and nfs access bit patches (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062064800">- don't show interrupts in /proc/stat for ppc64 (Matt Wilson)
- make sure sync returns in a reasonable time
- PPC64: fix for boot cpu not being cpu 0 (Julie DeWandel)
- zero sized write no longer updates mtime (Matt Wilson)
- fix video bios read corruption on ia64 (Larry Woodman)
- network fixes to tg3, bonding (Jeff Garzik)
- properly reserve legacy IDE regions in sata driver (Jeff Garzik)
- fix ppc64 signal handling bugs (Mark DeWandel)
- tux fixes (Ingo Molnar)
- tgkill syscall for s390(x) (Pete Zaitcev)
- amd64 32 bit compatibility fixes (Jim Paradis)
- ppc64 32 bit compatibility fixes (Julie DeWandel)
- fix 4G/4G follow_page problem (Ingo Molnar)
- reduce memory used by VMAs and dentries (Arjan van de Ven)
- make LVM snapshotting of ext3 work reliably (Stephen Tweedie)
- make netdump play better with the nmi watchdog (Jeff Moyer)
- QLA2200: disable irq mitigation, fix off-by-one (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061805600">- seq_file /proc/interrupts for x86 too (Ingo Molnar)
- fix memory leak in ia64 exec of ia32 binaries
- check tgid not pid in scm_check_creds()  (David Miller)
- VM fixes: shm swap priority, zeromap_page_range
- workaround VFS limitations for VXFS NFS export</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061546400">- use personality for 3GB userspace on x86 -hugemem (Ingo Molnar)
- add sysctl interface for lockd (Steve Dickson)
- don't prod VGA space on HP Pinnacle systems (Larry Woodman)
- fix for 32 bit binaries on amd64 (Jim Paradis)
- add preemption point to write_some_buffers (Julie DeWandel)
- sort ACPI table to get correct device ordering on HP (Larry Woodman)
- fix refcounting bug with ipv6 addresses on netdevs (David Miller)
- add s390 syscalls for tux (Pete Zaitcev)
- md multipath enablers (Doug Ledford)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061460000">- fix process and nice time accounting (Doug Ledford)
- amd64: syscall table updates, timer robustness (Jim Paradis)
- amd64 3GB personality for 32-bit processes (Jim Paradis)
- use 256MB pagesize for hugetlbfs on ia64 (Larry Woodman)
- make sure e100 only claims ipv4 checksumming
- igmpv3/mldv2 OOPS'er fix (David Miller)
- hugetlbfs: make chown work and allow uid=X,gid=Y mount options
- make larger mmap windows work (Ernie Petrides, Ingo Molnar)
- ia64: improve ia32 compatibility (Larry Woodman)
- fix bug in rpc retry code (Steve Dickson)
- make acpi pci hotplug modulable (Jeff Moyer)
- update (trivial) to megaraid 1.18j (Tom Coughlan) 
- enable varyio on mptfusion (Tom Coughlan)
- panic on oops to prevent data corruption opportunities (Ernie Petrides)
- small iorl locking fix (Doug Ledford)
- fix ppc64 get_wchan() bad deref (Mark DeWandel)
- fix aio read into mmap()d PROT_WRITE (Jeff Moyer, Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061373600">- libata update (Jeff Garzik)
- amd64 syscalls for xattrs &amp; ACLs (Jim Paradis)
- tux fixes (Julie DeWandel, Ingo Molnar)
- via &amp; i810 audio fixes (Jeff Garzik)
- small 4G/4G split bugfixes (Ingo Molnar)
- fix sigsuspend race on x86, amd64, ia64 (Mark DeWandel)
- ia32 behavior for FP denormal exceptions on ia64 (Jason Baron)
- get the set/get of NAT bits for ia64 correct (Jason Baron)
- ipsec update, adds cast6 encryption (David Miller)
- VM update: OOM bugfix &amp; page-&gt;flags atomic updates (Rik van Riel)
- reenable serpent encryption on ppc64
- bladecenter usb-ohci support (Pete Zaitcev)
- iorl fixes (Doug Ledford)
- network bonding driver oops fix (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060768800">- DAC960 back to bigmem supported, ne2k-pci &amp; usb audio to bigmem unsupported
- netdump updates for tg3 and e1000 (Jeff Moyer)
- put a hole between stack and mmap area (Ernie Petrides)
- process time accounting updates (Doug Ledford)
- fix null characters in TUX header (Julie DeWandel, Ingo Molnar)
- display correct executable when running interpreted script
- zfcp zSeries fibrechannel driver (Pete Zaitcev)
- ipsec updates (David Miller)
- fix 4G/4G race conditions (Ingo Molnar)
- rename -bigmem kernel to -hugemem to reflect changed tradeoffs
- optionally show task states from hangcheck timer (Jason Baron)
- various small bugfixes from upstream</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060423200">- fix scalable timer race condition  (Julie DeWandel, Ingo Molnar)
- print warning on boot with &gt;16GB RAM on -smp kernel (Arjan van de Ven)
- fix for xapic issue with ServerWorks chipsets (Ernie Petrides)
- remove spurious ioctl printk on ppc64 (Mark DeWandel)
- ppc64 wchan improvement (Mark DeWandel)
- hint @pause changes for ia64
- longer scsi scan timeout on ppc64 (Julie DeWandel)
- readv/writev for raw IO (Stephen Tweedie)
- fix for easy stack/mmap collisions (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060164000">- various XAPIC related fixes (Ingo Molnar)
- correct context switch and iowait stats with HT shared runqueues
- ext3 obscure deadlock fixes (Stephen Tweedie)
- knfsd fixes: blocked lock, symlink error &amp; missing bkl  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060077600">- de_thread bugfix from 2.6 upstream  (Matt Wilson)
- viocons driver update (Julie DeWandel)
- fix VM non-overcommit mode (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059991200">- plug data leak in aio code (Jeff Moyer)
- initial list of 4G/4G unsupported modules (Tom Coughlan)
- nfs softirq race fix (Steve Dickson)
- updated IPSEC patch (David Miller)
- networking updates/fixes from 2.4.22-preX (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059904800">- drop orlov allocator for now (Arjan van de Ven)
- correct HT cpu pair detection (Arjan van de Ven)
- build zImage.partial for netbooting on pSeries (Matt Wilson)
- fix missing symbols</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059818400">- export two AIO symbols for OCFS
- disable CONFIG_DEBUG_SLAB so performance testing can start
- crosshost mmap hooks for distributed filesystems (Stephen Tweedie)
- include partially linked zImage for pSeries netboot (Matt Wilson)
- nfs highmem fix, unmap when xdr_kmap() fails (Steve Dickson)
- update megaraid2 locking to work with IORL (Com Coughlan)
- make sure to build the qla2100 driver (Tom Coughlan)
- fix cdrom ioctl 32 bit compatibility for ppc64, amd64 (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059645600">- run depmod on install of unsupported modules (Arjan van de Ven)
- fix register corruption in IA64 lazy fpu handling (Larry Woodman)
- add b44 network driver (Jeff Garzik)
- make ppc64 pci interface routines compatible (Julie DeWandel)
- allow 32 bit userland on AMD64 and PPC64 to use volumes &gt; 2GB (Jeff Moyer)
- nfsd: acl related mount and export flags (Steve Dickson)
- fix nfs exp_fodrop oops (Steve Dickson)
- fix missed signal wakeups on ppc64 (Mark DeWandel)
- smp scalable timer bugfixes (Ingo Molnar)
- workaround for a prefetch bug in some Athlon CPUs (Ernie Petrides)
- code to make more modules unsupported for 4/4 split (Arjan van de Ven)
- various spec file and config cleanups
- viopath driver fix (Julie DeWandel)
- add match for 440gx chipset bioses (Arjan van de Ven)
- move epic100 and ne2k-pci back to supported (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059472800">- updated finegrained process accounting patch (Doug Ledford)
- make iSeries compile without CONFIG_ICOM (Julie DeWandel)
- nfsd: only set -&gt;reuse for tcp sockets, not udp  (Steve Dickson)
- enable the 4G/4G split on the i686-bigmem kernel only
- sysrq support for viocons (Julie DeWandel)
- limit pci_bus size changes to ppc64 (Jeff Garzik)
- fix for signal delivery race (Ernie Petrides, Mark DeWandel)
- add ShdPnd to /proc (Ingo Molnar)
- fix de_thread() hang (Ingo Molnar)
- add kernel support for CLONE_STOPPED (Ernie Petrides)
- make sure to initialise HVC console (Julie DeWandel)
- fix _SEG abort hit in ACPI code (Larry Woodman)
- build addon drivers on amd64 and ppc64 too (Tom Coughlan)
- build IPS driver on all architectures (Tom Coughlan)
- fix a few ia32 emulation bugs for IA64 (Larry Woodman)
- enable correct/new __clear_bit macro for IA64 (Larry Woodman)
- flexible mmap allows mappings of huge executable segments (Larry Woodman)
- sysrq-w for s390 (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058436000">- have s390 cpu_relax() also include barrier  (Pete Zaitcev)
- convert ppc64 xmon traceback code to ksymoops (Matt Wilson)
- rename kstat_sum() variable with aliasing problems  (Ingo Molnar)
- fix AIO-on-hugetlbfs crash (Ingo Molnar)
- update support for IA64 Long's Peak ACPI serial ports  (Larry Woodman)
- turn on xmon for both iSeries and pSeries (Matt Wilson)
- bugfix to make CLI work correctly on iSeries (Julie DeWandel)
- SATA bugfixes (Jeff Garzik)
- enable 4G/4G split in -BOOT kernel, due to syslinux trouble</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058349600">- fix s390 compile (Pete Zaitcev)
- taint the kernel on sii6512 driver link, GPL but no source available
- handle debug registers with 4G/4G split (Ingo Molnar)
- tgkill syscall for ppc64 (Julie DeWandel)
- fix NFSD/ACL/ext3/jbd deadlock (Stephen Tweedie, Steve Dickson)
- fix maxcpus=1 installation panic fix for ppc64 (Julie DeWandel)
- IDE byteswapping io functions for ppc64 (Julie DeWandel)
- update sata driver (Jeff Garzik)
- raise the number of /proc entries (Julie DeWandel)
- sticky sysrq key with timeout (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058263200">- make SysRq-W useable on s390 (Pete Zaitcev)
- updated process accounting patch (Doug Ledford)
- siginfo_t fixes for s390x and amd64 (Jakub Jelinek)
- clustered NFS fail-over support (Steve Dickson)
- autofs4 updates and fixes
- ia64 patches to reduce cpu power/temp in idle loop (Larry Woodman)
- add irqsafe up() for LVM locking (Stephen Tweedie)
- O_DIRECT fallback to synchronous allocation in holes (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058176800">- ia64 HP iommu: add sx1000 detection
- possible bug in s390x 32-bit emulation  (Roland McGrath)
- updated ipsec patch, should fix all current ipv6 bugs  (David Miller)
- finegrained process accounting (Doug Ledford)
- ICH5 pci irq routing, and associated ids (Jeff Garzik)
- fix the machine_real_restart() reboot path on 4G/4G (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057917600">- fix amd64 agp-gart code to work around hugetlbfs debug code (Jim Paradis)
- fix ppc32 pthread_cancel (Jakub Jelinek) 
- Do not sent IGMP leave messages unless IFF_UP  (David Miller)
- software iommu for ia64 systems without hardware iommu (Jason Baron)
- fix ext3 oops fix during dio, LTP failure (Arjan van de Ven, Stephen Tweedie)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057831200">- Remove illegal calls to dst_link_failure</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057831200">- enable HT scheduler for bigmem kernel
- add tgkill syscall for x86 and ia64
- make -BOOT kernel smaller w/ modular md and CONFIG_SMALL
- rmap VM updates
- 4G/4G agpgart potential corruption fix (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057744800">- switch off exec shield everywhere
- eliminate hostfs for amd64 (Jim Paradis)
- megaraid update, mostly vendor ID (Tom Coughlan)
- shrink boot kernel by disabling some config options
- additions for the SCSI whitelist (Tom Coughlan)
- ia64 extable fix (Jason Baron)
- viocons driver upgrade (Julie DeWandel)
- another ia64 mmu context wraparound deadlock fix (Larry Woodman)
- iSeries icom debugger patch (Julie DeWandel)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057658400">- Drop io_request_lock in usb scsiglue.c:device_reset</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057658400">- fix cpu_relax for amd64 and ia64 to include a barrier (Ingo Molnar)
- restore o_direct api compatibility (Stephen Tweedie)
- fix possible ext3 deadlock in o_direct patches (Stephen Tweedie)
- ACLs for JFS (Stephen Tweedie)
- fix /proc/cpuinfo runqueue printing (Ingo Molnar)
- via audio fixes, smaller emu10k1 patch (Alan Cox, Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057572000">- fix process accounting, tux ftp passwords and si_pid (Ingo Molnar)
- 32bit compat statfs fix (Guy Streeter)
- don't serialise exit on BKL when accounting is off (Ingo Molnar)
- truncate timeouts to 32 bits on 64bit systems (Ingo Molnar)
- fix network channel bonding (Jeff Garzik)
- split netdump patch into core and net-drivers (Jeff Garzik)
- delayed tlb flushing for ia64 (Larry Woodman)
- emu10k1 driver fixes
- kksymoops for AMD64 (Jim Paradis)
- select bugfixes from 2.4 upstream (Jeff Garzik)
- OOM tweaks (Rik van Riel)
- use seq_file for /proc/interrupts on ppc64 (Mark DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057140000">- add qdio and qeth drivers for s390(x)  (Phil Knirsch)
- slab cache scale bugfix (Larry Woodman)
- S390: qdio &amp; qeth drivers (Phil Knirsch)
- hangcheck timer for ppc64 (Julie DeWandel)
- fix race conditions in ia64 ia32 compat layer (Larry Woodman)
- update megaraid, aic7xxx, cciss and cpqarray drivers (Tom Coughlan)
- nfs xdr_shift_buf, tcp client corruption and alignment (Steve Dickson)
- rhconfig.h stuff for ppc64, s390 and s390x (Matt Wilson)
- AIO on sockets</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057053600">- kiobuf optimisations (Stephen Tweedie, Larry Woodman)
- ipsec update (David Miller)
- ipvs update to deal with timer changes (David Miller)
- 4G/4G split patch optimisations (Ingo Molnar)
- hangcheck timer (Jason Baron)
- recent (AGP 3.0) agpgart support (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056967200">- semtimedop() support on s390/s390x  (Ernie Petrides)
- fix a 4G bug that triggers on systems with &gt;30 CPUs (Ingo Molnar)
- updated SCSI SMP affine queueing patch  (Arjan van de Ven)
- page hash prefetch in do_generic_file_read bugfix (Julie DeWandel)
- updates the qlogic driver to the latest (Arjan van de Ven)
- slab cache SMP scalability tweaks (Ingo Molnar)
- ACPI 2.0 for IPF and AMD64 (Jim Paradis, Larry Woodman)
- statm fixes for hugetlbfs and remap_file_pages (Jason Baron)
- acpi serial port detection (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056708000">- iseries driver updates (Julie DeWandel)
- aio scalability and 2.5 backports  (Ingo Molnar)
- SMP scalable timers (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056621600">- make qlogic driver use new scsi infrastructure (Arjan van de Ven)
- export aio kvec functions
- fix statm oops
- compile fixes 
- NFS ACL over the wire protocol extensions (Steve Dickson)
- rate limit slab pruning, to limit IPI load on SMP systems (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056448800">- scsi request lock scaling (Ingo Molnar)
- cpu affinity for scsi command processing (Ingo Molnar)
- use softirqs instead of bhs for the scsi layer (Doug Ledford)
- igmpv3 fixes and improvements (David Miller)
- oprofile for ppc64 (Will Cohen)
- Increase MAX_ADDR_LEN from 8 to 32 for Infiniband over IP (Tom Coughlan)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056362400">- per-cpu kstat arrays (Ingo Molnar)
- optimise 4G/4G tlb flushing (Ingo Molnar)
- kiobuf reclaim together with buffer reclaim (Arjan van de Ven)
- more scalable gendisk statistics (Ingo Molnar)
- nfs reconnect fixes (Steve Dickson)
- add 32-bit compatibility for ustat system call on ppc64 (Julie DeWandel)
- scalable gettimeofday (Ingo Molnar)
- hugetlbfs ppc64 &amp; s390 bits (Mark DeWandel, Pete Zaitcev)
- hugetlbfs for ia64 (Jason Baron)
- qlogic scsi driver update (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056189600">- nfs patches (Steve Dickson)
- xapic improvements, summit support (Ingo Molnar)
- fix core dump name for multithreaded programs (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056103200">- merge up to marcelo's latest</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056016800">- oom killer fixes (Larry Woodman, Rik van Riel)
- tunable VM overcommit (Rik van Riel)
- hugetlbfs for amd64 (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055930400">- updated iseries virtual drivers (Julie DeWandel)
- nfs lockd improvements (Steve Dickson)
- remap_file_pages improvements (Ingo Molnar)
- /proc/efi/symtab patch for ia64 (Larry Woodman)
- disable O_PROFILE on UP x86 machines
- allow NMI watchdog profiling frequencies up to 10kHz (Ingo Molnar)
- statm (Jason Baron)
- hugetlbfs (Ingo Molnar)
- have nfsd honour ACLs on a per-export basis (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055844000">- Enable O_PROFILE on non-SMP configs (Stephen Tweedie)
- more conservative AIC config options
- Fix BOOT kernel panic while mounting /dev/cdrom (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055757600">- merge to 2.4.21 + selected ac bits
- ipsec upgrade (David Miller)
- HT scheduler patch fix (correct sibling counting)
- make bdflush writeout smoother
- AMD64 gdb fix (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055412000">- don't include unsupported drivers in -BOOT kernel
- merge up to 2.4.21-rc8 + selected ac bits
- FIXME: sysrq for 3170, dasd, odirect &amp; odirect for nfs</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com" date="1055412000">- oprofile for s390</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055239200">- statm (Jason Baron / Julie DeWandel)
- AIO 32-bit compat for 64-bit machines (Julie DeWandel)
- only do bufferhead reclaim in extreme situations (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055152800">- Serial ATA support (Jeff Garzik)
- mtp fusion 2.05.05+ (Dave Maley)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054893600">- XATTR/ACL patches, except NFS over the wire (Stephen Tweedie)
- ipsec module autoloading (David Miller)
- remap_file_pages (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054807200">- upgrade to latest -rmap with Ernie's fixes
- sysrq+C shows the stack dump of all CPUs
- ext3 truncate fix (Stephen Tweedie)
- NFS fixes for HZ=1000 machines (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054720800">- 4G/4G split fix (Ingo Molnar)
- ppc64 fixes (Guy Streeter, Rik van Riel)
- enable oprofile on amd64
- ipsec updates (David Miller)
- fork returns pid instead of task_struct* (Julie DeWandel)
- ia64 ptrace bugfixes (Dave Anderson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054634400">- HP diva serial driver (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054548000">- NFS over TCP patches (Steve Dickson)
- switch to using ppc64pseries/ppc64iseries arches instead of
  kernel-pseries and kernel-iseries (Jeremy Katz)
- egenera scsi bus rescan patch (Jeff Garzik)
- oprofile (Graydon Hoare)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054288800">- futex requeue (Ingo Molnar)
- enable NAPI for E1000
- signal latency and scheduler improvements (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054202400">- kscand oops fix (Ingo Molnar, Rik van Riel)
- pcnet32 fixes (Julie Dewandel)
- raid autorun (Pete Zaitcev)
- turn off CONFIG_SUNDANCE_MMIO (Jeff Garzik)
- flexible mmap (Larry Woodman)
- ppc64 fixes (Matt Wilson, Guy Streeter)
- loop softirq 10 times before giving up (Ingo Molnar)
- O_DIRECT for NFS (Steve Dickson)
- prevent md from shutting down active arrays (Doug Ledford)
- rmap updates, inode reclaim &amp; higher order allocations (Rik van Riel)
- network channel bonding (Jeff Garzik)</changelog><changelog author="Jim Paradis &lt;jparadis@redhat.com&gt;" date="1054116000">- Re-enable x86_64 in build
- x86_64-specific updates for exec-shield
- Bring in improved "nonx" support for x86_64 from upstream</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1054116000">- Hush s390 printks upon user SIGSEGV by default. It can be enabled back with
  a sysctl kernel.userprocess_debug.
- Enable optional 3270 console mode on s390.</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053684000">- get rid of vsyscall page (Arjan van de Ven)
- fix missing symbol copy_str_fromuser_size</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053424800">- exec-shield updates to fix hang-on-boot on some systems (Ingo Molnar)
- temporarily disabled the architectures, which got broken by exec-shield updates
- fix for LTP sigprocmask02 failure (Matt Wilson)
- ppc64 updates (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053338400">- pagecache scalability patch (Ingo Molnar)
- IPC semaphore scalability patch (Ingo Molnar)
- ppc64 updates (Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052992800">- exec-shield (Ingo Molnar)
- AMD64 ACPI updates (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052906400">- reenable O_DIRECT, O_DIRECT fixes and superbh-aio (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052820000">- vma merging (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052733600">- nmi profiler
- VM updates: rmap, dma zone isolation
- tux (Ingo Molnar)
- ext3 stall fixes (Ingo Molnar)
- e1000 fixes (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052474400">- config files overhaul (Arjan van de Ven)
- fix bug in mlock patch
- IPVS (Dave Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052388000">- import IO elevator changes from gingin
- critical VM fix
- matrox framebuffer patch for pseries (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052301600">- hammer nptl fixes (Ulrich Drepper)
- 4G/4G split (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052215200">- upgrade to 2.4.21-rc1-ac4 (minus -ac acpi and xapic changes)
- drop nfs patches since those seem to be in -ac</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052128800">- larger message buffer size + boot option (Mark DeWandel)
- AMD64: tls handling, coredump fixes (Jim Paradis)
- SMP &amp; highmem VM fixes (Ben LaHaise)
- HT+NUMA scheduler (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051956000">- ext3 orphan cleanup fix (Ernie Petrides)
- s390 affinity fixes (Pete Zaitcev)
- i386 vsyscall DSO changes (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051869600">- bugfixes and config changes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051783200">- enable semtimedop for other architectures (Ernie Petrides)
- large pci bus numbers (Julie DeWandel)
- bugfixes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051610400">- igmpv3 (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051524000">- generic 32bit compat stuff + amd64/ppc64/ipf pieces (Matt Wilson)
- clustered apic (XAPIC) support (Ingo Molnar)
- ppc64 architecture updates (Matt Wilson, Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051264800">- ppc64 fixes</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051178400">- collapse ipsec into one patch (David Miller)
- ppc64 build fix (Matt Wilson)
- improve smp scheduler fairness (Ingo Molnar)
- allow mlock for normal users, up to ulimit (Ingo Molnar)
- AMD64 port (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051092000">- clean up mechanism to pass extra CFLAGS so we don't override what's
  already there
- merge ia64 build stuff (Larry Woodman)
- merge varyio + superbh (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051005600">- merge up to 2.4.21-rc1
- IA64: virtual mem_map, acpi updates, netdump update, pte-highmem &amp; fealnx
- IA64: architecture specific patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050919200">- import davem's ipsec patch pile
- ppc64 kallsyms and dump_fpu patches (Matt Wilson)
- rmap updates (x86_64 &amp; bufferhead reclaim)
- ppc64 ptrace patch (Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050660000">- open up patch namespace 2000-5000 for network protocol changes
- renumber existing patches in that range</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050573600">- make sure to actually apply the rmap-updates patch
- iowait statistics
- ppc64 code merge (Mark &amp; Julie DeWandel)
- ppc64 build scripts (Matt Wilson)
- raise symlink recursion level to 8 (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050487200">- merge up to marcelo's latest
- pte-highmem bits for x86-64 and ppc64</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050400800">- merge up to 2.4.21-pre7-ac1
- drop semtimedop patches (now in -ac)
- drop nfs xprt_fixes, fix_softirq, d_drop and nfs-readeof (merged in -pre7)
- add !CONFIG_QUOTA compile fix for 2.4.21-pre7-ac1</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1050314400">- add LCS driver (endemic to s390)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050314400">- add rmap VM
- add kunmap_atomic debugging patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050141600">- remove dir.c part of NFS kmap_atomic patch for now
- using strlen as local variable name in nfs code kills, literally</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050055200">- merge S390(x) back in  (Pete Zaitcev)
- fix NFS kmap_atomic patch
- sched.c patch to disable interrupts in wake_forked_task  (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049968800">- AIO infrastructure  (Ben LaHaise)
- update NFS kmap_atomic patch  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049882400">- semtimedop patches  (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049796000">- I know understand linux-2.4.20-nfs-readeof.patch, so I merged it
- netdump update (Dave Anderson)
- 64 bit pci &amp; elf loader fix (Mark &amp; Julie)
- nptl whitespace patches, folded into nptl patch (Arjan van de Ven)
- rediff linux-2.4.18-smallpatches.patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049709600">- merge NFS patches by Steve Dickson (blame me for NFS kmap_atomic patch)
- split x86 syscall stuff out into separate patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049536800">- fix nptl patch, now it boots</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049450400">- port linux-2.4.20 o1-nptl.patch from gingin
- rediff a few patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049277600">- update linux-modules-unsupported (with Arjan)
- fix up the list a second time to fix module dependencies</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049191200">- copy -head into new AS3 branch
- remove i586 build
- remove 7.x compatibility (linux-2.4.9-fstat.patch)
- architecture patches get more breathing room (100 - 500)
- reserve patch numbers 1000 - 2000 for VM
- patch numbers 2000 - 5000 for bugfixes, changes and updates to
  existing drivers and filesystems
- remove inode reclaim patch (will be merged later as part of rmap)
- remove io priority scheduler (still experimental)
- remove nfs patches (linux-2.4.20-nfs-cto.patch,
  linux-2.4.20-nfs-access.patch &amp; linux-2.4.20-nfs-rdplus.patch)
- remove linux-2.4.18-gericom.patch
- update netdump from RH9 branch</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1048240800">- Added three NFS performance patches</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048240800">- add a timer for aging requests up</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048154400">- fix the sorting in the io elevator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048068000">- remerge ext3 orlov allocator and enable
- more priority io elevator infrastructure work</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1047117600">- merge ext3 orlov allocator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046772000">- go to 2.4.21-pre5-ac1
- split the rpm into a primary fileset and secondary (rare modules) fileset</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046253600">- go to 2.4.21-pre4-ac6
- drop lots of patches
- trim changelog to not have 2000, 2001 and 2002 anymore</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045476000">- downgrade pwc webcam driver one notch to the last known working version
- work around vm livelock
- make the cciss driver not enable irq's in it's irq handler</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1045130400">- fix for shared statistic &lt; 0</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045130400">- Signal fixes for LSB testsuite
- merge patch to fix init=/bin/sh
- 2.4.21-pre4-ac4 bugfixes (mostly IDE crashes)</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044784800">- merge 2.4.21-pre4-ac3 bugfixes</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1044352800">- Add ext3 fix for truncating negative i_blocks</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1044266400">- add oopsmeharder for debugging hard hangs</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044266400">- merge rmap15d
- set the sbp2 command buffer to 64 elements instead of 8</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1043834400">- merge tcp stall fix from DaveM
- merge bugfixes from 2.4.21-pre4</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1042452000">- Merge in the ACL and XATTR patches from the UL and BestBits trees.</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1042279200">- Merge in the LVM pvmove fix to current tree</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1042020000">- add AMD Golem fixup</changelog></package>
<package pkgid="c19384f19ad14e2deb2a2e542a8e2a1601748152" name="kernel-smp-unsupported" arch="x86_64"><version epoch="0" ver="2.4.21" rel="32.0.1.EL.XFS"/><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1117101600">- added SGI XFS patch set</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.0.1.EL" date="1116237600">- prevent shared memory lock/unlock w/o permissions (Dave Anderson)
- prevent mlock() resource limit bypass w/shm locking (Ernie Petrides)
- fix data corruption from pte_clear() races on &gt;4GB x86's (Larry Woodman)
- fix arg/env access in ELF core dumping and /proc reads (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.EL" date="1113559200">- fix data corruption w/ext3 xattr on 64-bit arches (Jason Baron)
- validate LCP frame lengths in PPP async handling (Dave Miller)
- enable forcedeth net driver builds in x86 configs (Jim Paradis)
- isolate IP fragment queues among various callers (Dave Miller)
- prevent busy inodes for symlinks after unmounts (Don Howard)
- revise PCI device ids extending ICH7 support (John Linville)
- work around broken xw4300 BIOS AHCI BAR setup (John Linville)
- add protocol validation in net bluetooth driver (John Linville)
- enable software watchdog timer in s390,x configs (Jan Glauber)
- fix data corruption w/uselib() on bad ELF libs (Ernie Petrides)
- add USB tablet init delay in wacom_probe() (Kristian Høgsberg)
- prevent core dumps with non-readable ELF interps (Dave Anderson)
- add maxevents validation in epoll_wait() handling (Ernie Petrides)
- add len validation in /dev/random poolsize sysctl (Ernie Petrides)
- correct size of ia64 syscall table initialization (Jason Baron)
- correct x86_64 user-mode i/o port validation (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-31.EL" date="1110448800">- fix missing ppc64 netdump/diskdump symbols (Nobuhiro Tachino)
- prevent ia64 unwind from traversing off stack (Jason Baron)
- disable 3w-9xxx driver builds on ppc64 (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-30.EL" date="1110362400">- fix obscure oops in tty init_dev() handling (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-29.EL" date="1109844000">- incorporate urgent late-breaking SATA fixes (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-28.EL" date="1109152800">- add more USB device support to visor driver (Pete Zaitcev)
- implement clustered APIC support for x86_64 (Larry Woodman)
- constrain x86 MSR writes based on cpu model (Jason Baron)
- increase max superbh size for performance (Stephen Tweedie)
- add locking to prevent oops in md_seq_show() (Doug Ledford)
- restore missing ia64 panic_on_oops handling (Tatsuo Uchida)
- implement Ethernet PCI quirk for HP xw9300 (Jim Paradis)
- revert NFS flock() avoidance to -27.7.EL (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.17.EL" date="1108980000">- rework NFS flock() avoidance w/FS_WANT_FLOCK for GFS (Ken Preslan)
- prevent inode corruption from delete/lookup races (Wendy Cheng)
- preserve registers for ia64 16-byte atomic ops (Geoff Gustafson)
- update SCSI whitelist for LSI/HP/STK/EMC devices (Tom Coughlan)
- disable vary_io in ips driver to avoid ctlr hangs (Tom Coughlan)
- correct handling of 2-TB device partitions (Peter Martuccelli)
- update support for ia64 perfmon facility (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.16.EL" date="1108720800">- implement diskdump support for SATA piix/promise (Nobuhiro Tachino)
- correct /proc/mtrr size values on EM64T platforms (Larry Woodman)
- restore page permissions after writes from ptrace() (Don Howard)
- fix /proc parent pids from multi-threaded forks (Ernie Petrides)
- enable software watchdog timer support on s390,x (Jan Glauber)
- update tg3 network driver to version 3.22RH (John Linville)
- incorporate 3w-9xxx driver version 2.24.00.011fw (Adam Manthei)
- correct ending boundary check in filemap_sync() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.15.EL" date="1108548000">- add e100 driver PCI device ids for ICH7 support (John Linville)
- restore obsolete but ignored e100 module params (John Linville)
- implement user-mode (gdb) access to ia64 gate page (Jason Baron)
- fix x86_64 FPU IP and DP values in SIGFPE context (Larry Woodman)
- add qla2200 module parameter to use NVRAM RIO val (Tom Coughlan)
- update 3w-xxxx driver to 1.02.00.037 w/.033 backup (Adam Manthei)
- fix crashes in video Firewire (ieee1394) driver (Bastien Nocera)
- prevent info leaks into ext3 journal disk blocks (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.14.EL" date="1108461600">- enhance AIO performance over NFS w/FS_AIO_SYNC hook (Steve Dickson)
- defer e100_tx_timeout() work from interrupt context (John Linville)
- correct IPV6 DST entry release to prevent route leak (Dave Miller)
- ignore MTU updates from invalid IPV6 ndisc packets (Dave Miller)
- add relevant PCI device ids to extend ICH7 support (John Linville)
- reduce system pauses during heavy page laundering (Larry Woodman)
- fix audit logging of paths w/predicate filter usage (Neil Horman)
- enable building of unsupported fusion isense module (Adam Manthei)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.13.EL" date="1108375200">- increase dxfer size limit for ppc64 SG_IO ioctl32 (David Howells)
- eliminate tty line discipline usage/switching races (Jason Baron)
- fix autofs recognition of ghosted direct map updates (Jeff Moyer)
- fix sg driver race between cmd completion and close (Tom Coughlan)
- prevent e100 data corruption from v.3.0.27-k2 update (John Linville)
- upgrade SATA support (core, libata, new/old drivers) (John Linville)
- implement diskdump support for sym53c8xx adapter (Yuichi Nagahama)
- add USB support for Wacom Cintiq/Intuos3 tablets (Kristian Høgsberg)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.12.EL" date="1107943200">- update e100 network driver to version 3.3.6-k2 (John Linville)
- correct cpu id macro for dual-core Opteron support (Jim Paradis)
- add "numa=off" message on x86_64 OOM kills w/NUMA (Larry Woodman)
- improve user/system timer tick accounting on s390,x (Pete Zaitcev)
- prevent EAGAIN errs from interrupted TCP recv() calls (Dave Miller)
- update cciss disk driver to version v2.4.54.RH1 (Adam Manthei)
- eliminate diskdump cpu id from frozen list (Nobuhiro Tachino)
- fix user-space access bug in USB vicam ioctl (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.11.EL" date="1107424800">- incorporate Emulex driver ioctl module version 1.0.13 (Tom Coughlan)
- eliminate potential call_lock deadlock with diskdump (Tatsuo Uchida)
- fix potential kiobuf_lock deadlock in free_kiovec() (Larry Woodman)
- add L2 cache descriptor for EM64T Irwindale processor (Neil Horman)
- prevent mmap() syscalls from choosing NULL mappings (Rik van Riel)
- include bounce buffer pages in show_mem() output (Larry Woodman)
- add I2C driver support for ICH5 in i2c-i801.c (John Linville)
- correct parport_pc errors on insmod failures (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.10.EL" date="1106906400">- fix futex_wait() race condition that allowed app hang (Ingo Molnar)
- add/correct write barrier placement in timer routines (David Howells)
- add x86_64 NMI switch support to debug kernel hangs (Yuichi Nagahama)
- restore CIV/LVI offset operation in i810_audio driver (John Linville)
- update e1000 network driver to version 5.6.10.1-k2 (John Linville)
- prevent bogus BUG_ON during multi-threaded core dump (Roland McGrath)
- fix x86_64 crash in huge_page_release() w/SHM_HUGETLB (Larry Woodman)
- fix possible mem corruption from /proc/kcore access (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.9.EL" date="1106647200">- fix core dumping over NFS mounts with "intr" option (Roland McGrath)
- prevent multi-threaded app hang from sys_wait4() race (Ingo Molnar)
- restore e1000 support for Intel PCI device id 1014 (John Linville)
- add ac97 quirk entries for HP xw6000/xw6200/xw8000 (John Linville)
- update b44 network driver to upstream version 0.95 (John Linville)
- revert NFS silly-delete and rpciod-hang patches (Steve Dickson)
- fix panics while backing up LVM snapshots (Heinz Mauelshagen)
- fix oops in redirect_target() on DHCP refresh (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.8.EL" date="1105696800">- rework ia64 INIT switch stacks for clean tracebacks (Tatsuo Uchida)
- fix USB raced timeout errors and ohci_complete_add() (Pete Zaitcev)
- add O_DIRECT handling in LVM driver handling (Heinz Mauelshagen)
- downgrade wait4() SIGCHLD/SIG_IGN warning message (Ingo Molnar)
- eliminate potential VMA list races with do_brk() (Dave Anderson)
- ignore ICMP Source Quench messages in tcp_v4_err() (Dave Miller)
- prevent VMA overlap crashes in insert_vm_struct() (Jason Baron)
- move flock() avoidance from NFS up to F/S layer (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.7.EL" date="1105437600">- fix 32-compat alt-stack signal handling on x86_64 (Geoff Gustafson)
- add initialization of ppc64 EEH error buffer size (David Howells)
- make ppc64 xmon work properly with Power5 console (David Howells)
- prevent infinite sync loop from NFS ESTALE writes (Steve Dickson)
- update 8139too network driver w/recent 2.4 fixes (John Linville)
- avoid netfilter oops when ip_conntrack is unloaded (Dave Miller)
- fix potential rpciod hangs during NFS sillydelete (Steve Dickson)
- avoid "No locks available" errors w/flock() on NFS (Ken Preslan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.6.EL" date="1104919200">- fix x86 phys proc ids for non-clustered APIC systems (Geoff Gustafson)
- return EINVAL on e100/e1000 rx-mini/rx-jumbo settings (John Linville)
- fix i810_audio regression from modified ICH6 PCI ids (John Linville)
- prevent race conditions in add_wait_queue_cond() macros (Jeff Moyer)
- fix FAT32 file system corruption w/writing 8M files (Alexander Viro)
- fix derivation/presentation of PHB unit ids on ppc64 (David Howells)
- close OpenFirmware stdin device at boot on ppc64 (David Woodhouse)
- fix 32-bit-compat regression in CMSG validations (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.5.EL" date="1103796000">- add "CommitLimit" data to /proc/meminfo output (Frank Hirtz)
- allow autofs to expire mounts on ppc64 arch (Jeff Moyer)
- add 3c59x EEPROM_RESET for 3c900 Boomerang (John Linville)
- ignore PTE mapping status in page_anon() (Larry Woodman)
- fix SIOCGIFHWADDR handling for zero addr_len (Dave Miller)
- add netdump support for x86_64, ia64, ppc64 (Dave Anderson)
- correct overcommit accounting on fork failure (Frank Hirtz)
- raise default ia64/ia32e swiotlb size to 64M (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.4.EL" date="1103709600">- add network CMSG validation checks (Dave Miller)
- fix data struct leak in ip_options_get() (Dave Miller)
- fix IGMP vulnerabilities in ip[6]_mc_source() (Dave Miller)
- fix e_phnum binfmt_elf loader vulnerability (Dave Anderson)
- clean x86_64 32-bit-compat syscall numbers (Jim Paradis)
- prevent ia64 floating point reg val leakage (Jason Baron)
- add USB io_edgeport driver size check (Peter Martuccelli)
- enable softirq deferral for x86_64 arch (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.3.EL" date="1102586400">- add data/param length sanity checks in smbfs (Alexander Viro)
- prevent /proc/&lt;PID&gt;/cmdline env data disclosure (Dave Anderson)
- make tulip_stop_rxtx() wait for DMA termination (John Linville)
- fix mm_stat regression introduced in -20.13.EL (Rik van Riel)
- correct return value from vlan_dev_change_mtu() (John Linville)
- serialize datagram read w/appropriate semaphore (Dave Miller)
- fix keyboard regression introduced in -24.EL (Peter Martuccelli)
- enable mmap/mprotect PROT_EXEC for legacy apps (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-26.2.EL" date="1101722400">- fix USB problems with keyboards and ia64 oopses (Pete Zaitcev)
- add i810 PCI IDs for nforce3/CK804 audio devices (Jim Paradis)
- fix ppc64 viodasd driver dev naming/limit bugs (David Howells)
- prevent tg3 fiber link bounces w/auto-negotiation (Dave Miller)
- add ac97 quirk handling for i810_audio driver (John Linville)
- prevent incorrect OOM killing with iscsi usage (Larry Woodman)
- create kiobuf cache to reduce lowmem contention (Larry Woodman)
- fix yet another binfmt_elf loader vulnerability (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.1.EL" date="1100512800">- (this is the first build for RHEL 3 Update 5)
- implement open() recovery from NFS ESTALE errors (Neil Horman)
- clean up warnings from lpfc and lpfc_703 Makefiles (Tom Coughlan)
- fix nessus-induced kernel panic with auditing (Peter Martuccelli)
- update 3c59x driver to LK1.1.18 and fix reset bug (John Linville)
- fix ext3 O_DIRECT bug in orphan list handling (Stephen Tweedie)
- flush cached dirty pages on NFS reads w/O_DIRECT (Steve Dickson)
- allow ia64 kernel unaligned access msg suppression (Neil Horman)
- correct test for performing buffer-head reclaim (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.EL" date="1100253600">- fix binfmt_elf loader vulnerabilities (Jim Paradis, Dave Anderson)
- limit kernel data struct slabs to single-page allocs (Larry Woodman)
- update Emulex driver to 7.1.14 (backup still 7.0.3) (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-24.EL" date="1100080800">- fix several ppc64 problems with signal catching (David Woodhouse)
- fix several bugs in /proc/ppc64/lparcfg driver (David Howells)
- fix possible diskdump hangs w/megaraid2 driver (Tatsuo Uchida)
- add support for IBM EM64T-based Groucho blade (Peter Martuccelli)
- fix regression in USB BIOS-&gt;kernel hand-off support (Pete Zaitcev)
- fix regression in ia64 kernel stack unwind handling (Don Howard)
- fix regression w/agpgart support of i8xx chipsets (Larry Woodman)
- add support for BLKSSZGET ioctl in cciss driver (Tom Coughlan)
- disable iSCSI builds in ppc64 and s390* configs (Tom Coughlan)
- update Emulex driver to 7.1.13 (backup still 7.0.3) (Tom Coughlan)
- correct SCSI whitelist for Chaparral FR1422 devices (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-23.EL" date="1098957600">- prevent kswapd from getting stuck in prune_icache() (Larry Woodman)
- fix ppc64 single-stepping into signal handlers (David Woodhouse)
- fix corruption from user stack expansion races (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-22.EL" date="1098093600">- prevent add/removal races in SCSI open handling (Doug Ledford)
- fix U3 agpgart regression with Intel i8xx chipsets (Dave Jones)
- update SCSI whitelist for IBM 1722/1724 devices (Tom Coughlan)
- correct TSS descriptor limit checking for x86_64 (Jim Paradis)
- add nforce3/CK804 device support and fix ACPI bug (Jim Paradis)
- add support for "forcedeth" net driver version 0.28 (Jim Paradis)
- enable diskdump support in amd64/ia32e configs (Nobuhiro Tachino)
- restore/improve linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- add missing page_cache_release() in launder_page() (Larry Woodman)
- update Emulex driver to 7.1.11 (backup still 7.0.3) (Tom Coughlan)
- add new USB ids to support latest Wacom tablets (Kristian Høgsberg)
- remove drivers/net/tun.o from unsupported list (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-21.EL" date="1096538400">- fix potential PTE race in do_anonymous_page() (Rik van Riel)
- add "Committed_AS" data to /proc/meminfo output (Frank Hirtz)
- revise DMA zone paging thresholds for x86_64 (Larry Woodman)
- prevent /proc/scsi/scsi oops during probes (David Woodhouse)
- avoid kswapd hangs via free_more_memory() hooks (Rik van Riel)
- update megaraid2 driver to 2.10.8.2 w/2.10.6 backup (Adam Manthei)
- fix do_notify_parent() panic from ptrace death race (Roland McGrath)
- fix large core file support on 64-bit architectures (Dave Anderson)
- enable tux on ia64 and increase max tux threads to 16 (Ingo Molnar)
- fix ia64/s390,x single-stepping w/signal handlers (David Woodhouse)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.14.EL" date="1096452000">- fix hang in SCSI starvation management code (David Howells)
- update SCSI whitelist for NETAPP LUN devices (Wendy Cheng)
- fix s390 cio handling during ESS fail-overs (Pete Zaitcev)
- update Emulex driver to 7.1.8 w/7.0.3 backup (Tom Coughlan)
- update Qlogic driver to 7.01.01 w/7.00.03 backup (Tom Coughlan)
- correct unlock/free order in proc_lookupfd() (Ernie Petrides)
- use ACPI for PCI interrupt routing on ia32e (Jim Paradis)
- allow cpus to boot w/APIC IDs &gt; 8 on ia32e (Jim Paradis)
- fix pid allocation when pid_max &gt; 32768 (Ernie Petrides)
- fix regs in multi-threaded ia64 core dumps (Keiichi Mori)
- enable sym53c8xx driver for ppc64 iSeries (David Howells)
- fix ac97 depmod errors w/hugemem configs (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.13.EL" date="1096365600">- fix aic79xx_osm.h/3c59x.c changes in prior rev (Tachino/Linville)
- allow for larger nfsd block sizes on some archs (Steve Dickson)
- fix possible aacraid driver panic in aac_info() (Tom Coughlan)
- fix xdr argsize check to handle writes &gt;= 2^31 (Steve Dickson)
- update e1000 network driver to version 5.3.19-k2 (John Linville)
- apply several cciss driver fixes (to 2.4.52.RH2) (Adam Manthei)
- fix x86_64 versions of cpu capability test macros (Jim Paradis)
- fix ppc64 HPTE memory corruption race condition (Rik van Riel)
- add sys_epoll support on s390,x (Stephen Tweedie, Pete Zaitcev)
- prevent keyboard.c warnings from mouse clicks (Norm Murray)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.12.EL" date="1096279200">- improve slab cache page reaping heuristics (Larry Woodman)
- implement diskdump support for x86_64 arch (Nobuhiro Tachino)
- add ia64 INIT trigger switch support for debugging (Tatsuo Uchida)
- fix several problems in handling of AIO on pipes (Jeff Moyer)
- update fixes for LTP read02 test hangs with tmpfs (Alexander Viro)
- fix x86_64 single-stepping out of signal handlers (Jim Paradis)
- increase size of ppc64 RTAS error log buffer (David Howells)
- increase max possible kNFSD lockd cookie size (Steve Dickson)
- backport 3c59x fixes for mii-tool problems w/10Mb (John Linville)
- incorporate Cisco's iscsi_sfnet initiator driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.11.EL" date="1095933600">- implement diskdump support for megaraid2 adapter (Tatsuo Uchida)
- update ips driver to version 7.10.18 w/7.00.15 backup (Tom Coughlan)
- correct max page aging interval boundary in kscand() (Larry Woodman)
- add ppc64 support for ptrace() with PT_SINGLESTEP (David Woodhouse)
- update e100 network driver to version 3.0.27-k2 (John Linville)
- fix LTP read02 test hangs when tmpfs is in use (Alexander Viro)
- get proc_dir_entry reference in proc_lookup() (Alexander Viro)
- add exports of several AIO-related interfaces (Larry Woodman)
- reduce swapping during excessive pagecache use (Larry Woodman)
- implement statfs64() syscall on x86 for NFS use (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.10.EL" date="1095847200">- implement early USB hand-off (BIOS-&gt;kernel) support (Pete Zaitcev)
- fix stack pointer calculation in x86 show() handling (Jeff Moyer)
- prevent interference between flock/POSIX lock types (Frank Hirtz)
- update pcnet32 network driver to version 1.30c (John Linville)
- add export of block_commit_write() f/s interface (Larry Woodman)
- implement diskdump support for dpt_i2o adapter (Tatsuo Uchida)
- update mptfusion driver to version 2.05.16.02 (Adam Manthei)
- move disk_dump_notifier_list to diskdumplib.c (Nobuhiro Tachino)
- update s390 zfcp driver to revision 5.31.2.11+ (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.9.EL" date="1095674400">- fix occasional ibmvscsic driver insmod crash (David Howells)
- disable linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- prevent double slashes in symlink auditing (Peter Martuccelli)
- fix overzealous compat32 setsockopt conversions (David Woodhouse)
- backport tulip driver fixes from upstream 2.4.28 (John Linville)
- update tg3 network driver to version 3.10RH (John Linville)
- implement sysctl to force igmp protocol versions (Neil Horman)
- add diskdump performance improvement info (Nobuhiro Tachino)
- fix s390 iucv lost connections and ping hangs (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.8.EL" date="1095588000">- prevent diskdump deadlock in case of die() recursion (Tatsuo Uchida)
- add x86/x86_64 support for ptrace() w/PT_SINGLESTEP (Roland McGrath)
- fix x86/x86_64 single-stepping into signal handlers (Roland McGrath)
- increase x86 value for MAX_MP_BUSSES definition to 260 (Ingo Molnar)
- eliminate ia64 potential for scheduler runq deadlock (Larry Woodman)
- add support for /proc/sys/kernel/mem_nmi_panic sysctl (Dave Anderson)
- prevent keyboard-initiated sysrq hangs in handle_sysrq() (Jeff Moyer)
- fix intermittent netdump hangs from cpu-frozen messages (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.7.EL" date="1095415200">- fix premature OOM killing change added in prior rev (Larry Woodman)
- backport vlan driver fixes from upstream 2.4.28-rc1 (John Linville)
- add _sb_findmap symbol export in s390/s390x kernels (Pete Zaitcev)
- add ppc64 support for 32-bit sendfile64() syscall (David Howells)
- fix 32-bit IPC_INFO shmctl() syscalls for ppc64 (David Howells)
- upgrade libata/SATA support to current 2.4 bits (John Linville)
- avoid USB device resets of shared/busy interfaces (Pete Zaitcev)
- fix miscellaneous problems in ppc64 icom driver (David Howells)
- fix ip_queue_maxlen sysctl for ip[6]_queue modules (Neil Horman)
- add module parm for max entries in NFS_ACL replies (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.6.EL" date="1095156000">- prevent OOM killer from kicking in prematurely (Larry Woodman)
- avoid NMI watchdog crashes during sysrq-m usage (Wendy Cheng)
- add auditing support for ia64 clone2 syscall (Peter Martuccelli)
- correct sign of auditing error codes for ia64 (Peter Martuccelli)
- implement ia64 auditing 32-bit-disable sysctl (Peter Martuccelli)
- fix ia64 faults w/stale VHPT-generated TLB entries (Dave Anderson)
- fix invalid x86_64 checksums for multicast packets (Mike Gahagan)
- fix incorrect blocking bug inside wakeup_kswapd() (Larry Woodman)
- validate appropriate media type in DVD drives (Doug Ledford)
- reduce s390 stack usage in qeth/qdio drivers (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.5.EL" date="1094810400">- prevent scenarios that lead to hang of kswapd (Larry Woodman)
- add locking for access to /proc/bus/usb/devices (Pete Zaitcev)
- correct x86 rescheduling to handle apm=power-off (Ingo Molnar)
- fix OOM killer locking and mm referencing holes (Larry Woodman)
- pin ia64 mapping for idle proc stack during boot (Larry Woodman)
- fix warning throttle for amd64 stack overflow check (Neil Horman)
- fix content lengths when using tux gzip compression (Ingo Molnar)
- add auditing support for pread/pwrite syscalls (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.4.EL" date="1094724000">- prevent bogus data in /proc/scsi/ibmvscsi/* (David Howells)
- update tg3 network driver to version 3.9RH (John Linville)
- improve ramfs memory alloc w/scarce highmem (Larry Woodman)
- correct several values in /proc/ppc64/lparcfg (David Howells)
- allow dirty page rebalancing under mem pressure (Rik van Riel)
- prevent memory leak in scsi_build_commandblocks() (Doug Ledford)
- fix potential kswapd deadlock w/disk quota usage (Larry Woodman)
- increase MAX_IO_APICS from 8 to 32 for x86_64 arch (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.3.EL" date="1094205600">- fix various error path bugs in bcm5820 driver (John Linville)
- validate addresses used with /dev/kmem accesses (Neil Horman)
- eliminate IPSEC tunnel leaks when using IPComp (Dave Miller)
- add auditing support for utimes() syscalls (Peter Martuccelli)
- prevent netconsole freeze w/cable dis-/re-connect (Jeff Moyer)
- correct reboot_cpu validation for "reboot=s&lt;n&gt;" (Doug Ledford)
- fix mem/irq clean-up in olympic tokenring driver (Neil Horman)
- update network bonding driver to version 2.6.0 (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.2.EL" date="1094032800">- add maps/rlimits output with print-fatal-signals=2 (Ingo Molnar)
- backport ac97 sound support from upstream 2.4.27 (John Linville)
- eliminate kernel stack data leaks from USB drivers (Mark Cox)
- fix interrupt status mask in AMD PCnet32 driver (David Howells)
- fix module loading problems in ibmvscsic driver (David Howells)
- fix x86 shared runq mapping when ACPI data is bad (Bernd Schmidt)
- disable enhanced error handling on PCI-ISA bridges (David Howells)
- add memory-mapped i/o support to i810_audio driver (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.1.EL" date="1093860000">- (this is the first build for RHEL 3 Update 4)
- backport r8169 network driver changes from 2.4 (John Linville)
- update i810_audio sound driver to version 1.01 (John Linville)
- convert USB UHCI driver warning to debug message (Pete Zaitcev)
- backport 2.6 PROT_GROWSDOWN/UP mprotect() support (Jakub Jelinek)
- lower ppc64 console logging level of RTAS messages (David Howells)
- fix ppc64 handling of "smt-emabled=off" boot option (David Howells)
- correct socket sndbuf accounting w/IP_MULTICAST_LOOP (Neil Horman)
- reduce x86_64 user stack start randomization to 16K (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.EL" date="1092823200">- change TARGET_CPUS on x86_64 to include all on-line cpus (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-19.EL" date="1092304800">- fix possible races/overflows in file offset handling (Alexander Viro)
- correct logging of boot progress messages on Power5 (David Howells)
- extend ppc64 EEH support for other types of devices (David Howells)
- fix ibmveth driver to properly shut down and restart (David Howells)
- fix several races and overflows in ppc64 RTAS driver (David Howells)
- backport "acpi=noirq" support to work around Nocona hangs (Don Howard)
- conditionalize pbn_hp_diva to fix serial driver oops (Matthew Galgoci)
- add amd64 GART entry guard mappings for PCI mis-prefetch (Jim Paradis)
- upgrade SATA support again to resolve several problems (Jeff Garzik)
- qualify ia32e IRQ affinity disable with BIOS flag check (Jim Paradis)
- fix eeh_check_failure() on ppc64 to be interrupt safe (David Howells)
- correct ppc64 EEH macros to use appropriate data size (David Howells)
- fix x86/ia64 no-wait handling in smp_call_function() (Larry Woodman)
- fix "Filter target 0x203 not known ..." audit msgs (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-18.EL" date="1090404000">- prevent s390 mlock hangs with follow_page() rework (Ernie Petrides)
- fix Power5 initialization and handling of RAS IRQs (David Howells)
- fix ppc64 viocons driver deadlocks with printk() (David Howells)
- apply eh_timeout, netdump, cli fixes in diskdump (Tatsuo Uchida)
- add skip_mapped_pages tuning for page eviction (Stephen Tweedie)
- fix initrd's effect on ppc64 mem_end calculation (David Howells)
- allow HT support on ppc64 systems with single cpu (David Howells)
- backport v2.0.8 aic7xxx driver h/w support for Dell (Tom Coughlan)
- correct ppc64 device node searching in hvsi driver (David Howells)
- fix KMI compat problem w/pgprot_t in x86 NX support (Jim Paradis)
- resurrect mptfusion driver backup version 2.05.05 (Tom Coughlan)
- disable IRQ affinity setting on some ia32e systems (Jim Paradis)
- update SCSI whitelist for Dot Hill SANnet/StorEdge (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-17.EL" date="1089280800">- account for zone holes in big hash table allocator (Stephen Tweedie)
- prevent reserved stack space overflow of mmap_top (Ernie Petrides)
- fix USB crash in scan_async() with EHCI hardware (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-16.EL" date="1088848800">- enable exec-shield and add x86 NX support (Ingo Molnar, Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.19.EL" date="1088762400">- add owner check in inode_change_ok() for gid changes (Ernie Petrides)
- fix race in finish_task_switch() between wakeup/exit (Ernie Petrides)
- remove Samsung CD-ROM SN-124 from IDE DMA blacklist (Tom Coughlan)
- update e1000 network driver to version 5.2.52-k3 (John Linville)
- add auditing support for semtimedop syscalls (Peter Martuccelli)
- fix tasklet and locking bugs in Power5 hvsi driver (David Howells)
- fix megaraid2 handling of TUR cmds with SCSI CD-ROM (Adam Manthei)
- update SCSI whitelist for HP NS E1200-160 router (Tom Coughlan)
- prevent x86 read_ldt() from reading beyond kmap (Ernie Petrides)
- force single loadable segment in ia64 kernels (Jakub Jelinek)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.18.EL" date="1088157600">- implement ia64 work-around for TLB fetch timeout MCA (Larry Woodman)
- fix Power3 interrupt initialization in ppc64 setup (David Howells)
- correct info msg, prevent double panic in diskdump (Tatsuo Uchida)
- defend against NULL "mm" ptrs in page_referenced() (Rik van Riel)
- fix miscellaneous audit subsystem problems (Peter Martuccelli)
- prevent crash with tux CGI execution on x86_64 (Ingo Molnar)
- add installer info to SATA sx8 block driver (Jeff Garzik)
- turn on vary_io flag in SCSI ips driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.17.EL" date="1087984800">- allocate big system hash tables w/bootmem allocator (David Howells)
- prevent loading aic7xxx_old when aic7xxx is in use (Doug Ledford)
- implement stat() recovery from NFS ESTALE errors (Steve Dickson)
- fix raw/O_DIRECT i/o bug with unmapped pages (Stephen Tweedie)
- correct another locking hole in RAID1 handling (Doug Ledford)
- fix __x86_64__ conditional in megaraid2.c driver (Adam Manthei)
- fix unresolved symbols on ia64 in cciss driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.16.EL" date="1087898400">- make NFS sillydelete wait for unlink completion (Steve Dickson)
- prevent EIO w/concurrent O_DIRECT+buffered i/o (Stephen Tweedie)
- upgrade SATA support (core, libata, and drivers) (Jeff Garzik)
- implement futex() FUTEX_CMP_REQUEUE op (Al Viro, Pete Zaitcev)
- update b44 network driver to version 0.93 (John Linville)
- avoid unix_stream_sendmsg() ENOBUFS errors (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.15.EL" date="1087812000">- improve SCSI mid-layer error handling w/sdev_retry_q (Doug Ledford)
- eliminate rw-semaphore races between waiter/wakeup (David Howells)
- add locking and fix accounting bug in RAID1 handling (Doug Ledford)
- backport Carmel sx8.c driver from upstream 2.4 base (John Linville)
- rename ppc64-squadrons-* patches to ppc64-power5-* (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.14.EL" date="1087639200">- introduce support for IBM Squadrons/Power5 systems (David Howells)
- update aacraid driver to 1.1.5-2339 w/1.1.2 backup (Adam Manthei)
- allow sys_remap_file_pages() on unlocked ramfs VMAs (Larry Woodman)
- fix diskdump hangs during resets with aic79xx driver (Tatsuo Uchida)
- fix possible data corruption when using SHM_HUGETLB (Larry Woodman)
- set QLogic HbaApiNode proc file permissions to 0600 (Tom Coughlan)
- add IRQ blocking/restoring in add_gendisk/del_gendisk (Jeff Needle)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.13.EL" date="1087466400">- fix problem causing PCI bus 255 to be missing on ia64 (Ben Woodard)
- make nfs_statfs() recognize/handle fs size overflows (Steve Dickson)
- update QLogic driver to 7.00.03-RH1 w/6.07.02 backup (Tom Coughlan)
- allow procfs to utilize more dynamic inode numbers (David Howells)
- prevent inappropriate "unexpected IO-APIC" messages (Ernie Petrides)
- avoid lost dirty page bits in s390/s390x VM handling (Pete Zaitcev)
- fix ACPI SCI interrupt defaults and add kernel params (Jim Paradis)
- fix user-space access bugs in acpi/airo/decnet/sound (Alexander Viro)
- remove drivers/net/starfire.o from unsupported list (Ernie Petrides)
- fix mm_struct mem leak in copy_process() error path (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.12.EL" date="1087293600">- correct s390/s390x tests for PT_AUDITED flag (Peter Martuccelli)
- update e100 network driver to version 2.3.43-k1 (John Linville)
- update megaraid2 driver to 2.10.6 w/2.10.1.1 backup (Adam Manthei)
- add x86_64 auditing support for 32-bit-compat (Peter Martuccelli)
- fix ia64 unwind handling for UNW_INSN_SETNAT_MEMSTK (Jason Baron)
- update cciss driver to v2.4.52 for several fixes (Tom Coughlan)
- fix variable block mode tape handling in st driver (Tom Coughlan)
- incorporate latest Emulex fibre channel driver (Tom Coughlan)
- fix USB EHCI problem with BIOS-to-host handoff (Pete Zaitcev)
- update SCSI whitelist for DDN/Xyratex/SanDisk/CBOX3 (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.11.EL" date="1087207200">- upgrade to latest autofs4, remove from unsupported list (Jeff Moyer)
- fix memory corruption bug in audit driver code (Peter Martuccelli)
- store adjusted KSP value in ia64 diskdump support (Tatsuo Uchida)
- update e1000 network driver to version 5.2.52-k1 (John Linville)
- update ips driver to version 7.00.15 w/6.11.07 backup (Adam Manthei)
- implement USB device interlock between ioctls/SCSI-ops (Pete Zaitcev)
- update tg3 driver to version 3.6RH for upcoming chipsets (Dave Miller)
- downgrade several PCI cache line size debugging messages (Jim Paradis)
- correct x86_64 32-bit-compat support for AIO syscalls (Jeff Moyer)
- prevent FPU exception handling hangs on x86/x86_64 (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.10.EL" date="1086948000">- give wait.func highest priority in wake_up_filtered() (Larry Woodman)
- reduce system time when using sys_remap_file_pages() (Larry Woodman)
- enable CONFIG_SOFT_WATCHDOG module for ppc64 configs (David Howells)
- improve page allocation to avoid unnecessary swapping (Rik van Riel)
- implement diskdump support for ia64 with mptfusion (Tatsuo Uchida)
- disable native ia32 support for ia64 Montecito cpus (Jason Baron)
- save/restore P4/ia32e perf registers for oprofile (Will Cohen)
- fix oprofile ESCR_SET_EVENT_SELECT() event mask (Will Cohen)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.9.EL" date="1086775200">- update s390 zcrypt driver to version 1.2.1 (Pete Zaitcev)
- update network tg3 driver to version 3.5RH (Dave Miller)
- eliminate separate ia32e oprofile processor id (Will Cohen)
- update SCSI whitelist for IBM 2105/2145 devs (Doug Ledford)
- avoid EAGAIN errors on blocking UDP sockets (Steve Dickson)
- avoid putting locked inodes on dirty list (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.8.EL" date="1086688800">- decouple NFS O_DIRECT handling for performance gain (Steve Dickson)
- export page_is_ram() interface for amd64/ia32e arch (Jim Paradis)
- enable CONFIG_SCSI_SATA_* options in x86_64 configs (Jim Paradis)
- update mptfusion driver to 2.05.16 w/2.05.11.03 backup (Adam Manthei)
- fix nopage_sequential_readahead() and filemap_sync() (Larry Woodman)
- fix USB EHCI driver to avoid Squadrons install oops (Pete Zaitcev)
- add x86 NMI trigger switch support for debugging (Yuichi Nagahama)
- add dmi_blacklist[] entry for "Intel NA440BX DP" (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.7.EL" date="1086602400">- apply some minor scsi_dump_status() format tweaks (Doug Ledford)
- implement SCSI support for dynamic add (hot plug) (Doug Ledford)
- upgrade lvm driver logic to version 1.0.8-2 (Heinz Mauelshagen)
- fix x86_64 definition for inlined ffs() function (Jim Paradis)
- preserve VM_MAYEXEC for executable stack support (Jim Paradis)
- add extra SLBIEs for ppc64 Power5 DD2.0 errata (David Howells)
- add ppc64 32-bit compat for TIOCGICOUNT/MIWAIT (David Howells)
- hold file struct ref when removing POSIX locks (Steve Dickson)
- fix window scaling bug in tcp_ack_update_window() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.6.EL" date="1086343200">- make fsync() flush all pending NFS updates to disk (Steve Dickson)
- complete ia64 support for multiple I/O port spaces (Larry Woodman)
- fix sending of IP broadcast frames with TTL of zero (Neil Horman)
- prevent context switch storms under high VM loads (Larry Woodman)
- fix sigaltstack() errors w/JVM on hugemem kernels (Roland McGrath)
- add locking and improve output in scsi_dump_status() (Doug Ledford)
- add size boundary checking in scsi_resize_dma_pool() (Doug Ledford)
- fix SCSI request struct leak on command init failures (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.5.EL" date="1084528800">- overhaul ia64 SAL/MCA subsystem (Ben Woodard)
- enable x86_64 32-bit UID support (Jim Paradis)
- add initial diskdump support (Nobuhiro Tachino)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.4.EL" date="1084356000">- reduce chance of "VFS: Busy inodes after unmount." errs (Steve Dickson)
- convert "uaddr2" arg ptr in s390x futex() compat syscall (Pete Zaitcev)
- add ppc64 32-bit compat handler for PE_LOCKED_COPY ioctl (David Howells)
- update s390 dasd driver with several recent bug fixes (Pete Zaitcev)
- fix amd64 NUMA node scanning for Northbridge systems (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.3.EL" date="1084183200">- prevent exp_stopfodrop() oops during cluster failover (Steve Dickson)
- make nfs_file_commit() always flush the entire file (Steve Dickson)
- fix pcnet32 driver's MAC address selection on ppc64 (Julie DeWandel)
- backport /dev/random driver fixes for missed wakeups (Mark DeWandel)
- fix hang w/SoundBlaster 16-bit sampling w/odd count (Ernie Petrides)
- make s390 tape driver specify GPL module license type (Pete Zaitcev)
- correct buffer len value in ppc64 pSeries ipr driver (David Howells)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.2.EL" date="1083664800">- enable booting on 8-way Opteron systems (Jim Paradis)
- fix 32-bit-compat truncate64() on x86_64 (Jim Paradis)
- correct promiscuous mode counter handling (Dave Miller)
- support 128-GB ia64 systems w/HP zx1 chipset (Larry Woodman)
- add export of sys_ioctl() global symbol on s390x (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.1.EL" date="1083578400">- (this is the first build for RHEL 3 Update 3)
- reenable/fix linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- clean up file locks when NFS clients receive signals (Steve Dickson)
- complete ia64-specific LAuS syscall auditing support (Mark DeWandel)
- prevent NULL pointer dereference in page_referenced() (Rik van Riel)
- fix max sectors argument in lvm_snapshot_alloc() (Heinz Mauelshagen)
- allow AGP bus scanning to execute for all architectures (John Dennis)
- fix page_referenced() rss limit checks w/unmapped pages (Rik van Riel)
- correct locking and cr/lf problems in usbserial driver (Pete Zaitcev)
- add /proc/cpuinfo support for new ppc64 processors (Julie DeWandel)
- fix sense data handling on certain SCSI cmd retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.EL" date="1082541600">- fix clobbering of /proc/cpuinfo vendor_id on x86_64 (Jim Paradis)
- correct MCAST_MSFILTER/IP_MSFILTER size checking (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-14.EL" date="1081936800">- disable linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- prevent symlink buffer overflow in ISO-9660 fs (Ernie Petrides)
- check for skb overrun in IPV4/IPV6 IGMP handling (Dave Miller)
- fix possible hang in rebalance_laundry_zone() (Larry Woodman)
- correct zone_wired[] initialization for NUMA (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-13.EL" date="1081332000">- fix several critical libata bugs (Jeff Garzik)
- correct IPSEC XFRM policy ref counting (Dave Miller)
- add amd64/ia32e parsing for "acpi=off" arg (Jim Paradis)
- update tg3 driver to v3.1 for several fixes (Dave Miller)
- fix SCSI whitelist for Hitachi/HP DFx00, Apple Xserve (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-12.EL" date="1080295200">- add USB support for Handspring Treo 600 PDA syncing (Matthew Galgoci)
- clear state for CPEs during ia64 MCA SAL error logging (Ben Woodard)
- prevent DMA resource leak in QLogic driver error path (Tom Coughlan)
- change default QLogic driver device queue depth to 64 (Tom Coughlan)
- replace fabricated cciss drive geometry w/ENXIO error (Tom Coughlan)
- update SCSI whitelist for HP SureStore/StorageWorks (Tom Coughlan)
- disable CONFIG_ACPI_DEBUG in amd64/ia32e configs (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-11.EL" date="1078740000">- add yet another Intel ICH6 SATA PCI id (Jeff Garzik)
- fix ref counting in copy_process() error path (Larry Woodman)
- remove ia64 support for /proc/bus/mckinley/bitmap (Jason Baron)
- correct depmod versioning for unsupported modules (Ernie Petrides)
- prevent data corruption in ia32e phys_proc_id[] info (Larry Woodman)
- change default value for inactive_clean_percent to 30 (Larry Woodman)
- enable improved version of s390 on-demand timer patch (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-10.EL" date="1078221600">- incorporate late-breaking libata fixes (Jeff Garzik)
- enable amd64 syscall for tux support (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.17.EL" date="1078135200">- reduce s390 idle overhead with on-demand timer patch (Pete Zaitcev)
- complete ia64 NPTL support for 32-bit-EL executables (Jason Baron)
- add several ia64 syscall table entries for 32-bit-EL (Jason Baron)
- upgrade libata/SATA support, delete ich5-sata.patch (Jeff Garzik)
- check for mremap/vmtruncate race in move_one_page() (Jason Baron)
- prevent ia64 NaT-bit corruption during sig catching (Jason Baron)
- fix amd64 get_mtrr() parsing error with &gt;4GB memory (Jim Paradis)
- change amd64 default behavior to avoid TSC timer use (Jim Paradis)
- force s390utils upgrade to prevent zipl seg fault (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.16.EL" date="1078048800">- restore varyio capability in mptfusion driver update (Adam Manthei)
- enhance SCSI mid-layer queuing for indefinite retries (Doug Ledford)
- add ia64 reg reloads for 32-bit-EL strace -f support (Jason Baron)
- fix ia64 core dump support for 32-bit-EL executables (Jason Baron)
- add SCSI whitelist devs with BLIST_RETRY_ABORTED_CMD (Doug Ledford)
- remove stack-in-interpreter check in binfmt_elf.c (Julie DeWandel)
- clear all flags in exec_usermodehelper() for kmod (Alexander Viro)
- fix aacraid command completion (rq corruption) bugs (Tom Coughlan)
- correct cciss_proc_tape_report() type in flags decl (Tom Coughlan)
- enable USB-2.0-hub-based mice/keyboards to function (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.15.EL" date="1077962400">- fix amd64 oprofile linkage problem in ia32e support (Ernie Petrides)
- update ips driver to version 6.11.07 w/6.10.52 backup (Tom Coughlan)
- add size checks to DRM ATI r128 driver ioctl handling (John Dennis)
- avoid megaraid2 irq_disable calls for mem-mapped ctlrs (Tom Coughlan)
- upgrade firmware imbedded in QLogic driver to 3.02.24 (Tom Coughlan)
- correct ia64 memory accounting in overcommit mode 2 (Larry Woodman)
- implement softirq deferral to limit kernel stack depth (Ingo Molnar)
- reduce kernel stack usage in a couple of tux functions (Ingo Molnar)
- fix shared extended attribute ref counting in ext3 (Stephen Tweedie)
- clear SCSI sense data buffer between eh retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.14.EL" date="1077789600">- add .RH1 suffix to cciss driver version v2.4.50 (Tom Coughlan)
- implement initial LAuS syscall auditing support (Mark DeWandel)
- introduce GFS enablers for locking and sendfile ops (Ken Preslan)
- update QLogic driver to 6.07.01 w/6.06.00b11 backup (Tom Coughlan)
- improve netdump reliability w/asynchronous IPI param (Jeff Moyer)
- add ICH6 DSP audio support to i810_audio driver (Jeff Garzik)
- apply SCSI whitelist updates for several devices (Tom Coughlan)
- fix odd byte tape i/o handling in sym53c8xx driver (Tom Coughlan)
- correct minimum nfsd version that supports acls (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.13.EL" date="1077703200">- allow concurrent NFS direct i/o to same file if !append (Steve Dickson)
- introduce support for new Intel 64-bit ia32e processor (Larry Woodman)
- update mptfusion driver to 2.05.11.03 w/2.05.05 backup (Adam Manthei)
- remove fs/binfmt_misc.o from linux-modules-unsupported (Jason Baron)
- fix ia64 predicate register use in sig trampoline code (Jason Baron)
- add oprofile cpu type recognition for ia32e processor (Will Cohen)
- update e1000 network driver to version 5.2.30.1-k1 (Jeff Garzik)
- add more Intel PCI ids to match upstream 2.4 (Jeff Garzik)
- add ICH6 PATA support, PCI ids, irq routing (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.12.EL" date="1077530400">- add deferred page freeing for intr-context unmap_kvec() (Jeff Moyer)
- update megaraid2 driver to v2.10.1.1 w/v2.00.9 backup (Tom Coughlan)
- fix ppc64 pte hash table locking to avoid deadlocks (Julie DeWandel)
- fix ia64 data TLB init to prevent random boot-up hangs (Jason Baron)
- fix ia64 RNat register corruption with alt sig stacks (Jason Baron)
- allow smaller ia64 sig stacks in ia32 emulation layer (Jason Baron)
- backport ncpfs fixes to eliminate var-length arrays (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.11.EL" date="1077271200">- backport cisco aironet driver from 2.6.3-rc4 (Matthew Galgoci)
- update tg3 driver to v2.7 to fix status reg handling (Dave Miller)
- correct lost jiffies logic for x440/5 cyclone timer (Bernd Schmidt)
- fix open() error clean-up for unsupported O_DIRECT (Stephen Tweedie)
- prevent ia64 crashes when unmapping hugetlb pages (Jason Baron)
- add ppc64 processor support for future PPC970+ (Julie DeWandel)
- rework ppc64 32-bit-compat iptables support (Julie DeWandel)
- fix func ptr test in ethtool_set_ringparam() (Jeff Garzik)
- disable linux-2.4.21-scsi-affine-queue.patch (Doug Ledford)
- improve scsi_allow_ghost_devices description (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.10.EL" date="1077098400">- fix amd64 iommu bug causing data corruption on &gt;4GB systems (Jim Paradis)
- return EINVAL for unsupported ioctl32 syscalls on ppc64 (Julie DeWandel)
- remove incorrect BUG() call in __remove_inode_page() (Stephen Tweedie)
- fix s390 ctc driver problem causing build system hangs (Pete Zaitcev)
- fix s390 qeth driver error path to reset write_busy (Pete Zaitcev)
- update s390 zfcp driver to fix miscellaneous bugs (Pete Zaitcev)
- apply upstream nfs fixes for acl error handling (Steve Dickson)
- prevent kernel stack data leak via /dev/rtc (Ernie Petrides)
- allow AIO operations on sockets for non-inet (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.9.EL" date="1076925600">- restore genksyms_smp_prefix setting for non-x86 builds (Ernie Petrides)
- display/log memory stats whenever there's an OOM kill (Larry Woodman)
- update tg3 driver to v2.6, the latest upstream version (Jeff Garzik)
- update net bonding driver to v2.4.1, latest upstream (Jeff Garzik)
- fix irq, mem, printk, strtol bugs in cciss driver (Tom Coughlan)
- wait for board ready after hot add, cciss driver (Tom Coughlan)
- enable cciss adapter prefetch for x86 platforms (Tom Coughlan)
- add preserve_arg0 handling for ia32 emulation (Larry Woodman)
- fix ppc64 compat support for quota syscall (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.8.EL" date="1076580000">- remove Power-Blade-specific def for USB TEAC floppy (Julie DeWandel)
- fix s390 crash in iucv driver on connection shutdown (Pete Zaitcev)
- fix ia64 ACPI parsing for multinode IDE devs on x455 (Jim Paradis)
- fix amd64 core dumping of multithreaded 32-bit apps (Jim Paradis)
- fix s390 oprofile conditional and zero top addr bits (Will Cohen)
- add ipr driver v1.0.3 for IBM's PPC RAID adapters (Tom Coughlan)
- add {alloc,free}_netdev(), list macro, tg3 PCI ids (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.7.EL" date="1076407200">- restrict /proc/tty/driver directory access to root (Jeff Moyer)
- allow non-standard usr/sys VM splits at 2G/2G, 1G/3G (Ingo Molnar)
- extend existing ppc64 RTAS firmware flash interface (Mark DeWandel)
- fix ppc64 version of strncpy() to zero-pad buffers (Julie DeWandel)
- fix s390/x version of strncpy() to zero-pad buffers (Pete Zaitcev)
- fix generic version of strncpy() to zero-pad buffers (Jim Paradis)
- improve ppc64 segment table entry replacement logic (Julie DeWandel)
- correct type/cast of "len" in ppc64/kernel/nvram.c (Julie DeWandel)
- implement new ppc64 RTAS system call interface (Julie DeWandel)
- increase x86 RSDT table limit in ACPI parsing (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.6.EL" date="1076320800">- fix more usb-storage bugs for Power Blade support (Julie DeWandel)
- remove extra inactive_clean_pages-- in reclaim_page() (Larry Woodman)
- return proper error codes for do_munmap() failure in mremap (Dave Jones)
- fix binfmt_elf.c problems for apps with huge bss regions (Julie DeWandel)
- update cciss driver to v2.4.50 for Smart Array 6i support (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.5.EL" date="1075975200">- prevent netdump progress output from filling up log_buf (Jeff Moyer)
- add ppc64 RAS hook at end of panic() processing (Julie DeWandel)
- correct source IP address in ICMP error message (Dave Miller)
- fix smp deadlock with pdeath_signal posting (Roland McGrath)
- add ppc64 support for /proc/ppc64/lparcfg (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.4.EL" date="1075888800">- update nfsd mode-with-acls fix for upstream conformance (Steve Dickson)
- rework usb-storage locking to avoid hangs on disconnect (Pete Zaitcev)
- fix mmio alignment error in olympic token ring driver (Julie DeWandel)
- prevent tux logger-thread shutdown problems on ppc64 (Ingo Molnar)
- add ppc64 AltiVec chip support for Power Blades (Julie DeWandel)
- eliminate multi-threaded coredump hang potential (Ingo Molnar)
- fix ppc64 segfaults with tasks &gt; 2GB in size (Julie DeWandel)
- fix usb-storage memory-allocation/iowait deadlock (Alan Cox)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.3.EL" date="1075716000">- add amd64 support for PT_GNU_STACK with exec shield (Jim Paradis)
- fix s390 raid1 sync problem w/writes at end of dev (Pete Zaitcev)
- update s390 zcrypt driver to version 1.1.4 (Pete Zaitcev)
- fix output of large /proc/pid/statm values (Mark DeWandel)
- fix output of large /proc/partitions values (Mark DeWandel)
- enable ppc64 support for JS20 Power Blades (Julie DeWandel)
- fix kernel stack memory leak on fork failures (Dave Anderson)
- fix ipv6 packet quoting problem in icmpv6_send() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.2.EL" date="1075370400">- apply Intel's x86 microcode loader update (Jim Paradis)
- enhance PCI multifunction support for ppc64 (Julie DeWandel)
- fix nfsd returning bad mode bits when acls set (Steve Dickson)
- prevent unkillable zombies from detached NPTL threads (Ingo Molnar)
- avoid missing scsi disks in /proc/partitions on detach (Jason Baron)
- correct pte calculation inside zeromap_pte_range() loop (Ben Woodard)
- add inline function PDE() to help driver backporting (Matthew Galgoci)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.1.EL" date="1074679200">- (this is the first build for RHEL 3 Update 2)
- relocate various pieces of the "undo" patch (Patch Review Committee)
- rename s390 zcrypt and zfcp driver patches (Pete Zaitcev)
- add LKML discussion to COPYING.modules (Arjan van de Ven)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.EL" date="1073556000">- fix race condition between thread creation and signals (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-8.EL" date="1073469600">- fix amd64 eflags masking in 32-bit emulation of ptrace (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-7.EL" date="1073383200">- fix numerous ppc64 problems with /proc access (Julie DeWandel)
- allow user core files larger than 2GB in size (Dave Anderson)
- add ia64 support for Crestone Peak AGP bridges (John Dennis)
- fix unaligned kernel accesses in nfs_readdir() (Steve Dickson)
- add new_len/new_addr checks in do_mremap() (Ernie Petrides)
- fix nfs O_DIRECT corruption with &gt;4GB files (Steve Dickson)
- enable bus scan for AGP ctlrs on amd64 systems (John Dennis)
- limit PCI-alloc'ed physaddrs to 4GB on HP ia64 (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-6.EL" date="1070877600">- fix ppc64 firmware updates (Julie DeWandel)
- fix sync wakeup problem (Ingo Molnar)
- add ia64 cyclone support (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-5.EL" date="1070272800">- undo rejected patches (Stephen Tweedie, Arjan van de Ven, Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.20.EL" date="1069840800">- enable NUMA support in amd64 smp configs (Jim Paradis)
- prevent oopses with tux in OOM scenarios (Ingo Molnar)
- apply several ipv6 multicast bug fixes (Dave Miller)
- assign retval in copy_process() error path (Ingo Molnar)
- add lseek-in-/proc support for s390x "ps" (Pete Zaitcev)
- redefine zone_is_highmem() for Celestica (Dave Anderson)
- fix unresolved symbols in amd64 modules (Bill Nottingham)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.19.EL" date="1069754400">- fix tg3 rx_pending limit for BCM5705/BCM5782 chips (Jeff Garzik)
- reset page error flag prior to read of new contents (Jeff Moyer)
- enable CONFIG_HOTPLUG_PCI option for ia64 configs (Doug Ledford)
- fix inactive laundry list race in ramfs_writepage() (Dave Anderson)
- avoid out_of_memory() for wired pages when there's lomem (Dave Anderson)
- conditionalize ppc64 machdep_calls change for KMI compat (Ernie Petrides)
- limit anon/cache pages scanned in refill_inactive_zone() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.18.EL" date="1069668000">- create old version (rev. 5.64) of cmpci sound driver (Tom Coughlan)
- remove ac97.o, ad1848.o, cs4232.o from unsupported (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.17.EL" date="1069063200">- fix missing use of __GFP_HIGHMEM flag in pte_alloc_one() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.16.EL" date="1068890400">- rework scsi mid-layer queuing logic to fix error handling (Doug Ledford)
- fix pci_dma_sync_sg() scatterlist arg in megaraid2 driver (Tom Coughlan)
- move more-ptes-in-rmap-pte-chain logic to its own patch (Ernie Petrides)
- tag uses of __GENKSYMS__ with KMI/ABI compat comment (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.15.EL" date="1068804000">- fix MD multipath bugs causing crashes during fail-overs (Doug Ledford)
- add chain_ptep_t and revert pte_addr_t for KMI compat (Ernie Petrides)
- restore sub-timer-tick time-of-day granularity for ia64 (Jason Baron)
- modify agpgart and drm drivers for ia64 HP ZX1 support (John Dennis)
- fix ia64 32-bit emulation for several stat-related calls (Jason Baron)
- enable amd64 use of new ips driver w/config separation (Tom Coughlan)
- update e100 network driver to version 2.3.30-k1 (Jeff Garzik)
- update e1000 network driver to version 5.2.20-k1 (Jeff Garzik)
- apply scsi whitelist updates for IBM/CNSi/NEC devices (Tom Coughlan)
- reenable varyio for aic7xxx driver (hangs were unrelated) (Jeff Moyer)
- conditionalize NVIDIA_NFORCE3 to restore KMI compat (Ernie Petrides)
- prevent two ext3 panics on corrupted filesystems (Stephen Tweedie)
- apply two minor fixes to ppc64 RAS nvram reading (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.14.EL" date="1068717600">- update ServeRAID (ips) driver to version 6.10.52 (Tom Coughlan)
- configure xmon on by default in ppc64 configs (Julie DeWandel)
- create initial s390 zcrypt driver, version 1.1.2 (Pete Zaitcev)
- remove zfcp driver from linux-modules-unsupported (Pete Zaitcev)
- revise ppc64 reliability/serviceability support (Julie DeWandel)
- reduce kernel stack usage inside nfs_readdir() (Steve Dickson)
- add gameport dependency to cmpci driver config (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.13.EL" date="1068631200">- reduce UDP retransmissions and fix slow reads for NFS (Steve Dickson)
- implement wired page lists for better ramfs handling (Larry Woodman)
- fix vfork deadlock when child process causes core dump (Ingo Molnar)
- enhance AltSysRq-M output and fix deadlock potential (Larry Woodman)
- update cmpci sound driver for some HP IPF workstations (Tom Coughlan)
- correct tq_struct struct initialization in tg3 driver (Jeff Garzik)
- fix NFS file attribute inconsistency after rename (Steve Dickson)
- prevent ia64 machine checks w/sysreport on Olympia (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.12.EL" date="1068544800">- redesign refill_inactive_zone() for smarter deactivation (Larry Woodman)
- improve page deactivation scalability w/delayed laundering (Larry Woodman)
- rework locking and timer usage in s390 ctc network driver (Pete Zaitcev)
- allow xmon to be enabled at boot-time for ppc64 debugging (Julie DeWandel)
- reverse kscand's order of anon/cache active list traversal (Larry Woodman)
- force in-lining of br_read/write_lock/unlock routines (Julie DeWandel)
- fix mistaken fall-through cases in s390 chandev driver (Pete Zaitcev)
- make a few exported symbols available to OpenGFS (Stephen Tweedie)
- fix ld/st ordering bug causing lost signal wakeups (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.11.EL" date="1068112800">- make profile=X imply nmi_watchdog=1 and fix NMI w/d bugs (Ernie Petrides)
- add lock init in scsi_get_host_dev() to fix shutdown hang (Doug Ledford)
- enable distributed interrupts by default on ppc64 iSeries (Julie DeWandel)
- improve amd64 reporting of machine check errors (Jim Paradis)
- fix disabling of autonegotiation in tg3 driver (Dave Miller)
- add image name to s390 ioctl32 debug message (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.10.EL" date="1068026400">- fix file lock ownership by NPTL threads to be process-wide (Ernie Petrides)
- upgrade megaraid driver to version 1.18k and fix isr/fw sync (Tom Coughlan)
- upgrade megaraid2 driver to version 2.00.9 and enable varyio (Tom Coughlan)
- improve scsi mlqueue handling to enable BUSY/QUEUE_FULL fix (Doug Ledford)
- correct reporting of i/o errors in ppc64 viodasd driver (Julie DeWandel)
- update acenic driver to handle enabling of jumbo frame mode (Jeff Moyer)
- fix i386 PAGE_NONE bits to prevent get_user_page() hang (Roland McGrath)
- fix ia64 show_mem() handler to use efi_memmap_walk() call (Dave Anderson)
- replace spaces in slabinfo entry name for async poll table (Matt Wilson)
- fix race condition in buffer-head memory footprint patch (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.9.EL" date="1067940000">- improve spec file robustness in %post/%preun stanzas (Florian La Roche)
- add s390x iovec length checking for 32-bit reads/writes (Matt Wilson)
- use highmem for pte/ramfs page allocation w/__GFP_WIRED (Larry Woodman)
- upgrade oprofile support with bug fixes and enhancements (Will Cohen)
- fix infinite recursion in SCSI mid-layer post-processing (Jeff Moyer)
- introduce no-auto-start-on-add handling for SCSI blacklist (Jeff Moyer)
- enable s390 support for blk stats handling for iostat -x (Pete Zaitcev)
- fix LVS timer-related hang from ip_vs_conn_expire() bug (Ernie Petrides)
- correct module init in cpqarray driver to fix insmod crash (Tom Coughlan)
- incorporate ESB PATA support and fix a pirq_routers PCI id (Jeff Garzik)
- fix nfs async write deadlock potential w/nfs_writepage() (Steve Dickson)
- fix SCSI error handling for BUSY queue status messages (Doug Ledford)
- improve ppc64 32-bit ioctl support for use by ethtool (Julie DeWandel)
- add missing unlock in ip_mc_del_src() to fix IGMP deadlock (Dave Miller)
- change ppc64 reporting of floppy capacity to be 1.44 MB (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.8.EL" date="1067421600">- fix up various problems on Nforce3-based amd64 systems (Jim Paradis)
- double number of pte addrs in rmap pte_chain structs (Larry Woodman)
- restrict slab size for kernel data structs to 2 pages (Larry Woodman)
- clean up obsolete quicklist usage for ppc64 pte pages [rejected]
- prevent readdirplus from returning hidden mount points (Steve Dickson)
- prevent lockd deadlocks caused by export table locking (Steve Dickson)
- eliminate use of parallel task_struct init macro on ia64 [rejected]
- fix broken s390x overflow checks with 32-bit F_GETLK use (Matt Wilson)
- fix SCSI errors with "mt stoptions" and IDE tape drives (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.7.EL" date="1067162400">- fix bad checksumming interaction between e100 and bridge (Jeff Garzik)
- prevent system hang by OOM killing when overcommitted (Larry Woodman)
- un-inline ext3 error function to reduce stack usage (Stephen Tweedie)
- fix several ppc64 problems with interrupt handling (Julie DeWandel)
- correct amd64 identification in /dev/oprofile/cpu_type (Jim Paradis)
- move fput() call in do_tty_hangup() to avoid oops w/kon (Alexander Viro)
- eliminate creation of never-used task_struct slab cache (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.6.EL" date="1066903200">- reduce buffer-head memory footprint from read-only files (Ingo Molnar)
- update qeth driver for reduced stack usage and bug fixes (Pete Zaitcev)
- fix s390 qeth driver again to allow tcpdump to function (Pete Zaitcev)
- add exec_mmap() locking to prevent vma lookup races (Ernie Petrides)
- rework RPC slot allocation for further NFS improvements (Steve Dickson)
- reduce frequency of RPC retransmits during NFS writes (Steve Dickson)
- make generic/ext3 file system write handling 64-bit clean (Jeff Moyer)
- allow SMP scheduling rebalancing to occur every 200 msecs (Ingo Molnar)
- prevent races during IPC semaphore set and msg queue removal (Ingo Molnar)
- fix ACPI handling to identify trigger/polarity of PCI IRQs (Jim Paradis)
- correct amd64/ia64 acpi_disabled decls for post-boot access (Jeff Moyer)
- update ppc64 viocons driver with several bug fixes (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.5.EL" date="1066298400">- move fix for PPR use in sym53c8xx driver to its own patch (Ernie Petrides)
- correct pids exported by msgctl/semctl/shmctl/fcntl calls (Ulrich Drepper)
- apply s390 lcs driver wait queue init and locking updates (Pete Zaitcev)
- enable dummy network driver use in generic s390 config file (Pete Zaitcev)
- add missing ptrace hooks for exec and vfork-done events (Bill Nottingham)
- fix SMP timer race that triggered BUG_ON() in add_timer() (Ingo Molnar)
- fix several bogus ipvs boundary checks in ftp module [rejected]
- fix vfsmount queuing in attach_mnt() for CLONE_NEWNS [rejected]
- add net_device check to prevent oops in pppoe driver [rejected]
- fix memory leak in symlink error path of /proc driver [rejected]
- fix overflow in v1_disk2mem_dqblk() quota calculation [rejected]
- increase ppc64 ramdisk size to 8192k in p/iSeries configs (Jeremy Katz)
- lower amd64 TASK_UNMAPPED_32 to increase avail address space (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.4.EL" date="1066039200">- fix ppc64 stack pointer alignment in user signal handlers (Jakub Jelinek)
- increase amd64 exception stack size to 4k to avoid overflow (Jim Paradis)
- fix ppc64 interrupt rate accounting for vmstat and /proc (Julie DeWandel)
- extend amd64 NMI watchdog timeouts to tolerate bad 2nd cpu (Jim Paradis)
- allow s390 dasd driver to use noop elevator module (Pete Zaitcev)
- add free_irq() in error path of olympic token ring driver (Matt Wilson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.3.EL" date="1065866400">- make pid fields in ucred structures hold tgid values (Ulrich Drepper)
- prevent ppc64 iSeries virtual console writes &gt; 4k (Julie DeWandel)
- control ia64 unaligned access messages with new sysctl (Jeff Moyer)
- correct SCSI data direction on cmd to spin up disks (Pete Zaitcev)
- add do_brk() TASK_SIZE and address space wrap checks (Arjan van de Ven)
- limit PPR use in sym53c8xx driver for ppc64 Zapata drives (Doug Ledford)
- list ac97.o, ad1848.o, and cs4232.o modules as unsupported (Jeff Moyer)
- clean up conditional compilation in s390 zfcp driver (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.2.EL" date="1065693600">- identify whether i686 or athlon config in oops output (Arjan van de Ven)
- remove warning in reclaim_page() unmapped page path (Ernie Petrides)
- fix several lvm error handling paths causing memory leaks [rejected]
- correct i386 smp shutdown logic when netdump is enabled (Jeff Moyer)
- fix amd64 potential data leaks on FPU save/restore errors (Jim Paradis)
- prevent aic7xxx chip resets leading to PCI parity errors (Tom Coughlan)
- remove ia64 user tty warning on unaligned accesses (Arjan van de Ven)
- fix ppc64 /proc file buf overruns in viodasd driver (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.1.EL" date="1065607200">- (this is the first build for RHEL 3 Update 1)
- avoid m/ctime update for pipe writes on r/o file systems (Stephen Tweedie)
- prevent theoretical ext3 fs corruption in ext3_read_inode (Stephen Tweedie)
- enable AGRESSIVE_IDLE_STEAL to improve scheduler balancing (Ingo Molnar)
- fix potential ppc64 lock-up on ioctl32 un/reregistering (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.EL" date="1065175200">- extend ppc64 scsi timeout values for Zapata DVD-ROM drives (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-3.EL" date="1063965600">- make sure to release viotape op structure after use (Julie DeWandel)
- disable pgd/pmd quicklists on ppc64 (Mark DeWandel)
- temporarily disable aio on sockets (Jeff Moyer)
- correctly refile inodes to make them reclaimable (Harald Hoyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-2.EL" date="1063792800">- S390: update zfcp and cio drivers (Pete Zaitcev)
- IA64: add extra check to virtual mem_map (Larry Woodman, Dave Anderson)
- initialise local variables in ide-tape &amp; ide-scsi
- cap qla2200 tcq depth to 255
- switch version number scheme to kernel-2.4.21-N.EL</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063706400">- PPC64: invalidate evicted sbl entries in the erat (Julie DeWandel)
- increase ethernet tx_queue_len to 1000 (David Miller)
- in udp_{v6_}flush_pending_frames, reset up-&gt;len too (David Miller)
- S390: CMS reserved minidisk detection (Pete Zaitcev)
- call recount_segments() on a different occasion (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063620000">- really disable exec-shield (Roland McGrath)
- reduce stack randomisation, disable brk randomisation (Ingo Molnar)
- make e1000 driver 64 bit clean (Julie DeWandel)
- minor aio corner case error condition fix (Jeff Moyer)
- AMD64: more lenient check for call workaround (Ernie Petrides)
- PPC64: disable CONFIG_XMON (Mark DeWandel)
- S390: fix CCW slab selection (Pete Zaitcev)
- fix two-disk combined mode sata (Jeff Garzik)
- move buslogic scsi driver to supported, for vmware only (Tom Coughlan)
- change viocons message from KERN_WARNING to KERN_INFO (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063360800">- VM: handle race condition in reclaim_page (Stephen Tweedie, Larry Woodman)
- PPC64: fix "log_buffer broken" xmon issue (Julie DeWandel)
- fix compiler warnings in netdump (Jeff Moyer)
- AMD64: workaround for 32 bit compat mode page fault problem (Ernie Petrides)
- IA64: make perfmon root-only (Jason Baron)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063274400">- fix smp race in rebalance_laundry_zone()</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063188000">- fix compiler warnings when hugetlbfs is disabled (Pete Zaitcev)
- fix tux performance bug (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063101600">- don't evict kernel stack seg translation on ppc64 (Julie DeWandel)
- fix callers of do_page_fault on ppc64 (Mark DeWandel)
- AMD64 munmap return value, fix lsb failure (Jeff Moyer)
- fix for PPC64 32-bit ioctl (Jim Paradis)
- bring IA64 value of MINSIGSTKSZ in line with upstream (Jakub Jelinek)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063015200">- fix potential datacorruptor in viodasd driver (Julie DeWandel)
- fix race condition in s390 dirty bit handling (Pete Zaitcev)
- limit per-cpu slab cache size
- correct 32-bit readv/writev border cases on ppc64 (Matt Wilson)
- AMD Golem IO-APIC fixup for i686 kernel on AMD64 (Jeremy Katz)
- NFS Solaris 8 acl fix (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062756000">- minor nfs permissions bugfix (Steve Dickson)
- change mprotect return value to SuS mandated value (Arjan van de Ven)
- kernel-unsupported now provides kernel-modules (Jeremy Katz)
- correct __hugemem__modules typos in rhkernel.h
- fix subtle pmd corruption error (Larry Woodman, Dave Anderson)
- fix cut'n'paste error in SATA io port reservation
- restore NFSEXP_CROSSMNT ABI compatibility (Steve Dickson)
- round up executable name field length in core file (Jakub Jelinek)
- switch off exception_trace on amd64 (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062496800">- patch to access odd last sector on ia64 (Jason Baron)
- misc fixes from upstream (Arjan van de Ven)
- fix audigy driver (Jeff Garzik)
- tunable dcache reclaim priority for tux (Ingo Molnar)
- tg3 driver update (Jeff Garzik)
- ipv6 and icmp network bugfixes (David Miller)
- fix ppc64 memory access security bug (Julie DeWandel)
- reduce memory allocated for skb (Ingo Molnar)
- small smp fix for scalable timers (Ingo Molnar)
- make s390 recognise MSDOS partitions (Pete Zaitcev)
- small smp fixes in tux (Ingo Molnar)
- make mptfusion drivers supported on 4/4 split kernel (Tom Coughlan)
- add entries to scsi whitelist (Tom Coughlan)
- minor sata/ata driver updates (Jeff Garzik)
- small fixes to viodasd driver (Julie DeWandel)
- nfs_get_root and nfs access bit patches (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062064800">- don't show interrupts in /proc/stat for ppc64 (Matt Wilson)
- make sure sync returns in a reasonable time
- PPC64: fix for boot cpu not being cpu 0 (Julie DeWandel)
- zero sized write no longer updates mtime (Matt Wilson)
- fix video bios read corruption on ia64 (Larry Woodman)
- network fixes to tg3, bonding (Jeff Garzik)
- properly reserve legacy IDE regions in sata driver (Jeff Garzik)
- fix ppc64 signal handling bugs (Mark DeWandel)
- tux fixes (Ingo Molnar)
- tgkill syscall for s390(x) (Pete Zaitcev)
- amd64 32 bit compatibility fixes (Jim Paradis)
- ppc64 32 bit compatibility fixes (Julie DeWandel)
- fix 4G/4G follow_page problem (Ingo Molnar)
- reduce memory used by VMAs and dentries (Arjan van de Ven)
- make LVM snapshotting of ext3 work reliably (Stephen Tweedie)
- make netdump play better with the nmi watchdog (Jeff Moyer)
- QLA2200: disable irq mitigation, fix off-by-one (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061805600">- seq_file /proc/interrupts for x86 too (Ingo Molnar)
- fix memory leak in ia64 exec of ia32 binaries
- check tgid not pid in scm_check_creds()  (David Miller)
- VM fixes: shm swap priority, zeromap_page_range
- workaround VFS limitations for VXFS NFS export</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061546400">- use personality for 3GB userspace on x86 -hugemem (Ingo Molnar)
- add sysctl interface for lockd (Steve Dickson)
- don't prod VGA space on HP Pinnacle systems (Larry Woodman)
- fix for 32 bit binaries on amd64 (Jim Paradis)
- add preemption point to write_some_buffers (Julie DeWandel)
- sort ACPI table to get correct device ordering on HP (Larry Woodman)
- fix refcounting bug with ipv6 addresses on netdevs (David Miller)
- add s390 syscalls for tux (Pete Zaitcev)
- md multipath enablers (Doug Ledford)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061460000">- fix process and nice time accounting (Doug Ledford)
- amd64: syscall table updates, timer robustness (Jim Paradis)
- amd64 3GB personality for 32-bit processes (Jim Paradis)
- use 256MB pagesize for hugetlbfs on ia64 (Larry Woodman)
- make sure e100 only claims ipv4 checksumming
- igmpv3/mldv2 OOPS'er fix (David Miller)
- hugetlbfs: make chown work and allow uid=X,gid=Y mount options
- make larger mmap windows work (Ernie Petrides, Ingo Molnar)
- ia64: improve ia32 compatibility (Larry Woodman)
- fix bug in rpc retry code (Steve Dickson)
- make acpi pci hotplug modulable (Jeff Moyer)
- update (trivial) to megaraid 1.18j (Tom Coughlan) 
- enable varyio on mptfusion (Tom Coughlan)
- panic on oops to prevent data corruption opportunities (Ernie Petrides)
- small iorl locking fix (Doug Ledford)
- fix ppc64 get_wchan() bad deref (Mark DeWandel)
- fix aio read into mmap()d PROT_WRITE (Jeff Moyer, Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061373600">- libata update (Jeff Garzik)
- amd64 syscalls for xattrs &amp; ACLs (Jim Paradis)
- tux fixes (Julie DeWandel, Ingo Molnar)
- via &amp; i810 audio fixes (Jeff Garzik)
- small 4G/4G split bugfixes (Ingo Molnar)
- fix sigsuspend race on x86, amd64, ia64 (Mark DeWandel)
- ia32 behavior for FP denormal exceptions on ia64 (Jason Baron)
- get the set/get of NAT bits for ia64 correct (Jason Baron)
- ipsec update, adds cast6 encryption (David Miller)
- VM update: OOM bugfix &amp; page-&gt;flags atomic updates (Rik van Riel)
- reenable serpent encryption on ppc64
- bladecenter usb-ohci support (Pete Zaitcev)
- iorl fixes (Doug Ledford)
- network bonding driver oops fix (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060768800">- DAC960 back to bigmem supported, ne2k-pci &amp; usb audio to bigmem unsupported
- netdump updates for tg3 and e1000 (Jeff Moyer)
- put a hole between stack and mmap area (Ernie Petrides)
- process time accounting updates (Doug Ledford)
- fix null characters in TUX header (Julie DeWandel, Ingo Molnar)
- display correct executable when running interpreted script
- zfcp zSeries fibrechannel driver (Pete Zaitcev)
- ipsec updates (David Miller)
- fix 4G/4G race conditions (Ingo Molnar)
- rename -bigmem kernel to -hugemem to reflect changed tradeoffs
- optionally show task states from hangcheck timer (Jason Baron)
- various small bugfixes from upstream</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060423200">- fix scalable timer race condition  (Julie DeWandel, Ingo Molnar)
- print warning on boot with &gt;16GB RAM on -smp kernel (Arjan van de Ven)
- fix for xapic issue with ServerWorks chipsets (Ernie Petrides)
- remove spurious ioctl printk on ppc64 (Mark DeWandel)
- ppc64 wchan improvement (Mark DeWandel)
- hint @pause changes for ia64
- longer scsi scan timeout on ppc64 (Julie DeWandel)
- readv/writev for raw IO (Stephen Tweedie)
- fix for easy stack/mmap collisions (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060164000">- various XAPIC related fixes (Ingo Molnar)
- correct context switch and iowait stats with HT shared runqueues
- ext3 obscure deadlock fixes (Stephen Tweedie)
- knfsd fixes: blocked lock, symlink error &amp; missing bkl  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060077600">- de_thread bugfix from 2.6 upstream  (Matt Wilson)
- viocons driver update (Julie DeWandel)
- fix VM non-overcommit mode (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059991200">- plug data leak in aio code (Jeff Moyer)
- initial list of 4G/4G unsupported modules (Tom Coughlan)
- nfs softirq race fix (Steve Dickson)
- updated IPSEC patch (David Miller)
- networking updates/fixes from 2.4.22-preX (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059904800">- drop orlov allocator for now (Arjan van de Ven)
- correct HT cpu pair detection (Arjan van de Ven)
- build zImage.partial for netbooting on pSeries (Matt Wilson)
- fix missing symbols</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059818400">- export two AIO symbols for OCFS
- disable CONFIG_DEBUG_SLAB so performance testing can start
- crosshost mmap hooks for distributed filesystems (Stephen Tweedie)
- include partially linked zImage for pSeries netboot (Matt Wilson)
- nfs highmem fix, unmap when xdr_kmap() fails (Steve Dickson)
- update megaraid2 locking to work with IORL (Com Coughlan)
- make sure to build the qla2100 driver (Tom Coughlan)
- fix cdrom ioctl 32 bit compatibility for ppc64, amd64 (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059645600">- run depmod on install of unsupported modules (Arjan van de Ven)
- fix register corruption in IA64 lazy fpu handling (Larry Woodman)
- add b44 network driver (Jeff Garzik)
- make ppc64 pci interface routines compatible (Julie DeWandel)
- allow 32 bit userland on AMD64 and PPC64 to use volumes &gt; 2GB (Jeff Moyer)
- nfsd: acl related mount and export flags (Steve Dickson)
- fix nfs exp_fodrop oops (Steve Dickson)
- fix missed signal wakeups on ppc64 (Mark DeWandel)
- smp scalable timer bugfixes (Ingo Molnar)
- workaround for a prefetch bug in some Athlon CPUs (Ernie Petrides)
- code to make more modules unsupported for 4/4 split (Arjan van de Ven)
- various spec file and config cleanups
- viopath driver fix (Julie DeWandel)
- add match for 440gx chipset bioses (Arjan van de Ven)
- move epic100 and ne2k-pci back to supported (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059472800">- updated finegrained process accounting patch (Doug Ledford)
- make iSeries compile without CONFIG_ICOM (Julie DeWandel)
- nfsd: only set -&gt;reuse for tcp sockets, not udp  (Steve Dickson)
- enable the 4G/4G split on the i686-bigmem kernel only
- sysrq support for viocons (Julie DeWandel)
- limit pci_bus size changes to ppc64 (Jeff Garzik)
- fix for signal delivery race (Ernie Petrides, Mark DeWandel)
- add ShdPnd to /proc (Ingo Molnar)
- fix de_thread() hang (Ingo Molnar)
- add kernel support for CLONE_STOPPED (Ernie Petrides)
- make sure to initialise HVC console (Julie DeWandel)
- fix _SEG abort hit in ACPI code (Larry Woodman)
- build addon drivers on amd64 and ppc64 too (Tom Coughlan)
- build IPS driver on all architectures (Tom Coughlan)
- fix a few ia32 emulation bugs for IA64 (Larry Woodman)
- enable correct/new __clear_bit macro for IA64 (Larry Woodman)
- flexible mmap allows mappings of huge executable segments (Larry Woodman)
- sysrq-w for s390 (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058436000">- have s390 cpu_relax() also include barrier  (Pete Zaitcev)
- convert ppc64 xmon traceback code to ksymoops (Matt Wilson)
- rename kstat_sum() variable with aliasing problems  (Ingo Molnar)
- fix AIO-on-hugetlbfs crash (Ingo Molnar)
- update support for IA64 Long's Peak ACPI serial ports  (Larry Woodman)
- turn on xmon for both iSeries and pSeries (Matt Wilson)
- bugfix to make CLI work correctly on iSeries (Julie DeWandel)
- SATA bugfixes (Jeff Garzik)
- enable 4G/4G split in -BOOT kernel, due to syslinux trouble</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058349600">- fix s390 compile (Pete Zaitcev)
- taint the kernel on sii6512 driver link, GPL but no source available
- handle debug registers with 4G/4G split (Ingo Molnar)
- tgkill syscall for ppc64 (Julie DeWandel)
- fix NFSD/ACL/ext3/jbd deadlock (Stephen Tweedie, Steve Dickson)
- fix maxcpus=1 installation panic fix for ppc64 (Julie DeWandel)
- IDE byteswapping io functions for ppc64 (Julie DeWandel)
- update sata driver (Jeff Garzik)
- raise the number of /proc entries (Julie DeWandel)
- sticky sysrq key with timeout (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058263200">- make SysRq-W useable on s390 (Pete Zaitcev)
- updated process accounting patch (Doug Ledford)
- siginfo_t fixes for s390x and amd64 (Jakub Jelinek)
- clustered NFS fail-over support (Steve Dickson)
- autofs4 updates and fixes
- ia64 patches to reduce cpu power/temp in idle loop (Larry Woodman)
- add irqsafe up() for LVM locking (Stephen Tweedie)
- O_DIRECT fallback to synchronous allocation in holes (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058176800">- ia64 HP iommu: add sx1000 detection
- possible bug in s390x 32-bit emulation  (Roland McGrath)
- updated ipsec patch, should fix all current ipv6 bugs  (David Miller)
- finegrained process accounting (Doug Ledford)
- ICH5 pci irq routing, and associated ids (Jeff Garzik)
- fix the machine_real_restart() reboot path on 4G/4G (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057917600">- fix amd64 agp-gart code to work around hugetlbfs debug code (Jim Paradis)
- fix ppc32 pthread_cancel (Jakub Jelinek) 
- Do not sent IGMP leave messages unless IFF_UP  (David Miller)
- software iommu for ia64 systems without hardware iommu (Jason Baron)
- fix ext3 oops fix during dio, LTP failure (Arjan van de Ven, Stephen Tweedie)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057831200">- Remove illegal calls to dst_link_failure</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057831200">- enable HT scheduler for bigmem kernel
- add tgkill syscall for x86 and ia64
- make -BOOT kernel smaller w/ modular md and CONFIG_SMALL
- rmap VM updates
- 4G/4G agpgart potential corruption fix (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057744800">- switch off exec shield everywhere
- eliminate hostfs for amd64 (Jim Paradis)
- megaraid update, mostly vendor ID (Tom Coughlan)
- shrink boot kernel by disabling some config options
- additions for the SCSI whitelist (Tom Coughlan)
- ia64 extable fix (Jason Baron)
- viocons driver upgrade (Julie DeWandel)
- another ia64 mmu context wraparound deadlock fix (Larry Woodman)
- iSeries icom debugger patch (Julie DeWandel)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057658400">- Drop io_request_lock in usb scsiglue.c:device_reset</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057658400">- fix cpu_relax for amd64 and ia64 to include a barrier (Ingo Molnar)
- restore o_direct api compatibility (Stephen Tweedie)
- fix possible ext3 deadlock in o_direct patches (Stephen Tweedie)
- ACLs for JFS (Stephen Tweedie)
- fix /proc/cpuinfo runqueue printing (Ingo Molnar)
- via audio fixes, smaller emu10k1 patch (Alan Cox, Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057572000">- fix process accounting, tux ftp passwords and si_pid (Ingo Molnar)
- 32bit compat statfs fix (Guy Streeter)
- don't serialise exit on BKL when accounting is off (Ingo Molnar)
- truncate timeouts to 32 bits on 64bit systems (Ingo Molnar)
- fix network channel bonding (Jeff Garzik)
- split netdump patch into core and net-drivers (Jeff Garzik)
- delayed tlb flushing for ia64 (Larry Woodman)
- emu10k1 driver fixes
- kksymoops for AMD64 (Jim Paradis)
- select bugfixes from 2.4 upstream (Jeff Garzik)
- OOM tweaks (Rik van Riel)
- use seq_file for /proc/interrupts on ppc64 (Mark DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057140000">- add qdio and qeth drivers for s390(x)  (Phil Knirsch)
- slab cache scale bugfix (Larry Woodman)
- S390: qdio &amp; qeth drivers (Phil Knirsch)
- hangcheck timer for ppc64 (Julie DeWandel)
- fix race conditions in ia64 ia32 compat layer (Larry Woodman)
- update megaraid, aic7xxx, cciss and cpqarray drivers (Tom Coughlan)
- nfs xdr_shift_buf, tcp client corruption and alignment (Steve Dickson)
- rhconfig.h stuff for ppc64, s390 and s390x (Matt Wilson)
- AIO on sockets</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057053600">- kiobuf optimisations (Stephen Tweedie, Larry Woodman)
- ipsec update (David Miller)
- ipvs update to deal with timer changes (David Miller)
- 4G/4G split patch optimisations (Ingo Molnar)
- hangcheck timer (Jason Baron)
- recent (AGP 3.0) agpgart support (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056967200">- semtimedop() support on s390/s390x  (Ernie Petrides)
- fix a 4G bug that triggers on systems with &gt;30 CPUs (Ingo Molnar)
- updated SCSI SMP affine queueing patch  (Arjan van de Ven)
- page hash prefetch in do_generic_file_read bugfix (Julie DeWandel)
- updates the qlogic driver to the latest (Arjan van de Ven)
- slab cache SMP scalability tweaks (Ingo Molnar)
- ACPI 2.0 for IPF and AMD64 (Jim Paradis, Larry Woodman)
- statm fixes for hugetlbfs and remap_file_pages (Jason Baron)
- acpi serial port detection (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056708000">- iseries driver updates (Julie DeWandel)
- aio scalability and 2.5 backports  (Ingo Molnar)
- SMP scalable timers (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056621600">- make qlogic driver use new scsi infrastructure (Arjan van de Ven)
- export aio kvec functions
- fix statm oops
- compile fixes 
- NFS ACL over the wire protocol extensions (Steve Dickson)
- rate limit slab pruning, to limit IPI load on SMP systems (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056448800">- scsi request lock scaling (Ingo Molnar)
- cpu affinity for scsi command processing (Ingo Molnar)
- use softirqs instead of bhs for the scsi layer (Doug Ledford)
- igmpv3 fixes and improvements (David Miller)
- oprofile for ppc64 (Will Cohen)
- Increase MAX_ADDR_LEN from 8 to 32 for Infiniband over IP (Tom Coughlan)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056362400">- per-cpu kstat arrays (Ingo Molnar)
- optimise 4G/4G tlb flushing (Ingo Molnar)
- kiobuf reclaim together with buffer reclaim (Arjan van de Ven)
- more scalable gendisk statistics (Ingo Molnar)
- nfs reconnect fixes (Steve Dickson)
- add 32-bit compatibility for ustat system call on ppc64 (Julie DeWandel)
- scalable gettimeofday (Ingo Molnar)
- hugetlbfs ppc64 &amp; s390 bits (Mark DeWandel, Pete Zaitcev)
- hugetlbfs for ia64 (Jason Baron)
- qlogic scsi driver update (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056189600">- nfs patches (Steve Dickson)
- xapic improvements, summit support (Ingo Molnar)
- fix core dump name for multithreaded programs (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056103200">- merge up to marcelo's latest</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056016800">- oom killer fixes (Larry Woodman, Rik van Riel)
- tunable VM overcommit (Rik van Riel)
- hugetlbfs for amd64 (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055930400">- updated iseries virtual drivers (Julie DeWandel)
- nfs lockd improvements (Steve Dickson)
- remap_file_pages improvements (Ingo Molnar)
- /proc/efi/symtab patch for ia64 (Larry Woodman)
- disable O_PROFILE on UP x86 machines
- allow NMI watchdog profiling frequencies up to 10kHz (Ingo Molnar)
- statm (Jason Baron)
- hugetlbfs (Ingo Molnar)
- have nfsd honour ACLs on a per-export basis (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055844000">- Enable O_PROFILE on non-SMP configs (Stephen Tweedie)
- more conservative AIC config options
- Fix BOOT kernel panic while mounting /dev/cdrom (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055757600">- merge to 2.4.21 + selected ac bits
- ipsec upgrade (David Miller)
- HT scheduler patch fix (correct sibling counting)
- make bdflush writeout smoother
- AMD64 gdb fix (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055412000">- don't include unsupported drivers in -BOOT kernel
- merge up to 2.4.21-rc8 + selected ac bits
- FIXME: sysrq for 3170, dasd, odirect &amp; odirect for nfs</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com" date="1055412000">- oprofile for s390</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055239200">- statm (Jason Baron / Julie DeWandel)
- AIO 32-bit compat for 64-bit machines (Julie DeWandel)
- only do bufferhead reclaim in extreme situations (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055152800">- Serial ATA support (Jeff Garzik)
- mtp fusion 2.05.05+ (Dave Maley)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054893600">- XATTR/ACL patches, except NFS over the wire (Stephen Tweedie)
- ipsec module autoloading (David Miller)
- remap_file_pages (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054807200">- upgrade to latest -rmap with Ernie's fixes
- sysrq+C shows the stack dump of all CPUs
- ext3 truncate fix (Stephen Tweedie)
- NFS fixes for HZ=1000 machines (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054720800">- 4G/4G split fix (Ingo Molnar)
- ppc64 fixes (Guy Streeter, Rik van Riel)
- enable oprofile on amd64
- ipsec updates (David Miller)
- fork returns pid instead of task_struct* (Julie DeWandel)
- ia64 ptrace bugfixes (Dave Anderson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054634400">- HP diva serial driver (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054548000">- NFS over TCP patches (Steve Dickson)
- switch to using ppc64pseries/ppc64iseries arches instead of
  kernel-pseries and kernel-iseries (Jeremy Katz)
- egenera scsi bus rescan patch (Jeff Garzik)
- oprofile (Graydon Hoare)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054288800">- futex requeue (Ingo Molnar)
- enable NAPI for E1000
- signal latency and scheduler improvements (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054202400">- kscand oops fix (Ingo Molnar, Rik van Riel)
- pcnet32 fixes (Julie Dewandel)
- raid autorun (Pete Zaitcev)
- turn off CONFIG_SUNDANCE_MMIO (Jeff Garzik)
- flexible mmap (Larry Woodman)
- ppc64 fixes (Matt Wilson, Guy Streeter)
- loop softirq 10 times before giving up (Ingo Molnar)
- O_DIRECT for NFS (Steve Dickson)
- prevent md from shutting down active arrays (Doug Ledford)
- rmap updates, inode reclaim &amp; higher order allocations (Rik van Riel)
- network channel bonding (Jeff Garzik)</changelog><changelog author="Jim Paradis &lt;jparadis@redhat.com&gt;" date="1054116000">- Re-enable x86_64 in build
- x86_64-specific updates for exec-shield
- Bring in improved "nonx" support for x86_64 from upstream</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1054116000">- Hush s390 printks upon user SIGSEGV by default. It can be enabled back with
  a sysctl kernel.userprocess_debug.
- Enable optional 3270 console mode on s390.</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053684000">- get rid of vsyscall page (Arjan van de Ven)
- fix missing symbol copy_str_fromuser_size</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053424800">- exec-shield updates to fix hang-on-boot on some systems (Ingo Molnar)
- temporarily disabled the architectures, which got broken by exec-shield updates
- fix for LTP sigprocmask02 failure (Matt Wilson)
- ppc64 updates (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053338400">- pagecache scalability patch (Ingo Molnar)
- IPC semaphore scalability patch (Ingo Molnar)
- ppc64 updates (Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052992800">- exec-shield (Ingo Molnar)
- AMD64 ACPI updates (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052906400">- reenable O_DIRECT, O_DIRECT fixes and superbh-aio (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052820000">- vma merging (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052733600">- nmi profiler
- VM updates: rmap, dma zone isolation
- tux (Ingo Molnar)
- ext3 stall fixes (Ingo Molnar)
- e1000 fixes (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052474400">- config files overhaul (Arjan van de Ven)
- fix bug in mlock patch
- IPVS (Dave Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052388000">- import IO elevator changes from gingin
- critical VM fix
- matrox framebuffer patch for pseries (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052301600">- hammer nptl fixes (Ulrich Drepper)
- 4G/4G split (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052215200">- upgrade to 2.4.21-rc1-ac4 (minus -ac acpi and xapic changes)
- drop nfs patches since those seem to be in -ac</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052128800">- larger message buffer size + boot option (Mark DeWandel)
- AMD64: tls handling, coredump fixes (Jim Paradis)
- SMP &amp; highmem VM fixes (Ben LaHaise)
- HT+NUMA scheduler (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051956000">- ext3 orphan cleanup fix (Ernie Petrides)
- s390 affinity fixes (Pete Zaitcev)
- i386 vsyscall DSO changes (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051869600">- bugfixes and config changes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051783200">- enable semtimedop for other architectures (Ernie Petrides)
- large pci bus numbers (Julie DeWandel)
- bugfixes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051610400">- igmpv3 (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051524000">- generic 32bit compat stuff + amd64/ppc64/ipf pieces (Matt Wilson)
- clustered apic (XAPIC) support (Ingo Molnar)
- ppc64 architecture updates (Matt Wilson, Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051264800">- ppc64 fixes</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051178400">- collapse ipsec into one patch (David Miller)
- ppc64 build fix (Matt Wilson)
- improve smp scheduler fairness (Ingo Molnar)
- allow mlock for normal users, up to ulimit (Ingo Molnar)
- AMD64 port (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051092000">- clean up mechanism to pass extra CFLAGS so we don't override what's
  already there
- merge ia64 build stuff (Larry Woodman)
- merge varyio + superbh (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051005600">- merge up to 2.4.21-rc1
- IA64: virtual mem_map, acpi updates, netdump update, pte-highmem &amp; fealnx
- IA64: architecture specific patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050919200">- import davem's ipsec patch pile
- ppc64 kallsyms and dump_fpu patches (Matt Wilson)
- rmap updates (x86_64 &amp; bufferhead reclaim)
- ppc64 ptrace patch (Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050660000">- open up patch namespace 2000-5000 for network protocol changes
- renumber existing patches in that range</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050573600">- make sure to actually apply the rmap-updates patch
- iowait statistics
- ppc64 code merge (Mark &amp; Julie DeWandel)
- ppc64 build scripts (Matt Wilson)
- raise symlink recursion level to 8 (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050487200">- merge up to marcelo's latest
- pte-highmem bits for x86-64 and ppc64</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050400800">- merge up to 2.4.21-pre7-ac1
- drop semtimedop patches (now in -ac)
- drop nfs xprt_fixes, fix_softirq, d_drop and nfs-readeof (merged in -pre7)
- add !CONFIG_QUOTA compile fix for 2.4.21-pre7-ac1</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1050314400">- add LCS driver (endemic to s390)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050314400">- add rmap VM
- add kunmap_atomic debugging patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050141600">- remove dir.c part of NFS kmap_atomic patch for now
- using strlen as local variable name in nfs code kills, literally</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050055200">- merge S390(x) back in  (Pete Zaitcev)
- fix NFS kmap_atomic patch
- sched.c patch to disable interrupts in wake_forked_task  (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049968800">- AIO infrastructure  (Ben LaHaise)
- update NFS kmap_atomic patch  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049882400">- semtimedop patches  (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049796000">- I know understand linux-2.4.20-nfs-readeof.patch, so I merged it
- netdump update (Dave Anderson)
- 64 bit pci &amp; elf loader fix (Mark &amp; Julie)
- nptl whitespace patches, folded into nptl patch (Arjan van de Ven)
- rediff linux-2.4.18-smallpatches.patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049709600">- merge NFS patches by Steve Dickson (blame me for NFS kmap_atomic patch)
- split x86 syscall stuff out into separate patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049536800">- fix nptl patch, now it boots</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049450400">- port linux-2.4.20-o1-nptl.patch from gingin
- rediff a few patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049277600">- update linux-modules-unsupported (with Arjan)
- fix up the list a second time to fix module dependencies</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049191200">- copy -head into new AS3 branch
- remove i586 build
- remove 7.x compatibility (linux-2.4.9-fstat.patch)
- architecture patches get more breathing room (100 - 500)
- reserve patch numbers 1000 - 2000 for VM
- patch numbers 2000 - 5000 for bugfixes, changes and updates to
  existing drivers and filesystems
- remove inode reclaim patch (will be merged later as part of rmap)
- remove io priority scheduler (still experimental)
- remove nfs patches (linux-2.4.20-nfs-cto.patch,
  linux-2.4.20-nfs-access.patch &amp; linux-2.4.20-nfs-rdplus.patch)
- remove linux-2.4.18-gericom.patch
- update netdump from RH9 branch</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1048240800">- Added three NFS performance patches</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048240800">- add a timer for aging requests up</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048154400">- fix the sorting in the io elevator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048068000">- remerge ext3 orlov allocator and enable
- more priority io elevator infrastructure work</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1047117600">- merge ext3 orlov allocator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046772000">- go to 2.4.21-pre5-ac1
- split the rpm into a primary fileset and secondary (rare modules) fileset</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046253600">- go to 2.4.21-pre4-ac6
- drop lots of patches
- trim changelog to not have 2000, 2001 and 2002 anymore</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045476000">- downgrade pwc webcam driver one notch to the last known working version
- work around vm livelock
- make the cciss driver not enable irq's in it's irq handler</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1045130400">- fix for shared statistic &lt; 0</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045130400">- Signal fixes for LSB testsuite
- merge patch to fix init=/bin/sh
- 2.4.21-pre4-ac4 bugfixes (mostly IDE crashes)</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044784800">- merge 2.4.21-pre4-ac3 bugfixes</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1044352800">- Add ext3 fix for truncating negative i_blocks</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1044266400">- add oopsmeharder for debugging hard hangs</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044266400">- merge rmap15d
- set the sbp2 command buffer to 64 elements instead of 8</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1043834400">- merge tcp stall fix from DaveM
- merge bugfixes from 2.4.21-pre4</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1042452000">- Merge in the ACL and XATTR patches from the UL and BestBits trees.</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1042279200">- Merge in the LVM pvmove fix to current tree</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1042020000">- add AMD Golem fixup</changelog></package>
<package pkgid="6378eb59cec99ae8f72f3d45d3ccf22916c6630c" name="kernel-smp-unsupported" arch="x86_64"><version epoch="0" ver="2.4.21" rel="37.EL.XFS"/><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1128420000">- added SGI XFS patch set</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-37.EL" date="1126087200">- fix latent sendmsg() cmsghdr32 bug exposed in -36.EL (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-36.EL" date="1125655200">- fix sync() hangs from NFS file create/delete races (Steve Dickson)
- add support for HP Smart Array E400i in cciss driver (Tom Coughlan)
- defend against cmsghdr32 changes in sendmsg() handling (Dave Miller)
- correct OpenIPMI module version strings (v35 -&gt; 35.4) (Brian Maly)
- fix intermittent build failures under lpfc subdir (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-35.EL" date="1124445600">- disable FAN processing in Emulex driver (7.3.2) (Tom Coughlan)
- update cciss disk driver to version 2.4.58.RH1 (Tom Coughlan)
- update SCSI whitelist for EMC Invista devices (Tom Coughlan)
- fix diskdump regression w/module CRC errors (Nobuhiro Tachino)
- update SCSI whitelist for IBM ULT3580 TapeLibrary (Wendy Cheng)
- fix f/w upgrade hang, dmi_table bug in IPMI (Peter Martuccelli)
- fix x86_64 machine check regression from -32.10.EL (Brian Maly)
- validate XFRM policy in IPSEC setsockopt() calls (John Linville)
- fix intr kiobuf_init() regression from -32.11.EL (Larry Woodman)
- fix pollcomplete error in cciss diskdump support (Tom Coughlan)
- enforce CAP_NET_ADMIN perms for policy creation (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-34.EL" date="1122544800">- fix O_SYNC EIO error propagation through ext3/jbd (Stephen Tweedie)
- add support for Enterprise Southbridge II (ESB2) (Geoff Gustafson)
- implement devname callback for block device drivers (Doug Ledford)
- upgrade SATA support (core, libata, and drivers) (Jeff Garzik)
- add ia64 export of (*pm_power_off)() for IPMI (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-33.EL" date="1121767200">- update 3w-9xxx driver to version 2.24.03.008RH (Tom Coughlan)
- revise reserved port avoidance added in -32.8.EL (Steve Dickson)
- update OpenIPMI driver/configs to version v35 (Peter Martuccelli)
- add handling for NEC vendor ID in megaraid2 driver (Tom Coughlan)
- update SCSI whitelist for 3PARdata/Dell/SGI devices (Tom Coughlan)
- add support for netdump over bonded interfaces (Jeff Moyer)
- implement diskdump support for cciss devices (Tom Coughlan)
- add x86_64 ACPI Power Management timer support (Jim Paradis)
- add dual-core support on x86 and x86_64 arches (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.12.EL" date="1121421600">- constrain x86_64 MSR writes based on cpu model (Larry Woodman)
- correct smbfs mounts to support 32-bit uids/guids (Peter Staubach)
- eliminate long system pauses when kscand is running (Larry Woodman)
- update Emulex driver to 7.3.1, ioctl module to 1.2.1 (Tom Coughlan)
- update QLogic driver to 7.05.00-RH1 (w/new firmware) (Tom Coughlan)
- prevent ext3 EA/ACL block sharing/deletion races (Stephen Tweedie)
- fix dpt_i2o insmod oops during adpt_info() lookup (Neil Horman)
- fix dpt_i2o timeouts during long tape commands (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.11.EL" date="1121248800">- downgrade blk_queue_bounce_limit() msg to KERN_INFO (Neil Horman)
- update cciss disk driver to version 2.4.56.RH1 (Adam Manthei)
- update mptfusion driver to version 2.06.16i.01 (Tom Coughlan)
- prevent expand_kiobuf() calls during interrupts (Larry Woodman)
- update iscsi_sfnet driver to version 3.6.2.1 (Mike Christie)
- account for system ticks in ITIMER_PROF sig delivery (Don Howard)
- correct superbh ptr arg to superbh_will_bounce() (Stephen Tweedie)
- fix ext3 symlink perms created w/i386-BOOT kernels (Stephen Tweedie)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.10.EL" date="1121076000">- prevent bogus GART errs from amd64 Northbridge handling (Brian Maly)
- get correct link status in b44 driver's open routine (John Linville)
- check for missing EM64T support for better panic msg (Ernie Petrides)
- fix ref counting bug in x86[_64] __change_page_attr() (Dave Anderson)
- fix memory leak in success path of sys_init_module() (John Linville)
- add ia64 ptrace/sigreturn RSC reg priv level validation (Jason Baron)
- prevent connection list corruption in ip_vs_conn_flush() (Neil Horman)
- limit arg/env ptrs for x86_64/ia64 32-bit-compat execs (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.9.EL" date="1119002400">- fix crashes from failed ACPI root bus additions (Jim Paradis)
- correct insufficient lock owner checks in DRM code (Don Howard)
- add missing sanity checks in Coda ioctl handling (Alexander Viro)
- fix autofs errors with ghosting and expire event races (Jeff Moyer)
- reset ppc64 signal handler correctly for SA_ONESHOT (David Howells)
- store prev user stack pointer in ppc64 signal frames (David Howells)
- fix kernel_lock deadlock between sd_open()/sd_ioctl() (Larry Woodman)
- add ht flag in /proc/cpuinfo for EM64Ts w/hyperthreading (Brian Maly)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.8.EL" date="1118743200">- update e100 network driver to version 3.4.8-k2 (John Linville)
- preserve x86_64 32-bit-compat ptrace reg changes (Roland McGrath)
- add missing x86_64 support for PTRACE_SETOPTIONS (Roland McGrath)
- avoid using reserved ports for portmapper connections (Steve Dickson)
- prevent non-canonical %rip in x86_64 ptrace reg mods (Jim Paradis)
- prevent invalid fs/gs_base in x86_64 ptrace reg mods (Ernie Petrides)
- improve ISO-9660 fs robustness against bad CD formats (Peter Staubach)
- correct __get_user_pages() ref counting w/PG_reserved (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.7.EL" date="1118224800">- fix IPV6 isRouter flag and default router list handling (John Linville)
- eliminate unexpected IO-APIC msg from x86 kernel on amd64 (Jim Paradis)
- switch to reg stack on user-mode x86_64 stk seg faults (Dave Anderson)
- fix two time-related problems in the netconsole module (Dave Anderson)
- remove microcode.o from x86 hugemem unsupported list (Ernie Petrides)
- fix x86_64 committed space accounting w/overcommit=2 (Larry Woodman)
- enforce page locking resource limit in expand_stack() (Jason Baron)
- fix SCSI command block leak w/off-line non-zero LUNs (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.6.EL" date="1117533600">- fix races between POSIX locking and file closes (Peter Staubach)
- update tg3 network driver to version 3.27RH (John Linville)
- add ia64 frame size validation in syscall handling (Jason Baron)
- prevent info leaks into JFS metadata disk blocks (Stephen Tweedie)
- fix ext2 fast-symlink/EA compatibility problem (Stephen Tweedie)
- add x86_64 32-bit-compat SO_{SND,RCV}TIMEO support (Guy Streeter)
- add piix driver PCI device ids for ICH4-L support (John Linville)
- validate "ndigis" value in addition of ROSE routes (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.5.EL" date="1117101600">- update e1000 network driver to version 6.0.54-k2 (John Linville)
- fix arp_ip_traget failover with bonding driver mode 1 (Eric Paris)
- prevent indefinite postponement under __alloc_pages() (Ernie Petrides)
- capture ia64 reg state on all cpus for OS_INIT dumps (Nobuhiro Tachino)
- add documentation listing which drivers support netconsole (Jeff Moyer)
- fail opens of removable media drives if media not present (Pete Zaitcev)
- fix x86_64 find_target() oops in 32-bit-compat ptrace() (Ernie Petrides)
- prevent info leaks into ext2 directory entry blocks (Stephen Tweedie)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.4.EL" date="1115978400">- limit concurrent OOM kills using /proc/sys/vm/oom-kill (Ernie Petrides)
- rework ppc64 wchan fix to avoid module install crashes (David Woodhouse)
- fix diskdump signature check failures w/block_order=8 (Nobuhiro Tachino)
- fix data corruption from pte_clear() races on &gt;4GB x86's (Larry Woodman)
- avoid s390,x kernel stack overflows in network ctc driver (Pete Zaitcev)
- add description of /proc/stat to file system documentation (Brian Maly)
- avoid inode races in __refile_inode() and clear_inode() (Larry Woodman)
- fix arg/env access in ELF core dumping and /proc reads (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.3.EL" date="1115200800">- remove extra chars from scsi_logging_level mod param (Ernie Petrides)
- use GFP_NOFS allocs to avoid kswapd/rpciod deadlocks (Steve Dickson)
- fix ia64 kernel thread creation to force 64-bit tasks (Jason Baron)
- fix data corruption from 4K overflow in /proc/devices (Neil Horman)
- prevent mlock() resource limit bypass w/shm locking (Ernie Petrides)
- restrict MOXA ctlr firmware updates to privileged users (Brian Maly)
- support EM64T systems with mix of cpus with/without NX (Jim Paradis)
- allow modules to use get/put_task_struct() macros (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.2.EL" date="1114164000">- fix IDE disk accounting bug from wrong ios_in_flight (Larry Woodman)
- limit IGMP traffic to active link in bond_alb_xmit() (John Linville)
- fix audit refs to permit /var unmounting on shutdown (Dave Anderson)
- prevent IP4/6 output memory leaks of dst_entry structs (Dave Miller)
- enhance support for ethtool in 3c59x network driver (John Linville)
- fix launder_page() locking to avoid kswapd deadlock (Larry Woodman)
- suppress ide-floppy I/O errors when media isn't present (Brian Maly)
- make netdump more reliable on NAPI-enabled controllers (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.1.EL" date="1113991200">- (this is the first build for RHEL 3 Update 6)
- fix oops when io_setup() is called w/unwritable addr (Jeff Moyer)
- prevent kswapd hangs under launder_page() w/no bufs (Larry Woodman)
- fix autofs memory leaks when events share wait queues (Jeff Moyer)
- change IBM veth driver to indicate link is always up (David Howells)
- fix error resets and TF reg reads in SATA AHCI driver (Jeff Garzik)
- avoid dropping &gt;200-byte frames in sk98lin driver (John Linville)
- prevent shared memory lock/unlock w/o permissions (Dave Anderson)
- remove duplicate USB ESSENTIAL_REALITY defines (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.EL" date="1113559200">- fix data corruption w/ext3 xattr on 64-bit arches (Jason Baron)
- validate LCP frame lengths in PPP async handling (Dave Miller)
- enable forcedeth net driver builds in x86 configs (Jim Paradis)
- isolate IP fragment queues among various callers (Dave Miller)
- prevent busy inodes for symlinks after unmounts (Don Howard)
- revise PCI device ids extending ICH7 support (John Linville)
- work around broken xw4300 BIOS AHCI BAR setup (John Linville)
- add protocol validation in net bluetooth driver (John Linville)
- enable software watchdog timer in s390,x configs (Jan Glauber)
- fix data corruption w/uselib() on bad ELF libs (Ernie Petrides)
- add USB tablet init delay in wacom_probe() (Kristian Høgsberg)
- prevent core dumps with non-readable ELF interps (Dave Anderson)
- add maxevents validation in epoll_wait() handling (Ernie Petrides)
- add len validation in /dev/random poolsize sysctl (Ernie Petrides)
- correct size of ia64 syscall table initialization (Jason Baron)
- correct x86_64 user-mode i/o port validation (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-31.EL" date="1110448800">- fix missing ppc64 netdump/diskdump symbols (Nobuhiro Tachino)
- prevent ia64 unwind from traversing off stack (Jason Baron)
- disable 3w-9xxx driver builds on ppc64 (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-30.EL" date="1110362400">- fix obscure oops in tty init_dev() handling (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-29.EL" date="1109844000">- incorporate urgent late-breaking SATA fixes (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-28.EL" date="1109152800">- add more USB device support to visor driver (Pete Zaitcev)
- implement clustered APIC support for x86_64 (Larry Woodman)
- constrain x86 MSR writes based on cpu model (Jason Baron)
- increase max superbh size for performance (Stephen Tweedie)
- add locking to prevent oops in md_seq_show() (Doug Ledford)
- restore missing ia64 panic_on_oops handling (Tatsuo Uchida)
- implement Ethernet PCI quirk for HP xw9300 (Jim Paradis)
- revert NFS flock() avoidance to -27.7.EL (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.17.EL" date="1108980000">- rework NFS flock() avoidance w/FS_WANT_FLOCK for GFS (Ken Preslan)
- prevent inode corruption from delete/lookup races (Wendy Cheng)
- preserve registers for ia64 16-byte atomic ops (Geoff Gustafson)
- update SCSI whitelist for LSI/HP/STK/EMC devices (Tom Coughlan)
- disable vary_io in ips driver to avoid ctlr hangs (Tom Coughlan)
- correct handling of 2-TB device partitions (Peter Martuccelli)
- update support for ia64 perfmon facility (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.16.EL" date="1108720800">- implement diskdump support for SATA piix/promise (Nobuhiro Tachino)
- correct /proc/mtrr size values on EM64T platforms (Larry Woodman)
- restore page permissions after writes from ptrace() (Don Howard)
- fix /proc parent pids from multi-threaded forks (Ernie Petrides)
- enable software watchdog timer support on s390,x (Jan Glauber)
- update tg3 network driver to version 3.22RH (John Linville)
- incorporate 3w-9xxx driver version 2.24.00.011fw (Adam Manthei)
- correct ending boundary check in filemap_sync() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.15.EL" date="1108548000">- add e100 driver PCI device ids for ICH7 support (John Linville)
- restore obsolete but ignored e100 module params (John Linville)
- implement user-mode (gdb) access to ia64 gate page (Jason Baron)
- fix x86_64 FPU IP and DP values in SIGFPE context (Larry Woodman)
- add qla2200 module parameter to use NVRAM RIO val (Tom Coughlan)
- update 3w-xxxx driver to 1.02.00.037 w/.033 backup (Adam Manthei)
- fix crashes in video Firewire (ieee1394) driver (Bastien Nocera)
- prevent info leaks into ext3 journal disk blocks (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.14.EL" date="1108461600">- enhance AIO performance over NFS w/FS_AIO_SYNC hook (Steve Dickson)
- defer e100_tx_timeout() work from interrupt context (John Linville)
- correct IPV6 DST entry release to prevent route leak (Dave Miller)
- ignore MTU updates from invalid IPV6 ndisc packets (Dave Miller)
- add relevant PCI device ids to extend ICH7 support (John Linville)
- reduce system pauses during heavy page laundering (Larry Woodman)
- fix audit logging of paths w/predicate filter usage (Neil Horman)
- enable building of unsupported fusion isense module (Adam Manthei)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.13.EL" date="1108375200">- increase dxfer size limit for ppc64 SG_IO ioctl32 (David Howells)
- eliminate tty line discipline usage/switching races (Jason Baron)
- fix autofs recognition of ghosted direct map updates (Jeff Moyer)
- fix sg driver race between cmd completion and close (Tom Coughlan)
- prevent e100 data corruption from v.3.0.27-k2 update (John Linville)
- upgrade SATA support (core, libata, new/old drivers) (John Linville)
- implement diskdump support for sym53c8xx adapter (Yuichi Nagahama)
- add USB support for Wacom Cintiq/Intuos3 tablets (Kristian Høgsberg)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.12.EL" date="1107943200">- update e100 network driver to version 3.3.6-k2 (John Linville)
- correct cpu id macro for dual-core Opteron support (Jim Paradis)
- add "numa=off" message on x86_64 OOM kills w/NUMA (Larry Woodman)
- improve user/system timer tick accounting on s390,x (Pete Zaitcev)
- prevent EAGAIN errs from interrupted TCP recv() calls (Dave Miller)
- update cciss disk driver to version v2.4.54.RH1 (Adam Manthei)
- eliminate diskdump cpu id from frozen list (Nobuhiro Tachino)
- fix user-space access bug in USB vicam ioctl (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.11.EL" date="1107424800">- incorporate Emulex driver ioctl module version 1.0.13 (Tom Coughlan)
- eliminate potential call_lock deadlock with diskdump (Tatsuo Uchida)
- fix potential kiobuf_lock deadlock in free_kiovec() (Larry Woodman)
- add L2 cache descriptor for EM64T Irwindale processor (Neil Horman)
- prevent mmap() syscalls from choosing NULL mappings (Rik van Riel)
- include bounce buffer pages in show_mem() output (Larry Woodman)
- add I2C driver support for ICH5 in i2c-i801.c (John Linville)
- correct parport_pc errors on insmod failures (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.10.EL" date="1106906400">- fix futex_wait() race condition that allowed app hang (Ingo Molnar)
- add/correct write barrier placement in timer routines (David Howells)
- add x86_64 NMI switch support to debug kernel hangs (Yuichi Nagahama)
- restore CIV/LVI offset operation in i810_audio driver (John Linville)
- update e1000 network driver to version 5.6.10.1-k2 (John Linville)
- prevent bogus BUG_ON during multi-threaded core dump (Roland McGrath)
- fix x86_64 crash in huge_page_release() w/SHM_HUGETLB (Larry Woodman)
- fix possible mem corruption from /proc/kcore access (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.9.EL" date="1106647200">- fix core dumping over NFS mounts with "intr" option (Roland McGrath)
- prevent multi-threaded app hang from sys_wait4() race (Ingo Molnar)
- restore e1000 support for Intel PCI device id 1014 (John Linville)
- add ac97 quirk entries for HP xw6000/xw6200/xw8000 (John Linville)
- update b44 network driver to upstream version 0.95 (John Linville)
- revert NFS silly-delete and rpciod-hang patches (Steve Dickson)
- fix panics while backing up LVM snapshots (Heinz Mauelshagen)
- fix oops in redirect_target() on DHCP refresh (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.8.EL" date="1105696800">- rework ia64 INIT switch stacks for clean tracebacks (Tatsuo Uchida)
- fix USB raced timeout errors and ohci_complete_add() (Pete Zaitcev)
- add O_DIRECT handling in LVM driver handling (Heinz Mauelshagen)
- downgrade wait4() SIGCHLD/SIG_IGN warning message (Ingo Molnar)
- eliminate potential VMA list races with do_brk() (Dave Anderson)
- ignore ICMP Source Quench messages in tcp_v4_err() (Dave Miller)
- prevent VMA overlap crashes in insert_vm_struct() (Jason Baron)
- move flock() avoidance from NFS up to F/S layer (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.7.EL" date="1105437600">- fix 32-compat alt-stack signal handling on x86_64 (Geoff Gustafson)
- add initialization of ppc64 EEH error buffer size (David Howells)
- make ppc64 xmon work properly with Power5 console (David Howells)
- prevent infinite sync loop from NFS ESTALE writes (Steve Dickson)
- update 8139too network driver w/recent 2.4 fixes (John Linville)
- avoid netfilter oops when ip_conntrack is unloaded (Dave Miller)
- fix potential rpciod hangs during NFS sillydelete (Steve Dickson)
- avoid "No locks available" errors w/flock() on NFS (Ken Preslan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.6.EL" date="1104919200">- fix x86 phys proc ids for non-clustered APIC systems (Geoff Gustafson)
- return EINVAL on e100/e1000 rx-mini/rx-jumbo settings (John Linville)
- fix i810_audio regression from modified ICH6 PCI ids (John Linville)
- prevent race conditions in add_wait_queue_cond() macros (Jeff Moyer)
- fix FAT32 file system corruption w/writing 8M files (Alexander Viro)
- fix derivation/presentation of PHB unit ids on ppc64 (David Howells)
- close OpenFirmware stdin device at boot on ppc64 (David Woodhouse)
- fix 32-bit-compat regression in CMSG validations (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.5.EL" date="1103796000">- add "CommitLimit" data to /proc/meminfo output (Frank Hirtz)
- allow autofs to expire mounts on ppc64 arch (Jeff Moyer)
- add 3c59x EEPROM_RESET for 3c900 Boomerang (John Linville)
- ignore PTE mapping status in page_anon() (Larry Woodman)
- fix SIOCGIFHWADDR handling for zero addr_len (Dave Miller)
- add netdump support for x86_64, ia64, ppc64 (Dave Anderson)
- correct overcommit accounting on fork failure (Frank Hirtz)
- raise default ia64/ia32e swiotlb size to 64M (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.4.EL" date="1103709600">- add network CMSG validation checks (Dave Miller)
- fix data struct leak in ip_options_get() (Dave Miller)
- fix IGMP vulnerabilities in ip[6]_mc_source() (Dave Miller)
- fix e_phnum binfmt_elf loader vulnerability (Dave Anderson)
- clean x86_64 32-bit-compat syscall numbers (Jim Paradis)
- prevent ia64 floating point reg val leakage (Jason Baron)
- add USB io_edgeport driver size check (Peter Martuccelli)
- enable softirq deferral for x86_64 arch (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.3.EL" date="1102586400">- add data/param length sanity checks in smbfs (Alexander Viro)
- prevent /proc/&lt;PID&gt;/cmdline env data disclosure (Dave Anderson)
- make tulip_stop_rxtx() wait for DMA termination (John Linville)
- fix mm_stat regression introduced in -20.13.EL (Rik van Riel)
- correct return value from vlan_dev_change_mtu() (John Linville)
- serialize datagram read w/appropriate semaphore (Dave Miller)
- fix keyboard regression introduced in -24.EL (Peter Martuccelli)
- enable mmap/mprotect PROT_EXEC for legacy apps (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-26.2.EL" date="1101722400">- fix USB problems with keyboards and ia64 oopses (Pete Zaitcev)
- add i810 PCI IDs for nforce3/CK804 audio devices (Jim Paradis)
- fix ppc64 viodasd driver dev naming/limit bugs (David Howells)
- prevent tg3 fiber link bounces w/auto-negotiation (Dave Miller)
- add ac97 quirk handling for i810_audio driver (John Linville)
- prevent incorrect OOM killing with iscsi usage (Larry Woodman)
- create kiobuf cache to reduce lowmem contention (Larry Woodman)
- fix yet another binfmt_elf loader vulnerability (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.1.EL" date="1100512800">- (this is the first build for RHEL 3 Update 5)
- implement open() recovery from NFS ESTALE errors (Neil Horman)
- clean up warnings from lpfc and lpfc_703 Makefiles (Tom Coughlan)
- fix nessus-induced kernel panic with auditing (Peter Martuccelli)
- update 3c59x driver to LK1.1.18 and fix reset bug (John Linville)
- fix ext3 O_DIRECT bug in orphan list handling (Stephen Tweedie)
- flush cached dirty pages on NFS reads w/O_DIRECT (Steve Dickson)
- allow ia64 kernel unaligned access msg suppression (Neil Horman)
- correct test for performing buffer-head reclaim (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.EL" date="1100253600">- fix binfmt_elf loader vulnerabilities (Jim Paradis, Dave Anderson)
- limit kernel data struct slabs to single-page allocs (Larry Woodman)
- update Emulex driver to 7.1.14 (backup still 7.0.3) (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-24.EL" date="1100080800">- fix several ppc64 problems with signal catching (David Woodhouse)
- fix several bugs in /proc/ppc64/lparcfg driver (David Howells)
- fix possible diskdump hangs w/megaraid2 driver (Tatsuo Uchida)
- add support for IBM EM64T-based Groucho blade (Peter Martuccelli)
- fix regression in USB BIOS-&gt;kernel hand-off support (Pete Zaitcev)
- fix regression in ia64 kernel stack unwind handling (Don Howard)
- fix regression w/agpgart support of i8xx chipsets (Larry Woodman)
- add support for BLKSSZGET ioctl in cciss driver (Tom Coughlan)
- disable iSCSI builds in ppc64 and s390* configs (Tom Coughlan)
- update Emulex driver to 7.1.13 (backup still 7.0.3) (Tom Coughlan)
- correct SCSI whitelist for Chaparral FR1422 devices (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-23.EL" date="1098957600">- prevent kswapd from getting stuck in prune_icache() (Larry Woodman)
- fix ppc64 single-stepping into signal handlers (David Woodhouse)
- fix corruption from user stack expansion races (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-22.EL" date="1098093600">- prevent add/removal races in SCSI open handling (Doug Ledford)
- fix U3 agpgart regression with Intel i8xx chipsets (Dave Jones)
- update SCSI whitelist for IBM 1722/1724 devices (Tom Coughlan)
- correct TSS descriptor limit checking for x86_64 (Jim Paradis)
- add nforce3/CK804 device support and fix ACPI bug (Jim Paradis)
- add support for "forcedeth" net driver version 0.28 (Jim Paradis)
- enable diskdump support in amd64/ia32e configs (Nobuhiro Tachino)
- restore/improve linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- add missing page_cache_release() in launder_page() (Larry Woodman)
- update Emulex driver to 7.1.11 (backup still 7.0.3) (Tom Coughlan)
- add new USB ids to support latest Wacom tablets (Kristian Høgsberg)
- remove drivers/net/tun.o from unsupported list (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-21.EL" date="1096538400">- fix potential PTE race in do_anonymous_page() (Rik van Riel)
- add "Committed_AS" data to /proc/meminfo output (Frank Hirtz)
- revise DMA zone paging thresholds for x86_64 (Larry Woodman)
- prevent /proc/scsi/scsi oops during probes (David Woodhouse)
- avoid kswapd hangs via free_more_memory() hooks (Rik van Riel)
- update megaraid2 driver to 2.10.8.2 w/2.10.6 backup (Adam Manthei)
- fix do_notify_parent() panic from ptrace death race (Roland McGrath)
- fix large core file support on 64-bit architectures (Dave Anderson)
- enable tux on ia64 and increase max tux threads to 16 (Ingo Molnar)
- fix ia64/s390,x single-stepping w/signal handlers (David Woodhouse)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.14.EL" date="1096452000">- fix hang in SCSI starvation management code (David Howells)
- update SCSI whitelist for NETAPP LUN devices (Wendy Cheng)
- fix s390 cio handling during ESS fail-overs (Pete Zaitcev)
- update Emulex driver to 7.1.8 w/7.0.3 backup (Tom Coughlan)
- update Qlogic driver to 7.01.01 w/7.00.03 backup (Tom Coughlan)
- correct unlock/free order in proc_lookupfd() (Ernie Petrides)
- use ACPI for PCI interrupt routing on ia32e (Jim Paradis)
- allow cpus to boot w/APIC IDs &gt; 8 on ia32e (Jim Paradis)
- fix pid allocation when pid_max &gt; 32768 (Ernie Petrides)
- fix regs in multi-threaded ia64 core dumps (Keiichi Mori)
- enable sym53c8xx driver for ppc64 iSeries (David Howells)
- fix ac97 depmod errors w/hugemem configs (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.13.EL" date="1096365600">- fix aic79xx_osm.h/3c59x.c changes in prior rev (Tachino/Linville)
- allow for larger nfsd block sizes on some archs (Steve Dickson)
- fix possible aacraid driver panic in aac_info() (Tom Coughlan)
- fix xdr argsize check to handle writes &gt;= 2^31 (Steve Dickson)
- update e1000 network driver to version 5.3.19-k2 (John Linville)
- apply several cciss driver fixes (to 2.4.52.RH2) (Adam Manthei)
- fix x86_64 versions of cpu capability test macros (Jim Paradis)
- fix ppc64 HPTE memory corruption race condition (Rik van Riel)
- add sys_epoll support on s390,x (Stephen Tweedie, Pete Zaitcev)
- prevent keyboard.c warnings from mouse clicks (Norm Murray)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.12.EL" date="1096279200">- improve slab cache page reaping heuristics (Larry Woodman)
- implement diskdump support for x86_64 arch (Nobuhiro Tachino)
- add ia64 INIT trigger switch support for debugging (Tatsuo Uchida)
- fix several problems in handling of AIO on pipes (Jeff Moyer)
- update fixes for LTP read02 test hangs with tmpfs (Alexander Viro)
- fix x86_64 single-stepping out of signal handlers (Jim Paradis)
- increase size of ppc64 RTAS error log buffer (David Howells)
- increase max possible kNFSD lockd cookie size (Steve Dickson)
- backport 3c59x fixes for mii-tool problems w/10Mb (John Linville)
- incorporate Cisco's iscsi_sfnet initiator driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.11.EL" date="1095933600">- implement diskdump support for megaraid2 adapter (Tatsuo Uchida)
- update ips driver to version 7.10.18 w/7.00.15 backup (Tom Coughlan)
- correct max page aging interval boundary in kscand() (Larry Woodman)
- add ppc64 support for ptrace() with PT_SINGLESTEP (David Woodhouse)
- update e100 network driver to version 3.0.27-k2 (John Linville)
- fix LTP read02 test hangs when tmpfs is in use (Alexander Viro)
- get proc_dir_entry reference in proc_lookup() (Alexander Viro)
- add exports of several AIO-related interfaces (Larry Woodman)
- reduce swapping during excessive pagecache use (Larry Woodman)
- implement statfs64() syscall on x86 for NFS use (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.10.EL" date="1095847200">- implement early USB hand-off (BIOS-&gt;kernel) support (Pete Zaitcev)
- fix stack pointer calculation in x86 show() handling (Jeff Moyer)
- prevent interference between flock/POSIX lock types (Frank Hirtz)
- update pcnet32 network driver to version 1.30c (John Linville)
- add export of block_commit_write() f/s interface (Larry Woodman)
- implement diskdump support for dpt_i2o adapter (Tatsuo Uchida)
- update mptfusion driver to version 2.05.16.02 (Adam Manthei)
- move disk_dump_notifier_list to diskdumplib.c (Nobuhiro Tachino)
- update s390 zfcp driver to revision 5.31.2.11+ (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.9.EL" date="1095674400">- fix occasional ibmvscsic driver insmod crash (David Howells)
- disable linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- prevent double slashes in symlink auditing (Peter Martuccelli)
- fix overzealous compat32 setsockopt conversions (David Woodhouse)
- backport tulip driver fixes from upstream 2.4.28 (John Linville)
- update tg3 network driver to version 3.10RH (John Linville)
- implement sysctl to force igmp protocol versions (Neil Horman)
- add diskdump performance improvement info (Nobuhiro Tachino)
- fix s390 iucv lost connections and ping hangs (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.8.EL" date="1095588000">- prevent diskdump deadlock in case of die() recursion (Tatsuo Uchida)
- add x86/x86_64 support for ptrace() w/PT_SINGLESTEP (Roland McGrath)
- fix x86/x86_64 single-stepping into signal handlers (Roland McGrath)
- increase x86 value for MAX_MP_BUSSES definition to 260 (Ingo Molnar)
- eliminate ia64 potential for scheduler runq deadlock (Larry Woodman)
- add support for /proc/sys/kernel/mem_nmi_panic sysctl (Dave Anderson)
- prevent keyboard-initiated sysrq hangs in handle_sysrq() (Jeff Moyer)
- fix intermittent netdump hangs from cpu-frozen messages (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.7.EL" date="1095415200">- fix premature OOM killing change added in prior rev (Larry Woodman)
- backport vlan driver fixes from upstream 2.4.28-rc1 (John Linville)
- add _sb_findmap symbol export in s390/s390x kernels (Pete Zaitcev)
- add ppc64 support for 32-bit sendfile64() syscall (David Howells)
- fix 32-bit IPC_INFO shmctl() syscalls for ppc64 (David Howells)
- upgrade libata/SATA support to current 2.4 bits (John Linville)
- avoid USB device resets of shared/busy interfaces (Pete Zaitcev)
- fix miscellaneous problems in ppc64 icom driver (David Howells)
- fix ip_queue_maxlen sysctl for ip[6]_queue modules (Neil Horman)
- add module parm for max entries in NFS_ACL replies (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.6.EL" date="1095156000">- prevent OOM killer from kicking in prematurely (Larry Woodman)
- avoid NMI watchdog crashes during sysrq-m usage (Wendy Cheng)
- add auditing support for ia64 clone2 syscall (Peter Martuccelli)
- correct sign of auditing error codes for ia64 (Peter Martuccelli)
- implement ia64 auditing 32-bit-disable sysctl (Peter Martuccelli)
- fix ia64 faults w/stale VHPT-generated TLB entries (Dave Anderson)
- fix invalid x86_64 checksums for multicast packets (Mike Gahagan)
- fix incorrect blocking bug inside wakeup_kswapd() (Larry Woodman)
- validate appropriate media type in DVD drives (Doug Ledford)
- reduce s390 stack usage in qeth/qdio drivers (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.5.EL" date="1094810400">- prevent scenarios that lead to hang of kswapd (Larry Woodman)
- add locking for access to /proc/bus/usb/devices (Pete Zaitcev)
- correct x86 rescheduling to handle apm=power-off (Ingo Molnar)
- fix OOM killer locking and mm referencing holes (Larry Woodman)
- pin ia64 mapping for idle proc stack during boot (Larry Woodman)
- fix warning throttle for amd64 stack overflow check (Neil Horman)
- fix content lengths when using tux gzip compression (Ingo Molnar)
- add auditing support for pread/pwrite syscalls (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.4.EL" date="1094724000">- prevent bogus data in /proc/scsi/ibmvscsi/* (David Howells)
- update tg3 network driver to version 3.9RH (John Linville)
- improve ramfs memory alloc w/scarce highmem (Larry Woodman)
- correct several values in /proc/ppc64/lparcfg (David Howells)
- allow dirty page rebalancing under mem pressure (Rik van Riel)
- prevent memory leak in scsi_build_commandblocks() (Doug Ledford)
- fix potential kswapd deadlock w/disk quota usage (Larry Woodman)
- increase MAX_IO_APICS from 8 to 32 for x86_64 arch (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.3.EL" date="1094205600">- fix various error path bugs in bcm5820 driver (John Linville)
- validate addresses used with /dev/kmem accesses (Neil Horman)
- eliminate IPSEC tunnel leaks when using IPComp (Dave Miller)
- add auditing support for utimes() syscalls (Peter Martuccelli)
- prevent netconsole freeze w/cable dis-/re-connect (Jeff Moyer)
- correct reboot_cpu validation for "reboot=s&lt;n&gt;" (Doug Ledford)
- fix mem/irq clean-up in olympic tokenring driver (Neil Horman)
- update network bonding driver to version 2.6.0 (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.2.EL" date="1094032800">- add maps/rlimits output with print-fatal-signals=2 (Ingo Molnar)
- backport ac97 sound support from upstream 2.4.27 (John Linville)
- eliminate kernel stack data leaks from USB drivers (Mark Cox)
- fix interrupt status mask in AMD PCnet32 driver (David Howells)
- fix module loading problems in ibmvscsic driver (David Howells)
- fix x86 shared runq mapping when ACPI data is bad (Bernd Schmidt)
- disable enhanced error handling on PCI-ISA bridges (David Howells)
- add memory-mapped i/o support to i810_audio driver (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.1.EL" date="1093860000">- (this is the first build for RHEL 3 Update 4)
- backport r8169 network driver changes from 2.4 (John Linville)
- update i810_audio sound driver to version 1.01 (John Linville)
- convert USB UHCI driver warning to debug message (Pete Zaitcev)
- backport 2.6 PROT_GROWSDOWN/UP mprotect() support (Jakub Jelinek)
- lower ppc64 console logging level of RTAS messages (David Howells)
- fix ppc64 handling of "smt-emabled=off" boot option (David Howells)
- correct socket sndbuf accounting w/IP_MULTICAST_LOOP (Neil Horman)
- reduce x86_64 user stack start randomization to 16K (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.EL" date="1092823200">- change TARGET_CPUS on x86_64 to include all on-line cpus (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-19.EL" date="1092304800">- fix possible races/overflows in file offset handling (Alexander Viro)
- correct logging of boot progress messages on Power5 (David Howells)
- extend ppc64 EEH support for other types of devices (David Howells)
- fix ibmveth driver to properly shut down and restart (David Howells)
- fix several races and overflows in ppc64 RTAS driver (David Howells)
- backport "acpi=noirq" support to work around Nocona hangs (Don Howard)
- conditionalize pbn_hp_diva to fix serial driver oops (Matthew Galgoci)
- add amd64 GART entry guard mappings for PCI mis-prefetch (Jim Paradis)
- upgrade SATA support again to resolve several problems (Jeff Garzik)
- qualify ia32e IRQ affinity disable with BIOS flag check (Jim Paradis)
- fix eeh_check_failure() on ppc64 to be interrupt safe (David Howells)
- correct ppc64 EEH macros to use appropriate data size (David Howells)
- fix x86/ia64 no-wait handling in smp_call_function() (Larry Woodman)
- fix "Filter target 0x203 not known ..." audit msgs (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-18.EL" date="1090404000">- prevent s390 mlock hangs with follow_page() rework (Ernie Petrides)
- fix Power5 initialization and handling of RAS IRQs (David Howells)
- fix ppc64 viocons driver deadlocks with printk() (David Howells)
- apply eh_timeout, netdump, cli fixes in diskdump (Tatsuo Uchida)
- add skip_mapped_pages tuning for page eviction (Stephen Tweedie)
- fix initrd's effect on ppc64 mem_end calculation (David Howells)
- allow HT support on ppc64 systems with single cpu (David Howells)
- backport v2.0.8 aic7xxx driver h/w support for Dell (Tom Coughlan)
- correct ppc64 device node searching in hvsi driver (David Howells)
- fix KMI compat problem w/pgprot_t in x86 NX support (Jim Paradis)
- resurrect mptfusion driver backup version 2.05.05 (Tom Coughlan)
- disable IRQ affinity setting on some ia32e systems (Jim Paradis)
- update SCSI whitelist for Dot Hill SANnet/StorEdge (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-17.EL" date="1089280800">- account for zone holes in big hash table allocator (Stephen Tweedie)
- prevent reserved stack space overflow of mmap_top (Ernie Petrides)
- fix USB crash in scan_async() with EHCI hardware (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-16.EL" date="1088848800">- enable exec-shield and add x86 NX support (Ingo Molnar, Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.19.EL" date="1088762400">- add owner check in inode_change_ok() for gid changes (Ernie Petrides)
- fix race in finish_task_switch() between wakeup/exit (Ernie Petrides)
- remove Samsung CD-ROM SN-124 from IDE DMA blacklist (Tom Coughlan)
- update e1000 network driver to version 5.2.52-k3 (John Linville)
- add auditing support for semtimedop syscalls (Peter Martuccelli)
- fix tasklet and locking bugs in Power5 hvsi driver (David Howells)
- fix megaraid2 handling of TUR cmds with SCSI CD-ROM (Adam Manthei)
- update SCSI whitelist for HP NS E1200-160 router (Tom Coughlan)
- prevent x86 read_ldt() from reading beyond kmap (Ernie Petrides)
- force single loadable segment in ia64 kernels (Jakub Jelinek)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.18.EL" date="1088157600">- implement ia64 work-around for TLB fetch timeout MCA (Larry Woodman)
- fix Power3 interrupt initialization in ppc64 setup (David Howells)
- correct info msg, prevent double panic in diskdump (Tatsuo Uchida)
- defend against NULL "mm" ptrs in page_referenced() (Rik van Riel)
- fix miscellaneous audit subsystem problems (Peter Martuccelli)
- prevent crash with tux CGI execution on x86_64 (Ingo Molnar)
- add installer info to SATA sx8 block driver (Jeff Garzik)
- turn on vary_io flag in SCSI ips driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.17.EL" date="1087984800">- allocate big system hash tables w/bootmem allocator (David Howells)
- prevent loading aic7xxx_old when aic7xxx is in use (Doug Ledford)
- implement stat() recovery from NFS ESTALE errors (Steve Dickson)
- fix raw/O_DIRECT i/o bug with unmapped pages (Stephen Tweedie)
- correct another locking hole in RAID1 handling (Doug Ledford)
- fix __x86_64__ conditional in megaraid2.c driver (Adam Manthei)
- fix unresolved symbols on ia64 in cciss driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.16.EL" date="1087898400">- make NFS sillydelete wait for unlink completion (Steve Dickson)
- prevent EIO w/concurrent O_DIRECT+buffered i/o (Stephen Tweedie)
- upgrade SATA support (core, libata, and drivers) (Jeff Garzik)
- implement futex() FUTEX_CMP_REQUEUE op (Al Viro, Pete Zaitcev)
- update b44 network driver to version 0.93 (John Linville)
- avoid unix_stream_sendmsg() ENOBUFS errors (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.15.EL" date="1087812000">- improve SCSI mid-layer error handling w/sdev_retry_q (Doug Ledford)
- eliminate rw-semaphore races between waiter/wakeup (David Howells)
- add locking and fix accounting bug in RAID1 handling (Doug Ledford)
- backport Carmel sx8.c driver from upstream 2.4 base (John Linville)
- rename ppc64-squadrons-* patches to ppc64-power5-* (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.14.EL" date="1087639200">- introduce support for IBM Squadrons/Power5 systems (David Howells)
- update aacraid driver to 1.1.5-2339 w/1.1.2 backup (Adam Manthei)
- allow sys_remap_file_pages() on unlocked ramfs VMAs (Larry Woodman)
- fix diskdump hangs during resets with aic79xx driver (Tatsuo Uchida)
- fix possible data corruption when using SHM_HUGETLB (Larry Woodman)
- set QLogic HbaApiNode proc file permissions to 0600 (Tom Coughlan)
- add IRQ blocking/restoring in add_gendisk/del_gendisk (Jeff Needle)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.13.EL" date="1087466400">- fix problem causing PCI bus 255 to be missing on ia64 (Ben Woodard)
- make nfs_statfs() recognize/handle fs size overflows (Steve Dickson)
- update QLogic driver to 7.00.03-RH1 w/6.07.02 backup (Tom Coughlan)
- allow procfs to utilize more dynamic inode numbers (David Howells)
- prevent inappropriate "unexpected IO-APIC" messages (Ernie Petrides)
- avoid lost dirty page bits in s390/s390x VM handling (Pete Zaitcev)
- fix ACPI SCI interrupt defaults and add kernel params (Jim Paradis)
- fix user-space access bugs in acpi/airo/decnet/sound (Alexander Viro)
- remove drivers/net/starfire.o from unsupported list (Ernie Petrides)
- fix mm_struct mem leak in copy_process() error path (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.12.EL" date="1087293600">- correct s390/s390x tests for PT_AUDITED flag (Peter Martuccelli)
- update e100 network driver to version 2.3.43-k1 (John Linville)
- update megaraid2 driver to 2.10.6 w/2.10.1.1 backup (Adam Manthei)
- add x86_64 auditing support for 32-bit-compat (Peter Martuccelli)
- fix ia64 unwind handling for UNW_INSN_SETNAT_MEMSTK (Jason Baron)
- update cciss driver to v2.4.52 for several fixes (Tom Coughlan)
- fix variable block mode tape handling in st driver (Tom Coughlan)
- incorporate latest Emulex fibre channel driver (Tom Coughlan)
- fix USB EHCI problem with BIOS-to-host handoff (Pete Zaitcev)
- update SCSI whitelist for DDN/Xyratex/SanDisk/CBOX3 (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.11.EL" date="1087207200">- upgrade to latest autofs4, remove from unsupported list (Jeff Moyer)
- fix memory corruption bug in audit driver code (Peter Martuccelli)
- store adjusted KSP value in ia64 diskdump support (Tatsuo Uchida)
- update e1000 network driver to version 5.2.52-k1 (John Linville)
- update ips driver to version 7.00.15 w/6.11.07 backup (Adam Manthei)
- implement USB device interlock between ioctls/SCSI-ops (Pete Zaitcev)
- update tg3 driver to version 3.6RH for upcoming chipsets (Dave Miller)
- downgrade several PCI cache line size debugging messages (Jim Paradis)
- correct x86_64 32-bit-compat support for AIO syscalls (Jeff Moyer)
- prevent FPU exception handling hangs on x86/x86_64 (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.10.EL" date="1086948000">- give wait.func highest priority in wake_up_filtered() (Larry Woodman)
- reduce system time when using sys_remap_file_pages() (Larry Woodman)
- enable CONFIG_SOFT_WATCHDOG module for ppc64 configs (David Howells)
- improve page allocation to avoid unnecessary swapping (Rik van Riel)
- implement diskdump support for ia64 with mptfusion (Tatsuo Uchida)
- disable native ia32 support for ia64 Montecito cpus (Jason Baron)
- save/restore P4/ia32e perf registers for oprofile (Will Cohen)
- fix oprofile ESCR_SET_EVENT_SELECT() event mask (Will Cohen)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.9.EL" date="1086775200">- update s390 zcrypt driver to version 1.2.1 (Pete Zaitcev)
- update network tg3 driver to version 3.5RH (Dave Miller)
- eliminate separate ia32e oprofile processor id (Will Cohen)
- update SCSI whitelist for IBM 2105/2145 devs (Doug Ledford)
- avoid EAGAIN errors on blocking UDP sockets (Steve Dickson)
- avoid putting locked inodes on dirty list (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.8.EL" date="1086688800">- decouple NFS O_DIRECT handling for performance gain (Steve Dickson)
- export page_is_ram() interface for amd64/ia32e arch (Jim Paradis)
- enable CONFIG_SCSI_SATA_* options in x86_64 configs (Jim Paradis)
- update mptfusion driver to 2.05.16 w/2.05.11.03 backup (Adam Manthei)
- fix nopage_sequential_readahead() and filemap_sync() (Larry Woodman)
- fix USB EHCI driver to avoid Squadrons install oops (Pete Zaitcev)
- add x86 NMI trigger switch support for debugging (Yuichi Nagahama)
- add dmi_blacklist[] entry for "Intel NA440BX DP" (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.7.EL" date="1086602400">- apply some minor scsi_dump_status() format tweaks (Doug Ledford)
- implement SCSI support for dynamic add (hot plug) (Doug Ledford)
- upgrade lvm driver logic to version 1.0.8-2 (Heinz Mauelshagen)
- fix x86_64 definition for inlined ffs() function (Jim Paradis)
- preserve VM_MAYEXEC for executable stack support (Jim Paradis)
- add extra SLBIEs for ppc64 Power5 DD2.0 errata (David Howells)
- add ppc64 32-bit compat for TIOCGICOUNT/MIWAIT (David Howells)
- hold file struct ref when removing POSIX locks (Steve Dickson)
- fix window scaling bug in tcp_ack_update_window() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.6.EL" date="1086343200">- make fsync() flush all pending NFS updates to disk (Steve Dickson)
- complete ia64 support for multiple I/O port spaces (Larry Woodman)
- fix sending of IP broadcast frames with TTL of zero (Neil Horman)
- prevent context switch storms under high VM loads (Larry Woodman)
- fix sigaltstack() errors w/JVM on hugemem kernels (Roland McGrath)
- add locking and improve output in scsi_dump_status() (Doug Ledford)
- add size boundary checking in scsi_resize_dma_pool() (Doug Ledford)
- fix SCSI request struct leak on command init failures (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.5.EL" date="1084528800">- overhaul ia64 SAL/MCA subsystem (Ben Woodard)
- enable x86_64 32-bit UID support (Jim Paradis)
- add initial diskdump support (Nobuhiro Tachino)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.4.EL" date="1084356000">- reduce chance of "VFS: Busy inodes after unmount." errs (Steve Dickson)
- convert "uaddr2" arg ptr in s390x futex() compat syscall (Pete Zaitcev)
- add ppc64 32-bit compat handler for PE_LOCKED_COPY ioctl (David Howells)
- update s390 dasd driver with several recent bug fixes (Pete Zaitcev)
- fix amd64 NUMA node scanning for Northbridge systems (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.3.EL" date="1084183200">- prevent exp_stopfodrop() oops during cluster failover (Steve Dickson)
- make nfs_file_commit() always flush the entire file (Steve Dickson)
- fix pcnet32 driver's MAC address selection on ppc64 (Julie DeWandel)
- backport /dev/random driver fixes for missed wakeups (Mark DeWandel)
- fix hang w/SoundBlaster 16-bit sampling w/odd count (Ernie Petrides)
- make s390 tape driver specify GPL module license type (Pete Zaitcev)
- correct buffer len value in ppc64 pSeries ipr driver (David Howells)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.2.EL" date="1083664800">- enable booting on 8-way Opteron systems (Jim Paradis)
- fix 32-bit-compat truncate64() on x86_64 (Jim Paradis)
- correct promiscuous mode counter handling (Dave Miller)
- support 128-GB ia64 systems w/HP zx1 chipset (Larry Woodman)
- add export of sys_ioctl() global symbol on s390x (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.1.EL" date="1083578400">- (this is the first build for RHEL 3 Update 3)
- reenable/fix linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- clean up file locks when NFS clients receive signals (Steve Dickson)
- complete ia64-specific LAuS syscall auditing support (Mark DeWandel)
- prevent NULL pointer dereference in page_referenced() (Rik van Riel)
- fix max sectors argument in lvm_snapshot_alloc() (Heinz Mauelshagen)
- allow AGP bus scanning to execute for all architectures (John Dennis)
- fix page_referenced() rss limit checks w/unmapped pages (Rik van Riel)
- correct locking and cr/lf problems in usbserial driver (Pete Zaitcev)
- add /proc/cpuinfo support for new ppc64 processors (Julie DeWandel)
- fix sense data handling on certain SCSI cmd retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.EL" date="1082541600">- fix clobbering of /proc/cpuinfo vendor_id on x86_64 (Jim Paradis)
- correct MCAST_MSFILTER/IP_MSFILTER size checking (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-14.EL" date="1081936800">- disable linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- prevent symlink buffer overflow in ISO-9660 fs (Ernie Petrides)
- check for skb overrun in IPV4/IPV6 IGMP handling (Dave Miller)
- fix possible hang in rebalance_laundry_zone() (Larry Woodman)
- correct zone_wired[] initialization for NUMA (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-13.EL" date="1081332000">- fix several critical libata bugs (Jeff Garzik)
- correct IPSEC XFRM policy ref counting (Dave Miller)
- add amd64/ia32e parsing for "acpi=off" arg (Jim Paradis)
- update tg3 driver to v3.1 for several fixes (Dave Miller)
- fix SCSI whitelist for Hitachi/HP DFx00, Apple Xserve (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-12.EL" date="1080295200">- add USB support for Handspring Treo 600 PDA syncing (Matthew Galgoci)
- clear state for CPEs during ia64 MCA SAL error logging (Ben Woodard)
- prevent DMA resource leak in QLogic driver error path (Tom Coughlan)
- change default QLogic driver device queue depth to 64 (Tom Coughlan)
- replace fabricated cciss drive geometry w/ENXIO error (Tom Coughlan)
- update SCSI whitelist for HP SureStore/StorageWorks (Tom Coughlan)
- disable CONFIG_ACPI_DEBUG in amd64/ia32e configs (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-11.EL" date="1078740000">- add yet another Intel ICH6 SATA PCI id (Jeff Garzik)
- fix ref counting in copy_process() error path (Larry Woodman)
- remove ia64 support for /proc/bus/mckinley/bitmap (Jason Baron)
- correct depmod versioning for unsupported modules (Ernie Petrides)
- prevent data corruption in ia32e phys_proc_id[] info (Larry Woodman)
- change default value for inactive_clean_percent to 30 (Larry Woodman)
- enable improved version of s390 on-demand timer patch (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-10.EL" date="1078221600">- incorporate late-breaking libata fixes (Jeff Garzik)
- enable amd64 syscall for tux support (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.17.EL" date="1078135200">- reduce s390 idle overhead with on-demand timer patch (Pete Zaitcev)
- complete ia64 NPTL support for 32-bit-EL executables (Jason Baron)
- add several ia64 syscall table entries for 32-bit-EL (Jason Baron)
- upgrade libata/SATA support, delete ich5-sata.patch (Jeff Garzik)
- check for mremap/vmtruncate race in move_one_page() (Jason Baron)
- prevent ia64 NaT-bit corruption during sig catching (Jason Baron)
- fix amd64 get_mtrr() parsing error with &gt;4GB memory (Jim Paradis)
- change amd64 default behavior to avoid TSC timer use (Jim Paradis)
- force s390utils upgrade to prevent zipl seg fault (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.16.EL" date="1078048800">- restore varyio capability in mptfusion driver update (Adam Manthei)
- enhance SCSI mid-layer queuing for indefinite retries (Doug Ledford)
- add ia64 reg reloads for 32-bit-EL strace -f support (Jason Baron)
- fix ia64 core dump support for 32-bit-EL executables (Jason Baron)
- add SCSI whitelist devs with BLIST_RETRY_ABORTED_CMD (Doug Ledford)
- remove stack-in-interpreter check in binfmt_elf.c (Julie DeWandel)
- clear all flags in exec_usermodehelper() for kmod (Alexander Viro)
- fix aacraid command completion (rq corruption) bugs (Tom Coughlan)
- correct cciss_proc_tape_report() type in flags decl (Tom Coughlan)
- enable USB-2.0-hub-based mice/keyboards to function (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.15.EL" date="1077962400">- fix amd64 oprofile linkage problem in ia32e support (Ernie Petrides)
- update ips driver to version 6.11.07 w/6.10.52 backup (Tom Coughlan)
- add size checks to DRM ATI r128 driver ioctl handling (John Dennis)
- avoid megaraid2 irq_disable calls for mem-mapped ctlrs (Tom Coughlan)
- upgrade firmware imbedded in QLogic driver to 3.02.24 (Tom Coughlan)
- correct ia64 memory accounting in overcommit mode 2 (Larry Woodman)
- implement softirq deferral to limit kernel stack depth (Ingo Molnar)
- reduce kernel stack usage in a couple of tux functions (Ingo Molnar)
- fix shared extended attribute ref counting in ext3 (Stephen Tweedie)
- clear SCSI sense data buffer between eh retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.14.EL" date="1077789600">- add .RH1 suffix to cciss driver version v2.4.50 (Tom Coughlan)
- implement initial LAuS syscall auditing support (Mark DeWandel)
- introduce GFS enablers for locking and sendfile ops (Ken Preslan)
- update QLogic driver to 6.07.01 w/6.06.00b11 backup (Tom Coughlan)
- improve netdump reliability w/asynchronous IPI param (Jeff Moyer)
- add ICH6 DSP audio support to i810_audio driver (Jeff Garzik)
- apply SCSI whitelist updates for several devices (Tom Coughlan)
- fix odd byte tape i/o handling in sym53c8xx driver (Tom Coughlan)
- correct minimum nfsd version that supports acls (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.13.EL" date="1077703200">- allow concurrent NFS direct i/o to same file if !append (Steve Dickson)
- introduce support for new Intel 64-bit ia32e processor (Larry Woodman)
- update mptfusion driver to 2.05.11.03 w/2.05.05 backup (Adam Manthei)
- remove fs/binfmt_misc.o from linux-modules-unsupported (Jason Baron)
- fix ia64 predicate register use in sig trampoline code (Jason Baron)
- add oprofile cpu type recognition for ia32e processor (Will Cohen)
- update e1000 network driver to version 5.2.30.1-k1 (Jeff Garzik)
- add more Intel PCI ids to match upstream 2.4 (Jeff Garzik)
- add ICH6 PATA support, PCI ids, irq routing (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.12.EL" date="1077530400">- add deferred page freeing for intr-context unmap_kvec() (Jeff Moyer)
- update megaraid2 driver to v2.10.1.1 w/v2.00.9 backup (Tom Coughlan)
- fix ppc64 pte hash table locking to avoid deadlocks (Julie DeWandel)
- fix ia64 data TLB init to prevent random boot-up hangs (Jason Baron)
- fix ia64 RNat register corruption with alt sig stacks (Jason Baron)
- allow smaller ia64 sig stacks in ia32 emulation layer (Jason Baron)
- backport ncpfs fixes to eliminate var-length arrays (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.11.EL" date="1077271200">- backport cisco aironet driver from 2.6.3-rc4 (Matthew Galgoci)
- update tg3 driver to v2.7 to fix status reg handling (Dave Miller)
- correct lost jiffies logic for x440/5 cyclone timer (Bernd Schmidt)
- fix open() error clean-up for unsupported O_DIRECT (Stephen Tweedie)
- prevent ia64 crashes when unmapping hugetlb pages (Jason Baron)
- add ppc64 processor support for future PPC970+ (Julie DeWandel)
- rework ppc64 32-bit-compat iptables support (Julie DeWandel)
- fix func ptr test in ethtool_set_ringparam() (Jeff Garzik)
- disable linux-2.4.21-scsi-affine-queue.patch (Doug Ledford)
- improve scsi_allow_ghost_devices description (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.10.EL" date="1077098400">- fix amd64 iommu bug causing data corruption on &gt;4GB systems (Jim Paradis)
- return EINVAL for unsupported ioctl32 syscalls on ppc64 (Julie DeWandel)
- remove incorrect BUG() call in __remove_inode_page() (Stephen Tweedie)
- fix s390 ctc driver problem causing build system hangs (Pete Zaitcev)
- fix s390 qeth driver error path to reset write_busy (Pete Zaitcev)
- update s390 zfcp driver to fix miscellaneous bugs (Pete Zaitcev)
- apply upstream nfs fixes for acl error handling (Steve Dickson)
- prevent kernel stack data leak via /dev/rtc (Ernie Petrides)
- allow AIO operations on sockets for non-inet (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.9.EL" date="1076925600">- restore genksyms_smp_prefix setting for non-x86 builds (Ernie Petrides)
- display/log memory stats whenever there's an OOM kill (Larry Woodman)
- update tg3 driver to v2.6, the latest upstream version (Jeff Garzik)
- update net bonding driver to v2.4.1, latest upstream (Jeff Garzik)
- fix irq, mem, printk, strtol bugs in cciss driver (Tom Coughlan)
- wait for board ready after hot add, cciss driver (Tom Coughlan)
- enable cciss adapter prefetch for x86 platforms (Tom Coughlan)
- add preserve_arg0 handling for ia32 emulation (Larry Woodman)
- fix ppc64 compat support for quota syscall (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.8.EL" date="1076580000">- remove Power-Blade-specific def for USB TEAC floppy (Julie DeWandel)
- fix s390 crash in iucv driver on connection shutdown (Pete Zaitcev)
- fix ia64 ACPI parsing for multinode IDE devs on x455 (Jim Paradis)
- fix amd64 core dumping of multithreaded 32-bit apps (Jim Paradis)
- fix s390 oprofile conditional and zero top addr bits (Will Cohen)
- add ipr driver v1.0.3 for IBM's PPC RAID adapters (Tom Coughlan)
- add {alloc,free}_netdev(), list macro, tg3 PCI ids (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.7.EL" date="1076407200">- restrict /proc/tty/driver directory access to root (Jeff Moyer)
- allow non-standard usr/sys VM splits at 2G/2G, 1G/3G (Ingo Molnar)
- extend existing ppc64 RTAS firmware flash interface (Mark DeWandel)
- fix ppc64 version of strncpy() to zero-pad buffers (Julie DeWandel)
- fix s390/x version of strncpy() to zero-pad buffers (Pete Zaitcev)
- fix generic version of strncpy() to zero-pad buffers (Jim Paradis)
- improve ppc64 segment table entry replacement logic (Julie DeWandel)
- correct type/cast of "len" in ppc64/kernel/nvram.c (Julie DeWandel)
- implement new ppc64 RTAS system call interface (Julie DeWandel)
- increase x86 RSDT table limit in ACPI parsing (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.6.EL" date="1076320800">- fix more usb-storage bugs for Power Blade support (Julie DeWandel)
- remove extra inactive_clean_pages-- in reclaim_page() (Larry Woodman)
- return proper error codes for do_munmap() failure in mremap (Dave Jones)
- fix binfmt_elf.c problems for apps with huge bss regions (Julie DeWandel)
- update cciss driver to v2.4.50 for Smart Array 6i support (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.5.EL" date="1075975200">- prevent netdump progress output from filling up log_buf (Jeff Moyer)
- add ppc64 RAS hook at end of panic() processing (Julie DeWandel)
- correct source IP address in ICMP error message (Dave Miller)
- fix smp deadlock with pdeath_signal posting (Roland McGrath)
- add ppc64 support for /proc/ppc64/lparcfg (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.4.EL" date="1075888800">- update nfsd mode-with-acls fix for upstream conformance (Steve Dickson)
- rework usb-storage locking to avoid hangs on disconnect (Pete Zaitcev)
- fix mmio alignment error in olympic token ring driver (Julie DeWandel)
- prevent tux logger-thread shutdown problems on ppc64 (Ingo Molnar)
- add ppc64 AltiVec chip support for Power Blades (Julie DeWandel)
- eliminate multi-threaded coredump hang potential (Ingo Molnar)
- fix ppc64 segfaults with tasks &gt; 2GB in size (Julie DeWandel)
- fix usb-storage memory-allocation/iowait deadlock (Alan Cox)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.3.EL" date="1075716000">- add amd64 support for PT_GNU_STACK with exec shield (Jim Paradis)
- fix s390 raid1 sync problem w/writes at end of dev (Pete Zaitcev)
- update s390 zcrypt driver to version 1.1.4 (Pete Zaitcev)
- fix output of large /proc/pid/statm values (Mark DeWandel)
- fix output of large /proc/partitions values (Mark DeWandel)
- enable ppc64 support for JS20 Power Blades (Julie DeWandel)
- fix kernel stack memory leak on fork failures (Dave Anderson)
- fix ipv6 packet quoting problem in icmpv6_send() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.2.EL" date="1075370400">- apply Intel's x86 microcode loader update (Jim Paradis)
- enhance PCI multifunction support for ppc64 (Julie DeWandel)
- fix nfsd returning bad mode bits when acls set (Steve Dickson)
- prevent unkillable zombies from detached NPTL threads (Ingo Molnar)
- avoid missing scsi disks in /proc/partitions on detach (Jason Baron)
- correct pte calculation inside zeromap_pte_range() loop (Ben Woodard)
- add inline function PDE() to help driver backporting (Matthew Galgoci)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.1.EL" date="1074679200">- (this is the first build for RHEL 3 Update 2)
- relocate various pieces of the "undo" patch (Patch Review Committee)
- rename s390 zcrypt and zfcp driver patches (Pete Zaitcev)
- add LKML discussion to COPYING.modules (Arjan van de Ven)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.EL" date="1073556000">- fix race condition between thread creation and signals (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-8.EL" date="1073469600">- fix amd64 eflags masking in 32-bit emulation of ptrace (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-7.EL" date="1073383200">- fix numerous ppc64 problems with /proc access (Julie DeWandel)
- allow user core files larger than 2GB in size (Dave Anderson)
- add ia64 support for Crestone Peak AGP bridges (John Dennis)
- fix unaligned kernel accesses in nfs_readdir() (Steve Dickson)
- add new_len/new_addr checks in do_mremap() (Ernie Petrides)
- fix nfs O_DIRECT corruption with &gt;4GB files (Steve Dickson)
- enable bus scan for AGP ctlrs on amd64 systems (John Dennis)
- limit PCI-alloc'ed physaddrs to 4GB on HP ia64 (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-6.EL" date="1070877600">- fix ppc64 firmware updates (Julie DeWandel)
- fix sync wakeup problem (Ingo Molnar)
- add ia64 cyclone support (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-5.EL" date="1070272800">- undo rejected patches (Stephen Tweedie, Arjan van de Ven, Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.20.EL" date="1069840800">- enable NUMA support in amd64 smp configs (Jim Paradis)
- prevent oopses with tux in OOM scenarios (Ingo Molnar)
- apply several ipv6 multicast bug fixes (Dave Miller)
- assign retval in copy_process() error path (Ingo Molnar)
- add lseek-in-/proc support for s390x "ps" (Pete Zaitcev)
- redefine zone_is_highmem() for Celestica (Dave Anderson)
- fix unresolved symbols in amd64 modules (Bill Nottingham)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.19.EL" date="1069754400">- fix tg3 rx_pending limit for BCM5705/BCM5782 chips (Jeff Garzik)
- reset page error flag prior to read of new contents (Jeff Moyer)
- enable CONFIG_HOTPLUG_PCI option for ia64 configs (Doug Ledford)
- fix inactive laundry list race in ramfs_writepage() (Dave Anderson)
- avoid out_of_memory() for wired pages when there's lomem (Dave Anderson)
- conditionalize ppc64 machdep_calls change for KMI compat (Ernie Petrides)
- limit anon/cache pages scanned in refill_inactive_zone() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.18.EL" date="1069668000">- create old version (rev. 5.64) of cmpci sound driver (Tom Coughlan)
- remove ac97.o, ad1848.o, cs4232.o from unsupported (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.17.EL" date="1069063200">- fix missing use of __GFP_HIGHMEM flag in pte_alloc_one() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.16.EL" date="1068890400">- rework scsi mid-layer queuing logic to fix error handling (Doug Ledford)
- fix pci_dma_sync_sg() scatterlist arg in megaraid2 driver (Tom Coughlan)
- move more-ptes-in-rmap-pte-chain logic to its own patch (Ernie Petrides)
- tag uses of __GENKSYMS__ with KMI/ABI compat comment (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.15.EL" date="1068804000">- fix MD multipath bugs causing crashes during fail-overs (Doug Ledford)
- add chain_ptep_t and revert pte_addr_t for KMI compat (Ernie Petrides)
- restore sub-timer-tick time-of-day granularity for ia64 (Jason Baron)
- modify agpgart and drm drivers for ia64 HP ZX1 support (John Dennis)
- fix ia64 32-bit emulation for several stat-related calls (Jason Baron)
- enable amd64 use of new ips driver w/config separation (Tom Coughlan)
- update e100 network driver to version 2.3.30-k1 (Jeff Garzik)
- update e1000 network driver to version 5.2.20-k1 (Jeff Garzik)
- apply scsi whitelist updates for IBM/CNSi/NEC devices (Tom Coughlan)
- reenable varyio for aic7xxx driver (hangs were unrelated) (Jeff Moyer)
- conditionalize NVIDIA_NFORCE3 to restore KMI compat (Ernie Petrides)
- prevent two ext3 panics on corrupted filesystems (Stephen Tweedie)
- apply two minor fixes to ppc64 RAS nvram reading (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.14.EL" date="1068717600">- update ServeRAID (ips) driver to version 6.10.52 (Tom Coughlan)
- configure xmon on by default in ppc64 configs (Julie DeWandel)
- create initial s390 zcrypt driver, version 1.1.2 (Pete Zaitcev)
- remove zfcp driver from linux-modules-unsupported (Pete Zaitcev)
- revise ppc64 reliability/serviceability support (Julie DeWandel)
- reduce kernel stack usage inside nfs_readdir() (Steve Dickson)
- add gameport dependency to cmpci driver config (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.13.EL" date="1068631200">- reduce UDP retransmissions and fix slow reads for NFS (Steve Dickson)
- implement wired page lists for better ramfs handling (Larry Woodman)
- fix vfork deadlock when child process causes core dump (Ingo Molnar)
- enhance AltSysRq-M output and fix deadlock potential (Larry Woodman)
- update cmpci sound driver for some HP IPF workstations (Tom Coughlan)
- correct tq_struct struct initialization in tg3 driver (Jeff Garzik)
- fix NFS file attribute inconsistency after rename (Steve Dickson)
- prevent ia64 machine checks w/sysreport on Olympia (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.12.EL" date="1068544800">- redesign refill_inactive_zone() for smarter deactivation (Larry Woodman)
- improve page deactivation scalability w/delayed laundering (Larry Woodman)
- rework locking and timer usage in s390 ctc network driver (Pete Zaitcev)
- allow xmon to be enabled at boot-time for ppc64 debugging (Julie DeWandel)
- reverse kscand's order of anon/cache active list traversal (Larry Woodman)
- force in-lining of br_read/write_lock/unlock routines (Julie DeWandel)
- fix mistaken fall-through cases in s390 chandev driver (Pete Zaitcev)
- make a few exported symbols available to OpenGFS (Stephen Tweedie)
- fix ld/st ordering bug causing lost signal wakeups (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.11.EL" date="1068112800">- make profile=X imply nmi_watchdog=1 and fix NMI w/d bugs (Ernie Petrides)
- add lock init in scsi_get_host_dev() to fix shutdown hang (Doug Ledford)
- enable distributed interrupts by default on ppc64 iSeries (Julie DeWandel)
- improve amd64 reporting of machine check errors (Jim Paradis)
- fix disabling of autonegotiation in tg3 driver (Dave Miller)
- add image name to s390 ioctl32 debug message (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.10.EL" date="1068026400">- fix file lock ownership by NPTL threads to be process-wide (Ernie Petrides)
- upgrade megaraid driver to version 1.18k and fix isr/fw sync (Tom Coughlan)
- upgrade megaraid2 driver to version 2.00.9 and enable varyio (Tom Coughlan)
- improve scsi mlqueue handling to enable BUSY/QUEUE_FULL fix (Doug Ledford)
- correct reporting of i/o errors in ppc64 viodasd driver (Julie DeWandel)
- update acenic driver to handle enabling of jumbo frame mode (Jeff Moyer)
- fix i386 PAGE_NONE bits to prevent get_user_page() hang (Roland McGrath)
- fix ia64 show_mem() handler to use efi_memmap_walk() call (Dave Anderson)
- replace spaces in slabinfo entry name for async poll table (Matt Wilson)
- fix race condition in buffer-head memory footprint patch (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.9.EL" date="1067940000">- improve spec file robustness in %post/%preun stanzas (Florian La Roche)
- add s390x iovec length checking for 32-bit reads/writes (Matt Wilson)
- use highmem for pte/ramfs page allocation w/__GFP_WIRED (Larry Woodman)
- upgrade oprofile support with bug fixes and enhancements (Will Cohen)
- fix infinite recursion in SCSI mid-layer post-processing (Jeff Moyer)
- introduce no-auto-start-on-add handling for SCSI blacklist (Jeff Moyer)
- enable s390 support for blk stats handling for iostat -x (Pete Zaitcev)
- fix LVS timer-related hang from ip_vs_conn_expire() bug (Ernie Petrides)
- correct module init in cpqarray driver to fix insmod crash (Tom Coughlan)
- incorporate ESB PATA support and fix a pirq_routers PCI id (Jeff Garzik)
- fix nfs async write deadlock potential w/nfs_writepage() (Steve Dickson)
- fix SCSI error handling for BUSY queue status messages (Doug Ledford)
- improve ppc64 32-bit ioctl support for use by ethtool (Julie DeWandel)
- add missing unlock in ip_mc_del_src() to fix IGMP deadlock (Dave Miller)
- change ppc64 reporting of floppy capacity to be 1.44 MB (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.8.EL" date="1067421600">- fix up various problems on Nforce3-based amd64 systems (Jim Paradis)
- double number of pte addrs in rmap pte_chain structs (Larry Woodman)
- restrict slab size for kernel data structs to 2 pages (Larry Woodman)
- clean up obsolete quicklist usage for ppc64 pte pages [rejected]
- prevent readdirplus from returning hidden mount points (Steve Dickson)
- prevent lockd deadlocks caused by export table locking (Steve Dickson)
- eliminate use of parallel task_struct init macro on ia64 [rejected]
- fix broken s390x overflow checks with 32-bit F_GETLK use (Matt Wilson)
- fix SCSI errors with "mt stoptions" and IDE tape drives (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.7.EL" date="1067162400">- fix bad checksumming interaction between e100 and bridge (Jeff Garzik)
- prevent system hang by OOM killing when overcommitted (Larry Woodman)
- un-inline ext3 error function to reduce stack usage (Stephen Tweedie)
- fix several ppc64 problems with interrupt handling (Julie DeWandel)
- correct amd64 identification in /dev/oprofile/cpu_type (Jim Paradis)
- move fput() call in do_tty_hangup() to avoid oops w/kon (Alexander Viro)
- eliminate creation of never-used task_struct slab cache (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.6.EL" date="1066903200">- reduce buffer-head memory footprint from read-only files (Ingo Molnar)
- update qeth driver for reduced stack usage and bug fixes (Pete Zaitcev)
- fix s390 qeth driver again to allow tcpdump to function (Pete Zaitcev)
- add exec_mmap() locking to prevent vma lookup races (Ernie Petrides)
- rework RPC slot allocation for further NFS improvements (Steve Dickson)
- reduce frequency of RPC retransmits during NFS writes (Steve Dickson)
- make generic/ext3 file system write handling 64-bit clean (Jeff Moyer)
- allow SMP scheduling rebalancing to occur every 200 msecs (Ingo Molnar)
- prevent races during IPC semaphore set and msg queue removal (Ingo Molnar)
- fix ACPI handling to identify trigger/polarity of PCI IRQs (Jim Paradis)
- correct amd64/ia64 acpi_disabled decls for post-boot access (Jeff Moyer)
- update ppc64 viocons driver with several bug fixes (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.5.EL" date="1066298400">- move fix for PPR use in sym53c8xx driver to its own patch (Ernie Petrides)
- correct pids exported by msgctl/semctl/shmctl/fcntl calls (Ulrich Drepper)
- apply s390 lcs driver wait queue init and locking updates (Pete Zaitcev)
- enable dummy network driver use in generic s390 config file (Pete Zaitcev)
- add missing ptrace hooks for exec and vfork-done events (Bill Nottingham)
- fix SMP timer race that triggered BUG_ON() in add_timer() (Ingo Molnar)
- fix several bogus ipvs boundary checks in ftp module [rejected]
- fix vfsmount queuing in attach_mnt() for CLONE_NEWNS [rejected]
- add net_device check to prevent oops in pppoe driver [rejected]
- fix memory leak in symlink error path of /proc driver [rejected]
- fix overflow in v1_disk2mem_dqblk() quota calculation [rejected]
- increase ppc64 ramdisk size to 8192k in p/iSeries configs (Jeremy Katz)
- lower amd64 TASK_UNMAPPED_32 to increase avail address space (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.4.EL" date="1066039200">- fix ppc64 stack pointer alignment in user signal handlers (Jakub Jelinek)
- increase amd64 exception stack size to 4k to avoid overflow (Jim Paradis)
- fix ppc64 interrupt rate accounting for vmstat and /proc (Julie DeWandel)
- extend amd64 NMI watchdog timeouts to tolerate bad 2nd cpu (Jim Paradis)
- allow s390 dasd driver to use noop elevator module (Pete Zaitcev)
- add free_irq() in error path of olympic token ring driver (Matt Wilson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.3.EL" date="1065866400">- make pid fields in ucred structures hold tgid values (Ulrich Drepper)
- prevent ppc64 iSeries virtual console writes &gt; 4k (Julie DeWandel)
- control ia64 unaligned access messages with new sysctl (Jeff Moyer)
- correct SCSI data direction on cmd to spin up disks (Pete Zaitcev)
- add do_brk() TASK_SIZE and address space wrap checks (Arjan van de Ven)
- limit PPR use in sym53c8xx driver for ppc64 Zapata drives (Doug Ledford)
- list ac97.o, ad1848.o, and cs4232.o modules as unsupported (Jeff Moyer)
- clean up conditional compilation in s390 zfcp driver (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.2.EL" date="1065693600">- identify whether i686 or athlon config in oops output (Arjan van de Ven)
- remove warning in reclaim_page() unmapped page path (Ernie Petrides)
- fix several lvm error handling paths causing memory leaks [rejected]
- correct i386 smp shutdown logic when netdump is enabled (Jeff Moyer)
- fix amd64 potential data leaks on FPU save/restore errors (Jim Paradis)
- prevent aic7xxx chip resets leading to PCI parity errors (Tom Coughlan)
- remove ia64 user tty warning on unaligned accesses (Arjan van de Ven)
- fix ppc64 /proc file buf overruns in viodasd driver (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.1.EL" date="1065607200">- (this is the first build for RHEL 3 Update 1)
- avoid m/ctime update for pipe writes on r/o file systems (Stephen Tweedie)
- prevent theoretical ext3 fs corruption in ext3_read_inode (Stephen Tweedie)
- enable AGRESSIVE_IDLE_STEAL to improve scheduler balancing (Ingo Molnar)
- fix potential ppc64 lock-up on ioctl32 un/reregistering (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.EL" date="1065175200">- extend ppc64 scsi timeout values for Zapata DVD-ROM drives (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-3.EL" date="1063965600">- make sure to release viotape op structure after use (Julie DeWandel)
- disable pgd/pmd quicklists on ppc64 (Mark DeWandel)
- temporarily disable aio on sockets (Jeff Moyer)
- correctly refile inodes to make them reclaimable (Harald Hoyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-2.EL" date="1063792800">- S390: update zfcp and cio drivers (Pete Zaitcev)
- IA64: add extra check to virtual mem_map (Larry Woodman, Dave Anderson)
- initialise local variables in ide-tape &amp; ide-scsi
- cap qla2200 tcq depth to 255
- switch version number scheme to kernel-2.4.21-N.EL</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063706400">- PPC64: invalidate evicted sbl entries in the erat (Julie DeWandel)
- increase ethernet tx_queue_len to 1000 (David Miller)
- in udp_{v6_}flush_pending_frames, reset up-&gt;len too (David Miller)
- S390: CMS reserved minidisk detection (Pete Zaitcev)
- call recount_segments() on a different occasion (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063620000">- really disable exec-shield (Roland McGrath)
- reduce stack randomisation, disable brk randomisation (Ingo Molnar)
- make e1000 driver 64 bit clean (Julie DeWandel)
- minor aio corner case error condition fix (Jeff Moyer)
- AMD64: more lenient check for call workaround (Ernie Petrides)
- PPC64: disable CONFIG_XMON (Mark DeWandel)
- S390: fix CCW slab selection (Pete Zaitcev)
- fix two-disk combined mode sata (Jeff Garzik)
- move buslogic scsi driver to supported, for vmware only (Tom Coughlan)
- change viocons message from KERN_WARNING to KERN_INFO (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063360800">- VM: handle race condition in reclaim_page (Stephen Tweedie, Larry Woodman)
- PPC64: fix "log_buffer broken" xmon issue (Julie DeWandel)
- fix compiler warnings in netdump (Jeff Moyer)
- AMD64: workaround for 32 bit compat mode page fault problem (Ernie Petrides)
- IA64: make perfmon root-only (Jason Baron)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063274400">- fix smp race in rebalance_laundry_zone()</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063188000">- fix compiler warnings when hugetlbfs is disabled (Pete Zaitcev)
- fix tux performance bug (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063101600">- don't evict kernel stack seg translation on ppc64 (Julie DeWandel)
- fix callers of do_page_fault on ppc64 (Mark DeWandel)
- AMD64 munmap return value, fix lsb failure (Jeff Moyer)
- fix for PPC64 32-bit ioctl (Jim Paradis)
- bring IA64 value of MINSIGSTKSZ in line with upstream (Jakub Jelinek)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063015200">- fix potential datacorruptor in viodasd driver (Julie DeWandel)
- fix race condition in s390 dirty bit handling (Pete Zaitcev)
- limit per-cpu slab cache size
- correct 32-bit readv/writev border cases on ppc64 (Matt Wilson)
- AMD Golem IO-APIC fixup for i686 kernel on AMD64 (Jeremy Katz)
- NFS Solaris 8 acl fix (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062756000">- minor nfs permissions bugfix (Steve Dickson)
- change mprotect return value to SuS mandated value (Arjan van de Ven)
- kernel-unsupported now provides kernel-modules (Jeremy Katz)
- correct __hugemem__modules typos in rhkernel.h
- fix subtle pmd corruption error (Larry Woodman, Dave Anderson)
- fix cut'n'paste error in SATA io port reservation
- restore NFSEXP_CROSSMNT ABI compatibility (Steve Dickson)
- round up executable name field length in core file (Jakub Jelinek)
- switch off exception_trace on amd64 (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062496800">- patch to access odd last sector on ia64 (Jason Baron)
- misc fixes from upstream (Arjan van de Ven)
- fix audigy driver (Jeff Garzik)
- tunable dcache reclaim priority for tux (Ingo Molnar)
- tg3 driver update (Jeff Garzik)
- ipv6 and icmp network bugfixes (David Miller)
- fix ppc64 memory access security bug (Julie DeWandel)
- reduce memory allocated for skb (Ingo Molnar)
- small smp fix for scalable timers (Ingo Molnar)
- make s390 recognise MSDOS partitions (Pete Zaitcev)
- small smp fixes in tux (Ingo Molnar)
- make mptfusion drivers supported on 4/4 split kernel (Tom Coughlan)
- add entries to scsi whitelist (Tom Coughlan)
- minor sata/ata driver updates (Jeff Garzik)
- small fixes to viodasd driver (Julie DeWandel)
- nfs_get_root and nfs access bit patches (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062064800">- don't show interrupts in /proc/stat for ppc64 (Matt Wilson)
- make sure sync returns in a reasonable time
- PPC64: fix for boot cpu not being cpu 0 (Julie DeWandel)
- zero sized write no longer updates mtime (Matt Wilson)
- fix video bios read corruption on ia64 (Larry Woodman)
- network fixes to tg3, bonding (Jeff Garzik)
- properly reserve legacy IDE regions in sata driver (Jeff Garzik)
- fix ppc64 signal handling bugs (Mark DeWandel)
- tux fixes (Ingo Molnar)
- tgkill syscall for s390(x) (Pete Zaitcev)
- amd64 32 bit compatibility fixes (Jim Paradis)
- ppc64 32 bit compatibility fixes (Julie DeWandel)
- fix 4G/4G follow_page problem (Ingo Molnar)
- reduce memory used by VMAs and dentries (Arjan van de Ven)
- make LVM snapshotting of ext3 work reliably (Stephen Tweedie)
- make netdump play better with the nmi watchdog (Jeff Moyer)
- QLA2200: disable irq mitigation, fix off-by-one (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061805600">- seq_file /proc/interrupts for x86 too (Ingo Molnar)
- fix memory leak in ia64 exec of ia32 binaries
- check tgid not pid in scm_check_creds()  (David Miller)
- VM fixes: shm swap priority, zeromap_page_range
- workaround VFS limitations for VXFS NFS export</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061546400">- use personality for 3GB userspace on x86 -hugemem (Ingo Molnar)
- add sysctl interface for lockd (Steve Dickson)
- don't prod VGA space on HP Pinnacle systems (Larry Woodman)
- fix for 32 bit binaries on amd64 (Jim Paradis)
- add preemption point to write_some_buffers (Julie DeWandel)
- sort ACPI table to get correct device ordering on HP (Larry Woodman)
- fix refcounting bug with ipv6 addresses on netdevs (David Miller)
- add s390 syscalls for tux (Pete Zaitcev)
- md multipath enablers (Doug Ledford)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061460000">- fix process and nice time accounting (Doug Ledford)
- amd64: syscall table updates, timer robustness (Jim Paradis)
- amd64 3GB personality for 32-bit processes (Jim Paradis)
- use 256MB pagesize for hugetlbfs on ia64 (Larry Woodman)
- make sure e100 only claims ipv4 checksumming
- igmpv3/mldv2 OOPS'er fix (David Miller)
- hugetlbfs: make chown work and allow uid=X,gid=Y mount options
- make larger mmap windows work (Ernie Petrides, Ingo Molnar)
- ia64: improve ia32 compatibility (Larry Woodman)
- fix bug in rpc retry code (Steve Dickson)
- make acpi pci hotplug modulable (Jeff Moyer)
- update (trivial) to megaraid 1.18j (Tom Coughlan) 
- enable varyio on mptfusion (Tom Coughlan)
- panic on oops to prevent data corruption opportunities (Ernie Petrides)
- small iorl locking fix (Doug Ledford)
- fix ppc64 get_wchan() bad deref (Mark DeWandel)
- fix aio read into mmap()d PROT_WRITE (Jeff Moyer, Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061373600">- libata update (Jeff Garzik)
- amd64 syscalls for xattrs &amp; ACLs (Jim Paradis)
- tux fixes (Julie DeWandel, Ingo Molnar)
- via &amp; i810 audio fixes (Jeff Garzik)
- small 4G/4G split bugfixes (Ingo Molnar)
- fix sigsuspend race on x86, amd64, ia64 (Mark DeWandel)
- ia32 behavior for FP denormal exceptions on ia64 (Jason Baron)
- get the set/get of NAT bits for ia64 correct (Jason Baron)
- ipsec update, adds cast6 encryption (David Miller)
- VM update: OOM bugfix &amp; page-&gt;flags atomic updates (Rik van Riel)
- reenable serpent encryption on ppc64
- bladecenter usb-ohci support (Pete Zaitcev)
- iorl fixes (Doug Ledford)
- network bonding driver oops fix (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060768800">- DAC960 back to bigmem supported, ne2k-pci &amp; usb audio to bigmem unsupported
- netdump updates for tg3 and e1000 (Jeff Moyer)
- put a hole between stack and mmap area (Ernie Petrides)
- process time accounting updates (Doug Ledford)
- fix null characters in TUX header (Julie DeWandel, Ingo Molnar)
- display correct executable when running interpreted script
- zfcp zSeries fibrechannel driver (Pete Zaitcev)
- ipsec updates (David Miller)
- fix 4G/4G race conditions (Ingo Molnar)
- rename -bigmem kernel to -hugemem to reflect changed tradeoffs
- optionally show task states from hangcheck timer (Jason Baron)
- various small bugfixes from upstream</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060423200">- fix scalable timer race condition  (Julie DeWandel, Ingo Molnar)
- print warning on boot with &gt;16GB RAM on -smp kernel (Arjan van de Ven)
- fix for xapic issue with ServerWorks chipsets (Ernie Petrides)
- remove spurious ioctl printk on ppc64 (Mark DeWandel)
- ppc64 wchan improvement (Mark DeWandel)
- hint @pause changes for ia64
- longer scsi scan timeout on ppc64 (Julie DeWandel)
- readv/writev for raw IO (Stephen Tweedie)
- fix for easy stack/mmap collisions (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060164000">- various XAPIC related fixes (Ingo Molnar)
- correct context switch and iowait stats with HT shared runqueues
- ext3 obscure deadlock fixes (Stephen Tweedie)
- knfsd fixes: blocked lock, symlink error &amp; missing bkl  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060077600">- de_thread bugfix from 2.6 upstream  (Matt Wilson)
- viocons driver update (Julie DeWandel)
- fix VM non-overcommit mode (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059991200">- plug data leak in aio code (Jeff Moyer)
- initial list of 4G/4G unsupported modules (Tom Coughlan)
- nfs softirq race fix (Steve Dickson)
- updated IPSEC patch (David Miller)
- networking updates/fixes from 2.4.22-preX (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059904800">- drop orlov allocator for now (Arjan van de Ven)
- correct HT cpu pair detection (Arjan van de Ven)
- build zImage.partial for netbooting on pSeries (Matt Wilson)
- fix missing symbols</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059818400">- export two AIO symbols for OCFS
- disable CONFIG_DEBUG_SLAB so performance testing can start
- crosshost mmap hooks for distributed filesystems (Stephen Tweedie)
- include partially linked zImage for pSeries netboot (Matt Wilson)
- nfs highmem fix, unmap when xdr_kmap() fails (Steve Dickson)
- update megaraid2 locking to work with IORL (Com Coughlan)
- make sure to build the qla2100 driver (Tom Coughlan)
- fix cdrom ioctl 32 bit compatibility for ppc64, amd64 (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059645600">- run depmod on install of unsupported modules (Arjan van de Ven)
- fix register corruption in IA64 lazy fpu handling (Larry Woodman)
- add b44 network driver (Jeff Garzik)
- make ppc64 pci interface routines compatible (Julie DeWandel)
- allow 32 bit userland on AMD64 and PPC64 to use volumes &gt; 2GB (Jeff Moyer)
- nfsd: acl related mount and export flags (Steve Dickson)
- fix nfs exp_fodrop oops (Steve Dickson)
- fix missed signal wakeups on ppc64 (Mark DeWandel)
- smp scalable timer bugfixes (Ingo Molnar)
- workaround for a prefetch bug in some Athlon CPUs (Ernie Petrides)
- code to make more modules unsupported for 4/4 split (Arjan van de Ven)
- various spec file and config cleanups
- viopath driver fix (Julie DeWandel)
- add match for 440gx chipset bioses (Arjan van de Ven)
- move epic100 and ne2k-pci back to supported (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059472800">- updated finegrained process accounting patch (Doug Ledford)
- make iSeries compile without CONFIG_ICOM (Julie DeWandel)
- nfsd: only set -&gt;reuse for tcp sockets, not udp  (Steve Dickson)
- enable the 4G/4G split on the i686-bigmem kernel only
- sysrq support for viocons (Julie DeWandel)
- limit pci_bus size changes to ppc64 (Jeff Garzik)
- fix for signal delivery race (Ernie Petrides, Mark DeWandel)
- add ShdPnd to /proc (Ingo Molnar)
- fix de_thread() hang (Ingo Molnar)
- add kernel support for CLONE_STOPPED (Ernie Petrides)
- make sure to initialise HVC console (Julie DeWandel)
- fix _SEG abort hit in ACPI code (Larry Woodman)
- build addon drivers on amd64 and ppc64 too (Tom Coughlan)
- build IPS driver on all architectures (Tom Coughlan)
- fix a few ia32 emulation bugs for IA64 (Larry Woodman)
- enable correct/new __clear_bit macro for IA64 (Larry Woodman)
- flexible mmap allows mappings of huge executable segments (Larry Woodman)
- sysrq-w for s390 (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058436000">- have s390 cpu_relax() also include barrier  (Pete Zaitcev)
- convert ppc64 xmon traceback code to ksymoops (Matt Wilson)
- rename kstat_sum() variable with aliasing problems  (Ingo Molnar)
- fix AIO-on-hugetlbfs crash (Ingo Molnar)
- update support for IA64 Long's Peak ACPI serial ports  (Larry Woodman)
- turn on xmon for both iSeries and pSeries (Matt Wilson)
- bugfix to make CLI work correctly on iSeries (Julie DeWandel)
- SATA bugfixes (Jeff Garzik)
- enable 4G/4G split in -BOOT kernel, due to syslinux trouble</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058349600">- fix s390 compile (Pete Zaitcev)
- taint the kernel on sii6512 driver link, GPL but no source available
- handle debug registers with 4G/4G split (Ingo Molnar)
- tgkill syscall for ppc64 (Julie DeWandel)
- fix NFSD/ACL/ext3/jbd deadlock (Stephen Tweedie, Steve Dickson)
- fix maxcpus=1 installation panic fix for ppc64 (Julie DeWandel)
- IDE byteswapping io functions for ppc64 (Julie DeWandel)
- update sata driver (Jeff Garzik)
- raise the number of /proc entries (Julie DeWandel)
- sticky sysrq key with timeout (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058263200">- make SysRq-W useable on s390 (Pete Zaitcev)
- updated process accounting patch (Doug Ledford)
- siginfo_t fixes for s390x and amd64 (Jakub Jelinek)
- clustered NFS fail-over support (Steve Dickson)
- autofs4 updates and fixes
- ia64 patches to reduce cpu power/temp in idle loop (Larry Woodman)
- add irqsafe up() for LVM locking (Stephen Tweedie)
- O_DIRECT fallback to synchronous allocation in holes (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058176800">- ia64 HP iommu: add sx1000 detection
- possible bug in s390x 32-bit emulation  (Roland McGrath)
- updated ipsec patch, should fix all current ipv6 bugs  (David Miller)
- finegrained process accounting (Doug Ledford)
- ICH5 pci irq routing, and associated ids (Jeff Garzik)
- fix the machine_real_restart() reboot path on 4G/4G (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057917600">- fix amd64 agp-gart code to work around hugetlbfs debug code (Jim Paradis)
- fix ppc32 pthread_cancel (Jakub Jelinek) 
- Do not sent IGMP leave messages unless IFF_UP  (David Miller)
- software iommu for ia64 systems without hardware iommu (Jason Baron)
- fix ext3 oops fix during dio, LTP failure (Arjan van de Ven, Stephen Tweedie)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057831200">- Remove illegal calls to dst_link_failure</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057831200">- enable HT scheduler for bigmem kernel
- add tgkill syscall for x86 and ia64
- make -BOOT kernel smaller w/ modular md and CONFIG_SMALL
- rmap VM updates
- 4G/4G agpgart potential corruption fix (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057744800">- switch off exec shield everywhere
- eliminate hostfs for amd64 (Jim Paradis)
- megaraid update, mostly vendor ID (Tom Coughlan)
- shrink boot kernel by disabling some config options
- additions for the SCSI whitelist (Tom Coughlan)
- ia64 extable fix (Jason Baron)
- viocons driver upgrade (Julie DeWandel)
- another ia64 mmu context wraparound deadlock fix (Larry Woodman)
- iSeries icom debugger patch (Julie DeWandel)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057658400">- Drop io_request_lock in usb scsiglue.c:device_reset</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057658400">- fix cpu_relax for amd64 and ia64 to include a barrier (Ingo Molnar)
- restore o_direct api compatibility (Stephen Tweedie)
- fix possible ext3 deadlock in o_direct patches (Stephen Tweedie)
- ACLs for JFS (Stephen Tweedie)
- fix /proc/cpuinfo runqueue printing (Ingo Molnar)
- via audio fixes, smaller emu10k1 patch (Alan Cox, Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057572000">- fix process accounting, tux ftp passwords and si_pid (Ingo Molnar)
- 32bit compat statfs fix (Guy Streeter)
- don't serialise exit on BKL when accounting is off (Ingo Molnar)
- truncate timeouts to 32 bits on 64bit systems (Ingo Molnar)
- fix network channel bonding (Jeff Garzik)
- split netdump patch into core and net-drivers (Jeff Garzik)
- delayed tlb flushing for ia64 (Larry Woodman)
- emu10k1 driver fixes
- kksymoops for AMD64 (Jim Paradis)
- select bugfixes from 2.4 upstream (Jeff Garzik)
- OOM tweaks (Rik van Riel)
- use seq_file for /proc/interrupts on ppc64 (Mark DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057140000">- add qdio and qeth drivers for s390(x)  (Phil Knirsch)
- slab cache scale bugfix (Larry Woodman)
- S390: qdio &amp; qeth drivers (Phil Knirsch)
- hangcheck timer for ppc64 (Julie DeWandel)
- fix race conditions in ia64 ia32 compat layer (Larry Woodman)
- update megaraid, aic7xxx, cciss and cpqarray drivers (Tom Coughlan)
- nfs xdr_shift_buf, tcp client corruption and alignment (Steve Dickson)
- rhconfig.h stuff for ppc64, s390 and s390x (Matt Wilson)
- AIO on sockets</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057053600">- kiobuf optimisations (Stephen Tweedie, Larry Woodman)
- ipsec update (David Miller)
- ipvs update to deal with timer changes (David Miller)
- 4G/4G split patch optimisations (Ingo Molnar)
- hangcheck timer (Jason Baron)
- recent (AGP 3.0) agpgart support (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056967200">- semtimedop() support on s390/s390x  (Ernie Petrides)
- fix a 4G bug that triggers on systems with &gt;30 CPUs (Ingo Molnar)
- updated SCSI SMP affine queueing patch  (Arjan van de Ven)
- page hash prefetch in do_generic_file_read bugfix (Julie DeWandel)
- updates the qlogic driver to the latest (Arjan van de Ven)
- slab cache SMP scalability tweaks (Ingo Molnar)
- ACPI 2.0 for IPF and AMD64 (Jim Paradis, Larry Woodman)
- statm fixes for hugetlbfs and remap_file_pages (Jason Baron)
- acpi serial port detection (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056708000">- iseries driver updates (Julie DeWandel)
- aio scalability and 2.5 backports  (Ingo Molnar)
- SMP scalable timers (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056621600">- make qlogic driver use new scsi infrastructure (Arjan van de Ven)
- export aio kvec functions
- fix statm oops
- compile fixes 
- NFS ACL over the wire protocol extensions (Steve Dickson)
- rate limit slab pruning, to limit IPI load on SMP systems (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056448800">- scsi request lock scaling (Ingo Molnar)
- cpu affinity for scsi command processing (Ingo Molnar)
- use softirqs instead of bhs for the scsi layer (Doug Ledford)
- igmpv3 fixes and improvements (David Miller)
- oprofile for ppc64 (Will Cohen)
- Increase MAX_ADDR_LEN from 8 to 32 for Infiniband over IP (Tom Coughlan)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056362400">- per-cpu kstat arrays (Ingo Molnar)
- optimise 4G/4G tlb flushing (Ingo Molnar)
- kiobuf reclaim together with buffer reclaim (Arjan van de Ven)
- more scalable gendisk statistics (Ingo Molnar)
- nfs reconnect fixes (Steve Dickson)
- add 32-bit compatibility for ustat system call on ppc64 (Julie DeWandel)
- scalable gettimeofday (Ingo Molnar)
- hugetlbfs ppc64 &amp; s390 bits (Mark DeWandel, Pete Zaitcev)
- hugetlbfs for ia64 (Jason Baron)
- qlogic scsi driver update (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056189600">- nfs patches (Steve Dickson)
- xapic improvements, summit support (Ingo Molnar)
- fix core dump name for multithreaded programs (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056103200">- merge up to marcelo's latest</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056016800">- oom killer fixes (Larry Woodman, Rik van Riel)
- tunable VM overcommit (Rik van Riel)
- hugetlbfs for amd64 (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055930400">- updated iseries virtual drivers (Julie DeWandel)
- nfs lockd improvements (Steve Dickson)
- remap_file_pages improvements (Ingo Molnar)
- /proc/efi/symtab patch for ia64 (Larry Woodman)
- disable O_PROFILE on UP x86 machines
- allow NMI watchdog profiling frequencies up to 10kHz (Ingo Molnar)
- statm (Jason Baron)
- hugetlbfs (Ingo Molnar)
- have nfsd honour ACLs on a per-export basis (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055844000">- Enable O_PROFILE on non-SMP configs (Stephen Tweedie)
- more conservative AIC config options
- Fix BOOT kernel panic while mounting /dev/cdrom (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055757600">- merge to 2.4.21 + selected ac bits
- ipsec upgrade (David Miller)
- HT scheduler patch fix (correct sibling counting)
- make bdflush writeout smoother
- AMD64 gdb fix (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055412000">- don't include unsupported drivers in -BOOT kernel
- merge up to 2.4.21-rc8 + selected ac bits
- FIXME: sysrq for 3170, dasd, odirect &amp; odirect for nfs</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com" date="1055412000">- oprofile for s390</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055239200">- statm (Jason Baron / Julie DeWandel)
- AIO 32-bit compat for 64-bit machines (Julie DeWandel)
- only do bufferhead reclaim in extreme situations (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055152800">- Serial ATA support (Jeff Garzik)
- mtp fusion 2.05.05+ (Dave Maley)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054893600">- XATTR/ACL patches, except NFS over the wire (Stephen Tweedie)
- ipsec module autoloading (David Miller)
- remap_file_pages (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054807200">- upgrade to latest -rmap with Ernie's fixes
- sysrq+C shows the stack dump of all CPUs
- ext3 truncate fix (Stephen Tweedie)
- NFS fixes for HZ=1000 machines (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054720800">- 4G/4G split fix (Ingo Molnar)
- ppc64 fixes (Guy Streeter, Rik van Riel)
- enable oprofile on amd64
- ipsec updates (David Miller)
- fork returns pid instead of task_struct* (Julie DeWandel)
- ia64 ptrace bugfixes (Dave Anderson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054634400">- HP diva serial driver (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054548000">- NFS over TCP patches (Steve Dickson)
- switch to using ppc64pseries/ppc64iseries arches instead of
  kernel-pseries and kernel-iseries (Jeremy Katz)
- egenera scsi bus rescan patch (Jeff Garzik)
- oprofile (Graydon Hoare)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054288800">- futex requeue (Ingo Molnar)
- enable NAPI for E1000
- signal latency and scheduler improvements (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054202400">- kscand oops fix (Ingo Molnar, Rik van Riel)
- pcnet32 fixes (Julie Dewandel)
- raid autorun (Pete Zaitcev)
- turn off CONFIG_SUNDANCE_MMIO (Jeff Garzik)
- flexible mmap (Larry Woodman)
- ppc64 fixes (Matt Wilson, Guy Streeter)
- loop softirq 10 times before giving up (Ingo Molnar)
- O_DIRECT for NFS (Steve Dickson)
- prevent md from shutting down active arrays (Doug Ledford)
- rmap updates, inode reclaim &amp; higher order allocations (Rik van Riel)
- network channel bonding (Jeff Garzik)</changelog><changelog author="Jim Paradis &lt;jparadis@redhat.com&gt;" date="1054116000">- Re-enable x86_64 in build
- x86_64-specific updates for exec-shield
- Bring in improved "nonx" support for x86_64 from upstream</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1054116000">- Hush s390 printks upon user SIGSEGV by default. It can be enabled back with
  a sysctl kernel.userprocess_debug.
- Enable optional 3270 console mode on s390.</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053684000">- get rid of vsyscall page (Arjan van de Ven)
- fix missing symbol copy_str_fromuser_size</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053424800">- exec-shield updates to fix hang-on-boot on some systems (Ingo Molnar)
- temporarily disabled the architectures, which got broken by exec-shield updates
- fix for LTP sigprocmask02 failure (Matt Wilson)
- ppc64 updates (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053338400">- pagecache scalability patch (Ingo Molnar)
- IPC semaphore scalability patch (Ingo Molnar)
- ppc64 updates (Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052992800">- exec-shield (Ingo Molnar)
- AMD64 ACPI updates (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052906400">- reenable O_DIRECT, O_DIRECT fixes and superbh-aio (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052820000">- vma merging (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052733600">- nmi profiler
- VM updates: rmap, dma zone isolation
- tux (Ingo Molnar)
- ext3 stall fixes (Ingo Molnar)
- e1000 fixes (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052474400">- config files overhaul (Arjan van de Ven)
- fix bug in mlock patch
- IPVS (Dave Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052388000">- import IO elevator changes from gingin
- critical VM fix
- matrox framebuffer patch for pseries (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052301600">- hammer nptl fixes (Ulrich Drepper)
- 4G/4G split (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052215200">- upgrade to 2.4.21-rc1-ac4 (minus -ac acpi and xapic changes)
- drop nfs patches since those seem to be in -ac</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052128800">- larger message buffer size + boot option (Mark DeWandel)
- AMD64: tls handling, coredump fixes (Jim Paradis)
- SMP &amp; highmem VM fixes (Ben LaHaise)
- HT+NUMA scheduler (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051956000">- ext3 orphan cleanup fix (Ernie Petrides)
- s390 affinity fixes (Pete Zaitcev)
- i386 vsyscall DSO changes (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051869600">- bugfixes and config changes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051783200">- enable semtimedop for other architectures (Ernie Petrides)
- large pci bus numbers (Julie DeWandel)
- bugfixes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051610400">- igmpv3 (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051524000">- generic 32bit compat stuff + amd64/ppc64/ipf pieces (Matt Wilson)
- clustered apic (XAPIC) support (Ingo Molnar)
- ppc64 architecture updates (Matt Wilson, Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051264800">- ppc64 fixes</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051178400">- collapse ipsec into one patch (David Miller)
- ppc64 build fix (Matt Wilson)
- improve smp scheduler fairness (Ingo Molnar)
- allow mlock for normal users, up to ulimit (Ingo Molnar)
- AMD64 port (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051092000">- clean up mechanism to pass extra CFLAGS so we don't override what's
  already there
- merge ia64 build stuff (Larry Woodman)
- merge varyio + superbh (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051005600">- merge up to 2.4.21-rc1
- IA64: virtual mem_map, acpi updates, netdump update, pte-highmem &amp; fealnx
- IA64: architecture specific patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050919200">- import davem's ipsec patch pile
- ppc64 kallsyms and dump_fpu patches (Matt Wilson)
- rmap updates (x86_64 &amp; bufferhead reclaim)
- ppc64 ptrace patch (Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050660000">- open up patch namespace 2000-5000 for network protocol changes
- renumber existing patches in that range</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050573600">- make sure to actually apply the rmap-updates patch
- iowait statistics
- ppc64 code merge (Mark &amp; Julie DeWandel)
- ppc64 build scripts (Matt Wilson)
- raise symlink recursion level to 8 (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050487200">- merge up to marcelo's latest
- pte-highmem bits for x86-64 and ppc64</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050400800">- merge up to 2.4.21-pre7-ac1
- drop semtimedop patches (now in -ac)
- drop nfs xprt_fixes, fix_softirq, d_drop and nfs-readeof (merged in -pre7)
- add !CONFIG_QUOTA compile fix for 2.4.21-pre7-ac1</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1050314400">- add LCS driver (endemic to s390)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050314400">- add rmap VM
- add kunmap_atomic debugging patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050141600">- remove dir.c part of NFS kmap_atomic patch for now
- using strlen as local variable name in nfs code kills, literally</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050055200">- merge S390(x) back in  (Pete Zaitcev)
- fix NFS kmap_atomic patch
- sched.c patch to disable interrupts in wake_forked_task  (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049968800">- AIO infrastructure  (Ben LaHaise)
- update NFS kmap_atomic patch  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049882400">- semtimedop patches  (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049796000">- I know understand linux-2.4.20-nfs-readeof.patch, so I merged it
- netdump update (Dave Anderson)
- 64 bit pci &amp; elf loader fix (Mark &amp; Julie)
- nptl whitespace patches, folded into nptl patch (Arjan van de Ven)
- rediff linux-2.4.18-smallpatches.patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049709600">- merge NFS patches by Steve Dickson (blame me for NFS kmap_atomic patch)
- split x86 syscall stuff out into separate patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049536800">- fix nptl patch, now it boots</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049450400">- port linux-2.4.20 o1-nptl.patch from gingin
- rediff a few patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049277600">- update linux-modules-unsupported (with Arjan)
- fix up the list a second time to fix module dependencies</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049191200">- copy -head into new AS3 branch
- remove i586 build
- remove 7.x compatibility (linux-2.4.9-fstat.patch)
- architecture patches get more breathing room (100 - 500)
- reserve patch numbers 1000 - 2000 for VM
- patch numbers 2000 - 5000 for bugfixes, changes and updates to
  existing drivers and filesystems
- remove inode reclaim patch (will be merged later as part of rmap)
- remove io priority scheduler (still experimental)
- remove nfs patches (linux-2.4.20-nfs-cto.patch,
  linux-2.4.20-nfs-access.patch &amp; linux-2.4.20-nfs-rdplus.patch)
- remove linux-2.4.18-gericom.patch
- update netdump from RH9 branch</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1048240800">- Added three NFS performance patches</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048240800">- add a timer for aging requests up</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048154400">- fix the sorting in the io elevator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048068000">- remerge ext3 orlov allocator and enable
- more priority io elevator infrastructure work</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1047117600">- merge ext3 orlov allocator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046772000">- go to 2.4.21-pre5-ac1
- split the rpm into a primary fileset and secondary (rare modules) fileset</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046253600">- go to 2.4.21-pre4-ac6
- drop lots of patches
- trim changelog to not have 2000, 2001 and 2002 anymore</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045476000">- downgrade pwc webcam driver one notch to the last known working version
- work around vm livelock
- make the cciss driver not enable irq's in it's irq handler</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1045130400">- fix for shared statistic &lt; 0</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045130400">- Signal fixes for LSB testsuite
- merge patch to fix init=/bin/sh
- 2.4.21-pre4-ac4 bugfixes (mostly IDE crashes)</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044784800">- merge 2.4.21-pre4-ac3 bugfixes</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1044352800">- Add ext3 fix for truncating negative i_blocks</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1044266400">- add oopsmeharder for debugging hard hangs</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044266400">- merge rmap15d
- set the sbp2 command buffer to 64 elements instead of 8</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1043834400">- merge tcp stall fix from DaveM
- merge bugfixes from 2.4.21-pre4</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1042452000">- Merge in the ACL and XATTR patches from the UL and BestBits trees.</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1042279200">- Merge in the LVM pvmove fix to current tree</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1042020000">- add AMD Golem fixup</changelog></package>
<package pkgid="db8cd253532da9a1e2c9823818ad955537a78d3b" name="kernel-source" arch="x86_64"><version epoch="0" ver="2.4.21" rel="32.0.1.EL.XFS"/><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1117101600">- added SGI XFS patch set</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.0.1.EL" date="1116237600">- prevent shared memory lock/unlock w/o permissions (Dave Anderson)
- prevent mlock() resource limit bypass w/shm locking (Ernie Petrides)
- fix data corruption from pte_clear() races on &gt;4GB x86's (Larry Woodman)
- fix arg/env access in ELF core dumping and /proc reads (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.EL" date="1113559200">- fix data corruption w/ext3 xattr on 64-bit arches (Jason Baron)
- validate LCP frame lengths in PPP async handling (Dave Miller)
- enable forcedeth net driver builds in x86 configs (Jim Paradis)
- isolate IP fragment queues among various callers (Dave Miller)
- prevent busy inodes for symlinks after unmounts (Don Howard)
- revise PCI device ids extending ICH7 support (John Linville)
- work around broken xw4300 BIOS AHCI BAR setup (John Linville)
- add protocol validation in net bluetooth driver (John Linville)
- enable software watchdog timer in s390,x configs (Jan Glauber)
- fix data corruption w/uselib() on bad ELF libs (Ernie Petrides)
- add USB tablet init delay in wacom_probe() (Kristian Høgsberg)
- prevent core dumps with non-readable ELF interps (Dave Anderson)
- add maxevents validation in epoll_wait() handling (Ernie Petrides)
- add len validation in /dev/random poolsize sysctl (Ernie Petrides)
- correct size of ia64 syscall table initialization (Jason Baron)
- correct x86_64 user-mode i/o port validation (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-31.EL" date="1110448800">- fix missing ppc64 netdump/diskdump symbols (Nobuhiro Tachino)
- prevent ia64 unwind from traversing off stack (Jason Baron)
- disable 3w-9xxx driver builds on ppc64 (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-30.EL" date="1110362400">- fix obscure oops in tty init_dev() handling (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-29.EL" date="1109844000">- incorporate urgent late-breaking SATA fixes (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-28.EL" date="1109152800">- add more USB device support to visor driver (Pete Zaitcev)
- implement clustered APIC support for x86_64 (Larry Woodman)
- constrain x86 MSR writes based on cpu model (Jason Baron)
- increase max superbh size for performance (Stephen Tweedie)
- add locking to prevent oops in md_seq_show() (Doug Ledford)
- restore missing ia64 panic_on_oops handling (Tatsuo Uchida)
- implement Ethernet PCI quirk for HP xw9300 (Jim Paradis)
- revert NFS flock() avoidance to -27.7.EL (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.17.EL" date="1108980000">- rework NFS flock() avoidance w/FS_WANT_FLOCK for GFS (Ken Preslan)
- prevent inode corruption from delete/lookup races (Wendy Cheng)
- preserve registers for ia64 16-byte atomic ops (Geoff Gustafson)
- update SCSI whitelist for LSI/HP/STK/EMC devices (Tom Coughlan)
- disable vary_io in ips driver to avoid ctlr hangs (Tom Coughlan)
- correct handling of 2-TB device partitions (Peter Martuccelli)
- update support for ia64 perfmon facility (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.16.EL" date="1108720800">- implement diskdump support for SATA piix/promise (Nobuhiro Tachino)
- correct /proc/mtrr size values on EM64T platforms (Larry Woodman)
- restore page permissions after writes from ptrace() (Don Howard)
- fix /proc parent pids from multi-threaded forks (Ernie Petrides)
- enable software watchdog timer support on s390,x (Jan Glauber)
- update tg3 network driver to version 3.22RH (John Linville)
- incorporate 3w-9xxx driver version 2.24.00.011fw (Adam Manthei)
- correct ending boundary check in filemap_sync() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.15.EL" date="1108548000">- add e100 driver PCI device ids for ICH7 support (John Linville)
- restore obsolete but ignored e100 module params (John Linville)
- implement user-mode (gdb) access to ia64 gate page (Jason Baron)
- fix x86_64 FPU IP and DP values in SIGFPE context (Larry Woodman)
- add qla2200 module parameter to use NVRAM RIO val (Tom Coughlan)
- update 3w-xxxx driver to 1.02.00.037 w/.033 backup (Adam Manthei)
- fix crashes in video Firewire (ieee1394) driver (Bastien Nocera)
- prevent info leaks into ext3 journal disk blocks (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.14.EL" date="1108461600">- enhance AIO performance over NFS w/FS_AIO_SYNC hook (Steve Dickson)
- defer e100_tx_timeout() work from interrupt context (John Linville)
- correct IPV6 DST entry release to prevent route leak (Dave Miller)
- ignore MTU updates from invalid IPV6 ndisc packets (Dave Miller)
- add relevant PCI device ids to extend ICH7 support (John Linville)
- reduce system pauses during heavy page laundering (Larry Woodman)
- fix audit logging of paths w/predicate filter usage (Neil Horman)
- enable building of unsupported fusion isense module (Adam Manthei)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.13.EL" date="1108375200">- increase dxfer size limit for ppc64 SG_IO ioctl32 (David Howells)
- eliminate tty line discipline usage/switching races (Jason Baron)
- fix autofs recognition of ghosted direct map updates (Jeff Moyer)
- fix sg driver race between cmd completion and close (Tom Coughlan)
- prevent e100 data corruption from v.3.0.27-k2 update (John Linville)
- upgrade SATA support (core, libata, new/old drivers) (John Linville)
- implement diskdump support for sym53c8xx adapter (Yuichi Nagahama)
- add USB support for Wacom Cintiq/Intuos3 tablets (Kristian Høgsberg)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.12.EL" date="1107943200">- update e100 network driver to version 3.3.6-k2 (John Linville)
- correct cpu id macro for dual-core Opteron support (Jim Paradis)
- add "numa=off" message on x86_64 OOM kills w/NUMA (Larry Woodman)
- improve user/system timer tick accounting on s390,x (Pete Zaitcev)
- prevent EAGAIN errs from interrupted TCP recv() calls (Dave Miller)
- update cciss disk driver to version v2.4.54.RH1 (Adam Manthei)
- eliminate diskdump cpu id from frozen list (Nobuhiro Tachino)
- fix user-space access bug in USB vicam ioctl (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.11.EL" date="1107424800">- incorporate Emulex driver ioctl module version 1.0.13 (Tom Coughlan)
- eliminate potential call_lock deadlock with diskdump (Tatsuo Uchida)
- fix potential kiobuf_lock deadlock in free_kiovec() (Larry Woodman)
- add L2 cache descriptor for EM64T Irwindale processor (Neil Horman)
- prevent mmap() syscalls from choosing NULL mappings (Rik van Riel)
- include bounce buffer pages in show_mem() output (Larry Woodman)
- add I2C driver support for ICH5 in i2c-i801.c (John Linville)
- correct parport_pc errors on insmod failures (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.10.EL" date="1106906400">- fix futex_wait() race condition that allowed app hang (Ingo Molnar)
- add/correct write barrier placement in timer routines (David Howells)
- add x86_64 NMI switch support to debug kernel hangs (Yuichi Nagahama)
- restore CIV/LVI offset operation in i810_audio driver (John Linville)
- update e1000 network driver to version 5.6.10.1-k2 (John Linville)
- prevent bogus BUG_ON during multi-threaded core dump (Roland McGrath)
- fix x86_64 crash in huge_page_release() w/SHM_HUGETLB (Larry Woodman)
- fix possible mem corruption from /proc/kcore access (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.9.EL" date="1106647200">- fix core dumping over NFS mounts with "intr" option (Roland McGrath)
- prevent multi-threaded app hang from sys_wait4() race (Ingo Molnar)
- restore e1000 support for Intel PCI device id 1014 (John Linville)
- add ac97 quirk entries for HP xw6000/xw6200/xw8000 (John Linville)
- update b44 network driver to upstream version 0.95 (John Linville)
- revert NFS silly-delete and rpciod-hang patches (Steve Dickson)
- fix panics while backing up LVM snapshots (Heinz Mauelshagen)
- fix oops in redirect_target() on DHCP refresh (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.8.EL" date="1105696800">- rework ia64 INIT switch stacks for clean tracebacks (Tatsuo Uchida)
- fix USB raced timeout errors and ohci_complete_add() (Pete Zaitcev)
- add O_DIRECT handling in LVM driver handling (Heinz Mauelshagen)
- downgrade wait4() SIGCHLD/SIG_IGN warning message (Ingo Molnar)
- eliminate potential VMA list races with do_brk() (Dave Anderson)
- ignore ICMP Source Quench messages in tcp_v4_err() (Dave Miller)
- prevent VMA overlap crashes in insert_vm_struct() (Jason Baron)
- move flock() avoidance from NFS up to F/S layer (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.7.EL" date="1105437600">- fix 32-compat alt-stack signal handling on x86_64 (Geoff Gustafson)
- add initialization of ppc64 EEH error buffer size (David Howells)
- make ppc64 xmon work properly with Power5 console (David Howells)
- prevent infinite sync loop from NFS ESTALE writes (Steve Dickson)
- update 8139too network driver w/recent 2.4 fixes (John Linville)
- avoid netfilter oops when ip_conntrack is unloaded (Dave Miller)
- fix potential rpciod hangs during NFS sillydelete (Steve Dickson)
- avoid "No locks available" errors w/flock() on NFS (Ken Preslan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.6.EL" date="1104919200">- fix x86 phys proc ids for non-clustered APIC systems (Geoff Gustafson)
- return EINVAL on e100/e1000 rx-mini/rx-jumbo settings (John Linville)
- fix i810_audio regression from modified ICH6 PCI ids (John Linville)
- prevent race conditions in add_wait_queue_cond() macros (Jeff Moyer)
- fix FAT32 file system corruption w/writing 8M files (Alexander Viro)
- fix derivation/presentation of PHB unit ids on ppc64 (David Howells)
- close OpenFirmware stdin device at boot on ppc64 (David Woodhouse)
- fix 32-bit-compat regression in CMSG validations (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.5.EL" date="1103796000">- add "CommitLimit" data to /proc/meminfo output (Frank Hirtz)
- allow autofs to expire mounts on ppc64 arch (Jeff Moyer)
- add 3c59x EEPROM_RESET for 3c900 Boomerang (John Linville)
- ignore PTE mapping status in page_anon() (Larry Woodman)
- fix SIOCGIFHWADDR handling for zero addr_len (Dave Miller)
- add netdump support for x86_64, ia64, ppc64 (Dave Anderson)
- correct overcommit accounting on fork failure (Frank Hirtz)
- raise default ia64/ia32e swiotlb size to 64M (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.4.EL" date="1103709600">- add network CMSG validation checks (Dave Miller)
- fix data struct leak in ip_options_get() (Dave Miller)
- fix IGMP vulnerabilities in ip[6]_mc_source() (Dave Miller)
- fix e_phnum binfmt_elf loader vulnerability (Dave Anderson)
- clean x86_64 32-bit-compat syscall numbers (Jim Paradis)
- prevent ia64 floating point reg val leakage (Jason Baron)
- add USB io_edgeport driver size check (Peter Martuccelli)
- enable softirq deferral for x86_64 arch (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.3.EL" date="1102586400">- add data/param length sanity checks in smbfs (Alexander Viro)
- prevent /proc/&lt;PID&gt;/cmdline env data disclosure (Dave Anderson)
- make tulip_stop_rxtx() wait for DMA termination (John Linville)
- fix mm_stat regression introduced in -20.13.EL (Rik van Riel)
- correct return value from vlan_dev_change_mtu() (John Linville)
- serialize datagram read w/appropriate semaphore (Dave Miller)
- fix keyboard regression introduced in -24.EL (Peter Martuccelli)
- enable mmap/mprotect PROT_EXEC for legacy apps (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-26.2.EL" date="1101722400">- fix USB problems with keyboards and ia64 oopses (Pete Zaitcev)
- add i810 PCI IDs for nforce3/CK804 audio devices (Jim Paradis)
- fix ppc64 viodasd driver dev naming/limit bugs (David Howells)
- prevent tg3 fiber link bounces w/auto-negotiation (Dave Miller)
- add ac97 quirk handling for i810_audio driver (John Linville)
- prevent incorrect OOM killing with iscsi usage (Larry Woodman)
- create kiobuf cache to reduce lowmem contention (Larry Woodman)
- fix yet another binfmt_elf loader vulnerability (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.1.EL" date="1100512800">- (this is the first build for RHEL 3 Update 5)
- implement open() recovery from NFS ESTALE errors (Neil Horman)
- clean up warnings from lpfc and lpfc_703 Makefiles (Tom Coughlan)
- fix nessus-induced kernel panic with auditing (Peter Martuccelli)
- update 3c59x driver to LK1.1.18 and fix reset bug (John Linville)
- fix ext3 O_DIRECT bug in orphan list handling (Stephen Tweedie)
- flush cached dirty pages on NFS reads w/O_DIRECT (Steve Dickson)
- allow ia64 kernel unaligned access msg suppression (Neil Horman)
- correct test for performing buffer-head reclaim (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.EL" date="1100253600">- fix binfmt_elf loader vulnerabilities (Jim Paradis, Dave Anderson)
- limit kernel data struct slabs to single-page allocs (Larry Woodman)
- update Emulex driver to 7.1.14 (backup still 7.0.3) (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-24.EL" date="1100080800">- fix several ppc64 problems with signal catching (David Woodhouse)
- fix several bugs in /proc/ppc64/lparcfg driver (David Howells)
- fix possible diskdump hangs w/megaraid2 driver (Tatsuo Uchida)
- add support for IBM EM64T-based Groucho blade (Peter Martuccelli)
- fix regression in USB BIOS-&gt;kernel hand-off support (Pete Zaitcev)
- fix regression in ia64 kernel stack unwind handling (Don Howard)
- fix regression w/agpgart support of i8xx chipsets (Larry Woodman)
- add support for BLKSSZGET ioctl in cciss driver (Tom Coughlan)
- disable iSCSI builds in ppc64 and s390* configs (Tom Coughlan)
- update Emulex driver to 7.1.13 (backup still 7.0.3) (Tom Coughlan)
- correct SCSI whitelist for Chaparral FR1422 devices (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-23.EL" date="1098957600">- prevent kswapd from getting stuck in prune_icache() (Larry Woodman)
- fix ppc64 single-stepping into signal handlers (David Woodhouse)
- fix corruption from user stack expansion races (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-22.EL" date="1098093600">- prevent add/removal races in SCSI open handling (Doug Ledford)
- fix U3 agpgart regression with Intel i8xx chipsets (Dave Jones)
- update SCSI whitelist for IBM 1722/1724 devices (Tom Coughlan)
- correct TSS descriptor limit checking for x86_64 (Jim Paradis)
- add nforce3/CK804 device support and fix ACPI bug (Jim Paradis)
- add support for "forcedeth" net driver version 0.28 (Jim Paradis)
- enable diskdump support in amd64/ia32e configs (Nobuhiro Tachino)
- restore/improve linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- add missing page_cache_release() in launder_page() (Larry Woodman)
- update Emulex driver to 7.1.11 (backup still 7.0.3) (Tom Coughlan)
- add new USB ids to support latest Wacom tablets (Kristian Høgsberg)
- remove drivers/net/tun.o from unsupported list (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-21.EL" date="1096538400">- fix potential PTE race in do_anonymous_page() (Rik van Riel)
- add "Committed_AS" data to /proc/meminfo output (Frank Hirtz)
- revise DMA zone paging thresholds for x86_64 (Larry Woodman)
- prevent /proc/scsi/scsi oops during probes (David Woodhouse)
- avoid kswapd hangs via free_more_memory() hooks (Rik van Riel)
- update megaraid2 driver to 2.10.8.2 w/2.10.6 backup (Adam Manthei)
- fix do_notify_parent() panic from ptrace death race (Roland McGrath)
- fix large core file support on 64-bit architectures (Dave Anderson)
- enable tux on ia64 and increase max tux threads to 16 (Ingo Molnar)
- fix ia64/s390,x single-stepping w/signal handlers (David Woodhouse)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.14.EL" date="1096452000">- fix hang in SCSI starvation management code (David Howells)
- update SCSI whitelist for NETAPP LUN devices (Wendy Cheng)
- fix s390 cio handling during ESS fail-overs (Pete Zaitcev)
- update Emulex driver to 7.1.8 w/7.0.3 backup (Tom Coughlan)
- update Qlogic driver to 7.01.01 w/7.00.03 backup (Tom Coughlan)
- correct unlock/free order in proc_lookupfd() (Ernie Petrides)
- use ACPI for PCI interrupt routing on ia32e (Jim Paradis)
- allow cpus to boot w/APIC IDs &gt; 8 on ia32e (Jim Paradis)
- fix pid allocation when pid_max &gt; 32768 (Ernie Petrides)
- fix regs in multi-threaded ia64 core dumps (Keiichi Mori)
- enable sym53c8xx driver for ppc64 iSeries (David Howells)
- fix ac97 depmod errors w/hugemem configs (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.13.EL" date="1096365600">- fix aic79xx_osm.h/3c59x.c changes in prior rev (Tachino/Linville)
- allow for larger nfsd block sizes on some archs (Steve Dickson)
- fix possible aacraid driver panic in aac_info() (Tom Coughlan)
- fix xdr argsize check to handle writes &gt;= 2^31 (Steve Dickson)
- update e1000 network driver to version 5.3.19-k2 (John Linville)
- apply several cciss driver fixes (to 2.4.52.RH2) (Adam Manthei)
- fix x86_64 versions of cpu capability test macros (Jim Paradis)
- fix ppc64 HPTE memory corruption race condition (Rik van Riel)
- add sys_epoll support on s390,x (Stephen Tweedie, Pete Zaitcev)
- prevent keyboard.c warnings from mouse clicks (Norm Murray)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.12.EL" date="1096279200">- improve slab cache page reaping heuristics (Larry Woodman)
- implement diskdump support for x86_64 arch (Nobuhiro Tachino)
- add ia64 INIT trigger switch support for debugging (Tatsuo Uchida)
- fix several problems in handling of AIO on pipes (Jeff Moyer)
- update fixes for LTP read02 test hangs with tmpfs (Alexander Viro)
- fix x86_64 single-stepping out of signal handlers (Jim Paradis)
- increase size of ppc64 RTAS error log buffer (David Howells)
- increase max possible kNFSD lockd cookie size (Steve Dickson)
- backport 3c59x fixes for mii-tool problems w/10Mb (John Linville)
- incorporate Cisco's iscsi_sfnet initiator driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.11.EL" date="1095933600">- implement diskdump support for megaraid2 adapter (Tatsuo Uchida)
- update ips driver to version 7.10.18 w/7.00.15 backup (Tom Coughlan)
- correct max page aging interval boundary in kscand() (Larry Woodman)
- add ppc64 support for ptrace() with PT_SINGLESTEP (David Woodhouse)
- update e100 network driver to version 3.0.27-k2 (John Linville)
- fix LTP read02 test hangs when tmpfs is in use (Alexander Viro)
- get proc_dir_entry reference in proc_lookup() (Alexander Viro)
- add exports of several AIO-related interfaces (Larry Woodman)
- reduce swapping during excessive pagecache use (Larry Woodman)
- implement statfs64() syscall on x86 for NFS use (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.10.EL" date="1095847200">- implement early USB hand-off (BIOS-&gt;kernel) support (Pete Zaitcev)
- fix stack pointer calculation in x86 show() handling (Jeff Moyer)
- prevent interference between flock/POSIX lock types (Frank Hirtz)
- update pcnet32 network driver to version 1.30c (John Linville)
- add export of block_commit_write() f/s interface (Larry Woodman)
- implement diskdump support for dpt_i2o adapter (Tatsuo Uchida)
- update mptfusion driver to version 2.05.16.02 (Adam Manthei)
- move disk_dump_notifier_list to diskdumplib.c (Nobuhiro Tachino)
- update s390 zfcp driver to revision 5.31.2.11+ (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.9.EL" date="1095674400">- fix occasional ibmvscsic driver insmod crash (David Howells)
- disable linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- prevent double slashes in symlink auditing (Peter Martuccelli)
- fix overzealous compat32 setsockopt conversions (David Woodhouse)
- backport tulip driver fixes from upstream 2.4.28 (John Linville)
- update tg3 network driver to version 3.10RH (John Linville)
- implement sysctl to force igmp protocol versions (Neil Horman)
- add diskdump performance improvement info (Nobuhiro Tachino)
- fix s390 iucv lost connections and ping hangs (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.8.EL" date="1095588000">- prevent diskdump deadlock in case of die() recursion (Tatsuo Uchida)
- add x86/x86_64 support for ptrace() w/PT_SINGLESTEP (Roland McGrath)
- fix x86/x86_64 single-stepping into signal handlers (Roland McGrath)
- increase x86 value for MAX_MP_BUSSES definition to 260 (Ingo Molnar)
- eliminate ia64 potential for scheduler runq deadlock (Larry Woodman)
- add support for /proc/sys/kernel/mem_nmi_panic sysctl (Dave Anderson)
- prevent keyboard-initiated sysrq hangs in handle_sysrq() (Jeff Moyer)
- fix intermittent netdump hangs from cpu-frozen messages (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.7.EL" date="1095415200">- fix premature OOM killing change added in prior rev (Larry Woodman)
- backport vlan driver fixes from upstream 2.4.28-rc1 (John Linville)
- add _sb_findmap symbol export in s390/s390x kernels (Pete Zaitcev)
- add ppc64 support for 32-bit sendfile64() syscall (David Howells)
- fix 32-bit IPC_INFO shmctl() syscalls for ppc64 (David Howells)
- upgrade libata/SATA support to current 2.4 bits (John Linville)
- avoid USB device resets of shared/busy interfaces (Pete Zaitcev)
- fix miscellaneous problems in ppc64 icom driver (David Howells)
- fix ip_queue_maxlen sysctl for ip[6]_queue modules (Neil Horman)
- add module parm for max entries in NFS_ACL replies (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.6.EL" date="1095156000">- prevent OOM killer from kicking in prematurely (Larry Woodman)
- avoid NMI watchdog crashes during sysrq-m usage (Wendy Cheng)
- add auditing support for ia64 clone2 syscall (Peter Martuccelli)
- correct sign of auditing error codes for ia64 (Peter Martuccelli)
- implement ia64 auditing 32-bit-disable sysctl (Peter Martuccelli)
- fix ia64 faults w/stale VHPT-generated TLB entries (Dave Anderson)
- fix invalid x86_64 checksums for multicast packets (Mike Gahagan)
- fix incorrect blocking bug inside wakeup_kswapd() (Larry Woodman)
- validate appropriate media type in DVD drives (Doug Ledford)
- reduce s390 stack usage in qeth/qdio drivers (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.5.EL" date="1094810400">- prevent scenarios that lead to hang of kswapd (Larry Woodman)
- add locking for access to /proc/bus/usb/devices (Pete Zaitcev)
- correct x86 rescheduling to handle apm=power-off (Ingo Molnar)
- fix OOM killer locking and mm referencing holes (Larry Woodman)
- pin ia64 mapping for idle proc stack during boot (Larry Woodman)
- fix warning throttle for amd64 stack overflow check (Neil Horman)
- fix content lengths when using tux gzip compression (Ingo Molnar)
- add auditing support for pread/pwrite syscalls (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.4.EL" date="1094724000">- prevent bogus data in /proc/scsi/ibmvscsi/* (David Howells)
- update tg3 network driver to version 3.9RH (John Linville)
- improve ramfs memory alloc w/scarce highmem (Larry Woodman)
- correct several values in /proc/ppc64/lparcfg (David Howells)
- allow dirty page rebalancing under mem pressure (Rik van Riel)
- prevent memory leak in scsi_build_commandblocks() (Doug Ledford)
- fix potential kswapd deadlock w/disk quota usage (Larry Woodman)
- increase MAX_IO_APICS from 8 to 32 for x86_64 arch (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.3.EL" date="1094205600">- fix various error path bugs in bcm5820 driver (John Linville)
- validate addresses used with /dev/kmem accesses (Neil Horman)
- eliminate IPSEC tunnel leaks when using IPComp (Dave Miller)
- add auditing support for utimes() syscalls (Peter Martuccelli)
- prevent netconsole freeze w/cable dis-/re-connect (Jeff Moyer)
- correct reboot_cpu validation for "reboot=s&lt;n&gt;" (Doug Ledford)
- fix mem/irq clean-up in olympic tokenring driver (Neil Horman)
- update network bonding driver to version 2.6.0 (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.2.EL" date="1094032800">- add maps/rlimits output with print-fatal-signals=2 (Ingo Molnar)
- backport ac97 sound support from upstream 2.4.27 (John Linville)
- eliminate kernel stack data leaks from USB drivers (Mark Cox)
- fix interrupt status mask in AMD PCnet32 driver (David Howells)
- fix module loading problems in ibmvscsic driver (David Howells)
- fix x86 shared runq mapping when ACPI data is bad (Bernd Schmidt)
- disable enhanced error handling on PCI-ISA bridges (David Howells)
- add memory-mapped i/o support to i810_audio driver (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.1.EL" date="1093860000">- (this is the first build for RHEL 3 Update 4)
- backport r8169 network driver changes from 2.4 (John Linville)
- update i810_audio sound driver to version 1.01 (John Linville)
- convert USB UHCI driver warning to debug message (Pete Zaitcev)
- backport 2.6 PROT_GROWSDOWN/UP mprotect() support (Jakub Jelinek)
- lower ppc64 console logging level of RTAS messages (David Howells)
- fix ppc64 handling of "smt-emabled=off" boot option (David Howells)
- correct socket sndbuf accounting w/IP_MULTICAST_LOOP (Neil Horman)
- reduce x86_64 user stack start randomization to 16K (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.EL" date="1092823200">- change TARGET_CPUS on x86_64 to include all on-line cpus (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-19.EL" date="1092304800">- fix possible races/overflows in file offset handling (Alexander Viro)
- correct logging of boot progress messages on Power5 (David Howells)
- extend ppc64 EEH support for other types of devices (David Howells)
- fix ibmveth driver to properly shut down and restart (David Howells)
- fix several races and overflows in ppc64 RTAS driver (David Howells)
- backport "acpi=noirq" support to work around Nocona hangs (Don Howard)
- conditionalize pbn_hp_diva to fix serial driver oops (Matthew Galgoci)
- add amd64 GART entry guard mappings for PCI mis-prefetch (Jim Paradis)
- upgrade SATA support again to resolve several problems (Jeff Garzik)
- qualify ia32e IRQ affinity disable with BIOS flag check (Jim Paradis)
- fix eeh_check_failure() on ppc64 to be interrupt safe (David Howells)
- correct ppc64 EEH macros to use appropriate data size (David Howells)
- fix x86/ia64 no-wait handling in smp_call_function() (Larry Woodman)
- fix "Filter target 0x203 not known ..." audit msgs (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-18.EL" date="1090404000">- prevent s390 mlock hangs with follow_page() rework (Ernie Petrides)
- fix Power5 initialization and handling of RAS IRQs (David Howells)
- fix ppc64 viocons driver deadlocks with printk() (David Howells)
- apply eh_timeout, netdump, cli fixes in diskdump (Tatsuo Uchida)
- add skip_mapped_pages tuning for page eviction (Stephen Tweedie)
- fix initrd's effect on ppc64 mem_end calculation (David Howells)
- allow HT support on ppc64 systems with single cpu (David Howells)
- backport v2.0.8 aic7xxx driver h/w support for Dell (Tom Coughlan)
- correct ppc64 device node searching in hvsi driver (David Howells)
- fix KMI compat problem w/pgprot_t in x86 NX support (Jim Paradis)
- resurrect mptfusion driver backup version 2.05.05 (Tom Coughlan)
- disable IRQ affinity setting on some ia32e systems (Jim Paradis)
- update SCSI whitelist for Dot Hill SANnet/StorEdge (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-17.EL" date="1089280800">- account for zone holes in big hash table allocator (Stephen Tweedie)
- prevent reserved stack space overflow of mmap_top (Ernie Petrides)
- fix USB crash in scan_async() with EHCI hardware (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-16.EL" date="1088848800">- enable exec-shield and add x86 NX support (Ingo Molnar, Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.19.EL" date="1088762400">- add owner check in inode_change_ok() for gid changes (Ernie Petrides)
- fix race in finish_task_switch() between wakeup/exit (Ernie Petrides)
- remove Samsung CD-ROM SN-124 from IDE DMA blacklist (Tom Coughlan)
- update e1000 network driver to version 5.2.52-k3 (John Linville)
- add auditing support for semtimedop syscalls (Peter Martuccelli)
- fix tasklet and locking bugs in Power5 hvsi driver (David Howells)
- fix megaraid2 handling of TUR cmds with SCSI CD-ROM (Adam Manthei)
- update SCSI whitelist for HP NS E1200-160 router (Tom Coughlan)
- prevent x86 read_ldt() from reading beyond kmap (Ernie Petrides)
- force single loadable segment in ia64 kernels (Jakub Jelinek)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.18.EL" date="1088157600">- implement ia64 work-around for TLB fetch timeout MCA (Larry Woodman)
- fix Power3 interrupt initialization in ppc64 setup (David Howells)
- correct info msg, prevent double panic in diskdump (Tatsuo Uchida)
- defend against NULL "mm" ptrs in page_referenced() (Rik van Riel)
- fix miscellaneous audit subsystem problems (Peter Martuccelli)
- prevent crash with tux CGI execution on x86_64 (Ingo Molnar)
- add installer info to SATA sx8 block driver (Jeff Garzik)
- turn on vary_io flag in SCSI ips driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.17.EL" date="1087984800">- allocate big system hash tables w/bootmem allocator (David Howells)
- prevent loading aic7xxx_old when aic7xxx is in use (Doug Ledford)
- implement stat() recovery from NFS ESTALE errors (Steve Dickson)
- fix raw/O_DIRECT i/o bug with unmapped pages (Stephen Tweedie)
- correct another locking hole in RAID1 handling (Doug Ledford)
- fix __x86_64__ conditional in megaraid2.c driver (Adam Manthei)
- fix unresolved symbols on ia64 in cciss driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.16.EL" date="1087898400">- make NFS sillydelete wait for unlink completion (Steve Dickson)
- prevent EIO w/concurrent O_DIRECT+buffered i/o (Stephen Tweedie)
- upgrade SATA support (core, libata, and drivers) (Jeff Garzik)
- implement futex() FUTEX_CMP_REQUEUE op (Al Viro, Pete Zaitcev)
- update b44 network driver to version 0.93 (John Linville)
- avoid unix_stream_sendmsg() ENOBUFS errors (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.15.EL" date="1087812000">- improve SCSI mid-layer error handling w/sdev_retry_q (Doug Ledford)
- eliminate rw-semaphore races between waiter/wakeup (David Howells)
- add locking and fix accounting bug in RAID1 handling (Doug Ledford)
- backport Carmel sx8.c driver from upstream 2.4 base (John Linville)
- rename ppc64-squadrons-* patches to ppc64-power5-* (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.14.EL" date="1087639200">- introduce support for IBM Squadrons/Power5 systems (David Howells)
- update aacraid driver to 1.1.5-2339 w/1.1.2 backup (Adam Manthei)
- allow sys_remap_file_pages() on unlocked ramfs VMAs (Larry Woodman)
- fix diskdump hangs during resets with aic79xx driver (Tatsuo Uchida)
- fix possible data corruption when using SHM_HUGETLB (Larry Woodman)
- set QLogic HbaApiNode proc file permissions to 0600 (Tom Coughlan)
- add IRQ blocking/restoring in add_gendisk/del_gendisk (Jeff Needle)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.13.EL" date="1087466400">- fix problem causing PCI bus 255 to be missing on ia64 (Ben Woodard)
- make nfs_statfs() recognize/handle fs size overflows (Steve Dickson)
- update QLogic driver to 7.00.03-RH1 w/6.07.02 backup (Tom Coughlan)
- allow procfs to utilize more dynamic inode numbers (David Howells)
- prevent inappropriate "unexpected IO-APIC" messages (Ernie Petrides)
- avoid lost dirty page bits in s390/s390x VM handling (Pete Zaitcev)
- fix ACPI SCI interrupt defaults and add kernel params (Jim Paradis)
- fix user-space access bugs in acpi/airo/decnet/sound (Alexander Viro)
- remove drivers/net/starfire.o from unsupported list (Ernie Petrides)
- fix mm_struct mem leak in copy_process() error path (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.12.EL" date="1087293600">- correct s390/s390x tests for PT_AUDITED flag (Peter Martuccelli)
- update e100 network driver to version 2.3.43-k1 (John Linville)
- update megaraid2 driver to 2.10.6 w/2.10.1.1 backup (Adam Manthei)
- add x86_64 auditing support for 32-bit-compat (Peter Martuccelli)
- fix ia64 unwind handling for UNW_INSN_SETNAT_MEMSTK (Jason Baron)
- update cciss driver to v2.4.52 for several fixes (Tom Coughlan)
- fix variable block mode tape handling in st driver (Tom Coughlan)
- incorporate latest Emulex fibre channel driver (Tom Coughlan)
- fix USB EHCI problem with BIOS-to-host handoff (Pete Zaitcev)
- update SCSI whitelist for DDN/Xyratex/SanDisk/CBOX3 (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.11.EL" date="1087207200">- upgrade to latest autofs4, remove from unsupported list (Jeff Moyer)
- fix memory corruption bug in audit driver code (Peter Martuccelli)
- store adjusted KSP value in ia64 diskdump support (Tatsuo Uchida)
- update e1000 network driver to version 5.2.52-k1 (John Linville)
- update ips driver to version 7.00.15 w/6.11.07 backup (Adam Manthei)
- implement USB device interlock between ioctls/SCSI-ops (Pete Zaitcev)
- update tg3 driver to version 3.6RH for upcoming chipsets (Dave Miller)
- downgrade several PCI cache line size debugging messages (Jim Paradis)
- correct x86_64 32-bit-compat support for AIO syscalls (Jeff Moyer)
- prevent FPU exception handling hangs on x86/x86_64 (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.10.EL" date="1086948000">- give wait.func highest priority in wake_up_filtered() (Larry Woodman)
- reduce system time when using sys_remap_file_pages() (Larry Woodman)
- enable CONFIG_SOFT_WATCHDOG module for ppc64 configs (David Howells)
- improve page allocation to avoid unnecessary swapping (Rik van Riel)
- implement diskdump support for ia64 with mptfusion (Tatsuo Uchida)
- disable native ia32 support for ia64 Montecito cpus (Jason Baron)
- save/restore P4/ia32e perf registers for oprofile (Will Cohen)
- fix oprofile ESCR_SET_EVENT_SELECT() event mask (Will Cohen)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.9.EL" date="1086775200">- update s390 zcrypt driver to version 1.2.1 (Pete Zaitcev)
- update network tg3 driver to version 3.5RH (Dave Miller)
- eliminate separate ia32e oprofile processor id (Will Cohen)
- update SCSI whitelist for IBM 2105/2145 devs (Doug Ledford)
- avoid EAGAIN errors on blocking UDP sockets (Steve Dickson)
- avoid putting locked inodes on dirty list (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.8.EL" date="1086688800">- decouple NFS O_DIRECT handling for performance gain (Steve Dickson)
- export page_is_ram() interface for amd64/ia32e arch (Jim Paradis)
- enable CONFIG_SCSI_SATA_* options in x86_64 configs (Jim Paradis)
- update mptfusion driver to 2.05.16 w/2.05.11.03 backup (Adam Manthei)
- fix nopage_sequential_readahead() and filemap_sync() (Larry Woodman)
- fix USB EHCI driver to avoid Squadrons install oops (Pete Zaitcev)
- add x86 NMI trigger switch support for debugging (Yuichi Nagahama)
- add dmi_blacklist[] entry for "Intel NA440BX DP" (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.7.EL" date="1086602400">- apply some minor scsi_dump_status() format tweaks (Doug Ledford)
- implement SCSI support for dynamic add (hot plug) (Doug Ledford)
- upgrade lvm driver logic to version 1.0.8-2 (Heinz Mauelshagen)
- fix x86_64 definition for inlined ffs() function (Jim Paradis)
- preserve VM_MAYEXEC for executable stack support (Jim Paradis)
- add extra SLBIEs for ppc64 Power5 DD2.0 errata (David Howells)
- add ppc64 32-bit compat for TIOCGICOUNT/MIWAIT (David Howells)
- hold file struct ref when removing POSIX locks (Steve Dickson)
- fix window scaling bug in tcp_ack_update_window() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.6.EL" date="1086343200">- make fsync() flush all pending NFS updates to disk (Steve Dickson)
- complete ia64 support for multiple I/O port spaces (Larry Woodman)
- fix sending of IP broadcast frames with TTL of zero (Neil Horman)
- prevent context switch storms under high VM loads (Larry Woodman)
- fix sigaltstack() errors w/JVM on hugemem kernels (Roland McGrath)
- add locking and improve output in scsi_dump_status() (Doug Ledford)
- add size boundary checking in scsi_resize_dma_pool() (Doug Ledford)
- fix SCSI request struct leak on command init failures (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.5.EL" date="1084528800">- overhaul ia64 SAL/MCA subsystem (Ben Woodard)
- enable x86_64 32-bit UID support (Jim Paradis)
- add initial diskdump support (Nobuhiro Tachino)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.4.EL" date="1084356000">- reduce chance of "VFS: Busy inodes after unmount." errs (Steve Dickson)
- convert "uaddr2" arg ptr in s390x futex() compat syscall (Pete Zaitcev)
- add ppc64 32-bit compat handler for PE_LOCKED_COPY ioctl (David Howells)
- update s390 dasd driver with several recent bug fixes (Pete Zaitcev)
- fix amd64 NUMA node scanning for Northbridge systems (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.3.EL" date="1084183200">- prevent exp_stopfodrop() oops during cluster failover (Steve Dickson)
- make nfs_file_commit() always flush the entire file (Steve Dickson)
- fix pcnet32 driver's MAC address selection on ppc64 (Julie DeWandel)
- backport /dev/random driver fixes for missed wakeups (Mark DeWandel)
- fix hang w/SoundBlaster 16-bit sampling w/odd count (Ernie Petrides)
- make s390 tape driver specify GPL module license type (Pete Zaitcev)
- correct buffer len value in ppc64 pSeries ipr driver (David Howells)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.2.EL" date="1083664800">- enable booting on 8-way Opteron systems (Jim Paradis)
- fix 32-bit-compat truncate64() on x86_64 (Jim Paradis)
- correct promiscuous mode counter handling (Dave Miller)
- support 128-GB ia64 systems w/HP zx1 chipset (Larry Woodman)
- add export of sys_ioctl() global symbol on s390x (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.1.EL" date="1083578400">- (this is the first build for RHEL 3 Update 3)
- reenable/fix linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- clean up file locks when NFS clients receive signals (Steve Dickson)
- complete ia64-specific LAuS syscall auditing support (Mark DeWandel)
- prevent NULL pointer dereference in page_referenced() (Rik van Riel)
- fix max sectors argument in lvm_snapshot_alloc() (Heinz Mauelshagen)
- allow AGP bus scanning to execute for all architectures (John Dennis)
- fix page_referenced() rss limit checks w/unmapped pages (Rik van Riel)
- correct locking and cr/lf problems in usbserial driver (Pete Zaitcev)
- add /proc/cpuinfo support for new ppc64 processors (Julie DeWandel)
- fix sense data handling on certain SCSI cmd retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.EL" date="1082541600">- fix clobbering of /proc/cpuinfo vendor_id on x86_64 (Jim Paradis)
- correct MCAST_MSFILTER/IP_MSFILTER size checking (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-14.EL" date="1081936800">- disable linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- prevent symlink buffer overflow in ISO-9660 fs (Ernie Petrides)
- check for skb overrun in IPV4/IPV6 IGMP handling (Dave Miller)
- fix possible hang in rebalance_laundry_zone() (Larry Woodman)
- correct zone_wired[] initialization for NUMA (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-13.EL" date="1081332000">- fix several critical libata bugs (Jeff Garzik)
- correct IPSEC XFRM policy ref counting (Dave Miller)
- add amd64/ia32e parsing for "acpi=off" arg (Jim Paradis)
- update tg3 driver to v3.1 for several fixes (Dave Miller)
- fix SCSI whitelist for Hitachi/HP DFx00, Apple Xserve (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-12.EL" date="1080295200">- add USB support for Handspring Treo 600 PDA syncing (Matthew Galgoci)
- clear state for CPEs during ia64 MCA SAL error logging (Ben Woodard)
- prevent DMA resource leak in QLogic driver error path (Tom Coughlan)
- change default QLogic driver device queue depth to 64 (Tom Coughlan)
- replace fabricated cciss drive geometry w/ENXIO error (Tom Coughlan)
- update SCSI whitelist for HP SureStore/StorageWorks (Tom Coughlan)
- disable CONFIG_ACPI_DEBUG in amd64/ia32e configs (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-11.EL" date="1078740000">- add yet another Intel ICH6 SATA PCI id (Jeff Garzik)
- fix ref counting in copy_process() error path (Larry Woodman)
- remove ia64 support for /proc/bus/mckinley/bitmap (Jason Baron)
- correct depmod versioning for unsupported modules (Ernie Petrides)
- prevent data corruption in ia32e phys_proc_id[] info (Larry Woodman)
- change default value for inactive_clean_percent to 30 (Larry Woodman)
- enable improved version of s390 on-demand timer patch (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-10.EL" date="1078221600">- incorporate late-breaking libata fixes (Jeff Garzik)
- enable amd64 syscall for tux support (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.17.EL" date="1078135200">- reduce s390 idle overhead with on-demand timer patch (Pete Zaitcev)
- complete ia64 NPTL support for 32-bit-EL executables (Jason Baron)
- add several ia64 syscall table entries for 32-bit-EL (Jason Baron)
- upgrade libata/SATA support, delete ich5-sata.patch (Jeff Garzik)
- check for mremap/vmtruncate race in move_one_page() (Jason Baron)
- prevent ia64 NaT-bit corruption during sig catching (Jason Baron)
- fix amd64 get_mtrr() parsing error with &gt;4GB memory (Jim Paradis)
- change amd64 default behavior to avoid TSC timer use (Jim Paradis)
- force s390utils upgrade to prevent zipl seg fault (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.16.EL" date="1078048800">- restore varyio capability in mptfusion driver update (Adam Manthei)
- enhance SCSI mid-layer queuing for indefinite retries (Doug Ledford)
- add ia64 reg reloads for 32-bit-EL strace -f support (Jason Baron)
- fix ia64 core dump support for 32-bit-EL executables (Jason Baron)
- add SCSI whitelist devs with BLIST_RETRY_ABORTED_CMD (Doug Ledford)
- remove stack-in-interpreter check in binfmt_elf.c (Julie DeWandel)
- clear all flags in exec_usermodehelper() for kmod (Alexander Viro)
- fix aacraid command completion (rq corruption) bugs (Tom Coughlan)
- correct cciss_proc_tape_report() type in flags decl (Tom Coughlan)
- enable USB-2.0-hub-based mice/keyboards to function (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.15.EL" date="1077962400">- fix amd64 oprofile linkage problem in ia32e support (Ernie Petrides)
- update ips driver to version 6.11.07 w/6.10.52 backup (Tom Coughlan)
- add size checks to DRM ATI r128 driver ioctl handling (John Dennis)
- avoid megaraid2 irq_disable calls for mem-mapped ctlrs (Tom Coughlan)
- upgrade firmware imbedded in QLogic driver to 3.02.24 (Tom Coughlan)
- correct ia64 memory accounting in overcommit mode 2 (Larry Woodman)
- implement softirq deferral to limit kernel stack depth (Ingo Molnar)
- reduce kernel stack usage in a couple of tux functions (Ingo Molnar)
- fix shared extended attribute ref counting in ext3 (Stephen Tweedie)
- clear SCSI sense data buffer between eh retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.14.EL" date="1077789600">- add .RH1 suffix to cciss driver version v2.4.50 (Tom Coughlan)
- implement initial LAuS syscall auditing support (Mark DeWandel)
- introduce GFS enablers for locking and sendfile ops (Ken Preslan)
- update QLogic driver to 6.07.01 w/6.06.00b11 backup (Tom Coughlan)
- improve netdump reliability w/asynchronous IPI param (Jeff Moyer)
- add ICH6 DSP audio support to i810_audio driver (Jeff Garzik)
- apply SCSI whitelist updates for several devices (Tom Coughlan)
- fix odd byte tape i/o handling in sym53c8xx driver (Tom Coughlan)
- correct minimum nfsd version that supports acls (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.13.EL" date="1077703200">- allow concurrent NFS direct i/o to same file if !append (Steve Dickson)
- introduce support for new Intel 64-bit ia32e processor (Larry Woodman)
- update mptfusion driver to 2.05.11.03 w/2.05.05 backup (Adam Manthei)
- remove fs/binfmt_misc.o from linux-modules-unsupported (Jason Baron)
- fix ia64 predicate register use in sig trampoline code (Jason Baron)
- add oprofile cpu type recognition for ia32e processor (Will Cohen)
- update e1000 network driver to version 5.2.30.1-k1 (Jeff Garzik)
- add more Intel PCI ids to match upstream 2.4 (Jeff Garzik)
- add ICH6 PATA support, PCI ids, irq routing (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.12.EL" date="1077530400">- add deferred page freeing for intr-context unmap_kvec() (Jeff Moyer)
- update megaraid2 driver to v2.10.1.1 w/v2.00.9 backup (Tom Coughlan)
- fix ppc64 pte hash table locking to avoid deadlocks (Julie DeWandel)
- fix ia64 data TLB init to prevent random boot-up hangs (Jason Baron)
- fix ia64 RNat register corruption with alt sig stacks (Jason Baron)
- allow smaller ia64 sig stacks in ia32 emulation layer (Jason Baron)
- backport ncpfs fixes to eliminate var-length arrays (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.11.EL" date="1077271200">- backport cisco aironet driver from 2.6.3-rc4 (Matthew Galgoci)
- update tg3 driver to v2.7 to fix status reg handling (Dave Miller)
- correct lost jiffies logic for x440/5 cyclone timer (Bernd Schmidt)
- fix open() error clean-up for unsupported O_DIRECT (Stephen Tweedie)
- prevent ia64 crashes when unmapping hugetlb pages (Jason Baron)
- add ppc64 processor support for future PPC970+ (Julie DeWandel)
- rework ppc64 32-bit-compat iptables support (Julie DeWandel)
- fix func ptr test in ethtool_set_ringparam() (Jeff Garzik)
- disable linux-2.4.21-scsi-affine-queue.patch (Doug Ledford)
- improve scsi_allow_ghost_devices description (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.10.EL" date="1077098400">- fix amd64 iommu bug causing data corruption on &gt;4GB systems (Jim Paradis)
- return EINVAL for unsupported ioctl32 syscalls on ppc64 (Julie DeWandel)
- remove incorrect BUG() call in __remove_inode_page() (Stephen Tweedie)
- fix s390 ctc driver problem causing build system hangs (Pete Zaitcev)
- fix s390 qeth driver error path to reset write_busy (Pete Zaitcev)
- update s390 zfcp driver to fix miscellaneous bugs (Pete Zaitcev)
- apply upstream nfs fixes for acl error handling (Steve Dickson)
- prevent kernel stack data leak via /dev/rtc (Ernie Petrides)
- allow AIO operations on sockets for non-inet (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.9.EL" date="1076925600">- restore genksyms_smp_prefix setting for non-x86 builds (Ernie Petrides)
- display/log memory stats whenever there's an OOM kill (Larry Woodman)
- update tg3 driver to v2.6, the latest upstream version (Jeff Garzik)
- update net bonding driver to v2.4.1, latest upstream (Jeff Garzik)
- fix irq, mem, printk, strtol bugs in cciss driver (Tom Coughlan)
- wait for board ready after hot add, cciss driver (Tom Coughlan)
- enable cciss adapter prefetch for x86 platforms (Tom Coughlan)
- add preserve_arg0 handling for ia32 emulation (Larry Woodman)
- fix ppc64 compat support for quota syscall (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.8.EL" date="1076580000">- remove Power-Blade-specific def for USB TEAC floppy (Julie DeWandel)
- fix s390 crash in iucv driver on connection shutdown (Pete Zaitcev)
- fix ia64 ACPI parsing for multinode IDE devs on x455 (Jim Paradis)
- fix amd64 core dumping of multithreaded 32-bit apps (Jim Paradis)
- fix s390 oprofile conditional and zero top addr bits (Will Cohen)
- add ipr driver v1.0.3 for IBM's PPC RAID adapters (Tom Coughlan)
- add {alloc,free}_netdev(), list macro, tg3 PCI ids (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.7.EL" date="1076407200">- restrict /proc/tty/driver directory access to root (Jeff Moyer)
- allow non-standard usr/sys VM splits at 2G/2G, 1G/3G (Ingo Molnar)
- extend existing ppc64 RTAS firmware flash interface (Mark DeWandel)
- fix ppc64 version of strncpy() to zero-pad buffers (Julie DeWandel)
- fix s390/x version of strncpy() to zero-pad buffers (Pete Zaitcev)
- fix generic version of strncpy() to zero-pad buffers (Jim Paradis)
- improve ppc64 segment table entry replacement logic (Julie DeWandel)
- correct type/cast of "len" in ppc64/kernel/nvram.c (Julie DeWandel)
- implement new ppc64 RTAS system call interface (Julie DeWandel)
- increase x86 RSDT table limit in ACPI parsing (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.6.EL" date="1076320800">- fix more usb-storage bugs for Power Blade support (Julie DeWandel)
- remove extra inactive_clean_pages-- in reclaim_page() (Larry Woodman)
- return proper error codes for do_munmap() failure in mremap (Dave Jones)
- fix binfmt_elf.c problems for apps with huge bss regions (Julie DeWandel)
- update cciss driver to v2.4.50 for Smart Array 6i support (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.5.EL" date="1075975200">- prevent netdump progress output from filling up log_buf (Jeff Moyer)
- add ppc64 RAS hook at end of panic() processing (Julie DeWandel)
- correct source IP address in ICMP error message (Dave Miller)
- fix smp deadlock with pdeath_signal posting (Roland McGrath)
- add ppc64 support for /proc/ppc64/lparcfg (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.4.EL" date="1075888800">- update nfsd mode-with-acls fix for upstream conformance (Steve Dickson)
- rework usb-storage locking to avoid hangs on disconnect (Pete Zaitcev)
- fix mmio alignment error in olympic token ring driver (Julie DeWandel)
- prevent tux logger-thread shutdown problems on ppc64 (Ingo Molnar)
- add ppc64 AltiVec chip support for Power Blades (Julie DeWandel)
- eliminate multi-threaded coredump hang potential (Ingo Molnar)
- fix ppc64 segfaults with tasks &gt; 2GB in size (Julie DeWandel)
- fix usb-storage memory-allocation/iowait deadlock (Alan Cox)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.3.EL" date="1075716000">- add amd64 support for PT_GNU_STACK with exec shield (Jim Paradis)
- fix s390 raid1 sync problem w/writes at end of dev (Pete Zaitcev)
- update s390 zcrypt driver to version 1.1.4 (Pete Zaitcev)
- fix output of large /proc/pid/statm values (Mark DeWandel)
- fix output of large /proc/partitions values (Mark DeWandel)
- enable ppc64 support for JS20 Power Blades (Julie DeWandel)
- fix kernel stack memory leak on fork failures (Dave Anderson)
- fix ipv6 packet quoting problem in icmpv6_send() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.2.EL" date="1075370400">- apply Intel's x86 microcode loader update (Jim Paradis)
- enhance PCI multifunction support for ppc64 (Julie DeWandel)
- fix nfsd returning bad mode bits when acls set (Steve Dickson)
- prevent unkillable zombies from detached NPTL threads (Ingo Molnar)
- avoid missing scsi disks in /proc/partitions on detach (Jason Baron)
- correct pte calculation inside zeromap_pte_range() loop (Ben Woodard)
- add inline function PDE() to help driver backporting (Matthew Galgoci)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.1.EL" date="1074679200">- (this is the first build for RHEL 3 Update 2)
- relocate various pieces of the "undo" patch (Patch Review Committee)
- rename s390 zcrypt and zfcp driver patches (Pete Zaitcev)
- add LKML discussion to COPYING.modules (Arjan van de Ven)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.EL" date="1073556000">- fix race condition between thread creation and signals (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-8.EL" date="1073469600">- fix amd64 eflags masking in 32-bit emulation of ptrace (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-7.EL" date="1073383200">- fix numerous ppc64 problems with /proc access (Julie DeWandel)
- allow user core files larger than 2GB in size (Dave Anderson)
- add ia64 support for Crestone Peak AGP bridges (John Dennis)
- fix unaligned kernel accesses in nfs_readdir() (Steve Dickson)
- add new_len/new_addr checks in do_mremap() (Ernie Petrides)
- fix nfs O_DIRECT corruption with &gt;4GB files (Steve Dickson)
- enable bus scan for AGP ctlrs on amd64 systems (John Dennis)
- limit PCI-alloc'ed physaddrs to 4GB on HP ia64 (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-6.EL" date="1070877600">- fix ppc64 firmware updates (Julie DeWandel)
- fix sync wakeup problem (Ingo Molnar)
- add ia64 cyclone support (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-5.EL" date="1070272800">- undo rejected patches (Stephen Tweedie, Arjan van de Ven, Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.20.EL" date="1069840800">- enable NUMA support in amd64 smp configs (Jim Paradis)
- prevent oopses with tux in OOM scenarios (Ingo Molnar)
- apply several ipv6 multicast bug fixes (Dave Miller)
- assign retval in copy_process() error path (Ingo Molnar)
- add lseek-in-/proc support for s390x "ps" (Pete Zaitcev)
- redefine zone_is_highmem() for Celestica (Dave Anderson)
- fix unresolved symbols in amd64 modules (Bill Nottingham)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.19.EL" date="1069754400">- fix tg3 rx_pending limit for BCM5705/BCM5782 chips (Jeff Garzik)
- reset page error flag prior to read of new contents (Jeff Moyer)
- enable CONFIG_HOTPLUG_PCI option for ia64 configs (Doug Ledford)
- fix inactive laundry list race in ramfs_writepage() (Dave Anderson)
- avoid out_of_memory() for wired pages when there's lomem (Dave Anderson)
- conditionalize ppc64 machdep_calls change for KMI compat (Ernie Petrides)
- limit anon/cache pages scanned in refill_inactive_zone() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.18.EL" date="1069668000">- create old version (rev. 5.64) of cmpci sound driver (Tom Coughlan)
- remove ac97.o, ad1848.o, cs4232.o from unsupported (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.17.EL" date="1069063200">- fix missing use of __GFP_HIGHMEM flag in pte_alloc_one() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.16.EL" date="1068890400">- rework scsi mid-layer queuing logic to fix error handling (Doug Ledford)
- fix pci_dma_sync_sg() scatterlist arg in megaraid2 driver (Tom Coughlan)
- move more-ptes-in-rmap-pte-chain logic to its own patch (Ernie Petrides)
- tag uses of __GENKSYMS__ with KMI/ABI compat comment (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.15.EL" date="1068804000">- fix MD multipath bugs causing crashes during fail-overs (Doug Ledford)
- add chain_ptep_t and revert pte_addr_t for KMI compat (Ernie Petrides)
- restore sub-timer-tick time-of-day granularity for ia64 (Jason Baron)
- modify agpgart and drm drivers for ia64 HP ZX1 support (John Dennis)
- fix ia64 32-bit emulation for several stat-related calls (Jason Baron)
- enable amd64 use of new ips driver w/config separation (Tom Coughlan)
- update e100 network driver to version 2.3.30-k1 (Jeff Garzik)
- update e1000 network driver to version 5.2.20-k1 (Jeff Garzik)
- apply scsi whitelist updates for IBM/CNSi/NEC devices (Tom Coughlan)
- reenable varyio for aic7xxx driver (hangs were unrelated) (Jeff Moyer)
- conditionalize NVIDIA_NFORCE3 to restore KMI compat (Ernie Petrides)
- prevent two ext3 panics on corrupted filesystems (Stephen Tweedie)
- apply two minor fixes to ppc64 RAS nvram reading (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.14.EL" date="1068717600">- update ServeRAID (ips) driver to version 6.10.52 (Tom Coughlan)
- configure xmon on by default in ppc64 configs (Julie DeWandel)
- create initial s390 zcrypt driver, version 1.1.2 (Pete Zaitcev)
- remove zfcp driver from linux-modules-unsupported (Pete Zaitcev)
- revise ppc64 reliability/serviceability support (Julie DeWandel)
- reduce kernel stack usage inside nfs_readdir() (Steve Dickson)
- add gameport dependency to cmpci driver config (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.13.EL" date="1068631200">- reduce UDP retransmissions and fix slow reads for NFS (Steve Dickson)
- implement wired page lists for better ramfs handling (Larry Woodman)
- fix vfork deadlock when child process causes core dump (Ingo Molnar)
- enhance AltSysRq-M output and fix deadlock potential (Larry Woodman)
- update cmpci sound driver for some HP IPF workstations (Tom Coughlan)
- correct tq_struct struct initialization in tg3 driver (Jeff Garzik)
- fix NFS file attribute inconsistency after rename (Steve Dickson)
- prevent ia64 machine checks w/sysreport on Olympia (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.12.EL" date="1068544800">- redesign refill_inactive_zone() for smarter deactivation (Larry Woodman)
- improve page deactivation scalability w/delayed laundering (Larry Woodman)
- rework locking and timer usage in s390 ctc network driver (Pete Zaitcev)
- allow xmon to be enabled at boot-time for ppc64 debugging (Julie DeWandel)
- reverse kscand's order of anon/cache active list traversal (Larry Woodman)
- force in-lining of br_read/write_lock/unlock routines (Julie DeWandel)
- fix mistaken fall-through cases in s390 chandev driver (Pete Zaitcev)
- make a few exported symbols available to OpenGFS (Stephen Tweedie)
- fix ld/st ordering bug causing lost signal wakeups (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.11.EL" date="1068112800">- make profile=X imply nmi_watchdog=1 and fix NMI w/d bugs (Ernie Petrides)
- add lock init in scsi_get_host_dev() to fix shutdown hang (Doug Ledford)
- enable distributed interrupts by default on ppc64 iSeries (Julie DeWandel)
- improve amd64 reporting of machine check errors (Jim Paradis)
- fix disabling of autonegotiation in tg3 driver (Dave Miller)
- add image name to s390 ioctl32 debug message (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.10.EL" date="1068026400">- fix file lock ownership by NPTL threads to be process-wide (Ernie Petrides)
- upgrade megaraid driver to version 1.18k and fix isr/fw sync (Tom Coughlan)
- upgrade megaraid2 driver to version 2.00.9 and enable varyio (Tom Coughlan)
- improve scsi mlqueue handling to enable BUSY/QUEUE_FULL fix (Doug Ledford)
- correct reporting of i/o errors in ppc64 viodasd driver (Julie DeWandel)
- update acenic driver to handle enabling of jumbo frame mode (Jeff Moyer)
- fix i386 PAGE_NONE bits to prevent get_user_page() hang (Roland McGrath)
- fix ia64 show_mem() handler to use efi_memmap_walk() call (Dave Anderson)
- replace spaces in slabinfo entry name for async poll table (Matt Wilson)
- fix race condition in buffer-head memory footprint patch (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.9.EL" date="1067940000">- improve spec file robustness in %post/%preun stanzas (Florian La Roche)
- add s390x iovec length checking for 32-bit reads/writes (Matt Wilson)
- use highmem for pte/ramfs page allocation w/__GFP_WIRED (Larry Woodman)
- upgrade oprofile support with bug fixes and enhancements (Will Cohen)
- fix infinite recursion in SCSI mid-layer post-processing (Jeff Moyer)
- introduce no-auto-start-on-add handling for SCSI blacklist (Jeff Moyer)
- enable s390 support for blk stats handling for iostat -x (Pete Zaitcev)
- fix LVS timer-related hang from ip_vs_conn_expire() bug (Ernie Petrides)
- correct module init in cpqarray driver to fix insmod crash (Tom Coughlan)
- incorporate ESB PATA support and fix a pirq_routers PCI id (Jeff Garzik)
- fix nfs async write deadlock potential w/nfs_writepage() (Steve Dickson)
- fix SCSI error handling for BUSY queue status messages (Doug Ledford)
- improve ppc64 32-bit ioctl support for use by ethtool (Julie DeWandel)
- add missing unlock in ip_mc_del_src() to fix IGMP deadlock (Dave Miller)
- change ppc64 reporting of floppy capacity to be 1.44 MB (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.8.EL" date="1067421600">- fix up various problems on Nforce3-based amd64 systems (Jim Paradis)
- double number of pte addrs in rmap pte_chain structs (Larry Woodman)
- restrict slab size for kernel data structs to 2 pages (Larry Woodman)
- clean up obsolete quicklist usage for ppc64 pte pages [rejected]
- prevent readdirplus from returning hidden mount points (Steve Dickson)
- prevent lockd deadlocks caused by export table locking (Steve Dickson)
- eliminate use of parallel task_struct init macro on ia64 [rejected]
- fix broken s390x overflow checks with 32-bit F_GETLK use (Matt Wilson)
- fix SCSI errors with "mt stoptions" and IDE tape drives (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.7.EL" date="1067162400">- fix bad checksumming interaction between e100 and bridge (Jeff Garzik)
- prevent system hang by OOM killing when overcommitted (Larry Woodman)
- un-inline ext3 error function to reduce stack usage (Stephen Tweedie)
- fix several ppc64 problems with interrupt handling (Julie DeWandel)
- correct amd64 identification in /dev/oprofile/cpu_type (Jim Paradis)
- move fput() call in do_tty_hangup() to avoid oops w/kon (Alexander Viro)
- eliminate creation of never-used task_struct slab cache (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.6.EL" date="1066903200">- reduce buffer-head memory footprint from read-only files (Ingo Molnar)
- update qeth driver for reduced stack usage and bug fixes (Pete Zaitcev)
- fix s390 qeth driver again to allow tcpdump to function (Pete Zaitcev)
- add exec_mmap() locking to prevent vma lookup races (Ernie Petrides)
- rework RPC slot allocation for further NFS improvements (Steve Dickson)
- reduce frequency of RPC retransmits during NFS writes (Steve Dickson)
- make generic/ext3 file system write handling 64-bit clean (Jeff Moyer)
- allow SMP scheduling rebalancing to occur every 200 msecs (Ingo Molnar)
- prevent races during IPC semaphore set and msg queue removal (Ingo Molnar)
- fix ACPI handling to identify trigger/polarity of PCI IRQs (Jim Paradis)
- correct amd64/ia64 acpi_disabled decls for post-boot access (Jeff Moyer)
- update ppc64 viocons driver with several bug fixes (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.5.EL" date="1066298400">- move fix for PPR use in sym53c8xx driver to its own patch (Ernie Petrides)
- correct pids exported by msgctl/semctl/shmctl/fcntl calls (Ulrich Drepper)
- apply s390 lcs driver wait queue init and locking updates (Pete Zaitcev)
- enable dummy network driver use in generic s390 config file (Pete Zaitcev)
- add missing ptrace hooks for exec and vfork-done events (Bill Nottingham)
- fix SMP timer race that triggered BUG_ON() in add_timer() (Ingo Molnar)
- fix several bogus ipvs boundary checks in ftp module [rejected]
- fix vfsmount queuing in attach_mnt() for CLONE_NEWNS [rejected]
- add net_device check to prevent oops in pppoe driver [rejected]
- fix memory leak in symlink error path of /proc driver [rejected]
- fix overflow in v1_disk2mem_dqblk() quota calculation [rejected]
- increase ppc64 ramdisk size to 8192k in p/iSeries configs (Jeremy Katz)
- lower amd64 TASK_UNMAPPED_32 to increase avail address space (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.4.EL" date="1066039200">- fix ppc64 stack pointer alignment in user signal handlers (Jakub Jelinek)
- increase amd64 exception stack size to 4k to avoid overflow (Jim Paradis)
- fix ppc64 interrupt rate accounting for vmstat and /proc (Julie DeWandel)
- extend amd64 NMI watchdog timeouts to tolerate bad 2nd cpu (Jim Paradis)
- allow s390 dasd driver to use noop elevator module (Pete Zaitcev)
- add free_irq() in error path of olympic token ring driver (Matt Wilson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.3.EL" date="1065866400">- make pid fields in ucred structures hold tgid values (Ulrich Drepper)
- prevent ppc64 iSeries virtual console writes &gt; 4k (Julie DeWandel)
- control ia64 unaligned access messages with new sysctl (Jeff Moyer)
- correct SCSI data direction on cmd to spin up disks (Pete Zaitcev)
- add do_brk() TASK_SIZE and address space wrap checks (Arjan van de Ven)
- limit PPR use in sym53c8xx driver for ppc64 Zapata drives (Doug Ledford)
- list ac97.o, ad1848.o, and cs4232.o modules as unsupported (Jeff Moyer)
- clean up conditional compilation in s390 zfcp driver (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.2.EL" date="1065693600">- identify whether i686 or athlon config in oops output (Arjan van de Ven)
- remove warning in reclaim_page() unmapped page path (Ernie Petrides)
- fix several lvm error handling paths causing memory leaks [rejected]
- correct i386 smp shutdown logic when netdump is enabled (Jeff Moyer)
- fix amd64 potential data leaks on FPU save/restore errors (Jim Paradis)
- prevent aic7xxx chip resets leading to PCI parity errors (Tom Coughlan)
- remove ia64 user tty warning on unaligned accesses (Arjan van de Ven)
- fix ppc64 /proc file buf overruns in viodasd driver (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.1.EL" date="1065607200">- (this is the first build for RHEL 3 Update 1)
- avoid m/ctime update for pipe writes on r/o file systems (Stephen Tweedie)
- prevent theoretical ext3 fs corruption in ext3_read_inode (Stephen Tweedie)
- enable AGRESSIVE_IDLE_STEAL to improve scheduler balancing (Ingo Molnar)
- fix potential ppc64 lock-up on ioctl32 un/reregistering (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.EL" date="1065175200">- extend ppc64 scsi timeout values for Zapata DVD-ROM drives (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-3.EL" date="1063965600">- make sure to release viotape op structure after use (Julie DeWandel)
- disable pgd/pmd quicklists on ppc64 (Mark DeWandel)
- temporarily disable aio on sockets (Jeff Moyer)
- correctly refile inodes to make them reclaimable (Harald Hoyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-2.EL" date="1063792800">- S390: update zfcp and cio drivers (Pete Zaitcev)
- IA64: add extra check to virtual mem_map (Larry Woodman, Dave Anderson)
- initialise local variables in ide-tape &amp; ide-scsi
- cap qla2200 tcq depth to 255
- switch version number scheme to kernel-2.4.21-N.EL</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063706400">- PPC64: invalidate evicted sbl entries in the erat (Julie DeWandel)
- increase ethernet tx_queue_len to 1000 (David Miller)
- in udp_{v6_}flush_pending_frames, reset up-&gt;len too (David Miller)
- S390: CMS reserved minidisk detection (Pete Zaitcev)
- call recount_segments() on a different occasion (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063620000">- really disable exec-shield (Roland McGrath)
- reduce stack randomisation, disable brk randomisation (Ingo Molnar)
- make e1000 driver 64 bit clean (Julie DeWandel)
- minor aio corner case error condition fix (Jeff Moyer)
- AMD64: more lenient check for call workaround (Ernie Petrides)
- PPC64: disable CONFIG_XMON (Mark DeWandel)
- S390: fix CCW slab selection (Pete Zaitcev)
- fix two-disk combined mode sata (Jeff Garzik)
- move buslogic scsi driver to supported, for vmware only (Tom Coughlan)
- change viocons message from KERN_WARNING to KERN_INFO (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063360800">- VM: handle race condition in reclaim_page (Stephen Tweedie, Larry Woodman)
- PPC64: fix "log_buffer broken" xmon issue (Julie DeWandel)
- fix compiler warnings in netdump (Jeff Moyer)
- AMD64: workaround for 32 bit compat mode page fault problem (Ernie Petrides)
- IA64: make perfmon root-only (Jason Baron)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063274400">- fix smp race in rebalance_laundry_zone()</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063188000">- fix compiler warnings when hugetlbfs is disabled (Pete Zaitcev)
- fix tux performance bug (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063101600">- don't evict kernel stack seg translation on ppc64 (Julie DeWandel)
- fix callers of do_page_fault on ppc64 (Mark DeWandel)
- AMD64 munmap return value, fix lsb failure (Jeff Moyer)
- fix for PPC64 32-bit ioctl (Jim Paradis)
- bring IA64 value of MINSIGSTKSZ in line with upstream (Jakub Jelinek)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063015200">- fix potential datacorruptor in viodasd driver (Julie DeWandel)
- fix race condition in s390 dirty bit handling (Pete Zaitcev)
- limit per-cpu slab cache size
- correct 32-bit readv/writev border cases on ppc64 (Matt Wilson)
- AMD Golem IO-APIC fixup for i686 kernel on AMD64 (Jeremy Katz)
- NFS Solaris 8 acl fix (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062756000">- minor nfs permissions bugfix (Steve Dickson)
- change mprotect return value to SuS mandated value (Arjan van de Ven)
- kernel-unsupported now provides kernel-modules (Jeremy Katz)
- correct __hugemem__modules typos in rhkernel.h
- fix subtle pmd corruption error (Larry Woodman, Dave Anderson)
- fix cut'n'paste error in SATA io port reservation
- restore NFSEXP_CROSSMNT ABI compatibility (Steve Dickson)
- round up executable name field length in core file (Jakub Jelinek)
- switch off exception_trace on amd64 (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062496800">- patch to access odd last sector on ia64 (Jason Baron)
- misc fixes from upstream (Arjan van de Ven)
- fix audigy driver (Jeff Garzik)
- tunable dcache reclaim priority for tux (Ingo Molnar)
- tg3 driver update (Jeff Garzik)
- ipv6 and icmp network bugfixes (David Miller)
- fix ppc64 memory access security bug (Julie DeWandel)
- reduce memory allocated for skb (Ingo Molnar)
- small smp fix for scalable timers (Ingo Molnar)
- make s390 recognise MSDOS partitions (Pete Zaitcev)
- small smp fixes in tux (Ingo Molnar)
- make mptfusion drivers supported on 4/4 split kernel (Tom Coughlan)
- add entries to scsi whitelist (Tom Coughlan)
- minor sata/ata driver updates (Jeff Garzik)
- small fixes to viodasd driver (Julie DeWandel)
- nfs_get_root and nfs access bit patches (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062064800">- don't show interrupts in /proc/stat for ppc64 (Matt Wilson)
- make sure sync returns in a reasonable time
- PPC64: fix for boot cpu not being cpu 0 (Julie DeWandel)
- zero sized write no longer updates mtime (Matt Wilson)
- fix video bios read corruption on ia64 (Larry Woodman)
- network fixes to tg3, bonding (Jeff Garzik)
- properly reserve legacy IDE regions in sata driver (Jeff Garzik)
- fix ppc64 signal handling bugs (Mark DeWandel)
- tux fixes (Ingo Molnar)
- tgkill syscall for s390(x) (Pete Zaitcev)
- amd64 32 bit compatibility fixes (Jim Paradis)
- ppc64 32 bit compatibility fixes (Julie DeWandel)
- fix 4G/4G follow_page problem (Ingo Molnar)
- reduce memory used by VMAs and dentries (Arjan van de Ven)
- make LVM snapshotting of ext3 work reliably (Stephen Tweedie)
- make netdump play better with the nmi watchdog (Jeff Moyer)
- QLA2200: disable irq mitigation, fix off-by-one (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061805600">- seq_file /proc/interrupts for x86 too (Ingo Molnar)
- fix memory leak in ia64 exec of ia32 binaries
- check tgid not pid in scm_check_creds()  (David Miller)
- VM fixes: shm swap priority, zeromap_page_range
- workaround VFS limitations for VXFS NFS export</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061546400">- use personality for 3GB userspace on x86 -hugemem (Ingo Molnar)
- add sysctl interface for lockd (Steve Dickson)
- don't prod VGA space on HP Pinnacle systems (Larry Woodman)
- fix for 32 bit binaries on amd64 (Jim Paradis)
- add preemption point to write_some_buffers (Julie DeWandel)
- sort ACPI table to get correct device ordering on HP (Larry Woodman)
- fix refcounting bug with ipv6 addresses on netdevs (David Miller)
- add s390 syscalls for tux (Pete Zaitcev)
- md multipath enablers (Doug Ledford)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061460000">- fix process and nice time accounting (Doug Ledford)
- amd64: syscall table updates, timer robustness (Jim Paradis)
- amd64 3GB personality for 32-bit processes (Jim Paradis)
- use 256MB pagesize for hugetlbfs on ia64 (Larry Woodman)
- make sure e100 only claims ipv4 checksumming
- igmpv3/mldv2 OOPS'er fix (David Miller)
- hugetlbfs: make chown work and allow uid=X,gid=Y mount options
- make larger mmap windows work (Ernie Petrides, Ingo Molnar)
- ia64: improve ia32 compatibility (Larry Woodman)
- fix bug in rpc retry code (Steve Dickson)
- make acpi pci hotplug modulable (Jeff Moyer)
- update (trivial) to megaraid 1.18j (Tom Coughlan) 
- enable varyio on mptfusion (Tom Coughlan)
- panic on oops to prevent data corruption opportunities (Ernie Petrides)
- small iorl locking fix (Doug Ledford)
- fix ppc64 get_wchan() bad deref (Mark DeWandel)
- fix aio read into mmap()d PROT_WRITE (Jeff Moyer, Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061373600">- libata update (Jeff Garzik)
- amd64 syscalls for xattrs &amp; ACLs (Jim Paradis)
- tux fixes (Julie DeWandel, Ingo Molnar)
- via &amp; i810 audio fixes (Jeff Garzik)
- small 4G/4G split bugfixes (Ingo Molnar)
- fix sigsuspend race on x86, amd64, ia64 (Mark DeWandel)
- ia32 behavior for FP denormal exceptions on ia64 (Jason Baron)
- get the set/get of NAT bits for ia64 correct (Jason Baron)
- ipsec update, adds cast6 encryption (David Miller)
- VM update: OOM bugfix &amp; page-&gt;flags atomic updates (Rik van Riel)
- reenable serpent encryption on ppc64
- bladecenter usb-ohci support (Pete Zaitcev)
- iorl fixes (Doug Ledford)
- network bonding driver oops fix (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060768800">- DAC960 back to bigmem supported, ne2k-pci &amp; usb audio to bigmem unsupported
- netdump updates for tg3 and e1000 (Jeff Moyer)
- put a hole between stack and mmap area (Ernie Petrides)
- process time accounting updates (Doug Ledford)
- fix null characters in TUX header (Julie DeWandel, Ingo Molnar)
- display correct executable when running interpreted script
- zfcp zSeries fibrechannel driver (Pete Zaitcev)
- ipsec updates (David Miller)
- fix 4G/4G race conditions (Ingo Molnar)
- rename -bigmem kernel to -hugemem to reflect changed tradeoffs
- optionally show task states from hangcheck timer (Jason Baron)
- various small bugfixes from upstream</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060423200">- fix scalable timer race condition  (Julie DeWandel, Ingo Molnar)
- print warning on boot with &gt;16GB RAM on -smp kernel (Arjan van de Ven)
- fix for xapic issue with ServerWorks chipsets (Ernie Petrides)
- remove spurious ioctl printk on ppc64 (Mark DeWandel)
- ppc64 wchan improvement (Mark DeWandel)
- hint @pause changes for ia64
- longer scsi scan timeout on ppc64 (Julie DeWandel)
- readv/writev for raw IO (Stephen Tweedie)
- fix for easy stack/mmap collisions (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060164000">- various XAPIC related fixes (Ingo Molnar)
- correct context switch and iowait stats with HT shared runqueues
- ext3 obscure deadlock fixes (Stephen Tweedie)
- knfsd fixes: blocked lock, symlink error &amp; missing bkl  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060077600">- de_thread bugfix from 2.6 upstream  (Matt Wilson)
- viocons driver update (Julie DeWandel)
- fix VM non-overcommit mode (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059991200">- plug data leak in aio code (Jeff Moyer)
- initial list of 4G/4G unsupported modules (Tom Coughlan)
- nfs softirq race fix (Steve Dickson)
- updated IPSEC patch (David Miller)
- networking updates/fixes from 2.4.22-preX (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059904800">- drop orlov allocator for now (Arjan van de Ven)
- correct HT cpu pair detection (Arjan van de Ven)
- build zImage.partial for netbooting on pSeries (Matt Wilson)
- fix missing symbols</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059818400">- export two AIO symbols for OCFS
- disable CONFIG_DEBUG_SLAB so performance testing can start
- crosshost mmap hooks for distributed filesystems (Stephen Tweedie)
- include partially linked zImage for pSeries netboot (Matt Wilson)
- nfs highmem fix, unmap when xdr_kmap() fails (Steve Dickson)
- update megaraid2 locking to work with IORL (Com Coughlan)
- make sure to build the qla2100 driver (Tom Coughlan)
- fix cdrom ioctl 32 bit compatibility for ppc64, amd64 (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059645600">- run depmod on install of unsupported modules (Arjan van de Ven)
- fix register corruption in IA64 lazy fpu handling (Larry Woodman)
- add b44 network driver (Jeff Garzik)
- make ppc64 pci interface routines compatible (Julie DeWandel)
- allow 32 bit userland on AMD64 and PPC64 to use volumes &gt; 2GB (Jeff Moyer)
- nfsd: acl related mount and export flags (Steve Dickson)
- fix nfs exp_fodrop oops (Steve Dickson)
- fix missed signal wakeups on ppc64 (Mark DeWandel)
- smp scalable timer bugfixes (Ingo Molnar)
- workaround for a prefetch bug in some Athlon CPUs (Ernie Petrides)
- code to make more modules unsupported for 4/4 split (Arjan van de Ven)
- various spec file and config cleanups
- viopath driver fix (Julie DeWandel)
- add match for 440gx chipset bioses (Arjan van de Ven)
- move epic100 and ne2k-pci back to supported (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059472800">- updated finegrained process accounting patch (Doug Ledford)
- make iSeries compile without CONFIG_ICOM (Julie DeWandel)
- nfsd: only set -&gt;reuse for tcp sockets, not udp  (Steve Dickson)
- enable the 4G/4G split on the i686-bigmem kernel only
- sysrq support for viocons (Julie DeWandel)
- limit pci_bus size changes to ppc64 (Jeff Garzik)
- fix for signal delivery race (Ernie Petrides, Mark DeWandel)
- add ShdPnd to /proc (Ingo Molnar)
- fix de_thread() hang (Ingo Molnar)
- add kernel support for CLONE_STOPPED (Ernie Petrides)
- make sure to initialise HVC console (Julie DeWandel)
- fix _SEG abort hit in ACPI code (Larry Woodman)
- build addon drivers on amd64 and ppc64 too (Tom Coughlan)
- build IPS driver on all architectures (Tom Coughlan)
- fix a few ia32 emulation bugs for IA64 (Larry Woodman)
- enable correct/new __clear_bit macro for IA64 (Larry Woodman)
- flexible mmap allows mappings of huge executable segments (Larry Woodman)
- sysrq-w for s390 (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058436000">- have s390 cpu_relax() also include barrier  (Pete Zaitcev)
- convert ppc64 xmon traceback code to ksymoops (Matt Wilson)
- rename kstat_sum() variable with aliasing problems  (Ingo Molnar)
- fix AIO-on-hugetlbfs crash (Ingo Molnar)
- update support for IA64 Long's Peak ACPI serial ports  (Larry Woodman)
- turn on xmon for both iSeries and pSeries (Matt Wilson)
- bugfix to make CLI work correctly on iSeries (Julie DeWandel)
- SATA bugfixes (Jeff Garzik)
- enable 4G/4G split in -BOOT kernel, due to syslinux trouble</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058349600">- fix s390 compile (Pete Zaitcev)
- taint the kernel on sii6512 driver link, GPL but no source available
- handle debug registers with 4G/4G split (Ingo Molnar)
- tgkill syscall for ppc64 (Julie DeWandel)
- fix NFSD/ACL/ext3/jbd deadlock (Stephen Tweedie, Steve Dickson)
- fix maxcpus=1 installation panic fix for ppc64 (Julie DeWandel)
- IDE byteswapping io functions for ppc64 (Julie DeWandel)
- update sata driver (Jeff Garzik)
- raise the number of /proc entries (Julie DeWandel)
- sticky sysrq key with timeout (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058263200">- make SysRq-W useable on s390 (Pete Zaitcev)
- updated process accounting patch (Doug Ledford)
- siginfo_t fixes for s390x and amd64 (Jakub Jelinek)
- clustered NFS fail-over support (Steve Dickson)
- autofs4 updates and fixes
- ia64 patches to reduce cpu power/temp in idle loop (Larry Woodman)
- add irqsafe up() for LVM locking (Stephen Tweedie)
- O_DIRECT fallback to synchronous allocation in holes (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058176800">- ia64 HP iommu: add sx1000 detection
- possible bug in s390x 32-bit emulation  (Roland McGrath)
- updated ipsec patch, should fix all current ipv6 bugs  (David Miller)
- finegrained process accounting (Doug Ledford)
- ICH5 pci irq routing, and associated ids (Jeff Garzik)
- fix the machine_real_restart() reboot path on 4G/4G (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057917600">- fix amd64 agp-gart code to work around hugetlbfs debug code (Jim Paradis)
- fix ppc32 pthread_cancel (Jakub Jelinek) 
- Do not sent IGMP leave messages unless IFF_UP  (David Miller)
- software iommu for ia64 systems without hardware iommu (Jason Baron)
- fix ext3 oops fix during dio, LTP failure (Arjan van de Ven, Stephen Tweedie)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057831200">- Remove illegal calls to dst_link_failure</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057831200">- enable HT scheduler for bigmem kernel
- add tgkill syscall for x86 and ia64
- make -BOOT kernel smaller w/ modular md and CONFIG_SMALL
- rmap VM updates
- 4G/4G agpgart potential corruption fix (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057744800">- switch off exec shield everywhere
- eliminate hostfs for amd64 (Jim Paradis)
- megaraid update, mostly vendor ID (Tom Coughlan)
- shrink boot kernel by disabling some config options
- additions for the SCSI whitelist (Tom Coughlan)
- ia64 extable fix (Jason Baron)
- viocons driver upgrade (Julie DeWandel)
- another ia64 mmu context wraparound deadlock fix (Larry Woodman)
- iSeries icom debugger patch (Julie DeWandel)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057658400">- Drop io_request_lock in usb scsiglue.c:device_reset</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057658400">- fix cpu_relax for amd64 and ia64 to include a barrier (Ingo Molnar)
- restore o_direct api compatibility (Stephen Tweedie)
- fix possible ext3 deadlock in o_direct patches (Stephen Tweedie)
- ACLs for JFS (Stephen Tweedie)
- fix /proc/cpuinfo runqueue printing (Ingo Molnar)
- via audio fixes, smaller emu10k1 patch (Alan Cox, Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057572000">- fix process accounting, tux ftp passwords and si_pid (Ingo Molnar)
- 32bit compat statfs fix (Guy Streeter)
- don't serialise exit on BKL when accounting is off (Ingo Molnar)
- truncate timeouts to 32 bits on 64bit systems (Ingo Molnar)
- fix network channel bonding (Jeff Garzik)
- split netdump patch into core and net-drivers (Jeff Garzik)
- delayed tlb flushing for ia64 (Larry Woodman)
- emu10k1 driver fixes
- kksymoops for AMD64 (Jim Paradis)
- select bugfixes from 2.4 upstream (Jeff Garzik)
- OOM tweaks (Rik van Riel)
- use seq_file for /proc/interrupts on ppc64 (Mark DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057140000">- add qdio and qeth drivers for s390(x)  (Phil Knirsch)
- slab cache scale bugfix (Larry Woodman)
- S390: qdio &amp; qeth drivers (Phil Knirsch)
- hangcheck timer for ppc64 (Julie DeWandel)
- fix race conditions in ia64 ia32 compat layer (Larry Woodman)
- update megaraid, aic7xxx, cciss and cpqarray drivers (Tom Coughlan)
- nfs xdr_shift_buf, tcp client corruption and alignment (Steve Dickson)
- rhconfig.h stuff for ppc64, s390 and s390x (Matt Wilson)
- AIO on sockets</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057053600">- kiobuf optimisations (Stephen Tweedie, Larry Woodman)
- ipsec update (David Miller)
- ipvs update to deal with timer changes (David Miller)
- 4G/4G split patch optimisations (Ingo Molnar)
- hangcheck timer (Jason Baron)
- recent (AGP 3.0) agpgart support (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056967200">- semtimedop() support on s390/s390x  (Ernie Petrides)
- fix a 4G bug that triggers on systems with &gt;30 CPUs (Ingo Molnar)
- updated SCSI SMP affine queueing patch  (Arjan van de Ven)
- page hash prefetch in do_generic_file_read bugfix (Julie DeWandel)
- updates the qlogic driver to the latest (Arjan van de Ven)
- slab cache SMP scalability tweaks (Ingo Molnar)
- ACPI 2.0 for IPF and AMD64 (Jim Paradis, Larry Woodman)
- statm fixes for hugetlbfs and remap_file_pages (Jason Baron)
- acpi serial port detection (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056708000">- iseries driver updates (Julie DeWandel)
- aio scalability and 2.5 backports  (Ingo Molnar)
- SMP scalable timers (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056621600">- make qlogic driver use new scsi infrastructure (Arjan van de Ven)
- export aio kvec functions
- fix statm oops
- compile fixes 
- NFS ACL over the wire protocol extensions (Steve Dickson)
- rate limit slab pruning, to limit IPI load on SMP systems (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056448800">- scsi request lock scaling (Ingo Molnar)
- cpu affinity for scsi command processing (Ingo Molnar)
- use softirqs instead of bhs for the scsi layer (Doug Ledford)
- igmpv3 fixes and improvements (David Miller)
- oprofile for ppc64 (Will Cohen)
- Increase MAX_ADDR_LEN from 8 to 32 for Infiniband over IP (Tom Coughlan)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056362400">- per-cpu kstat arrays (Ingo Molnar)
- optimise 4G/4G tlb flushing (Ingo Molnar)
- kiobuf reclaim together with buffer reclaim (Arjan van de Ven)
- more scalable gendisk statistics (Ingo Molnar)
- nfs reconnect fixes (Steve Dickson)
- add 32-bit compatibility for ustat system call on ppc64 (Julie DeWandel)
- scalable gettimeofday (Ingo Molnar)
- hugetlbfs ppc64 &amp; s390 bits (Mark DeWandel, Pete Zaitcev)
- hugetlbfs for ia64 (Jason Baron)
- qlogic scsi driver update (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056189600">- nfs patches (Steve Dickson)
- xapic improvements, summit support (Ingo Molnar)
- fix core dump name for multithreaded programs (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056103200">- merge up to marcelo's latest</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056016800">- oom killer fixes (Larry Woodman, Rik van Riel)
- tunable VM overcommit (Rik van Riel)
- hugetlbfs for amd64 (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055930400">- updated iseries virtual drivers (Julie DeWandel)
- nfs lockd improvements (Steve Dickson)
- remap_file_pages improvements (Ingo Molnar)
- /proc/efi/symtab patch for ia64 (Larry Woodman)
- disable O_PROFILE on UP x86 machines
- allow NMI watchdog profiling frequencies up to 10kHz (Ingo Molnar)
- statm (Jason Baron)
- hugetlbfs (Ingo Molnar)
- have nfsd honour ACLs on a per-export basis (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055844000">- Enable O_PROFILE on non-SMP configs (Stephen Tweedie)
- more conservative AIC config options
- Fix BOOT kernel panic while mounting /dev/cdrom (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055757600">- merge to 2.4.21 + selected ac bits
- ipsec upgrade (David Miller)
- HT scheduler patch fix (correct sibling counting)
- make bdflush writeout smoother
- AMD64 gdb fix (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055412000">- don't include unsupported drivers in -BOOT kernel
- merge up to 2.4.21-rc8 + selected ac bits
- FIXME: sysrq for 3170, dasd, odirect &amp; odirect for nfs</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com" date="1055412000">- oprofile for s390</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055239200">- statm (Jason Baron / Julie DeWandel)
- AIO 32-bit compat for 64-bit machines (Julie DeWandel)
- only do bufferhead reclaim in extreme situations (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055152800">- Serial ATA support (Jeff Garzik)
- mtp fusion 2.05.05+ (Dave Maley)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054893600">- XATTR/ACL patches, except NFS over the wire (Stephen Tweedie)
- ipsec module autoloading (David Miller)
- remap_file_pages (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054807200">- upgrade to latest -rmap with Ernie's fixes
- sysrq+C shows the stack dump of all CPUs
- ext3 truncate fix (Stephen Tweedie)
- NFS fixes for HZ=1000 machines (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054720800">- 4G/4G split fix (Ingo Molnar)
- ppc64 fixes (Guy Streeter, Rik van Riel)
- enable oprofile on amd64
- ipsec updates (David Miller)
- fork returns pid instead of task_struct* (Julie DeWandel)
- ia64 ptrace bugfixes (Dave Anderson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054634400">- HP diva serial driver (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054548000">- NFS over TCP patches (Steve Dickson)
- switch to using ppc64pseries/ppc64iseries arches instead of
  kernel-pseries and kernel-iseries (Jeremy Katz)
- egenera scsi bus rescan patch (Jeff Garzik)
- oprofile (Graydon Hoare)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054288800">- futex requeue (Ingo Molnar)
- enable NAPI for E1000
- signal latency and scheduler improvements (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054202400">- kscand oops fix (Ingo Molnar, Rik van Riel)
- pcnet32 fixes (Julie Dewandel)
- raid autorun (Pete Zaitcev)
- turn off CONFIG_SUNDANCE_MMIO (Jeff Garzik)
- flexible mmap (Larry Woodman)
- ppc64 fixes (Matt Wilson, Guy Streeter)
- loop softirq 10 times before giving up (Ingo Molnar)
- O_DIRECT for NFS (Steve Dickson)
- prevent md from shutting down active arrays (Doug Ledford)
- rmap updates, inode reclaim &amp; higher order allocations (Rik van Riel)
- network channel bonding (Jeff Garzik)</changelog><changelog author="Jim Paradis &lt;jparadis@redhat.com&gt;" date="1054116000">- Re-enable x86_64 in build
- x86_64-specific updates for exec-shield
- Bring in improved "nonx" support for x86_64 from upstream</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1054116000">- Hush s390 printks upon user SIGSEGV by default. It can be enabled back with
  a sysctl kernel.userprocess_debug.
- Enable optional 3270 console mode on s390.</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053684000">- get rid of vsyscall page (Arjan van de Ven)
- fix missing symbol copy_str_fromuser_size</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053424800">- exec-shield updates to fix hang-on-boot on some systems (Ingo Molnar)
- temporarily disabled the architectures, which got broken by exec-shield updates
- fix for LTP sigprocmask02 failure (Matt Wilson)
- ppc64 updates (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053338400">- pagecache scalability patch (Ingo Molnar)
- IPC semaphore scalability patch (Ingo Molnar)
- ppc64 updates (Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052992800">- exec-shield (Ingo Molnar)
- AMD64 ACPI updates (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052906400">- reenable O_DIRECT, O_DIRECT fixes and superbh-aio (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052820000">- vma merging (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052733600">- nmi profiler
- VM updates: rmap, dma zone isolation
- tux (Ingo Molnar)
- ext3 stall fixes (Ingo Molnar)
- e1000 fixes (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052474400">- config files overhaul (Arjan van de Ven)
- fix bug in mlock patch
- IPVS (Dave Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052388000">- import IO elevator changes from gingin
- critical VM fix
- matrox framebuffer patch for pseries (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052301600">- hammer nptl fixes (Ulrich Drepper)
- 4G/4G split (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052215200">- upgrade to 2.4.21-rc1-ac4 (minus -ac acpi and xapic changes)
- drop nfs patches since those seem to be in -ac</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052128800">- larger message buffer size + boot option (Mark DeWandel)
- AMD64: tls handling, coredump fixes (Jim Paradis)
- SMP &amp; highmem VM fixes (Ben LaHaise)
- HT+NUMA scheduler (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051956000">- ext3 orphan cleanup fix (Ernie Petrides)
- s390 affinity fixes (Pete Zaitcev)
- i386 vsyscall DSO changes (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051869600">- bugfixes and config changes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051783200">- enable semtimedop for other architectures (Ernie Petrides)
- large pci bus numbers (Julie DeWandel)
- bugfixes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051610400">- igmpv3 (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051524000">- generic 32bit compat stuff + amd64/ppc64/ipf pieces (Matt Wilson)
- clustered apic (XAPIC) support (Ingo Molnar)
- ppc64 architecture updates (Matt Wilson, Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051264800">- ppc64 fixes</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051178400">- collapse ipsec into one patch (David Miller)
- ppc64 build fix (Matt Wilson)
- improve smp scheduler fairness (Ingo Molnar)
- allow mlock for normal users, up to ulimit (Ingo Molnar)
- AMD64 port (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051092000">- clean up mechanism to pass extra CFLAGS so we don't override what's
  already there
- merge ia64 build stuff (Larry Woodman)
- merge varyio + superbh (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051005600">- merge up to 2.4.21-rc1
- IA64: virtual mem_map, acpi updates, netdump update, pte-highmem &amp; fealnx
- IA64: architecture specific patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050919200">- import davem's ipsec patch pile
- ppc64 kallsyms and dump_fpu patches (Matt Wilson)
- rmap updates (x86_64 &amp; bufferhead reclaim)
- ppc64 ptrace patch (Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050660000">- open up patch namespace 2000-5000 for network protocol changes
- renumber existing patches in that range</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050573600">- make sure to actually apply the rmap-updates patch
- iowait statistics
- ppc64 code merge (Mark &amp; Julie DeWandel)
- ppc64 build scripts (Matt Wilson)
- raise symlink recursion level to 8 (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050487200">- merge up to marcelo's latest
- pte-highmem bits for x86-64 and ppc64</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050400800">- merge up to 2.4.21-pre7-ac1
- drop semtimedop patches (now in -ac)
- drop nfs xprt_fixes, fix_softirq, d_drop and nfs-readeof (merged in -pre7)
- add !CONFIG_QUOTA compile fix for 2.4.21-pre7-ac1</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1050314400">- add LCS driver (endemic to s390)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050314400">- add rmap VM
- add kunmap_atomic debugging patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050141600">- remove dir.c part of NFS kmap_atomic patch for now
- using strlen as local variable name in nfs code kills, literally</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050055200">- merge S390(x) back in  (Pete Zaitcev)
- fix NFS kmap_atomic patch
- sched.c patch to disable interrupts in wake_forked_task  (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049968800">- AIO infrastructure  (Ben LaHaise)
- update NFS kmap_atomic patch  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049882400">- semtimedop patches  (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049796000">- I know understand linux-2.4.20-nfs-readeof.patch, so I merged it
- netdump update (Dave Anderson)
- 64 bit pci &amp; elf loader fix (Mark &amp; Julie)
- nptl whitespace patches, folded into nptl patch (Arjan van de Ven)
- rediff linux-2.4.18-smallpatches.patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049709600">- merge NFS patches by Steve Dickson (blame me for NFS kmap_atomic patch)
- split x86 syscall stuff out into separate patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049536800">- fix nptl patch, now it boots</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049450400">- port linux-2.4.20-o1-nptl.patch from gingin
- rediff a few patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049277600">- update linux-modules-unsupported (with Arjan)
- fix up the list a second time to fix module dependencies</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049191200">- copy -head into new AS3 branch
- remove i586 build
- remove 7.x compatibility (linux-2.4.9-fstat.patch)
- architecture patches get more breathing room (100 - 500)
- reserve patch numbers 1000 - 2000 for VM
- patch numbers 2000 - 5000 for bugfixes, changes and updates to
  existing drivers and filesystems
- remove inode reclaim patch (will be merged later as part of rmap)
- remove io priority scheduler (still experimental)
- remove nfs patches (linux-2.4.20-nfs-cto.patch,
  linux-2.4.20-nfs-access.patch &amp; linux-2.4.20-nfs-rdplus.patch)
- remove linux-2.4.18-gericom.patch
- update netdump from RH9 branch</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1048240800">- Added three NFS performance patches</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048240800">- add a timer for aging requests up</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048154400">- fix the sorting in the io elevator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048068000">- remerge ext3 orlov allocator and enable
- more priority io elevator infrastructure work</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1047117600">- merge ext3 orlov allocator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046772000">- go to 2.4.21-pre5-ac1
- split the rpm into a primary fileset and secondary (rare modules) fileset</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046253600">- go to 2.4.21-pre4-ac6
- drop lots of patches
- trim changelog to not have 2000, 2001 and 2002 anymore</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045476000">- downgrade pwc webcam driver one notch to the last known working version
- work around vm livelock
- make the cciss driver not enable irq's in it's irq handler</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1045130400">- fix for shared statistic &lt; 0</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045130400">- Signal fixes for LSB testsuite
- merge patch to fix init=/bin/sh
- 2.4.21-pre4-ac4 bugfixes (mostly IDE crashes)</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044784800">- merge 2.4.21-pre4-ac3 bugfixes</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1044352800">- Add ext3 fix for truncating negative i_blocks</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1044266400">- add oopsmeharder for debugging hard hangs</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044266400">- merge rmap15d
- set the sbp2 command buffer to 64 elements instead of 8</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1043834400">- merge tcp stall fix from DaveM
- merge bugfixes from 2.4.21-pre4</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1042452000">- Merge in the ACL and XATTR patches from the UL and BestBits trees.</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1042279200">- Merge in the LVM pvmove fix to current tree</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1042020000">- add AMD Golem fixup</changelog></package>
<package pkgid="73fdc76e2334dd56d3e63ef95bb102bbce566168" name="kernel-source" arch="x86_64"><version epoch="0" ver="2.4.21" rel="37.EL.XFS"/><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1128420000">- added SGI XFS patch set</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-37.EL" date="1126087200">- fix latent sendmsg() cmsghdr32 bug exposed in -36.EL (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-36.EL" date="1125655200">- fix sync() hangs from NFS file create/delete races (Steve Dickson)
- add support for HP Smart Array E400i in cciss driver (Tom Coughlan)
- defend against cmsghdr32 changes in sendmsg() handling (Dave Miller)
- correct OpenIPMI module version strings (v35 -&gt; 35.4) (Brian Maly)
- fix intermittent build failures under lpfc subdir (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-35.EL" date="1124445600">- disable FAN processing in Emulex driver (7.3.2) (Tom Coughlan)
- update cciss disk driver to version 2.4.58.RH1 (Tom Coughlan)
- update SCSI whitelist for EMC Invista devices (Tom Coughlan)
- fix diskdump regression w/module CRC errors (Nobuhiro Tachino)
- update SCSI whitelist for IBM ULT3580 TapeLibrary (Wendy Cheng)
- fix f/w upgrade hang, dmi_table bug in IPMI (Peter Martuccelli)
- fix x86_64 machine check regression from -32.10.EL (Brian Maly)
- validate XFRM policy in IPSEC setsockopt() calls (John Linville)
- fix intr kiobuf_init() regression from -32.11.EL (Larry Woodman)
- fix pollcomplete error in cciss diskdump support (Tom Coughlan)
- enforce CAP_NET_ADMIN perms for policy creation (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-34.EL" date="1122544800">- fix O_SYNC EIO error propagation through ext3/jbd (Stephen Tweedie)
- add support for Enterprise Southbridge II (ESB2) (Geoff Gustafson)
- implement devname callback for block device drivers (Doug Ledford)
- upgrade SATA support (core, libata, and drivers) (Jeff Garzik)
- add ia64 export of (*pm_power_off)() for IPMI (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-33.EL" date="1121767200">- update 3w-9xxx driver to version 2.24.03.008RH (Tom Coughlan)
- revise reserved port avoidance added in -32.8.EL (Steve Dickson)
- update OpenIPMI driver/configs to version v35 (Peter Martuccelli)
- add handling for NEC vendor ID in megaraid2 driver (Tom Coughlan)
- update SCSI whitelist for 3PARdata/Dell/SGI devices (Tom Coughlan)
- add support for netdump over bonded interfaces (Jeff Moyer)
- implement diskdump support for cciss devices (Tom Coughlan)
- add x86_64 ACPI Power Management timer support (Jim Paradis)
- add dual-core support on x86 and x86_64 arches (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.12.EL" date="1121421600">- constrain x86_64 MSR writes based on cpu model (Larry Woodman)
- correct smbfs mounts to support 32-bit uids/guids (Peter Staubach)
- eliminate long system pauses when kscand is running (Larry Woodman)
- update Emulex driver to 7.3.1, ioctl module to 1.2.1 (Tom Coughlan)
- update QLogic driver to 7.05.00-RH1 (w/new firmware) (Tom Coughlan)
- prevent ext3 EA/ACL block sharing/deletion races (Stephen Tweedie)
- fix dpt_i2o insmod oops during adpt_info() lookup (Neil Horman)
- fix dpt_i2o timeouts during long tape commands (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.11.EL" date="1121248800">- downgrade blk_queue_bounce_limit() msg to KERN_INFO (Neil Horman)
- update cciss disk driver to version 2.4.56.RH1 (Adam Manthei)
- update mptfusion driver to version 2.06.16i.01 (Tom Coughlan)
- prevent expand_kiobuf() calls during interrupts (Larry Woodman)
- update iscsi_sfnet driver to version 3.6.2.1 (Mike Christie)
- account for system ticks in ITIMER_PROF sig delivery (Don Howard)
- correct superbh ptr arg to superbh_will_bounce() (Stephen Tweedie)
- fix ext3 symlink perms created w/i386-BOOT kernels (Stephen Tweedie)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.10.EL" date="1121076000">- prevent bogus GART errs from amd64 Northbridge handling (Brian Maly)
- get correct link status in b44 driver's open routine (John Linville)
- check for missing EM64T support for better panic msg (Ernie Petrides)
- fix ref counting bug in x86[_64] __change_page_attr() (Dave Anderson)
- fix memory leak in success path of sys_init_module() (John Linville)
- add ia64 ptrace/sigreturn RSC reg priv level validation (Jason Baron)
- prevent connection list corruption in ip_vs_conn_flush() (Neil Horman)
- limit arg/env ptrs for x86_64/ia64 32-bit-compat execs (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.9.EL" date="1119002400">- fix crashes from failed ACPI root bus additions (Jim Paradis)
- correct insufficient lock owner checks in DRM code (Don Howard)
- add missing sanity checks in Coda ioctl handling (Alexander Viro)
- fix autofs errors with ghosting and expire event races (Jeff Moyer)
- reset ppc64 signal handler correctly for SA_ONESHOT (David Howells)
- store prev user stack pointer in ppc64 signal frames (David Howells)
- fix kernel_lock deadlock between sd_open()/sd_ioctl() (Larry Woodman)
- add ht flag in /proc/cpuinfo for EM64Ts w/hyperthreading (Brian Maly)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.8.EL" date="1118743200">- update e100 network driver to version 3.4.8-k2 (John Linville)
- preserve x86_64 32-bit-compat ptrace reg changes (Roland McGrath)
- add missing x86_64 support for PTRACE_SETOPTIONS (Roland McGrath)
- avoid using reserved ports for portmapper connections (Steve Dickson)
- prevent non-canonical %rip in x86_64 ptrace reg mods (Jim Paradis)
- prevent invalid fs/gs_base in x86_64 ptrace reg mods (Ernie Petrides)
- improve ISO-9660 fs robustness against bad CD formats (Peter Staubach)
- correct __get_user_pages() ref counting w/PG_reserved (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.7.EL" date="1118224800">- fix IPV6 isRouter flag and default router list handling (John Linville)
- eliminate unexpected IO-APIC msg from x86 kernel on amd64 (Jim Paradis)
- switch to reg stack on user-mode x86_64 stk seg faults (Dave Anderson)
- fix two time-related problems in the netconsole module (Dave Anderson)
- remove microcode.o from x86 hugemem unsupported list (Ernie Petrides)
- fix x86_64 committed space accounting w/overcommit=2 (Larry Woodman)
- enforce page locking resource limit in expand_stack() (Jason Baron)
- fix SCSI command block leak w/off-line non-zero LUNs (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.6.EL" date="1117533600">- fix races between POSIX locking and file closes (Peter Staubach)
- update tg3 network driver to version 3.27RH (John Linville)
- add ia64 frame size validation in syscall handling (Jason Baron)
- prevent info leaks into JFS metadata disk blocks (Stephen Tweedie)
- fix ext2 fast-symlink/EA compatibility problem (Stephen Tweedie)
- add x86_64 32-bit-compat SO_{SND,RCV}TIMEO support (Guy Streeter)
- add piix driver PCI device ids for ICH4-L support (John Linville)
- validate "ndigis" value in addition of ROSE routes (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.5.EL" date="1117101600">- update e1000 network driver to version 6.0.54-k2 (John Linville)
- fix arp_ip_traget failover with bonding driver mode 1 (Eric Paris)
- prevent indefinite postponement under __alloc_pages() (Ernie Petrides)
- capture ia64 reg state on all cpus for OS_INIT dumps (Nobuhiro Tachino)
- add documentation listing which drivers support netconsole (Jeff Moyer)
- fail opens of removable media drives if media not present (Pete Zaitcev)
- fix x86_64 find_target() oops in 32-bit-compat ptrace() (Ernie Petrides)
- prevent info leaks into ext2 directory entry blocks (Stephen Tweedie)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.4.EL" date="1115978400">- limit concurrent OOM kills using /proc/sys/vm/oom-kill (Ernie Petrides)
- rework ppc64 wchan fix to avoid module install crashes (David Woodhouse)
- fix diskdump signature check failures w/block_order=8 (Nobuhiro Tachino)
- fix data corruption from pte_clear() races on &gt;4GB x86's (Larry Woodman)
- avoid s390,x kernel stack overflows in network ctc driver (Pete Zaitcev)
- add description of /proc/stat to file system documentation (Brian Maly)
- avoid inode races in __refile_inode() and clear_inode() (Larry Woodman)
- fix arg/env access in ELF core dumping and /proc reads (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.3.EL" date="1115200800">- remove extra chars from scsi_logging_level mod param (Ernie Petrides)
- use GFP_NOFS allocs to avoid kswapd/rpciod deadlocks (Steve Dickson)
- fix ia64 kernel thread creation to force 64-bit tasks (Jason Baron)
- fix data corruption from 4K overflow in /proc/devices (Neil Horman)
- prevent mlock() resource limit bypass w/shm locking (Ernie Petrides)
- restrict MOXA ctlr firmware updates to privileged users (Brian Maly)
- support EM64T systems with mix of cpus with/without NX (Jim Paradis)
- allow modules to use get/put_task_struct() macros (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.2.EL" date="1114164000">- fix IDE disk accounting bug from wrong ios_in_flight (Larry Woodman)
- limit IGMP traffic to active link in bond_alb_xmit() (John Linville)
- fix audit refs to permit /var unmounting on shutdown (Dave Anderson)
- prevent IP4/6 output memory leaks of dst_entry structs (Dave Miller)
- enhance support for ethtool in 3c59x network driver (John Linville)
- fix launder_page() locking to avoid kswapd deadlock (Larry Woodman)
- suppress ide-floppy I/O errors when media isn't present (Brian Maly)
- make netdump more reliable on NAPI-enabled controllers (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.1.EL" date="1113991200">- (this is the first build for RHEL 3 Update 6)
- fix oops when io_setup() is called w/unwritable addr (Jeff Moyer)
- prevent kswapd hangs under launder_page() w/no bufs (Larry Woodman)
- fix autofs memory leaks when events share wait queues (Jeff Moyer)
- change IBM veth driver to indicate link is always up (David Howells)
- fix error resets and TF reg reads in SATA AHCI driver (Jeff Garzik)
- avoid dropping &gt;200-byte frames in sk98lin driver (John Linville)
- prevent shared memory lock/unlock w/o permissions (Dave Anderson)
- remove duplicate USB ESSENTIAL_REALITY defines (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.EL" date="1113559200">- fix data corruption w/ext3 xattr on 64-bit arches (Jason Baron)
- validate LCP frame lengths in PPP async handling (Dave Miller)
- enable forcedeth net driver builds in x86 configs (Jim Paradis)
- isolate IP fragment queues among various callers (Dave Miller)
- prevent busy inodes for symlinks after unmounts (Don Howard)
- revise PCI device ids extending ICH7 support (John Linville)
- work around broken xw4300 BIOS AHCI BAR setup (John Linville)
- add protocol validation in net bluetooth driver (John Linville)
- enable software watchdog timer in s390,x configs (Jan Glauber)
- fix data corruption w/uselib() on bad ELF libs (Ernie Petrides)
- add USB tablet init delay in wacom_probe() (Kristian Høgsberg)
- prevent core dumps with non-readable ELF interps (Dave Anderson)
- add maxevents validation in epoll_wait() handling (Ernie Petrides)
- add len validation in /dev/random poolsize sysctl (Ernie Petrides)
- correct size of ia64 syscall table initialization (Jason Baron)
- correct x86_64 user-mode i/o port validation (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-31.EL" date="1110448800">- fix missing ppc64 netdump/diskdump symbols (Nobuhiro Tachino)
- prevent ia64 unwind from traversing off stack (Jason Baron)
- disable 3w-9xxx driver builds on ppc64 (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-30.EL" date="1110362400">- fix obscure oops in tty init_dev() handling (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-29.EL" date="1109844000">- incorporate urgent late-breaking SATA fixes (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-28.EL" date="1109152800">- add more USB device support to visor driver (Pete Zaitcev)
- implement clustered APIC support for x86_64 (Larry Woodman)
- constrain x86 MSR writes based on cpu model (Jason Baron)
- increase max superbh size for performance (Stephen Tweedie)
- add locking to prevent oops in md_seq_show() (Doug Ledford)
- restore missing ia64 panic_on_oops handling (Tatsuo Uchida)
- implement Ethernet PCI quirk for HP xw9300 (Jim Paradis)
- revert NFS flock() avoidance to -27.7.EL (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.17.EL" date="1108980000">- rework NFS flock() avoidance w/FS_WANT_FLOCK for GFS (Ken Preslan)
- prevent inode corruption from delete/lookup races (Wendy Cheng)
- preserve registers for ia64 16-byte atomic ops (Geoff Gustafson)
- update SCSI whitelist for LSI/HP/STK/EMC devices (Tom Coughlan)
- disable vary_io in ips driver to avoid ctlr hangs (Tom Coughlan)
- correct handling of 2-TB device partitions (Peter Martuccelli)
- update support for ia64 perfmon facility (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.16.EL" date="1108720800">- implement diskdump support for SATA piix/promise (Nobuhiro Tachino)
- correct /proc/mtrr size values on EM64T platforms (Larry Woodman)
- restore page permissions after writes from ptrace() (Don Howard)
- fix /proc parent pids from multi-threaded forks (Ernie Petrides)
- enable software watchdog timer support on s390,x (Jan Glauber)
- update tg3 network driver to version 3.22RH (John Linville)
- incorporate 3w-9xxx driver version 2.24.00.011fw (Adam Manthei)
- correct ending boundary check in filemap_sync() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.15.EL" date="1108548000">- add e100 driver PCI device ids for ICH7 support (John Linville)
- restore obsolete but ignored e100 module params (John Linville)
- implement user-mode (gdb) access to ia64 gate page (Jason Baron)
- fix x86_64 FPU IP and DP values in SIGFPE context (Larry Woodman)
- add qla2200 module parameter to use NVRAM RIO val (Tom Coughlan)
- update 3w-xxxx driver to 1.02.00.037 w/.033 backup (Adam Manthei)
- fix crashes in video Firewire (ieee1394) driver (Bastien Nocera)
- prevent info leaks into ext3 journal disk blocks (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.14.EL" date="1108461600">- enhance AIO performance over NFS w/FS_AIO_SYNC hook (Steve Dickson)
- defer e100_tx_timeout() work from interrupt context (John Linville)
- correct IPV6 DST entry release to prevent route leak (Dave Miller)
- ignore MTU updates from invalid IPV6 ndisc packets (Dave Miller)
- add relevant PCI device ids to extend ICH7 support (John Linville)
- reduce system pauses during heavy page laundering (Larry Woodman)
- fix audit logging of paths w/predicate filter usage (Neil Horman)
- enable building of unsupported fusion isense module (Adam Manthei)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.13.EL" date="1108375200">- increase dxfer size limit for ppc64 SG_IO ioctl32 (David Howells)
- eliminate tty line discipline usage/switching races (Jason Baron)
- fix autofs recognition of ghosted direct map updates (Jeff Moyer)
- fix sg driver race between cmd completion and close (Tom Coughlan)
- prevent e100 data corruption from v.3.0.27-k2 update (John Linville)
- upgrade SATA support (core, libata, new/old drivers) (John Linville)
- implement diskdump support for sym53c8xx adapter (Yuichi Nagahama)
- add USB support for Wacom Cintiq/Intuos3 tablets (Kristian Høgsberg)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.12.EL" date="1107943200">- update e100 network driver to version 3.3.6-k2 (John Linville)
- correct cpu id macro for dual-core Opteron support (Jim Paradis)
- add "numa=off" message on x86_64 OOM kills w/NUMA (Larry Woodman)
- improve user/system timer tick accounting on s390,x (Pete Zaitcev)
- prevent EAGAIN errs from interrupted TCP recv() calls (Dave Miller)
- update cciss disk driver to version v2.4.54.RH1 (Adam Manthei)
- eliminate diskdump cpu id from frozen list (Nobuhiro Tachino)
- fix user-space access bug in USB vicam ioctl (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.11.EL" date="1107424800">- incorporate Emulex driver ioctl module version 1.0.13 (Tom Coughlan)
- eliminate potential call_lock deadlock with diskdump (Tatsuo Uchida)
- fix potential kiobuf_lock deadlock in free_kiovec() (Larry Woodman)
- add L2 cache descriptor for EM64T Irwindale processor (Neil Horman)
- prevent mmap() syscalls from choosing NULL mappings (Rik van Riel)
- include bounce buffer pages in show_mem() output (Larry Woodman)
- add I2C driver support for ICH5 in i2c-i801.c (John Linville)
- correct parport_pc errors on insmod failures (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.10.EL" date="1106906400">- fix futex_wait() race condition that allowed app hang (Ingo Molnar)
- add/correct write barrier placement in timer routines (David Howells)
- add x86_64 NMI switch support to debug kernel hangs (Yuichi Nagahama)
- restore CIV/LVI offset operation in i810_audio driver (John Linville)
- update e1000 network driver to version 5.6.10.1-k2 (John Linville)
- prevent bogus BUG_ON during multi-threaded core dump (Roland McGrath)
- fix x86_64 crash in huge_page_release() w/SHM_HUGETLB (Larry Woodman)
- fix possible mem corruption from /proc/kcore access (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.9.EL" date="1106647200">- fix core dumping over NFS mounts with "intr" option (Roland McGrath)
- prevent multi-threaded app hang from sys_wait4() race (Ingo Molnar)
- restore e1000 support for Intel PCI device id 1014 (John Linville)
- add ac97 quirk entries for HP xw6000/xw6200/xw8000 (John Linville)
- update b44 network driver to upstream version 0.95 (John Linville)
- revert NFS silly-delete and rpciod-hang patches (Steve Dickson)
- fix panics while backing up LVM snapshots (Heinz Mauelshagen)
- fix oops in redirect_target() on DHCP refresh (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.8.EL" date="1105696800">- rework ia64 INIT switch stacks for clean tracebacks (Tatsuo Uchida)
- fix USB raced timeout errors and ohci_complete_add() (Pete Zaitcev)
- add O_DIRECT handling in LVM driver handling (Heinz Mauelshagen)
- downgrade wait4() SIGCHLD/SIG_IGN warning message (Ingo Molnar)
- eliminate potential VMA list races with do_brk() (Dave Anderson)
- ignore ICMP Source Quench messages in tcp_v4_err() (Dave Miller)
- prevent VMA overlap crashes in insert_vm_struct() (Jason Baron)
- move flock() avoidance from NFS up to F/S layer (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.7.EL" date="1105437600">- fix 32-compat alt-stack signal handling on x86_64 (Geoff Gustafson)
- add initialization of ppc64 EEH error buffer size (David Howells)
- make ppc64 xmon work properly with Power5 console (David Howells)
- prevent infinite sync loop from NFS ESTALE writes (Steve Dickson)
- update 8139too network driver w/recent 2.4 fixes (John Linville)
- avoid netfilter oops when ip_conntrack is unloaded (Dave Miller)
- fix potential rpciod hangs during NFS sillydelete (Steve Dickson)
- avoid "No locks available" errors w/flock() on NFS (Ken Preslan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.6.EL" date="1104919200">- fix x86 phys proc ids for non-clustered APIC systems (Geoff Gustafson)
- return EINVAL on e100/e1000 rx-mini/rx-jumbo settings (John Linville)
- fix i810_audio regression from modified ICH6 PCI ids (John Linville)
- prevent race conditions in add_wait_queue_cond() macros (Jeff Moyer)
- fix FAT32 file system corruption w/writing 8M files (Alexander Viro)
- fix derivation/presentation of PHB unit ids on ppc64 (David Howells)
- close OpenFirmware stdin device at boot on ppc64 (David Woodhouse)
- fix 32-bit-compat regression in CMSG validations (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.5.EL" date="1103796000">- add "CommitLimit" data to /proc/meminfo output (Frank Hirtz)
- allow autofs to expire mounts on ppc64 arch (Jeff Moyer)
- add 3c59x EEPROM_RESET for 3c900 Boomerang (John Linville)
- ignore PTE mapping status in page_anon() (Larry Woodman)
- fix SIOCGIFHWADDR handling for zero addr_len (Dave Miller)
- add netdump support for x86_64, ia64, ppc64 (Dave Anderson)
- correct overcommit accounting on fork failure (Frank Hirtz)
- raise default ia64/ia32e swiotlb size to 64M (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.4.EL" date="1103709600">- add network CMSG validation checks (Dave Miller)
- fix data struct leak in ip_options_get() (Dave Miller)
- fix IGMP vulnerabilities in ip[6]_mc_source() (Dave Miller)
- fix e_phnum binfmt_elf loader vulnerability (Dave Anderson)
- clean x86_64 32-bit-compat syscall numbers (Jim Paradis)
- prevent ia64 floating point reg val leakage (Jason Baron)
- add USB io_edgeport driver size check (Peter Martuccelli)
- enable softirq deferral for x86_64 arch (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.3.EL" date="1102586400">- add data/param length sanity checks in smbfs (Alexander Viro)
- prevent /proc/&lt;PID&gt;/cmdline env data disclosure (Dave Anderson)
- make tulip_stop_rxtx() wait for DMA termination (John Linville)
- fix mm_stat regression introduced in -20.13.EL (Rik van Riel)
- correct return value from vlan_dev_change_mtu() (John Linville)
- serialize datagram read w/appropriate semaphore (Dave Miller)
- fix keyboard regression introduced in -24.EL (Peter Martuccelli)
- enable mmap/mprotect PROT_EXEC for legacy apps (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-26.2.EL" date="1101722400">- fix USB problems with keyboards and ia64 oopses (Pete Zaitcev)
- add i810 PCI IDs for nforce3/CK804 audio devices (Jim Paradis)
- fix ppc64 viodasd driver dev naming/limit bugs (David Howells)
- prevent tg3 fiber link bounces w/auto-negotiation (Dave Miller)
- add ac97 quirk handling for i810_audio driver (John Linville)
- prevent incorrect OOM killing with iscsi usage (Larry Woodman)
- create kiobuf cache to reduce lowmem contention (Larry Woodman)
- fix yet another binfmt_elf loader vulnerability (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.1.EL" date="1100512800">- (this is the first build for RHEL 3 Update 5)
- implement open() recovery from NFS ESTALE errors (Neil Horman)
- clean up warnings from lpfc and lpfc_703 Makefiles (Tom Coughlan)
- fix nessus-induced kernel panic with auditing (Peter Martuccelli)
- update 3c59x driver to LK1.1.18 and fix reset bug (John Linville)
- fix ext3 O_DIRECT bug in orphan list handling (Stephen Tweedie)
- flush cached dirty pages on NFS reads w/O_DIRECT (Steve Dickson)
- allow ia64 kernel unaligned access msg suppression (Neil Horman)
- correct test for performing buffer-head reclaim (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.EL" date="1100253600">- fix binfmt_elf loader vulnerabilities (Jim Paradis, Dave Anderson)
- limit kernel data struct slabs to single-page allocs (Larry Woodman)
- update Emulex driver to 7.1.14 (backup still 7.0.3) (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-24.EL" date="1100080800">- fix several ppc64 problems with signal catching (David Woodhouse)
- fix several bugs in /proc/ppc64/lparcfg driver (David Howells)
- fix possible diskdump hangs w/megaraid2 driver (Tatsuo Uchida)
- add support for IBM EM64T-based Groucho blade (Peter Martuccelli)
- fix regression in USB BIOS-&gt;kernel hand-off support (Pete Zaitcev)
- fix regression in ia64 kernel stack unwind handling (Don Howard)
- fix regression w/agpgart support of i8xx chipsets (Larry Woodman)
- add support for BLKSSZGET ioctl in cciss driver (Tom Coughlan)
- disable iSCSI builds in ppc64 and s390* configs (Tom Coughlan)
- update Emulex driver to 7.1.13 (backup still 7.0.3) (Tom Coughlan)
- correct SCSI whitelist for Chaparral FR1422 devices (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-23.EL" date="1098957600">- prevent kswapd from getting stuck in prune_icache() (Larry Woodman)
- fix ppc64 single-stepping into signal handlers (David Woodhouse)
- fix corruption from user stack expansion races (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-22.EL" date="1098093600">- prevent add/removal races in SCSI open handling (Doug Ledford)
- fix U3 agpgart regression with Intel i8xx chipsets (Dave Jones)
- update SCSI whitelist for IBM 1722/1724 devices (Tom Coughlan)
- correct TSS descriptor limit checking for x86_64 (Jim Paradis)
- add nforce3/CK804 device support and fix ACPI bug (Jim Paradis)
- add support for "forcedeth" net driver version 0.28 (Jim Paradis)
- enable diskdump support in amd64/ia32e configs (Nobuhiro Tachino)
- restore/improve linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- add missing page_cache_release() in launder_page() (Larry Woodman)
- update Emulex driver to 7.1.11 (backup still 7.0.3) (Tom Coughlan)
- add new USB ids to support latest Wacom tablets (Kristian Høgsberg)
- remove drivers/net/tun.o from unsupported list (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-21.EL" date="1096538400">- fix potential PTE race in do_anonymous_page() (Rik van Riel)
- add "Committed_AS" data to /proc/meminfo output (Frank Hirtz)
- revise DMA zone paging thresholds for x86_64 (Larry Woodman)
- prevent /proc/scsi/scsi oops during probes (David Woodhouse)
- avoid kswapd hangs via free_more_memory() hooks (Rik van Riel)
- update megaraid2 driver to 2.10.8.2 w/2.10.6 backup (Adam Manthei)
- fix do_notify_parent() panic from ptrace death race (Roland McGrath)
- fix large core file support on 64-bit architectures (Dave Anderson)
- enable tux on ia64 and increase max tux threads to 16 (Ingo Molnar)
- fix ia64/s390,x single-stepping w/signal handlers (David Woodhouse)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.14.EL" date="1096452000">- fix hang in SCSI starvation management code (David Howells)
- update SCSI whitelist for NETAPP LUN devices (Wendy Cheng)
- fix s390 cio handling during ESS fail-overs (Pete Zaitcev)
- update Emulex driver to 7.1.8 w/7.0.3 backup (Tom Coughlan)
- update Qlogic driver to 7.01.01 w/7.00.03 backup (Tom Coughlan)
- correct unlock/free order in proc_lookupfd() (Ernie Petrides)
- use ACPI for PCI interrupt routing on ia32e (Jim Paradis)
- allow cpus to boot w/APIC IDs &gt; 8 on ia32e (Jim Paradis)
- fix pid allocation when pid_max &gt; 32768 (Ernie Petrides)
- fix regs in multi-threaded ia64 core dumps (Keiichi Mori)
- enable sym53c8xx driver for ppc64 iSeries (David Howells)
- fix ac97 depmod errors w/hugemem configs (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.13.EL" date="1096365600">- fix aic79xx_osm.h/3c59x.c changes in prior rev (Tachino/Linville)
- allow for larger nfsd block sizes on some archs (Steve Dickson)
- fix possible aacraid driver panic in aac_info() (Tom Coughlan)
- fix xdr argsize check to handle writes &gt;= 2^31 (Steve Dickson)
- update e1000 network driver to version 5.3.19-k2 (John Linville)
- apply several cciss driver fixes (to 2.4.52.RH2) (Adam Manthei)
- fix x86_64 versions of cpu capability test macros (Jim Paradis)
- fix ppc64 HPTE memory corruption race condition (Rik van Riel)
- add sys_epoll support on s390,x (Stephen Tweedie, Pete Zaitcev)
- prevent keyboard.c warnings from mouse clicks (Norm Murray)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.12.EL" date="1096279200">- improve slab cache page reaping heuristics (Larry Woodman)
- implement diskdump support for x86_64 arch (Nobuhiro Tachino)
- add ia64 INIT trigger switch support for debugging (Tatsuo Uchida)
- fix several problems in handling of AIO on pipes (Jeff Moyer)
- update fixes for LTP read02 test hangs with tmpfs (Alexander Viro)
- fix x86_64 single-stepping out of signal handlers (Jim Paradis)
- increase size of ppc64 RTAS error log buffer (David Howells)
- increase max possible kNFSD lockd cookie size (Steve Dickson)
- backport 3c59x fixes for mii-tool problems w/10Mb (John Linville)
- incorporate Cisco's iscsi_sfnet initiator driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.11.EL" date="1095933600">- implement diskdump support for megaraid2 adapter (Tatsuo Uchida)
- update ips driver to version 7.10.18 w/7.00.15 backup (Tom Coughlan)
- correct max page aging interval boundary in kscand() (Larry Woodman)
- add ppc64 support for ptrace() with PT_SINGLESTEP (David Woodhouse)
- update e100 network driver to version 3.0.27-k2 (John Linville)
- fix LTP read02 test hangs when tmpfs is in use (Alexander Viro)
- get proc_dir_entry reference in proc_lookup() (Alexander Viro)
- add exports of several AIO-related interfaces (Larry Woodman)
- reduce swapping during excessive pagecache use (Larry Woodman)
- implement statfs64() syscall on x86 for NFS use (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.10.EL" date="1095847200">- implement early USB hand-off (BIOS-&gt;kernel) support (Pete Zaitcev)
- fix stack pointer calculation in x86 show() handling (Jeff Moyer)
- prevent interference between flock/POSIX lock types (Frank Hirtz)
- update pcnet32 network driver to version 1.30c (John Linville)
- add export of block_commit_write() f/s interface (Larry Woodman)
- implement diskdump support for dpt_i2o adapter (Tatsuo Uchida)
- update mptfusion driver to version 2.05.16.02 (Adam Manthei)
- move disk_dump_notifier_list to diskdumplib.c (Nobuhiro Tachino)
- update s390 zfcp driver to revision 5.31.2.11+ (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.9.EL" date="1095674400">- fix occasional ibmvscsic driver insmod crash (David Howells)
- disable linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- prevent double slashes in symlink auditing (Peter Martuccelli)
- fix overzealous compat32 setsockopt conversions (David Woodhouse)
- backport tulip driver fixes from upstream 2.4.28 (John Linville)
- update tg3 network driver to version 3.10RH (John Linville)
- implement sysctl to force igmp protocol versions (Neil Horman)
- add diskdump performance improvement info (Nobuhiro Tachino)
- fix s390 iucv lost connections and ping hangs (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.8.EL" date="1095588000">- prevent diskdump deadlock in case of die() recursion (Tatsuo Uchida)
- add x86/x86_64 support for ptrace() w/PT_SINGLESTEP (Roland McGrath)
- fix x86/x86_64 single-stepping into signal handlers (Roland McGrath)
- increase x86 value for MAX_MP_BUSSES definition to 260 (Ingo Molnar)
- eliminate ia64 potential for scheduler runq deadlock (Larry Woodman)
- add support for /proc/sys/kernel/mem_nmi_panic sysctl (Dave Anderson)
- prevent keyboard-initiated sysrq hangs in handle_sysrq() (Jeff Moyer)
- fix intermittent netdump hangs from cpu-frozen messages (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.7.EL" date="1095415200">- fix premature OOM killing change added in prior rev (Larry Woodman)
- backport vlan driver fixes from upstream 2.4.28-rc1 (John Linville)
- add _sb_findmap symbol export in s390/s390x kernels (Pete Zaitcev)
- add ppc64 support for 32-bit sendfile64() syscall (David Howells)
- fix 32-bit IPC_INFO shmctl() syscalls for ppc64 (David Howells)
- upgrade libata/SATA support to current 2.4 bits (John Linville)
- avoid USB device resets of shared/busy interfaces (Pete Zaitcev)
- fix miscellaneous problems in ppc64 icom driver (David Howells)
- fix ip_queue_maxlen sysctl for ip[6]_queue modules (Neil Horman)
- add module parm for max entries in NFS_ACL replies (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.6.EL" date="1095156000">- prevent OOM killer from kicking in prematurely (Larry Woodman)
- avoid NMI watchdog crashes during sysrq-m usage (Wendy Cheng)
- add auditing support for ia64 clone2 syscall (Peter Martuccelli)
- correct sign of auditing error codes for ia64 (Peter Martuccelli)
- implement ia64 auditing 32-bit-disable sysctl (Peter Martuccelli)
- fix ia64 faults w/stale VHPT-generated TLB entries (Dave Anderson)
- fix invalid x86_64 checksums for multicast packets (Mike Gahagan)
- fix incorrect blocking bug inside wakeup_kswapd() (Larry Woodman)
- validate appropriate media type in DVD drives (Doug Ledford)
- reduce s390 stack usage in qeth/qdio drivers (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.5.EL" date="1094810400">- prevent scenarios that lead to hang of kswapd (Larry Woodman)
- add locking for access to /proc/bus/usb/devices (Pete Zaitcev)
- correct x86 rescheduling to handle apm=power-off (Ingo Molnar)
- fix OOM killer locking and mm referencing holes (Larry Woodman)
- pin ia64 mapping for idle proc stack during boot (Larry Woodman)
- fix warning throttle for amd64 stack overflow check (Neil Horman)
- fix content lengths when using tux gzip compression (Ingo Molnar)
- add auditing support for pread/pwrite syscalls (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.4.EL" date="1094724000">- prevent bogus data in /proc/scsi/ibmvscsi/* (David Howells)
- update tg3 network driver to version 3.9RH (John Linville)
- improve ramfs memory alloc w/scarce highmem (Larry Woodman)
- correct several values in /proc/ppc64/lparcfg (David Howells)
- allow dirty page rebalancing under mem pressure (Rik van Riel)
- prevent memory leak in scsi_build_commandblocks() (Doug Ledford)
- fix potential kswapd deadlock w/disk quota usage (Larry Woodman)
- increase MAX_IO_APICS from 8 to 32 for x86_64 arch (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.3.EL" date="1094205600">- fix various error path bugs in bcm5820 driver (John Linville)
- validate addresses used with /dev/kmem accesses (Neil Horman)
- eliminate IPSEC tunnel leaks when using IPComp (Dave Miller)
- add auditing support for utimes() syscalls (Peter Martuccelli)
- prevent netconsole freeze w/cable dis-/re-connect (Jeff Moyer)
- correct reboot_cpu validation for "reboot=s&lt;n&gt;" (Doug Ledford)
- fix mem/irq clean-up in olympic tokenring driver (Neil Horman)
- update network bonding driver to version 2.6.0 (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.2.EL" date="1094032800">- add maps/rlimits output with print-fatal-signals=2 (Ingo Molnar)
- backport ac97 sound support from upstream 2.4.27 (John Linville)
- eliminate kernel stack data leaks from USB drivers (Mark Cox)
- fix interrupt status mask in AMD PCnet32 driver (David Howells)
- fix module loading problems in ibmvscsic driver (David Howells)
- fix x86 shared runq mapping when ACPI data is bad (Bernd Schmidt)
- disable enhanced error handling on PCI-ISA bridges (David Howells)
- add memory-mapped i/o support to i810_audio driver (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.1.EL" date="1093860000">- (this is the first build for RHEL 3 Update 4)
- backport r8169 network driver changes from 2.4 (John Linville)
- update i810_audio sound driver to version 1.01 (John Linville)
- convert USB UHCI driver warning to debug message (Pete Zaitcev)
- backport 2.6 PROT_GROWSDOWN/UP mprotect() support (Jakub Jelinek)
- lower ppc64 console logging level of RTAS messages (David Howells)
- fix ppc64 handling of "smt-emabled=off" boot option (David Howells)
- correct socket sndbuf accounting w/IP_MULTICAST_LOOP (Neil Horman)
- reduce x86_64 user stack start randomization to 16K (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.EL" date="1092823200">- change TARGET_CPUS on x86_64 to include all on-line cpus (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-19.EL" date="1092304800">- fix possible races/overflows in file offset handling (Alexander Viro)
- correct logging of boot progress messages on Power5 (David Howells)
- extend ppc64 EEH support for other types of devices (David Howells)
- fix ibmveth driver to properly shut down and restart (David Howells)
- fix several races and overflows in ppc64 RTAS driver (David Howells)
- backport "acpi=noirq" support to work around Nocona hangs (Don Howard)
- conditionalize pbn_hp_diva to fix serial driver oops (Matthew Galgoci)
- add amd64 GART entry guard mappings for PCI mis-prefetch (Jim Paradis)
- upgrade SATA support again to resolve several problems (Jeff Garzik)
- qualify ia32e IRQ affinity disable with BIOS flag check (Jim Paradis)
- fix eeh_check_failure() on ppc64 to be interrupt safe (David Howells)
- correct ppc64 EEH macros to use appropriate data size (David Howells)
- fix x86/ia64 no-wait handling in smp_call_function() (Larry Woodman)
- fix "Filter target 0x203 not known ..." audit msgs (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-18.EL" date="1090404000">- prevent s390 mlock hangs with follow_page() rework (Ernie Petrides)
- fix Power5 initialization and handling of RAS IRQs (David Howells)
- fix ppc64 viocons driver deadlocks with printk() (David Howells)
- apply eh_timeout, netdump, cli fixes in diskdump (Tatsuo Uchida)
- add skip_mapped_pages tuning for page eviction (Stephen Tweedie)
- fix initrd's effect on ppc64 mem_end calculation (David Howells)
- allow HT support on ppc64 systems with single cpu (David Howells)
- backport v2.0.8 aic7xxx driver h/w support for Dell (Tom Coughlan)
- correct ppc64 device node searching in hvsi driver (David Howells)
- fix KMI compat problem w/pgprot_t in x86 NX support (Jim Paradis)
- resurrect mptfusion driver backup version 2.05.05 (Tom Coughlan)
- disable IRQ affinity setting on some ia32e systems (Jim Paradis)
- update SCSI whitelist for Dot Hill SANnet/StorEdge (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-17.EL" date="1089280800">- account for zone holes in big hash table allocator (Stephen Tweedie)
- prevent reserved stack space overflow of mmap_top (Ernie Petrides)
- fix USB crash in scan_async() with EHCI hardware (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-16.EL" date="1088848800">- enable exec-shield and add x86 NX support (Ingo Molnar, Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.19.EL" date="1088762400">- add owner check in inode_change_ok() for gid changes (Ernie Petrides)
- fix race in finish_task_switch() between wakeup/exit (Ernie Petrides)
- remove Samsung CD-ROM SN-124 from IDE DMA blacklist (Tom Coughlan)
- update e1000 network driver to version 5.2.52-k3 (John Linville)
- add auditing support for semtimedop syscalls (Peter Martuccelli)
- fix tasklet and locking bugs in Power5 hvsi driver (David Howells)
- fix megaraid2 handling of TUR cmds with SCSI CD-ROM (Adam Manthei)
- update SCSI whitelist for HP NS E1200-160 router (Tom Coughlan)
- prevent x86 read_ldt() from reading beyond kmap (Ernie Petrides)
- force single loadable segment in ia64 kernels (Jakub Jelinek)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.18.EL" date="1088157600">- implement ia64 work-around for TLB fetch timeout MCA (Larry Woodman)
- fix Power3 interrupt initialization in ppc64 setup (David Howells)
- correct info msg, prevent double panic in diskdump (Tatsuo Uchida)
- defend against NULL "mm" ptrs in page_referenced() (Rik van Riel)
- fix miscellaneous audit subsystem problems (Peter Martuccelli)
- prevent crash with tux CGI execution on x86_64 (Ingo Molnar)
- add installer info to SATA sx8 block driver (Jeff Garzik)
- turn on vary_io flag in SCSI ips driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.17.EL" date="1087984800">- allocate big system hash tables w/bootmem allocator (David Howells)
- prevent loading aic7xxx_old when aic7xxx is in use (Doug Ledford)
- implement stat() recovery from NFS ESTALE errors (Steve Dickson)
- fix raw/O_DIRECT i/o bug with unmapped pages (Stephen Tweedie)
- correct another locking hole in RAID1 handling (Doug Ledford)
- fix __x86_64__ conditional in megaraid2.c driver (Adam Manthei)
- fix unresolved symbols on ia64 in cciss driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.16.EL" date="1087898400">- make NFS sillydelete wait for unlink completion (Steve Dickson)
- prevent EIO w/concurrent O_DIRECT+buffered i/o (Stephen Tweedie)
- upgrade SATA support (core, libata, and drivers) (Jeff Garzik)
- implement futex() FUTEX_CMP_REQUEUE op (Al Viro, Pete Zaitcev)
- update b44 network driver to version 0.93 (John Linville)
- avoid unix_stream_sendmsg() ENOBUFS errors (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.15.EL" date="1087812000">- improve SCSI mid-layer error handling w/sdev_retry_q (Doug Ledford)
- eliminate rw-semaphore races between waiter/wakeup (David Howells)
- add locking and fix accounting bug in RAID1 handling (Doug Ledford)
- backport Carmel sx8.c driver from upstream 2.4 base (John Linville)
- rename ppc64-squadrons-* patches to ppc64-power5-* (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.14.EL" date="1087639200">- introduce support for IBM Squadrons/Power5 systems (David Howells)
- update aacraid driver to 1.1.5-2339 w/1.1.2 backup (Adam Manthei)
- allow sys_remap_file_pages() on unlocked ramfs VMAs (Larry Woodman)
- fix diskdump hangs during resets with aic79xx driver (Tatsuo Uchida)
- fix possible data corruption when using SHM_HUGETLB (Larry Woodman)
- set QLogic HbaApiNode proc file permissions to 0600 (Tom Coughlan)
- add IRQ blocking/restoring in add_gendisk/del_gendisk (Jeff Needle)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.13.EL" date="1087466400">- fix problem causing PCI bus 255 to be missing on ia64 (Ben Woodard)
- make nfs_statfs() recognize/handle fs size overflows (Steve Dickson)
- update QLogic driver to 7.00.03-RH1 w/6.07.02 backup (Tom Coughlan)
- allow procfs to utilize more dynamic inode numbers (David Howells)
- prevent inappropriate "unexpected IO-APIC" messages (Ernie Petrides)
- avoid lost dirty page bits in s390/s390x VM handling (Pete Zaitcev)
- fix ACPI SCI interrupt defaults and add kernel params (Jim Paradis)
- fix user-space access bugs in acpi/airo/decnet/sound (Alexander Viro)
- remove drivers/net/starfire.o from unsupported list (Ernie Petrides)
- fix mm_struct mem leak in copy_process() error path (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.12.EL" date="1087293600">- correct s390/s390x tests for PT_AUDITED flag (Peter Martuccelli)
- update e100 network driver to version 2.3.43-k1 (John Linville)
- update megaraid2 driver to 2.10.6 w/2.10.1.1 backup (Adam Manthei)
- add x86_64 auditing support for 32-bit-compat (Peter Martuccelli)
- fix ia64 unwind handling for UNW_INSN_SETNAT_MEMSTK (Jason Baron)
- update cciss driver to v2.4.52 for several fixes (Tom Coughlan)
- fix variable block mode tape handling in st driver (Tom Coughlan)
- incorporate latest Emulex fibre channel driver (Tom Coughlan)
- fix USB EHCI problem with BIOS-to-host handoff (Pete Zaitcev)
- update SCSI whitelist for DDN/Xyratex/SanDisk/CBOX3 (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.11.EL" date="1087207200">- upgrade to latest autofs4, remove from unsupported list (Jeff Moyer)
- fix memory corruption bug in audit driver code (Peter Martuccelli)
- store adjusted KSP value in ia64 diskdump support (Tatsuo Uchida)
- update e1000 network driver to version 5.2.52-k1 (John Linville)
- update ips driver to version 7.00.15 w/6.11.07 backup (Adam Manthei)
- implement USB device interlock between ioctls/SCSI-ops (Pete Zaitcev)
- update tg3 driver to version 3.6RH for upcoming chipsets (Dave Miller)
- downgrade several PCI cache line size debugging messages (Jim Paradis)
- correct x86_64 32-bit-compat support for AIO syscalls (Jeff Moyer)
- prevent FPU exception handling hangs on x86/x86_64 (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.10.EL" date="1086948000">- give wait.func highest priority in wake_up_filtered() (Larry Woodman)
- reduce system time when using sys_remap_file_pages() (Larry Woodman)
- enable CONFIG_SOFT_WATCHDOG module for ppc64 configs (David Howells)
- improve page allocation to avoid unnecessary swapping (Rik van Riel)
- implement diskdump support for ia64 with mptfusion (Tatsuo Uchida)
- disable native ia32 support for ia64 Montecito cpus (Jason Baron)
- save/restore P4/ia32e perf registers for oprofile (Will Cohen)
- fix oprofile ESCR_SET_EVENT_SELECT() event mask (Will Cohen)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.9.EL" date="1086775200">- update s390 zcrypt driver to version 1.2.1 (Pete Zaitcev)
- update network tg3 driver to version 3.5RH (Dave Miller)
- eliminate separate ia32e oprofile processor id (Will Cohen)
- update SCSI whitelist for IBM 2105/2145 devs (Doug Ledford)
- avoid EAGAIN errors on blocking UDP sockets (Steve Dickson)
- avoid putting locked inodes on dirty list (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.8.EL" date="1086688800">- decouple NFS O_DIRECT handling for performance gain (Steve Dickson)
- export page_is_ram() interface for amd64/ia32e arch (Jim Paradis)
- enable CONFIG_SCSI_SATA_* options in x86_64 configs (Jim Paradis)
- update mptfusion driver to 2.05.16 w/2.05.11.03 backup (Adam Manthei)
- fix nopage_sequential_readahead() and filemap_sync() (Larry Woodman)
- fix USB EHCI driver to avoid Squadrons install oops (Pete Zaitcev)
- add x86 NMI trigger switch support for debugging (Yuichi Nagahama)
- add dmi_blacklist[] entry for "Intel NA440BX DP" (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.7.EL" date="1086602400">- apply some minor scsi_dump_status() format tweaks (Doug Ledford)
- implement SCSI support for dynamic add (hot plug) (Doug Ledford)
- upgrade lvm driver logic to version 1.0.8-2 (Heinz Mauelshagen)
- fix x86_64 definition for inlined ffs() function (Jim Paradis)
- preserve VM_MAYEXEC for executable stack support (Jim Paradis)
- add extra SLBIEs for ppc64 Power5 DD2.0 errata (David Howells)
- add ppc64 32-bit compat for TIOCGICOUNT/MIWAIT (David Howells)
- hold file struct ref when removing POSIX locks (Steve Dickson)
- fix window scaling bug in tcp_ack_update_window() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.6.EL" date="1086343200">- make fsync() flush all pending NFS updates to disk (Steve Dickson)
- complete ia64 support for multiple I/O port spaces (Larry Woodman)
- fix sending of IP broadcast frames with TTL of zero (Neil Horman)
- prevent context switch storms under high VM loads (Larry Woodman)
- fix sigaltstack() errors w/JVM on hugemem kernels (Roland McGrath)
- add locking and improve output in scsi_dump_status() (Doug Ledford)
- add size boundary checking in scsi_resize_dma_pool() (Doug Ledford)
- fix SCSI request struct leak on command init failures (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.5.EL" date="1084528800">- overhaul ia64 SAL/MCA subsystem (Ben Woodard)
- enable x86_64 32-bit UID support (Jim Paradis)
- add initial diskdump support (Nobuhiro Tachino)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.4.EL" date="1084356000">- reduce chance of "VFS: Busy inodes after unmount." errs (Steve Dickson)
- convert "uaddr2" arg ptr in s390x futex() compat syscall (Pete Zaitcev)
- add ppc64 32-bit compat handler for PE_LOCKED_COPY ioctl (David Howells)
- update s390 dasd driver with several recent bug fixes (Pete Zaitcev)
- fix amd64 NUMA node scanning for Northbridge systems (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.3.EL" date="1084183200">- prevent exp_stopfodrop() oops during cluster failover (Steve Dickson)
- make nfs_file_commit() always flush the entire file (Steve Dickson)
- fix pcnet32 driver's MAC address selection on ppc64 (Julie DeWandel)
- backport /dev/random driver fixes for missed wakeups (Mark DeWandel)
- fix hang w/SoundBlaster 16-bit sampling w/odd count (Ernie Petrides)
- make s390 tape driver specify GPL module license type (Pete Zaitcev)
- correct buffer len value in ppc64 pSeries ipr driver (David Howells)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.2.EL" date="1083664800">- enable booting on 8-way Opteron systems (Jim Paradis)
- fix 32-bit-compat truncate64() on x86_64 (Jim Paradis)
- correct promiscuous mode counter handling (Dave Miller)
- support 128-GB ia64 systems w/HP zx1 chipset (Larry Woodman)
- add export of sys_ioctl() global symbol on s390x (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.1.EL" date="1083578400">- (this is the first build for RHEL 3 Update 3)
- reenable/fix linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- clean up file locks when NFS clients receive signals (Steve Dickson)
- complete ia64-specific LAuS syscall auditing support (Mark DeWandel)
- prevent NULL pointer dereference in page_referenced() (Rik van Riel)
- fix max sectors argument in lvm_snapshot_alloc() (Heinz Mauelshagen)
- allow AGP bus scanning to execute for all architectures (John Dennis)
- fix page_referenced() rss limit checks w/unmapped pages (Rik van Riel)
- correct locking and cr/lf problems in usbserial driver (Pete Zaitcev)
- add /proc/cpuinfo support for new ppc64 processors (Julie DeWandel)
- fix sense data handling on certain SCSI cmd retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.EL" date="1082541600">- fix clobbering of /proc/cpuinfo vendor_id on x86_64 (Jim Paradis)
- correct MCAST_MSFILTER/IP_MSFILTER size checking (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-14.EL" date="1081936800">- disable linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- prevent symlink buffer overflow in ISO-9660 fs (Ernie Petrides)
- check for skb overrun in IPV4/IPV6 IGMP handling (Dave Miller)
- fix possible hang in rebalance_laundry_zone() (Larry Woodman)
- correct zone_wired[] initialization for NUMA (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-13.EL" date="1081332000">- fix several critical libata bugs (Jeff Garzik)
- correct IPSEC XFRM policy ref counting (Dave Miller)
- add amd64/ia32e parsing for "acpi=off" arg (Jim Paradis)
- update tg3 driver to v3.1 for several fixes (Dave Miller)
- fix SCSI whitelist for Hitachi/HP DFx00, Apple Xserve (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-12.EL" date="1080295200">- add USB support for Handspring Treo 600 PDA syncing (Matthew Galgoci)
- clear state for CPEs during ia64 MCA SAL error logging (Ben Woodard)
- prevent DMA resource leak in QLogic driver error path (Tom Coughlan)
- change default QLogic driver device queue depth to 64 (Tom Coughlan)
- replace fabricated cciss drive geometry w/ENXIO error (Tom Coughlan)
- update SCSI whitelist for HP SureStore/StorageWorks (Tom Coughlan)
- disable CONFIG_ACPI_DEBUG in amd64/ia32e configs (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-11.EL" date="1078740000">- add yet another Intel ICH6 SATA PCI id (Jeff Garzik)
- fix ref counting in copy_process() error path (Larry Woodman)
- remove ia64 support for /proc/bus/mckinley/bitmap (Jason Baron)
- correct depmod versioning for unsupported modules (Ernie Petrides)
- prevent data corruption in ia32e phys_proc_id[] info (Larry Woodman)
- change default value for inactive_clean_percent to 30 (Larry Woodman)
- enable improved version of s390 on-demand timer patch (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-10.EL" date="1078221600">- incorporate late-breaking libata fixes (Jeff Garzik)
- enable amd64 syscall for tux support (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.17.EL" date="1078135200">- reduce s390 idle overhead with on-demand timer patch (Pete Zaitcev)
- complete ia64 NPTL support for 32-bit-EL executables (Jason Baron)
- add several ia64 syscall table entries for 32-bit-EL (Jason Baron)
- upgrade libata/SATA support, delete ich5-sata.patch (Jeff Garzik)
- check for mremap/vmtruncate race in move_one_page() (Jason Baron)
- prevent ia64 NaT-bit corruption during sig catching (Jason Baron)
- fix amd64 get_mtrr() parsing error with &gt;4GB memory (Jim Paradis)
- change amd64 default behavior to avoid TSC timer use (Jim Paradis)
- force s390utils upgrade to prevent zipl seg fault (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.16.EL" date="1078048800">- restore varyio capability in mptfusion driver update (Adam Manthei)
- enhance SCSI mid-layer queuing for indefinite retries (Doug Ledford)
- add ia64 reg reloads for 32-bit-EL strace -f support (Jason Baron)
- fix ia64 core dump support for 32-bit-EL executables (Jason Baron)
- add SCSI whitelist devs with BLIST_RETRY_ABORTED_CMD (Doug Ledford)
- remove stack-in-interpreter check in binfmt_elf.c (Julie DeWandel)
- clear all flags in exec_usermodehelper() for kmod (Alexander Viro)
- fix aacraid command completion (rq corruption) bugs (Tom Coughlan)
- correct cciss_proc_tape_report() type in flags decl (Tom Coughlan)
- enable USB-2.0-hub-based mice/keyboards to function (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.15.EL" date="1077962400">- fix amd64 oprofile linkage problem in ia32e support (Ernie Petrides)
- update ips driver to version 6.11.07 w/6.10.52 backup (Tom Coughlan)
- add size checks to DRM ATI r128 driver ioctl handling (John Dennis)
- avoid megaraid2 irq_disable calls for mem-mapped ctlrs (Tom Coughlan)
- upgrade firmware imbedded in QLogic driver to 3.02.24 (Tom Coughlan)
- correct ia64 memory accounting in overcommit mode 2 (Larry Woodman)
- implement softirq deferral to limit kernel stack depth (Ingo Molnar)
- reduce kernel stack usage in a couple of tux functions (Ingo Molnar)
- fix shared extended attribute ref counting in ext3 (Stephen Tweedie)
- clear SCSI sense data buffer between eh retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.14.EL" date="1077789600">- add .RH1 suffix to cciss driver version v2.4.50 (Tom Coughlan)
- implement initial LAuS syscall auditing support (Mark DeWandel)
- introduce GFS enablers for locking and sendfile ops (Ken Preslan)
- update QLogic driver to 6.07.01 w/6.06.00b11 backup (Tom Coughlan)
- improve netdump reliability w/asynchronous IPI param (Jeff Moyer)
- add ICH6 DSP audio support to i810_audio driver (Jeff Garzik)
- apply SCSI whitelist updates for several devices (Tom Coughlan)
- fix odd byte tape i/o handling in sym53c8xx driver (Tom Coughlan)
- correct minimum nfsd version that supports acls (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.13.EL" date="1077703200">- allow concurrent NFS direct i/o to same file if !append (Steve Dickson)
- introduce support for new Intel 64-bit ia32e processor (Larry Woodman)
- update mptfusion driver to 2.05.11.03 w/2.05.05 backup (Adam Manthei)
- remove fs/binfmt_misc.o from linux-modules-unsupported (Jason Baron)
- fix ia64 predicate register use in sig trampoline code (Jason Baron)
- add oprofile cpu type recognition for ia32e processor (Will Cohen)
- update e1000 network driver to version 5.2.30.1-k1 (Jeff Garzik)
- add more Intel PCI ids to match upstream 2.4 (Jeff Garzik)
- add ICH6 PATA support, PCI ids, irq routing (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.12.EL" date="1077530400">- add deferred page freeing for intr-context unmap_kvec() (Jeff Moyer)
- update megaraid2 driver to v2.10.1.1 w/v2.00.9 backup (Tom Coughlan)
- fix ppc64 pte hash table locking to avoid deadlocks (Julie DeWandel)
- fix ia64 data TLB init to prevent random boot-up hangs (Jason Baron)
- fix ia64 RNat register corruption with alt sig stacks (Jason Baron)
- allow smaller ia64 sig stacks in ia32 emulation layer (Jason Baron)
- backport ncpfs fixes to eliminate var-length arrays (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.11.EL" date="1077271200">- backport cisco aironet driver from 2.6.3-rc4 (Matthew Galgoci)
- update tg3 driver to v2.7 to fix status reg handling (Dave Miller)
- correct lost jiffies logic for x440/5 cyclone timer (Bernd Schmidt)
- fix open() error clean-up for unsupported O_DIRECT (Stephen Tweedie)
- prevent ia64 crashes when unmapping hugetlb pages (Jason Baron)
- add ppc64 processor support for future PPC970+ (Julie DeWandel)
- rework ppc64 32-bit-compat iptables support (Julie DeWandel)
- fix func ptr test in ethtool_set_ringparam() (Jeff Garzik)
- disable linux-2.4.21-scsi-affine-queue.patch (Doug Ledford)
- improve scsi_allow_ghost_devices description (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.10.EL" date="1077098400">- fix amd64 iommu bug causing data corruption on &gt;4GB systems (Jim Paradis)
- return EINVAL for unsupported ioctl32 syscalls on ppc64 (Julie DeWandel)
- remove incorrect BUG() call in __remove_inode_page() (Stephen Tweedie)
- fix s390 ctc driver problem causing build system hangs (Pete Zaitcev)
- fix s390 qeth driver error path to reset write_busy (Pete Zaitcev)
- update s390 zfcp driver to fix miscellaneous bugs (Pete Zaitcev)
- apply upstream nfs fixes for acl error handling (Steve Dickson)
- prevent kernel stack data leak via /dev/rtc (Ernie Petrides)
- allow AIO operations on sockets for non-inet (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.9.EL" date="1076925600">- restore genksyms_smp_prefix setting for non-x86 builds (Ernie Petrides)
- display/log memory stats whenever there's an OOM kill (Larry Woodman)
- update tg3 driver to v2.6, the latest upstream version (Jeff Garzik)
- update net bonding driver to v2.4.1, latest upstream (Jeff Garzik)
- fix irq, mem, printk, strtol bugs in cciss driver (Tom Coughlan)
- wait for board ready after hot add, cciss driver (Tom Coughlan)
- enable cciss adapter prefetch for x86 platforms (Tom Coughlan)
- add preserve_arg0 handling for ia32 emulation (Larry Woodman)
- fix ppc64 compat support for quota syscall (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.8.EL" date="1076580000">- remove Power-Blade-specific def for USB TEAC floppy (Julie DeWandel)
- fix s390 crash in iucv driver on connection shutdown (Pete Zaitcev)
- fix ia64 ACPI parsing for multinode IDE devs on x455 (Jim Paradis)
- fix amd64 core dumping of multithreaded 32-bit apps (Jim Paradis)
- fix s390 oprofile conditional and zero top addr bits (Will Cohen)
- add ipr driver v1.0.3 for IBM's PPC RAID adapters (Tom Coughlan)
- add {alloc,free}_netdev(), list macro, tg3 PCI ids (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.7.EL" date="1076407200">- restrict /proc/tty/driver directory access to root (Jeff Moyer)
- allow non-standard usr/sys VM splits at 2G/2G, 1G/3G (Ingo Molnar)
- extend existing ppc64 RTAS firmware flash interface (Mark DeWandel)
- fix ppc64 version of strncpy() to zero-pad buffers (Julie DeWandel)
- fix s390/x version of strncpy() to zero-pad buffers (Pete Zaitcev)
- fix generic version of strncpy() to zero-pad buffers (Jim Paradis)
- improve ppc64 segment table entry replacement logic (Julie DeWandel)
- correct type/cast of "len" in ppc64/kernel/nvram.c (Julie DeWandel)
- implement new ppc64 RTAS system call interface (Julie DeWandel)
- increase x86 RSDT table limit in ACPI parsing (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.6.EL" date="1076320800">- fix more usb-storage bugs for Power Blade support (Julie DeWandel)
- remove extra inactive_clean_pages-- in reclaim_page() (Larry Woodman)
- return proper error codes for do_munmap() failure in mremap (Dave Jones)
- fix binfmt_elf.c problems for apps with huge bss regions (Julie DeWandel)
- update cciss driver to v2.4.50 for Smart Array 6i support (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.5.EL" date="1075975200">- prevent netdump progress output from filling up log_buf (Jeff Moyer)
- add ppc64 RAS hook at end of panic() processing (Julie DeWandel)
- correct source IP address in ICMP error message (Dave Miller)
- fix smp deadlock with pdeath_signal posting (Roland McGrath)
- add ppc64 support for /proc/ppc64/lparcfg (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.4.EL" date="1075888800">- update nfsd mode-with-acls fix for upstream conformance (Steve Dickson)
- rework usb-storage locking to avoid hangs on disconnect (Pete Zaitcev)
- fix mmio alignment error in olympic token ring driver (Julie DeWandel)
- prevent tux logger-thread shutdown problems on ppc64 (Ingo Molnar)
- add ppc64 AltiVec chip support for Power Blades (Julie DeWandel)
- eliminate multi-threaded coredump hang potential (Ingo Molnar)
- fix ppc64 segfaults with tasks &gt; 2GB in size (Julie DeWandel)
- fix usb-storage memory-allocation/iowait deadlock (Alan Cox)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.3.EL" date="1075716000">- add amd64 support for PT_GNU_STACK with exec shield (Jim Paradis)
- fix s390 raid1 sync problem w/writes at end of dev (Pete Zaitcev)
- update s390 zcrypt driver to version 1.1.4 (Pete Zaitcev)
- fix output of large /proc/pid/statm values (Mark DeWandel)
- fix output of large /proc/partitions values (Mark DeWandel)
- enable ppc64 support for JS20 Power Blades (Julie DeWandel)
- fix kernel stack memory leak on fork failures (Dave Anderson)
- fix ipv6 packet quoting problem in icmpv6_send() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.2.EL" date="1075370400">- apply Intel's x86 microcode loader update (Jim Paradis)
- enhance PCI multifunction support for ppc64 (Julie DeWandel)
- fix nfsd returning bad mode bits when acls set (Steve Dickson)
- prevent unkillable zombies from detached NPTL threads (Ingo Molnar)
- avoid missing scsi disks in /proc/partitions on detach (Jason Baron)
- correct pte calculation inside zeromap_pte_range() loop (Ben Woodard)
- add inline function PDE() to help driver backporting (Matthew Galgoci)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.1.EL" date="1074679200">- (this is the first build for RHEL 3 Update 2)
- relocate various pieces of the "undo" patch (Patch Review Committee)
- rename s390 zcrypt and zfcp driver patches (Pete Zaitcev)
- add LKML discussion to COPYING.modules (Arjan van de Ven)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.EL" date="1073556000">- fix race condition between thread creation and signals (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-8.EL" date="1073469600">- fix amd64 eflags masking in 32-bit emulation of ptrace (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-7.EL" date="1073383200">- fix numerous ppc64 problems with /proc access (Julie DeWandel)
- allow user core files larger than 2GB in size (Dave Anderson)
- add ia64 support for Crestone Peak AGP bridges (John Dennis)
- fix unaligned kernel accesses in nfs_readdir() (Steve Dickson)
- add new_len/new_addr checks in do_mremap() (Ernie Petrides)
- fix nfs O_DIRECT corruption with &gt;4GB files (Steve Dickson)
- enable bus scan for AGP ctlrs on amd64 systems (John Dennis)
- limit PCI-alloc'ed physaddrs to 4GB on HP ia64 (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-6.EL" date="1070877600">- fix ppc64 firmware updates (Julie DeWandel)
- fix sync wakeup problem (Ingo Molnar)
- add ia64 cyclone support (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-5.EL" date="1070272800">- undo rejected patches (Stephen Tweedie, Arjan van de Ven, Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.20.EL" date="1069840800">- enable NUMA support in amd64 smp configs (Jim Paradis)
- prevent oopses with tux in OOM scenarios (Ingo Molnar)
- apply several ipv6 multicast bug fixes (Dave Miller)
- assign retval in copy_process() error path (Ingo Molnar)
- add lseek-in-/proc support for s390x "ps" (Pete Zaitcev)
- redefine zone_is_highmem() for Celestica (Dave Anderson)
- fix unresolved symbols in amd64 modules (Bill Nottingham)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.19.EL" date="1069754400">- fix tg3 rx_pending limit for BCM5705/BCM5782 chips (Jeff Garzik)
- reset page error flag prior to read of new contents (Jeff Moyer)
- enable CONFIG_HOTPLUG_PCI option for ia64 configs (Doug Ledford)
- fix inactive laundry list race in ramfs_writepage() (Dave Anderson)
- avoid out_of_memory() for wired pages when there's lomem (Dave Anderson)
- conditionalize ppc64 machdep_calls change for KMI compat (Ernie Petrides)
- limit anon/cache pages scanned in refill_inactive_zone() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.18.EL" date="1069668000">- create old version (rev. 5.64) of cmpci sound driver (Tom Coughlan)
- remove ac97.o, ad1848.o, cs4232.o from unsupported (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.17.EL" date="1069063200">- fix missing use of __GFP_HIGHMEM flag in pte_alloc_one() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.16.EL" date="1068890400">- rework scsi mid-layer queuing logic to fix error handling (Doug Ledford)
- fix pci_dma_sync_sg() scatterlist arg in megaraid2 driver (Tom Coughlan)
- move more-ptes-in-rmap-pte-chain logic to its own patch (Ernie Petrides)
- tag uses of __GENKSYMS__ with KMI/ABI compat comment (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.15.EL" date="1068804000">- fix MD multipath bugs causing crashes during fail-overs (Doug Ledford)
- add chain_ptep_t and revert pte_addr_t for KMI compat (Ernie Petrides)
- restore sub-timer-tick time-of-day granularity for ia64 (Jason Baron)
- modify agpgart and drm drivers for ia64 HP ZX1 support (John Dennis)
- fix ia64 32-bit emulation for several stat-related calls (Jason Baron)
- enable amd64 use of new ips driver w/config separation (Tom Coughlan)
- update e100 network driver to version 2.3.30-k1 (Jeff Garzik)
- update e1000 network driver to version 5.2.20-k1 (Jeff Garzik)
- apply scsi whitelist updates for IBM/CNSi/NEC devices (Tom Coughlan)
- reenable varyio for aic7xxx driver (hangs were unrelated) (Jeff Moyer)
- conditionalize NVIDIA_NFORCE3 to restore KMI compat (Ernie Petrides)
- prevent two ext3 panics on corrupted filesystems (Stephen Tweedie)
- apply two minor fixes to ppc64 RAS nvram reading (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.14.EL" date="1068717600">- update ServeRAID (ips) driver to version 6.10.52 (Tom Coughlan)
- configure xmon on by default in ppc64 configs (Julie DeWandel)
- create initial s390 zcrypt driver, version 1.1.2 (Pete Zaitcev)
- remove zfcp driver from linux-modules-unsupported (Pete Zaitcev)
- revise ppc64 reliability/serviceability support (Julie DeWandel)
- reduce kernel stack usage inside nfs_readdir() (Steve Dickson)
- add gameport dependency to cmpci driver config (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.13.EL" date="1068631200">- reduce UDP retransmissions and fix slow reads for NFS (Steve Dickson)
- implement wired page lists for better ramfs handling (Larry Woodman)
- fix vfork deadlock when child process causes core dump (Ingo Molnar)
- enhance AltSysRq-M output and fix deadlock potential (Larry Woodman)
- update cmpci sound driver for some HP IPF workstations (Tom Coughlan)
- correct tq_struct struct initialization in tg3 driver (Jeff Garzik)
- fix NFS file attribute inconsistency after rename (Steve Dickson)
- prevent ia64 machine checks w/sysreport on Olympia (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.12.EL" date="1068544800">- redesign refill_inactive_zone() for smarter deactivation (Larry Woodman)
- improve page deactivation scalability w/delayed laundering (Larry Woodman)
- rework locking and timer usage in s390 ctc network driver (Pete Zaitcev)
- allow xmon to be enabled at boot-time for ppc64 debugging (Julie DeWandel)
- reverse kscand's order of anon/cache active list traversal (Larry Woodman)
- force in-lining of br_read/write_lock/unlock routines (Julie DeWandel)
- fix mistaken fall-through cases in s390 chandev driver (Pete Zaitcev)
- make a few exported symbols available to OpenGFS (Stephen Tweedie)
- fix ld/st ordering bug causing lost signal wakeups (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.11.EL" date="1068112800">- make profile=X imply nmi_watchdog=1 and fix NMI w/d bugs (Ernie Petrides)
- add lock init in scsi_get_host_dev() to fix shutdown hang (Doug Ledford)
- enable distributed interrupts by default on ppc64 iSeries (Julie DeWandel)
- improve amd64 reporting of machine check errors (Jim Paradis)
- fix disabling of autonegotiation in tg3 driver (Dave Miller)
- add image name to s390 ioctl32 debug message (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.10.EL" date="1068026400">- fix file lock ownership by NPTL threads to be process-wide (Ernie Petrides)
- upgrade megaraid driver to version 1.18k and fix isr/fw sync (Tom Coughlan)
- upgrade megaraid2 driver to version 2.00.9 and enable varyio (Tom Coughlan)
- improve scsi mlqueue handling to enable BUSY/QUEUE_FULL fix (Doug Ledford)
- correct reporting of i/o errors in ppc64 viodasd driver (Julie DeWandel)
- update acenic driver to handle enabling of jumbo frame mode (Jeff Moyer)
- fix i386 PAGE_NONE bits to prevent get_user_page() hang (Roland McGrath)
- fix ia64 show_mem() handler to use efi_memmap_walk() call (Dave Anderson)
- replace spaces in slabinfo entry name for async poll table (Matt Wilson)
- fix race condition in buffer-head memory footprint patch (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.9.EL" date="1067940000">- improve spec file robustness in %post/%preun stanzas (Florian La Roche)
- add s390x iovec length checking for 32-bit reads/writes (Matt Wilson)
- use highmem for pte/ramfs page allocation w/__GFP_WIRED (Larry Woodman)
- upgrade oprofile support with bug fixes and enhancements (Will Cohen)
- fix infinite recursion in SCSI mid-layer post-processing (Jeff Moyer)
- introduce no-auto-start-on-add handling for SCSI blacklist (Jeff Moyer)
- enable s390 support for blk stats handling for iostat -x (Pete Zaitcev)
- fix LVS timer-related hang from ip_vs_conn_expire() bug (Ernie Petrides)
- correct module init in cpqarray driver to fix insmod crash (Tom Coughlan)
- incorporate ESB PATA support and fix a pirq_routers PCI id (Jeff Garzik)
- fix nfs async write deadlock potential w/nfs_writepage() (Steve Dickson)
- fix SCSI error handling for BUSY queue status messages (Doug Ledford)
- improve ppc64 32-bit ioctl support for use by ethtool (Julie DeWandel)
- add missing unlock in ip_mc_del_src() to fix IGMP deadlock (Dave Miller)
- change ppc64 reporting of floppy capacity to be 1.44 MB (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.8.EL" date="1067421600">- fix up various problems on Nforce3-based amd64 systems (Jim Paradis)
- double number of pte addrs in rmap pte_chain structs (Larry Woodman)
- restrict slab size for kernel data structs to 2 pages (Larry Woodman)
- clean up obsolete quicklist usage for ppc64 pte pages [rejected]
- prevent readdirplus from returning hidden mount points (Steve Dickson)
- prevent lockd deadlocks caused by export table locking (Steve Dickson)
- eliminate use of parallel task_struct init macro on ia64 [rejected]
- fix broken s390x overflow checks with 32-bit F_GETLK use (Matt Wilson)
- fix SCSI errors with "mt stoptions" and IDE tape drives (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.7.EL" date="1067162400">- fix bad checksumming interaction between e100 and bridge (Jeff Garzik)
- prevent system hang by OOM killing when overcommitted (Larry Woodman)
- un-inline ext3 error function to reduce stack usage (Stephen Tweedie)
- fix several ppc64 problems with interrupt handling (Julie DeWandel)
- correct amd64 identification in /dev/oprofile/cpu_type (Jim Paradis)
- move fput() call in do_tty_hangup() to avoid oops w/kon (Alexander Viro)
- eliminate creation of never-used task_struct slab cache (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.6.EL" date="1066903200">- reduce buffer-head memory footprint from read-only files (Ingo Molnar)
- update qeth driver for reduced stack usage and bug fixes (Pete Zaitcev)
- fix s390 qeth driver again to allow tcpdump to function (Pete Zaitcev)
- add exec_mmap() locking to prevent vma lookup races (Ernie Petrides)
- rework RPC slot allocation for further NFS improvements (Steve Dickson)
- reduce frequency of RPC retransmits during NFS writes (Steve Dickson)
- make generic/ext3 file system write handling 64-bit clean (Jeff Moyer)
- allow SMP scheduling rebalancing to occur every 200 msecs (Ingo Molnar)
- prevent races during IPC semaphore set and msg queue removal (Ingo Molnar)
- fix ACPI handling to identify trigger/polarity of PCI IRQs (Jim Paradis)
- correct amd64/ia64 acpi_disabled decls for post-boot access (Jeff Moyer)
- update ppc64 viocons driver with several bug fixes (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.5.EL" date="1066298400">- move fix for PPR use in sym53c8xx driver to its own patch (Ernie Petrides)
- correct pids exported by msgctl/semctl/shmctl/fcntl calls (Ulrich Drepper)
- apply s390 lcs driver wait queue init and locking updates (Pete Zaitcev)
- enable dummy network driver use in generic s390 config file (Pete Zaitcev)
- add missing ptrace hooks for exec and vfork-done events (Bill Nottingham)
- fix SMP timer race that triggered BUG_ON() in add_timer() (Ingo Molnar)
- fix several bogus ipvs boundary checks in ftp module [rejected]
- fix vfsmount queuing in attach_mnt() for CLONE_NEWNS [rejected]
- add net_device check to prevent oops in pppoe driver [rejected]
- fix memory leak in symlink error path of /proc driver [rejected]
- fix overflow in v1_disk2mem_dqblk() quota calculation [rejected]
- increase ppc64 ramdisk size to 8192k in p/iSeries configs (Jeremy Katz)
- lower amd64 TASK_UNMAPPED_32 to increase avail address space (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.4.EL" date="1066039200">- fix ppc64 stack pointer alignment in user signal handlers (Jakub Jelinek)
- increase amd64 exception stack size to 4k to avoid overflow (Jim Paradis)
- fix ppc64 interrupt rate accounting for vmstat and /proc (Julie DeWandel)
- extend amd64 NMI watchdog timeouts to tolerate bad 2nd cpu (Jim Paradis)
- allow s390 dasd driver to use noop elevator module (Pete Zaitcev)
- add free_irq() in error path of olympic token ring driver (Matt Wilson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.3.EL" date="1065866400">- make pid fields in ucred structures hold tgid values (Ulrich Drepper)
- prevent ppc64 iSeries virtual console writes &gt; 4k (Julie DeWandel)
- control ia64 unaligned access messages with new sysctl (Jeff Moyer)
- correct SCSI data direction on cmd to spin up disks (Pete Zaitcev)
- add do_brk() TASK_SIZE and address space wrap checks (Arjan van de Ven)
- limit PPR use in sym53c8xx driver for ppc64 Zapata drives (Doug Ledford)
- list ac97.o, ad1848.o, and cs4232.o modules as unsupported (Jeff Moyer)
- clean up conditional compilation in s390 zfcp driver (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.2.EL" date="1065693600">- identify whether i686 or athlon config in oops output (Arjan van de Ven)
- remove warning in reclaim_page() unmapped page path (Ernie Petrides)
- fix several lvm error handling paths causing memory leaks [rejected]
- correct i386 smp shutdown logic when netdump is enabled (Jeff Moyer)
- fix amd64 potential data leaks on FPU save/restore errors (Jim Paradis)
- prevent aic7xxx chip resets leading to PCI parity errors (Tom Coughlan)
- remove ia64 user tty warning on unaligned accesses (Arjan van de Ven)
- fix ppc64 /proc file buf overruns in viodasd driver (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.1.EL" date="1065607200">- (this is the first build for RHEL 3 Update 1)
- avoid m/ctime update for pipe writes on r/o file systems (Stephen Tweedie)
- prevent theoretical ext3 fs corruption in ext3_read_inode (Stephen Tweedie)
- enable AGRESSIVE_IDLE_STEAL to improve scheduler balancing (Ingo Molnar)
- fix potential ppc64 lock-up on ioctl32 un/reregistering (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.EL" date="1065175200">- extend ppc64 scsi timeout values for Zapata DVD-ROM drives (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-3.EL" date="1063965600">- make sure to release viotape op structure after use (Julie DeWandel)
- disable pgd/pmd quicklists on ppc64 (Mark DeWandel)
- temporarily disable aio on sockets (Jeff Moyer)
- correctly refile inodes to make them reclaimable (Harald Hoyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-2.EL" date="1063792800">- S390: update zfcp and cio drivers (Pete Zaitcev)
- IA64: add extra check to virtual mem_map (Larry Woodman, Dave Anderson)
- initialise local variables in ide-tape &amp; ide-scsi
- cap qla2200 tcq depth to 255
- switch version number scheme to kernel-2.4.21-N.EL</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063706400">- PPC64: invalidate evicted sbl entries in the erat (Julie DeWandel)
- increase ethernet tx_queue_len to 1000 (David Miller)
- in udp_{v6_}flush_pending_frames, reset up-&gt;len too (David Miller)
- S390: CMS reserved minidisk detection (Pete Zaitcev)
- call recount_segments() on a different occasion (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063620000">- really disable exec-shield (Roland McGrath)
- reduce stack randomisation, disable brk randomisation (Ingo Molnar)
- make e1000 driver 64 bit clean (Julie DeWandel)
- minor aio corner case error condition fix (Jeff Moyer)
- AMD64: more lenient check for call workaround (Ernie Petrides)
- PPC64: disable CONFIG_XMON (Mark DeWandel)
- S390: fix CCW slab selection (Pete Zaitcev)
- fix two-disk combined mode sata (Jeff Garzik)
- move buslogic scsi driver to supported, for vmware only (Tom Coughlan)
- change viocons message from KERN_WARNING to KERN_INFO (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063360800">- VM: handle race condition in reclaim_page (Stephen Tweedie, Larry Woodman)
- PPC64: fix "log_buffer broken" xmon issue (Julie DeWandel)
- fix compiler warnings in netdump (Jeff Moyer)
- AMD64: workaround for 32 bit compat mode page fault problem (Ernie Petrides)
- IA64: make perfmon root-only (Jason Baron)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063274400">- fix smp race in rebalance_laundry_zone()</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063188000">- fix compiler warnings when hugetlbfs is disabled (Pete Zaitcev)
- fix tux performance bug (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063101600">- don't evict kernel stack seg translation on ppc64 (Julie DeWandel)
- fix callers of do_page_fault on ppc64 (Mark DeWandel)
- AMD64 munmap return value, fix lsb failure (Jeff Moyer)
- fix for PPC64 32-bit ioctl (Jim Paradis)
- bring IA64 value of MINSIGSTKSZ in line with upstream (Jakub Jelinek)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063015200">- fix potential datacorruptor in viodasd driver (Julie DeWandel)
- fix race condition in s390 dirty bit handling (Pete Zaitcev)
- limit per-cpu slab cache size
- correct 32-bit readv/writev border cases on ppc64 (Matt Wilson)
- AMD Golem IO-APIC fixup for i686 kernel on AMD64 (Jeremy Katz)
- NFS Solaris 8 acl fix (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062756000">- minor nfs permissions bugfix (Steve Dickson)
- change mprotect return value to SuS mandated value (Arjan van de Ven)
- kernel-unsupported now provides kernel-modules (Jeremy Katz)
- correct __hugemem__modules typos in rhkernel.h
- fix subtle pmd corruption error (Larry Woodman, Dave Anderson)
- fix cut'n'paste error in SATA io port reservation
- restore NFSEXP_CROSSMNT ABI compatibility (Steve Dickson)
- round up executable name field length in core file (Jakub Jelinek)
- switch off exception_trace on amd64 (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062496800">- patch to access odd last sector on ia64 (Jason Baron)
- misc fixes from upstream (Arjan van de Ven)
- fix audigy driver (Jeff Garzik)
- tunable dcache reclaim priority for tux (Ingo Molnar)
- tg3 driver update (Jeff Garzik)
- ipv6 and icmp network bugfixes (David Miller)
- fix ppc64 memory access security bug (Julie DeWandel)
- reduce memory allocated for skb (Ingo Molnar)
- small smp fix for scalable timers (Ingo Molnar)
- make s390 recognise MSDOS partitions (Pete Zaitcev)
- small smp fixes in tux (Ingo Molnar)
- make mptfusion drivers supported on 4/4 split kernel (Tom Coughlan)
- add entries to scsi whitelist (Tom Coughlan)
- minor sata/ata driver updates (Jeff Garzik)
- small fixes to viodasd driver (Julie DeWandel)
- nfs_get_root and nfs access bit patches (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062064800">- don't show interrupts in /proc/stat for ppc64 (Matt Wilson)
- make sure sync returns in a reasonable time
- PPC64: fix for boot cpu not being cpu 0 (Julie DeWandel)
- zero sized write no longer updates mtime (Matt Wilson)
- fix video bios read corruption on ia64 (Larry Woodman)
- network fixes to tg3, bonding (Jeff Garzik)
- properly reserve legacy IDE regions in sata driver (Jeff Garzik)
- fix ppc64 signal handling bugs (Mark DeWandel)
- tux fixes (Ingo Molnar)
- tgkill syscall for s390(x) (Pete Zaitcev)
- amd64 32 bit compatibility fixes (Jim Paradis)
- ppc64 32 bit compatibility fixes (Julie DeWandel)
- fix 4G/4G follow_page problem (Ingo Molnar)
- reduce memory used by VMAs and dentries (Arjan van de Ven)
- make LVM snapshotting of ext3 work reliably (Stephen Tweedie)
- make netdump play better with the nmi watchdog (Jeff Moyer)
- QLA2200: disable irq mitigation, fix off-by-one (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061805600">- seq_file /proc/interrupts for x86 too (Ingo Molnar)
- fix memory leak in ia64 exec of ia32 binaries
- check tgid not pid in scm_check_creds()  (David Miller)
- VM fixes: shm swap priority, zeromap_page_range
- workaround VFS limitations for VXFS NFS export</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061546400">- use personality for 3GB userspace on x86 -hugemem (Ingo Molnar)
- add sysctl interface for lockd (Steve Dickson)
- don't prod VGA space on HP Pinnacle systems (Larry Woodman)
- fix for 32 bit binaries on amd64 (Jim Paradis)
- add preemption point to write_some_buffers (Julie DeWandel)
- sort ACPI table to get correct device ordering on HP (Larry Woodman)
- fix refcounting bug with ipv6 addresses on netdevs (David Miller)
- add s390 syscalls for tux (Pete Zaitcev)
- md multipath enablers (Doug Ledford)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061460000">- fix process and nice time accounting (Doug Ledford)
- amd64: syscall table updates, timer robustness (Jim Paradis)
- amd64 3GB personality for 32-bit processes (Jim Paradis)
- use 256MB pagesize for hugetlbfs on ia64 (Larry Woodman)
- make sure e100 only claims ipv4 checksumming
- igmpv3/mldv2 OOPS'er fix (David Miller)
- hugetlbfs: make chown work and allow uid=X,gid=Y mount options
- make larger mmap windows work (Ernie Petrides, Ingo Molnar)
- ia64: improve ia32 compatibility (Larry Woodman)
- fix bug in rpc retry code (Steve Dickson)
- make acpi pci hotplug modulable (Jeff Moyer)
- update (trivial) to megaraid 1.18j (Tom Coughlan) 
- enable varyio on mptfusion (Tom Coughlan)
- panic on oops to prevent data corruption opportunities (Ernie Petrides)
- small iorl locking fix (Doug Ledford)
- fix ppc64 get_wchan() bad deref (Mark DeWandel)
- fix aio read into mmap()d PROT_WRITE (Jeff Moyer, Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061373600">- libata update (Jeff Garzik)
- amd64 syscalls for xattrs &amp; ACLs (Jim Paradis)
- tux fixes (Julie DeWandel, Ingo Molnar)
- via &amp; i810 audio fixes (Jeff Garzik)
- small 4G/4G split bugfixes (Ingo Molnar)
- fix sigsuspend race on x86, amd64, ia64 (Mark DeWandel)
- ia32 behavior for FP denormal exceptions on ia64 (Jason Baron)
- get the set/get of NAT bits for ia64 correct (Jason Baron)
- ipsec update, adds cast6 encryption (David Miller)
- VM update: OOM bugfix &amp; page-&gt;flags atomic updates (Rik van Riel)
- reenable serpent encryption on ppc64
- bladecenter usb-ohci support (Pete Zaitcev)
- iorl fixes (Doug Ledford)
- network bonding driver oops fix (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060768800">- DAC960 back to bigmem supported, ne2k-pci &amp; usb audio to bigmem unsupported
- netdump updates for tg3 and e1000 (Jeff Moyer)
- put a hole between stack and mmap area (Ernie Petrides)
- process time accounting updates (Doug Ledford)
- fix null characters in TUX header (Julie DeWandel, Ingo Molnar)
- display correct executable when running interpreted script
- zfcp zSeries fibrechannel driver (Pete Zaitcev)
- ipsec updates (David Miller)
- fix 4G/4G race conditions (Ingo Molnar)
- rename -bigmem kernel to -hugemem to reflect changed tradeoffs
- optionally show task states from hangcheck timer (Jason Baron)
- various small bugfixes from upstream</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060423200">- fix scalable timer race condition  (Julie DeWandel, Ingo Molnar)
- print warning on boot with &gt;16GB RAM on -smp kernel (Arjan van de Ven)
- fix for xapic issue with ServerWorks chipsets (Ernie Petrides)
- remove spurious ioctl printk on ppc64 (Mark DeWandel)
- ppc64 wchan improvement (Mark DeWandel)
- hint @pause changes for ia64
- longer scsi scan timeout on ppc64 (Julie DeWandel)
- readv/writev for raw IO (Stephen Tweedie)
- fix for easy stack/mmap collisions (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060164000">- various XAPIC related fixes (Ingo Molnar)
- correct context switch and iowait stats with HT shared runqueues
- ext3 obscure deadlock fixes (Stephen Tweedie)
- knfsd fixes: blocked lock, symlink error &amp; missing bkl  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060077600">- de_thread bugfix from 2.6 upstream  (Matt Wilson)
- viocons driver update (Julie DeWandel)
- fix VM non-overcommit mode (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059991200">- plug data leak in aio code (Jeff Moyer)
- initial list of 4G/4G unsupported modules (Tom Coughlan)
- nfs softirq race fix (Steve Dickson)
- updated IPSEC patch (David Miller)
- networking updates/fixes from 2.4.22-preX (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059904800">- drop orlov allocator for now (Arjan van de Ven)
- correct HT cpu pair detection (Arjan van de Ven)
- build zImage.partial for netbooting on pSeries (Matt Wilson)
- fix missing symbols</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059818400">- export two AIO symbols for OCFS
- disable CONFIG_DEBUG_SLAB so performance testing can start
- crosshost mmap hooks for distributed filesystems (Stephen Tweedie)
- include partially linked zImage for pSeries netboot (Matt Wilson)
- nfs highmem fix, unmap when xdr_kmap() fails (Steve Dickson)
- update megaraid2 locking to work with IORL (Com Coughlan)
- make sure to build the qla2100 driver (Tom Coughlan)
- fix cdrom ioctl 32 bit compatibility for ppc64, amd64 (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059645600">- run depmod on install of unsupported modules (Arjan van de Ven)
- fix register corruption in IA64 lazy fpu handling (Larry Woodman)
- add b44 network driver (Jeff Garzik)
- make ppc64 pci interface routines compatible (Julie DeWandel)
- allow 32 bit userland on AMD64 and PPC64 to use volumes &gt; 2GB (Jeff Moyer)
- nfsd: acl related mount and export flags (Steve Dickson)
- fix nfs exp_fodrop oops (Steve Dickson)
- fix missed signal wakeups on ppc64 (Mark DeWandel)
- smp scalable timer bugfixes (Ingo Molnar)
- workaround for a prefetch bug in some Athlon CPUs (Ernie Petrides)
- code to make more modules unsupported for 4/4 split (Arjan van de Ven)
- various spec file and config cleanups
- viopath driver fix (Julie DeWandel)
- add match for 440gx chipset bioses (Arjan van de Ven)
- move epic100 and ne2k-pci back to supported (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059472800">- updated finegrained process accounting patch (Doug Ledford)
- make iSeries compile without CONFIG_ICOM (Julie DeWandel)
- nfsd: only set -&gt;reuse for tcp sockets, not udp  (Steve Dickson)
- enable the 4G/4G split on the i686-bigmem kernel only
- sysrq support for viocons (Julie DeWandel)
- limit pci_bus size changes to ppc64 (Jeff Garzik)
- fix for signal delivery race (Ernie Petrides, Mark DeWandel)
- add ShdPnd to /proc (Ingo Molnar)
- fix de_thread() hang (Ingo Molnar)
- add kernel support for CLONE_STOPPED (Ernie Petrides)
- make sure to initialise HVC console (Julie DeWandel)
- fix _SEG abort hit in ACPI code (Larry Woodman)
- build addon drivers on amd64 and ppc64 too (Tom Coughlan)
- build IPS driver on all architectures (Tom Coughlan)
- fix a few ia32 emulation bugs for IA64 (Larry Woodman)
- enable correct/new __clear_bit macro for IA64 (Larry Woodman)
- flexible mmap allows mappings of huge executable segments (Larry Woodman)
- sysrq-w for s390 (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058436000">- have s390 cpu_relax() also include barrier  (Pete Zaitcev)
- convert ppc64 xmon traceback code to ksymoops (Matt Wilson)
- rename kstat_sum() variable with aliasing problems  (Ingo Molnar)
- fix AIO-on-hugetlbfs crash (Ingo Molnar)
- update support for IA64 Long's Peak ACPI serial ports  (Larry Woodman)
- turn on xmon for both iSeries and pSeries (Matt Wilson)
- bugfix to make CLI work correctly on iSeries (Julie DeWandel)
- SATA bugfixes (Jeff Garzik)
- enable 4G/4G split in -BOOT kernel, due to syslinux trouble</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058349600">- fix s390 compile (Pete Zaitcev)
- taint the kernel on sii6512 driver link, GPL but no source available
- handle debug registers with 4G/4G split (Ingo Molnar)
- tgkill syscall for ppc64 (Julie DeWandel)
- fix NFSD/ACL/ext3/jbd deadlock (Stephen Tweedie, Steve Dickson)
- fix maxcpus=1 installation panic fix for ppc64 (Julie DeWandel)
- IDE byteswapping io functions for ppc64 (Julie DeWandel)
- update sata driver (Jeff Garzik)
- raise the number of /proc entries (Julie DeWandel)
- sticky sysrq key with timeout (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058263200">- make SysRq-W useable on s390 (Pete Zaitcev)
- updated process accounting patch (Doug Ledford)
- siginfo_t fixes for s390x and amd64 (Jakub Jelinek)
- clustered NFS fail-over support (Steve Dickson)
- autofs4 updates and fixes
- ia64 patches to reduce cpu power/temp in idle loop (Larry Woodman)
- add irqsafe up() for LVM locking (Stephen Tweedie)
- O_DIRECT fallback to synchronous allocation in holes (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058176800">- ia64 HP iommu: add sx1000 detection
- possible bug in s390x 32-bit emulation  (Roland McGrath)
- updated ipsec patch, should fix all current ipv6 bugs  (David Miller)
- finegrained process accounting (Doug Ledford)
- ICH5 pci irq routing, and associated ids (Jeff Garzik)
- fix the machine_real_restart() reboot path on 4G/4G (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057917600">- fix amd64 agp-gart code to work around hugetlbfs debug code (Jim Paradis)
- fix ppc32 pthread_cancel (Jakub Jelinek) 
- Do not sent IGMP leave messages unless IFF_UP  (David Miller)
- software iommu for ia64 systems without hardware iommu (Jason Baron)
- fix ext3 oops fix during dio, LTP failure (Arjan van de Ven, Stephen Tweedie)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057831200">- Remove illegal calls to dst_link_failure</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057831200">- enable HT scheduler for bigmem kernel
- add tgkill syscall for x86 and ia64
- make -BOOT kernel smaller w/ modular md and CONFIG_SMALL
- rmap VM updates
- 4G/4G agpgart potential corruption fix (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057744800">- switch off exec shield everywhere
- eliminate hostfs for amd64 (Jim Paradis)
- megaraid update, mostly vendor ID (Tom Coughlan)
- shrink boot kernel by disabling some config options
- additions for the SCSI whitelist (Tom Coughlan)
- ia64 extable fix (Jason Baron)
- viocons driver upgrade (Julie DeWandel)
- another ia64 mmu context wraparound deadlock fix (Larry Woodman)
- iSeries icom debugger patch (Julie DeWandel)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057658400">- Drop io_request_lock in usb scsiglue.c:device_reset</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057658400">- fix cpu_relax for amd64 and ia64 to include a barrier (Ingo Molnar)
- restore o_direct api compatibility (Stephen Tweedie)
- fix possible ext3 deadlock in o_direct patches (Stephen Tweedie)
- ACLs for JFS (Stephen Tweedie)
- fix /proc/cpuinfo runqueue printing (Ingo Molnar)
- via audio fixes, smaller emu10k1 patch (Alan Cox, Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057572000">- fix process accounting, tux ftp passwords and si_pid (Ingo Molnar)
- 32bit compat statfs fix (Guy Streeter)
- don't serialise exit on BKL when accounting is off (Ingo Molnar)
- truncate timeouts to 32 bits on 64bit systems (Ingo Molnar)
- fix network channel bonding (Jeff Garzik)
- split netdump patch into core and net-drivers (Jeff Garzik)
- delayed tlb flushing for ia64 (Larry Woodman)
- emu10k1 driver fixes
- kksymoops for AMD64 (Jim Paradis)
- select bugfixes from 2.4 upstream (Jeff Garzik)
- OOM tweaks (Rik van Riel)
- use seq_file for /proc/interrupts on ppc64 (Mark DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057140000">- add qdio and qeth drivers for s390(x)  (Phil Knirsch)
- slab cache scale bugfix (Larry Woodman)
- S390: qdio &amp; qeth drivers (Phil Knirsch)
- hangcheck timer for ppc64 (Julie DeWandel)
- fix race conditions in ia64 ia32 compat layer (Larry Woodman)
- update megaraid, aic7xxx, cciss and cpqarray drivers (Tom Coughlan)
- nfs xdr_shift_buf, tcp client corruption and alignment (Steve Dickson)
- rhconfig.h stuff for ppc64, s390 and s390x (Matt Wilson)
- AIO on sockets</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057053600">- kiobuf optimisations (Stephen Tweedie, Larry Woodman)
- ipsec update (David Miller)
- ipvs update to deal with timer changes (David Miller)
- 4G/4G split patch optimisations (Ingo Molnar)
- hangcheck timer (Jason Baron)
- recent (AGP 3.0) agpgart support (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056967200">- semtimedop() support on s390/s390x  (Ernie Petrides)
- fix a 4G bug that triggers on systems with &gt;30 CPUs (Ingo Molnar)
- updated SCSI SMP affine queueing patch  (Arjan van de Ven)
- page hash prefetch in do_generic_file_read bugfix (Julie DeWandel)
- updates the qlogic driver to the latest (Arjan van de Ven)
- slab cache SMP scalability tweaks (Ingo Molnar)
- ACPI 2.0 for IPF and AMD64 (Jim Paradis, Larry Woodman)
- statm fixes for hugetlbfs and remap_file_pages (Jason Baron)
- acpi serial port detection (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056708000">- iseries driver updates (Julie DeWandel)
- aio scalability and 2.5 backports  (Ingo Molnar)
- SMP scalable timers (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056621600">- make qlogic driver use new scsi infrastructure (Arjan van de Ven)
- export aio kvec functions
- fix statm oops
- compile fixes 
- NFS ACL over the wire protocol extensions (Steve Dickson)
- rate limit slab pruning, to limit IPI load on SMP systems (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056448800">- scsi request lock scaling (Ingo Molnar)
- cpu affinity for scsi command processing (Ingo Molnar)
- use softirqs instead of bhs for the scsi layer (Doug Ledford)
- igmpv3 fixes and improvements (David Miller)
- oprofile for ppc64 (Will Cohen)
- Increase MAX_ADDR_LEN from 8 to 32 for Infiniband over IP (Tom Coughlan)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056362400">- per-cpu kstat arrays (Ingo Molnar)
- optimise 4G/4G tlb flushing (Ingo Molnar)
- kiobuf reclaim together with buffer reclaim (Arjan van de Ven)
- more scalable gendisk statistics (Ingo Molnar)
- nfs reconnect fixes (Steve Dickson)
- add 32-bit compatibility for ustat system call on ppc64 (Julie DeWandel)
- scalable gettimeofday (Ingo Molnar)
- hugetlbfs ppc64 &amp; s390 bits (Mark DeWandel, Pete Zaitcev)
- hugetlbfs for ia64 (Jason Baron)
- qlogic scsi driver update (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056189600">- nfs patches (Steve Dickson)
- xapic improvements, summit support (Ingo Molnar)
- fix core dump name for multithreaded programs (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056103200">- merge up to marcelo's latest</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056016800">- oom killer fixes (Larry Woodman, Rik van Riel)
- tunable VM overcommit (Rik van Riel)
- hugetlbfs for amd64 (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055930400">- updated iseries virtual drivers (Julie DeWandel)
- nfs lockd improvements (Steve Dickson)
- remap_file_pages improvements (Ingo Molnar)
- /proc/efi/symtab patch for ia64 (Larry Woodman)
- disable O_PROFILE on UP x86 machines
- allow NMI watchdog profiling frequencies up to 10kHz (Ingo Molnar)
- statm (Jason Baron)
- hugetlbfs (Ingo Molnar)
- have nfsd honour ACLs on a per-export basis (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055844000">- Enable O_PROFILE on non-SMP configs (Stephen Tweedie)
- more conservative AIC config options
- Fix BOOT kernel panic while mounting /dev/cdrom (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055757600">- merge to 2.4.21 + selected ac bits
- ipsec upgrade (David Miller)
- HT scheduler patch fix (correct sibling counting)
- make bdflush writeout smoother
- AMD64 gdb fix (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055412000">- don't include unsupported drivers in -BOOT kernel
- merge up to 2.4.21-rc8 + selected ac bits
- FIXME: sysrq for 3170, dasd, odirect &amp; odirect for nfs</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com" date="1055412000">- oprofile for s390</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055239200">- statm (Jason Baron / Julie DeWandel)
- AIO 32-bit compat for 64-bit machines (Julie DeWandel)
- only do bufferhead reclaim in extreme situations (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055152800">- Serial ATA support (Jeff Garzik)
- mtp fusion 2.05.05+ (Dave Maley)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054893600">- XATTR/ACL patches, except NFS over the wire (Stephen Tweedie)
- ipsec module autoloading (David Miller)
- remap_file_pages (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054807200">- upgrade to latest -rmap with Ernie's fixes
- sysrq+C shows the stack dump of all CPUs
- ext3 truncate fix (Stephen Tweedie)
- NFS fixes for HZ=1000 machines (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054720800">- 4G/4G split fix (Ingo Molnar)
- ppc64 fixes (Guy Streeter, Rik van Riel)
- enable oprofile on amd64
- ipsec updates (David Miller)
- fork returns pid instead of task_struct* (Julie DeWandel)
- ia64 ptrace bugfixes (Dave Anderson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054634400">- HP diva serial driver (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054548000">- NFS over TCP patches (Steve Dickson)
- switch to using ppc64pseries/ppc64iseries arches instead of
  kernel-pseries and kernel-iseries (Jeremy Katz)
- egenera scsi bus rescan patch (Jeff Garzik)
- oprofile (Graydon Hoare)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054288800">- futex requeue (Ingo Molnar)
- enable NAPI for E1000
- signal latency and scheduler improvements (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054202400">- kscand oops fix (Ingo Molnar, Rik van Riel)
- pcnet32 fixes (Julie Dewandel)
- raid autorun (Pete Zaitcev)
- turn off CONFIG_SUNDANCE_MMIO (Jeff Garzik)
- flexible mmap (Larry Woodman)
- ppc64 fixes (Matt Wilson, Guy Streeter)
- loop softirq 10 times before giving up (Ingo Molnar)
- O_DIRECT for NFS (Steve Dickson)
- prevent md from shutting down active arrays (Doug Ledford)
- rmap updates, inode reclaim &amp; higher order allocations (Rik van Riel)
- network channel bonding (Jeff Garzik)</changelog><changelog author="Jim Paradis &lt;jparadis@redhat.com&gt;" date="1054116000">- Re-enable x86_64 in build
- x86_64-specific updates for exec-shield
- Bring in improved "nonx" support for x86_64 from upstream</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1054116000">- Hush s390 printks upon user SIGSEGV by default. It can be enabled back with
  a sysctl kernel.userprocess_debug.
- Enable optional 3270 console mode on s390.</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053684000">- get rid of vsyscall page (Arjan van de Ven)
- fix missing symbol copy_str_fromuser_size</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053424800">- exec-shield updates to fix hang-on-boot on some systems (Ingo Molnar)
- temporarily disabled the architectures, which got broken by exec-shield updates
- fix for LTP sigprocmask02 failure (Matt Wilson)
- ppc64 updates (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053338400">- pagecache scalability patch (Ingo Molnar)
- IPC semaphore scalability patch (Ingo Molnar)
- ppc64 updates (Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052992800">- exec-shield (Ingo Molnar)
- AMD64 ACPI updates (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052906400">- reenable O_DIRECT, O_DIRECT fixes and superbh-aio (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052820000">- vma merging (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052733600">- nmi profiler
- VM updates: rmap, dma zone isolation
- tux (Ingo Molnar)
- ext3 stall fixes (Ingo Molnar)
- e1000 fixes (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052474400">- config files overhaul (Arjan van de Ven)
- fix bug in mlock patch
- IPVS (Dave Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052388000">- import IO elevator changes from gingin
- critical VM fix
- matrox framebuffer patch for pseries (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052301600">- hammer nptl fixes (Ulrich Drepper)
- 4G/4G split (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052215200">- upgrade to 2.4.21-rc1-ac4 (minus -ac acpi and xapic changes)
- drop nfs patches since those seem to be in -ac</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052128800">- larger message buffer size + boot option (Mark DeWandel)
- AMD64: tls handling, coredump fixes (Jim Paradis)
- SMP &amp; highmem VM fixes (Ben LaHaise)
- HT+NUMA scheduler (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051956000">- ext3 orphan cleanup fix (Ernie Petrides)
- s390 affinity fixes (Pete Zaitcev)
- i386 vsyscall DSO changes (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051869600">- bugfixes and config changes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051783200">- enable semtimedop for other architectures (Ernie Petrides)
- large pci bus numbers (Julie DeWandel)
- bugfixes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051610400">- igmpv3 (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051524000">- generic 32bit compat stuff + amd64/ppc64/ipf pieces (Matt Wilson)
- clustered apic (XAPIC) support (Ingo Molnar)
- ppc64 architecture updates (Matt Wilson, Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051264800">- ppc64 fixes</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051178400">- collapse ipsec into one patch (David Miller)
- ppc64 build fix (Matt Wilson)
- improve smp scheduler fairness (Ingo Molnar)
- allow mlock for normal users, up to ulimit (Ingo Molnar)
- AMD64 port (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051092000">- clean up mechanism to pass extra CFLAGS so we don't override what's
  already there
- merge ia64 build stuff (Larry Woodman)
- merge varyio + superbh (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051005600">- merge up to 2.4.21-rc1
- IA64: virtual mem_map, acpi updates, netdump update, pte-highmem &amp; fealnx
- IA64: architecture specific patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050919200">- import davem's ipsec patch pile
- ppc64 kallsyms and dump_fpu patches (Matt Wilson)
- rmap updates (x86_64 &amp; bufferhead reclaim)
- ppc64 ptrace patch (Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050660000">- open up patch namespace 2000-5000 for network protocol changes
- renumber existing patches in that range</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050573600">- make sure to actually apply the rmap-updates patch
- iowait statistics
- ppc64 code merge (Mark &amp; Julie DeWandel)
- ppc64 build scripts (Matt Wilson)
- raise symlink recursion level to 8 (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050487200">- merge up to marcelo's latest
- pte-highmem bits for x86-64 and ppc64</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050400800">- merge up to 2.4.21-pre7-ac1
- drop semtimedop patches (now in -ac)
- drop nfs xprt_fixes, fix_softirq, d_drop and nfs-readeof (merged in -pre7)
- add !CONFIG_QUOTA compile fix for 2.4.21-pre7-ac1</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1050314400">- add LCS driver (endemic to s390)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050314400">- add rmap VM
- add kunmap_atomic debugging patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050141600">- remove dir.c part of NFS kmap_atomic patch for now
- using strlen as local variable name in nfs code kills, literally</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050055200">- merge S390(x) back in  (Pete Zaitcev)
- fix NFS kmap_atomic patch
- sched.c patch to disable interrupts in wake_forked_task  (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049968800">- AIO infrastructure  (Ben LaHaise)
- update NFS kmap_atomic patch  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049882400">- semtimedop patches  (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049796000">- I know understand linux-2.4.20-nfs-readeof.patch, so I merged it
- netdump update (Dave Anderson)
- 64 bit pci &amp; elf loader fix (Mark &amp; Julie)
- nptl whitespace patches, folded into nptl patch (Arjan van de Ven)
- rediff linux-2.4.18-smallpatches.patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049709600">- merge NFS patches by Steve Dickson (blame me for NFS kmap_atomic patch)
- split x86 syscall stuff out into separate patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049536800">- fix nptl patch, now it boots</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049450400">- port linux-2.4.20 o1-nptl.patch from gingin
- rediff a few patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049277600">- update linux-modules-unsupported (with Arjan)
- fix up the list a second time to fix module dependencies</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049191200">- copy -head into new AS3 branch
- remove i586 build
- remove 7.x compatibility (linux-2.4.9-fstat.patch)
- architecture patches get more breathing room (100 - 500)
- reserve patch numbers 1000 - 2000 for VM
- patch numbers 2000 - 5000 for bugfixes, changes and updates to
  existing drivers and filesystems
- remove inode reclaim patch (will be merged later as part of rmap)
- remove io priority scheduler (still experimental)
- remove nfs patches (linux-2.4.20-nfs-cto.patch,
  linux-2.4.20-nfs-access.patch &amp; linux-2.4.20-nfs-rdplus.patch)
- remove linux-2.4.18-gericom.patch
- update netdump from RH9 branch</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1048240800">- Added three NFS performance patches</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048240800">- add a timer for aging requests up</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048154400">- fix the sorting in the io elevator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048068000">- remerge ext3 orlov allocator and enable
- more priority io elevator infrastructure work</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1047117600">- merge ext3 orlov allocator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046772000">- go to 2.4.21-pre5-ac1
- split the rpm into a primary fileset and secondary (rare modules) fileset</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046253600">- go to 2.4.21-pre4-ac6
- drop lots of patches
- trim changelog to not have 2000, 2001 and 2002 anymore</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045476000">- downgrade pwc webcam driver one notch to the last known working version
- work around vm livelock
- make the cciss driver not enable irq's in it's irq handler</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1045130400">- fix for shared statistic &lt; 0</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045130400">- Signal fixes for LSB testsuite
- merge patch to fix init=/bin/sh
- 2.4.21-pre4-ac4 bugfixes (mostly IDE crashes)</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044784800">- merge 2.4.21-pre4-ac3 bugfixes</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1044352800">- Add ext3 fix for truncating negative i_blocks</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1044266400">- add oopsmeharder for debugging hard hangs</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044266400">- merge rmap15d
- set the sbp2 command buffer to 64 elements instead of 8</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1043834400">- merge tcp stall fix from DaveM
- merge bugfixes from 2.4.21-pre4</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1042452000">- Merge in the ACL and XATTR patches from the UL and BestBits trees.</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1042279200">- Merge in the LVM pvmove fix to current tree</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1042020000">- add AMD Golem fixup</changelog></package>
<package pkgid="2341420149abc9d22513c2d1182ded857415f2ef" name="kernel-unsupported" arch="ia32e"><version epoch="0" ver="2.4.21" rel="32.0.1.EL.XFS"/><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1117101600">- added SGI XFS patch set</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.0.1.EL" date="1116237600">- prevent shared memory lock/unlock w/o permissions (Dave Anderson)
- prevent mlock() resource limit bypass w/shm locking (Ernie Petrides)
- fix data corruption from pte_clear() races on &gt;4GB x86's (Larry Woodman)
- fix arg/env access in ELF core dumping and /proc reads (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.EL" date="1113559200">- fix data corruption w/ext3 xattr on 64-bit arches (Jason Baron)
- validate LCP frame lengths in PPP async handling (Dave Miller)
- enable forcedeth net driver builds in x86 configs (Jim Paradis)
- isolate IP fragment queues among various callers (Dave Miller)
- prevent busy inodes for symlinks after unmounts (Don Howard)
- revise PCI device ids extending ICH7 support (John Linville)
- work around broken xw4300 BIOS AHCI BAR setup (John Linville)
- add protocol validation in net bluetooth driver (John Linville)
- enable software watchdog timer in s390,x configs (Jan Glauber)
- fix data corruption w/uselib() on bad ELF libs (Ernie Petrides)
- add USB tablet init delay in wacom_probe() (Kristian Høgsberg)
- prevent core dumps with non-readable ELF interps (Dave Anderson)
- add maxevents validation in epoll_wait() handling (Ernie Petrides)
- add len validation in /dev/random poolsize sysctl (Ernie Petrides)
- correct size of ia64 syscall table initialization (Jason Baron)
- correct x86_64 user-mode i/o port validation (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-31.EL" date="1110448800">- fix missing ppc64 netdump/diskdump symbols (Nobuhiro Tachino)
- prevent ia64 unwind from traversing off stack (Jason Baron)
- disable 3w-9xxx driver builds on ppc64 (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-30.EL" date="1110362400">- fix obscure oops in tty init_dev() handling (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-29.EL" date="1109844000">- incorporate urgent late-breaking SATA fixes (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-28.EL" date="1109152800">- add more USB device support to visor driver (Pete Zaitcev)
- implement clustered APIC support for x86_64 (Larry Woodman)
- constrain x86 MSR writes based on cpu model (Jason Baron)
- increase max superbh size for performance (Stephen Tweedie)
- add locking to prevent oops in md_seq_show() (Doug Ledford)
- restore missing ia64 panic_on_oops handling (Tatsuo Uchida)
- implement Ethernet PCI quirk for HP xw9300 (Jim Paradis)
- revert NFS flock() avoidance to -27.7.EL (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.17.EL" date="1108980000">- rework NFS flock() avoidance w/FS_WANT_FLOCK for GFS (Ken Preslan)
- prevent inode corruption from delete/lookup races (Wendy Cheng)
- preserve registers for ia64 16-byte atomic ops (Geoff Gustafson)
- update SCSI whitelist for LSI/HP/STK/EMC devices (Tom Coughlan)
- disable vary_io in ips driver to avoid ctlr hangs (Tom Coughlan)
- correct handling of 2-TB device partitions (Peter Martuccelli)
- update support for ia64 perfmon facility (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.16.EL" date="1108720800">- implement diskdump support for SATA piix/promise (Nobuhiro Tachino)
- correct /proc/mtrr size values on EM64T platforms (Larry Woodman)
- restore page permissions after writes from ptrace() (Don Howard)
- fix /proc parent pids from multi-threaded forks (Ernie Petrides)
- enable software watchdog timer support on s390,x (Jan Glauber)
- update tg3 network driver to version 3.22RH (John Linville)
- incorporate 3w-9xxx driver version 2.24.00.011fw (Adam Manthei)
- correct ending boundary check in filemap_sync() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.15.EL" date="1108548000">- add e100 driver PCI device ids for ICH7 support (John Linville)
- restore obsolete but ignored e100 module params (John Linville)
- implement user-mode (gdb) access to ia64 gate page (Jason Baron)
- fix x86_64 FPU IP and DP values in SIGFPE context (Larry Woodman)
- add qla2200 module parameter to use NVRAM RIO val (Tom Coughlan)
- update 3w-xxxx driver to 1.02.00.037 w/.033 backup (Adam Manthei)
- fix crashes in video Firewire (ieee1394) driver (Bastien Nocera)
- prevent info leaks into ext3 journal disk blocks (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.14.EL" date="1108461600">- enhance AIO performance over NFS w/FS_AIO_SYNC hook (Steve Dickson)
- defer e100_tx_timeout() work from interrupt context (John Linville)
- correct IPV6 DST entry release to prevent route leak (Dave Miller)
- ignore MTU updates from invalid IPV6 ndisc packets (Dave Miller)
- add relevant PCI device ids to extend ICH7 support (John Linville)
- reduce system pauses during heavy page laundering (Larry Woodman)
- fix audit logging of paths w/predicate filter usage (Neil Horman)
- enable building of unsupported fusion isense module (Adam Manthei)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.13.EL" date="1108375200">- increase dxfer size limit for ppc64 SG_IO ioctl32 (David Howells)
- eliminate tty line discipline usage/switching races (Jason Baron)
- fix autofs recognition of ghosted direct map updates (Jeff Moyer)
- fix sg driver race between cmd completion and close (Tom Coughlan)
- prevent e100 data corruption from v.3.0.27-k2 update (John Linville)
- upgrade SATA support (core, libata, new/old drivers) (John Linville)
- implement diskdump support for sym53c8xx adapter (Yuichi Nagahama)
- add USB support for Wacom Cintiq/Intuos3 tablets (Kristian Høgsberg)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.12.EL" date="1107943200">- update e100 network driver to version 3.3.6-k2 (John Linville)
- correct cpu id macro for dual-core Opteron support (Jim Paradis)
- add "numa=off" message on x86_64 OOM kills w/NUMA (Larry Woodman)
- improve user/system timer tick accounting on s390,x (Pete Zaitcev)
- prevent EAGAIN errs from interrupted TCP recv() calls (Dave Miller)
- update cciss disk driver to version v2.4.54.RH1 (Adam Manthei)
- eliminate diskdump cpu id from frozen list (Nobuhiro Tachino)
- fix user-space access bug in USB vicam ioctl (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.11.EL" date="1107424800">- incorporate Emulex driver ioctl module version 1.0.13 (Tom Coughlan)
- eliminate potential call_lock deadlock with diskdump (Tatsuo Uchida)
- fix potential kiobuf_lock deadlock in free_kiovec() (Larry Woodman)
- add L2 cache descriptor for EM64T Irwindale processor (Neil Horman)
- prevent mmap() syscalls from choosing NULL mappings (Rik van Riel)
- include bounce buffer pages in show_mem() output (Larry Woodman)
- add I2C driver support for ICH5 in i2c-i801.c (John Linville)
- correct parport_pc errors on insmod failures (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.10.EL" date="1106906400">- fix futex_wait() race condition that allowed app hang (Ingo Molnar)
- add/correct write barrier placement in timer routines (David Howells)
- add x86_64 NMI switch support to debug kernel hangs (Yuichi Nagahama)
- restore CIV/LVI offset operation in i810_audio driver (John Linville)
- update e1000 network driver to version 5.6.10.1-k2 (John Linville)
- prevent bogus BUG_ON during multi-threaded core dump (Roland McGrath)
- fix x86_64 crash in huge_page_release() w/SHM_HUGETLB (Larry Woodman)
- fix possible mem corruption from /proc/kcore access (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.9.EL" date="1106647200">- fix core dumping over NFS mounts with "intr" option (Roland McGrath)
- prevent multi-threaded app hang from sys_wait4() race (Ingo Molnar)
- restore e1000 support for Intel PCI device id 1014 (John Linville)
- add ac97 quirk entries for HP xw6000/xw6200/xw8000 (John Linville)
- update b44 network driver to upstream version 0.95 (John Linville)
- revert NFS silly-delete and rpciod-hang patches (Steve Dickson)
- fix panics while backing up LVM snapshots (Heinz Mauelshagen)
- fix oops in redirect_target() on DHCP refresh (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.8.EL" date="1105696800">- rework ia64 INIT switch stacks for clean tracebacks (Tatsuo Uchida)
- fix USB raced timeout errors and ohci_complete_add() (Pete Zaitcev)
- add O_DIRECT handling in LVM driver handling (Heinz Mauelshagen)
- downgrade wait4() SIGCHLD/SIG_IGN warning message (Ingo Molnar)
- eliminate potential VMA list races with do_brk() (Dave Anderson)
- ignore ICMP Source Quench messages in tcp_v4_err() (Dave Miller)
- prevent VMA overlap crashes in insert_vm_struct() (Jason Baron)
- move flock() avoidance from NFS up to F/S layer (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.7.EL" date="1105437600">- fix 32-compat alt-stack signal handling on x86_64 (Geoff Gustafson)
- add initialization of ppc64 EEH error buffer size (David Howells)
- make ppc64 xmon work properly with Power5 console (David Howells)
- prevent infinite sync loop from NFS ESTALE writes (Steve Dickson)
- update 8139too network driver w/recent 2.4 fixes (John Linville)
- avoid netfilter oops when ip_conntrack is unloaded (Dave Miller)
- fix potential rpciod hangs during NFS sillydelete (Steve Dickson)
- avoid "No locks available" errors w/flock() on NFS (Ken Preslan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.6.EL" date="1104919200">- fix x86 phys proc ids for non-clustered APIC systems (Geoff Gustafson)
- return EINVAL on e100/e1000 rx-mini/rx-jumbo settings (John Linville)
- fix i810_audio regression from modified ICH6 PCI ids (John Linville)
- prevent race conditions in add_wait_queue_cond() macros (Jeff Moyer)
- fix FAT32 file system corruption w/writing 8M files (Alexander Viro)
- fix derivation/presentation of PHB unit ids on ppc64 (David Howells)
- close OpenFirmware stdin device at boot on ppc64 (David Woodhouse)
- fix 32-bit-compat regression in CMSG validations (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.5.EL" date="1103796000">- add "CommitLimit" data to /proc/meminfo output (Frank Hirtz)
- allow autofs to expire mounts on ppc64 arch (Jeff Moyer)
- add 3c59x EEPROM_RESET for 3c900 Boomerang (John Linville)
- ignore PTE mapping status in page_anon() (Larry Woodman)
- fix SIOCGIFHWADDR handling for zero addr_len (Dave Miller)
- add netdump support for x86_64, ia64, ppc64 (Dave Anderson)
- correct overcommit accounting on fork failure (Frank Hirtz)
- raise default ia64/ia32e swiotlb size to 64M (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.4.EL" date="1103709600">- add network CMSG validation checks (Dave Miller)
- fix data struct leak in ip_options_get() (Dave Miller)
- fix IGMP vulnerabilities in ip[6]_mc_source() (Dave Miller)
- fix e_phnum binfmt_elf loader vulnerability (Dave Anderson)
- clean x86_64 32-bit-compat syscall numbers (Jim Paradis)
- prevent ia64 floating point reg val leakage (Jason Baron)
- add USB io_edgeport driver size check (Peter Martuccelli)
- enable softirq deferral for x86_64 arch (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.3.EL" date="1102586400">- add data/param length sanity checks in smbfs (Alexander Viro)
- prevent /proc/&lt;PID&gt;/cmdline env data disclosure (Dave Anderson)
- make tulip_stop_rxtx() wait for DMA termination (John Linville)
- fix mm_stat regression introduced in -20.13.EL (Rik van Riel)
- correct return value from vlan_dev_change_mtu() (John Linville)
- serialize datagram read w/appropriate semaphore (Dave Miller)
- fix keyboard regression introduced in -24.EL (Peter Martuccelli)
- enable mmap/mprotect PROT_EXEC for legacy apps (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-26.2.EL" date="1101722400">- fix USB problems with keyboards and ia64 oopses (Pete Zaitcev)
- add i810 PCI IDs for nforce3/CK804 audio devices (Jim Paradis)
- fix ppc64 viodasd driver dev naming/limit bugs (David Howells)
- prevent tg3 fiber link bounces w/auto-negotiation (Dave Miller)
- add ac97 quirk handling for i810_audio driver (John Linville)
- prevent incorrect OOM killing with iscsi usage (Larry Woodman)
- create kiobuf cache to reduce lowmem contention (Larry Woodman)
- fix yet another binfmt_elf loader vulnerability (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.1.EL" date="1100512800">- (this is the first build for RHEL 3 Update 5)
- implement open() recovery from NFS ESTALE errors (Neil Horman)
- clean up warnings from lpfc and lpfc_703 Makefiles (Tom Coughlan)
- fix nessus-induced kernel panic with auditing (Peter Martuccelli)
- update 3c59x driver to LK1.1.18 and fix reset bug (John Linville)
- fix ext3 O_DIRECT bug in orphan list handling (Stephen Tweedie)
- flush cached dirty pages on NFS reads w/O_DIRECT (Steve Dickson)
- allow ia64 kernel unaligned access msg suppression (Neil Horman)
- correct test for performing buffer-head reclaim (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.EL" date="1100253600">- fix binfmt_elf loader vulnerabilities (Jim Paradis, Dave Anderson)
- limit kernel data struct slabs to single-page allocs (Larry Woodman)
- update Emulex driver to 7.1.14 (backup still 7.0.3) (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-24.EL" date="1100080800">- fix several ppc64 problems with signal catching (David Woodhouse)
- fix several bugs in /proc/ppc64/lparcfg driver (David Howells)
- fix possible diskdump hangs w/megaraid2 driver (Tatsuo Uchida)
- add support for IBM EM64T-based Groucho blade (Peter Martuccelli)
- fix regression in USB BIOS-&gt;kernel hand-off support (Pete Zaitcev)
- fix regression in ia64 kernel stack unwind handling (Don Howard)
- fix regression w/agpgart support of i8xx chipsets (Larry Woodman)
- add support for BLKSSZGET ioctl in cciss driver (Tom Coughlan)
- disable iSCSI builds in ppc64 and s390* configs (Tom Coughlan)
- update Emulex driver to 7.1.13 (backup still 7.0.3) (Tom Coughlan)
- correct SCSI whitelist for Chaparral FR1422 devices (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-23.EL" date="1098957600">- prevent kswapd from getting stuck in prune_icache() (Larry Woodman)
- fix ppc64 single-stepping into signal handlers (David Woodhouse)
- fix corruption from user stack expansion races (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-22.EL" date="1098093600">- prevent add/removal races in SCSI open handling (Doug Ledford)
- fix U3 agpgart regression with Intel i8xx chipsets (Dave Jones)
- update SCSI whitelist for IBM 1722/1724 devices (Tom Coughlan)
- correct TSS descriptor limit checking for x86_64 (Jim Paradis)
- add nforce3/CK804 device support and fix ACPI bug (Jim Paradis)
- add support for "forcedeth" net driver version 0.28 (Jim Paradis)
- enable diskdump support in amd64/ia32e configs (Nobuhiro Tachino)
- restore/improve linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- add missing page_cache_release() in launder_page() (Larry Woodman)
- update Emulex driver to 7.1.11 (backup still 7.0.3) (Tom Coughlan)
- add new USB ids to support latest Wacom tablets (Kristian Høgsberg)
- remove drivers/net/tun.o from unsupported list (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-21.EL" date="1096538400">- fix potential PTE race in do_anonymous_page() (Rik van Riel)
- add "Committed_AS" data to /proc/meminfo output (Frank Hirtz)
- revise DMA zone paging thresholds for x86_64 (Larry Woodman)
- prevent /proc/scsi/scsi oops during probes (David Woodhouse)
- avoid kswapd hangs via free_more_memory() hooks (Rik van Riel)
- update megaraid2 driver to 2.10.8.2 w/2.10.6 backup (Adam Manthei)
- fix do_notify_parent() panic from ptrace death race (Roland McGrath)
- fix large core file support on 64-bit architectures (Dave Anderson)
- enable tux on ia64 and increase max tux threads to 16 (Ingo Molnar)
- fix ia64/s390,x single-stepping w/signal handlers (David Woodhouse)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.14.EL" date="1096452000">- fix hang in SCSI starvation management code (David Howells)
- update SCSI whitelist for NETAPP LUN devices (Wendy Cheng)
- fix s390 cio handling during ESS fail-overs (Pete Zaitcev)
- update Emulex driver to 7.1.8 w/7.0.3 backup (Tom Coughlan)
- update Qlogic driver to 7.01.01 w/7.00.03 backup (Tom Coughlan)
- correct unlock/free order in proc_lookupfd() (Ernie Petrides)
- use ACPI for PCI interrupt routing on ia32e (Jim Paradis)
- allow cpus to boot w/APIC IDs &gt; 8 on ia32e (Jim Paradis)
- fix pid allocation when pid_max &gt; 32768 (Ernie Petrides)
- fix regs in multi-threaded ia64 core dumps (Keiichi Mori)
- enable sym53c8xx driver for ppc64 iSeries (David Howells)
- fix ac97 depmod errors w/hugemem configs (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.13.EL" date="1096365600">- fix aic79xx_osm.h/3c59x.c changes in prior rev (Tachino/Linville)
- allow for larger nfsd block sizes on some archs (Steve Dickson)
- fix possible aacraid driver panic in aac_info() (Tom Coughlan)
- fix xdr argsize check to handle writes &gt;= 2^31 (Steve Dickson)
- update e1000 network driver to version 5.3.19-k2 (John Linville)
- apply several cciss driver fixes (to 2.4.52.RH2) (Adam Manthei)
- fix x86_64 versions of cpu capability test macros (Jim Paradis)
- fix ppc64 HPTE memory corruption race condition (Rik van Riel)
- add sys_epoll support on s390,x (Stephen Tweedie, Pete Zaitcev)
- prevent keyboard.c warnings from mouse clicks (Norm Murray)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.12.EL" date="1096279200">- improve slab cache page reaping heuristics (Larry Woodman)
- implement diskdump support for x86_64 arch (Nobuhiro Tachino)
- add ia64 INIT trigger switch support for debugging (Tatsuo Uchida)
- fix several problems in handling of AIO on pipes (Jeff Moyer)
- update fixes for LTP read02 test hangs with tmpfs (Alexander Viro)
- fix x86_64 single-stepping out of signal handlers (Jim Paradis)
- increase size of ppc64 RTAS error log buffer (David Howells)
- increase max possible kNFSD lockd cookie size (Steve Dickson)
- backport 3c59x fixes for mii-tool problems w/10Mb (John Linville)
- incorporate Cisco's iscsi_sfnet initiator driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.11.EL" date="1095933600">- implement diskdump support for megaraid2 adapter (Tatsuo Uchida)
- update ips driver to version 7.10.18 w/7.00.15 backup (Tom Coughlan)
- correct max page aging interval boundary in kscand() (Larry Woodman)
- add ppc64 support for ptrace() with PT_SINGLESTEP (David Woodhouse)
- update e100 network driver to version 3.0.27-k2 (John Linville)
- fix LTP read02 test hangs when tmpfs is in use (Alexander Viro)
- get proc_dir_entry reference in proc_lookup() (Alexander Viro)
- add exports of several AIO-related interfaces (Larry Woodman)
- reduce swapping during excessive pagecache use (Larry Woodman)
- implement statfs64() syscall on x86 for NFS use (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.10.EL" date="1095847200">- implement early USB hand-off (BIOS-&gt;kernel) support (Pete Zaitcev)
- fix stack pointer calculation in x86 show() handling (Jeff Moyer)
- prevent interference between flock/POSIX lock types (Frank Hirtz)
- update pcnet32 network driver to version 1.30c (John Linville)
- add export of block_commit_write() f/s interface (Larry Woodman)
- implement diskdump support for dpt_i2o adapter (Tatsuo Uchida)
- update mptfusion driver to version 2.05.16.02 (Adam Manthei)
- move disk_dump_notifier_list to diskdumplib.c (Nobuhiro Tachino)
- update s390 zfcp driver to revision 5.31.2.11+ (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.9.EL" date="1095674400">- fix occasional ibmvscsic driver insmod crash (David Howells)
- disable linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- prevent double slashes in symlink auditing (Peter Martuccelli)
- fix overzealous compat32 setsockopt conversions (David Woodhouse)
- backport tulip driver fixes from upstream 2.4.28 (John Linville)
- update tg3 network driver to version 3.10RH (John Linville)
- implement sysctl to force igmp protocol versions (Neil Horman)
- add diskdump performance improvement info (Nobuhiro Tachino)
- fix s390 iucv lost connections and ping hangs (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.8.EL" date="1095588000">- prevent diskdump deadlock in case of die() recursion (Tatsuo Uchida)
- add x86/x86_64 support for ptrace() w/PT_SINGLESTEP (Roland McGrath)
- fix x86/x86_64 single-stepping into signal handlers (Roland McGrath)
- increase x86 value for MAX_MP_BUSSES definition to 260 (Ingo Molnar)
- eliminate ia64 potential for scheduler runq deadlock (Larry Woodman)
- add support for /proc/sys/kernel/mem_nmi_panic sysctl (Dave Anderson)
- prevent keyboard-initiated sysrq hangs in handle_sysrq() (Jeff Moyer)
- fix intermittent netdump hangs from cpu-frozen messages (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.7.EL" date="1095415200">- fix premature OOM killing change added in prior rev (Larry Woodman)
- backport vlan driver fixes from upstream 2.4.28-rc1 (John Linville)
- add _sb_findmap symbol export in s390/s390x kernels (Pete Zaitcev)
- add ppc64 support for 32-bit sendfile64() syscall (David Howells)
- fix 32-bit IPC_INFO shmctl() syscalls for ppc64 (David Howells)
- upgrade libata/SATA support to current 2.4 bits (John Linville)
- avoid USB device resets of shared/busy interfaces (Pete Zaitcev)
- fix miscellaneous problems in ppc64 icom driver (David Howells)
- fix ip_queue_maxlen sysctl for ip[6]_queue modules (Neil Horman)
- add module parm for max entries in NFS_ACL replies (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.6.EL" date="1095156000">- prevent OOM killer from kicking in prematurely (Larry Woodman)
- avoid NMI watchdog crashes during sysrq-m usage (Wendy Cheng)
- add auditing support for ia64 clone2 syscall (Peter Martuccelli)
- correct sign of auditing error codes for ia64 (Peter Martuccelli)
- implement ia64 auditing 32-bit-disable sysctl (Peter Martuccelli)
- fix ia64 faults w/stale VHPT-generated TLB entries (Dave Anderson)
- fix invalid x86_64 checksums for multicast packets (Mike Gahagan)
- fix incorrect blocking bug inside wakeup_kswapd() (Larry Woodman)
- validate appropriate media type in DVD drives (Doug Ledford)
- reduce s390 stack usage in qeth/qdio drivers (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.5.EL" date="1094810400">- prevent scenarios that lead to hang of kswapd (Larry Woodman)
- add locking for access to /proc/bus/usb/devices (Pete Zaitcev)
- correct x86 rescheduling to handle apm=power-off (Ingo Molnar)
- fix OOM killer locking and mm referencing holes (Larry Woodman)
- pin ia64 mapping for idle proc stack during boot (Larry Woodman)
- fix warning throttle for amd64 stack overflow check (Neil Horman)
- fix content lengths when using tux gzip compression (Ingo Molnar)
- add auditing support for pread/pwrite syscalls (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.4.EL" date="1094724000">- prevent bogus data in /proc/scsi/ibmvscsi/* (David Howells)
- update tg3 network driver to version 3.9RH (John Linville)
- improve ramfs memory alloc w/scarce highmem (Larry Woodman)
- correct several values in /proc/ppc64/lparcfg (David Howells)
- allow dirty page rebalancing under mem pressure (Rik van Riel)
- prevent memory leak in scsi_build_commandblocks() (Doug Ledford)
- fix potential kswapd deadlock w/disk quota usage (Larry Woodman)
- increase MAX_IO_APICS from 8 to 32 for x86_64 arch (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.3.EL" date="1094205600">- fix various error path bugs in bcm5820 driver (John Linville)
- validate addresses used with /dev/kmem accesses (Neil Horman)
- eliminate IPSEC tunnel leaks when using IPComp (Dave Miller)
- add auditing support for utimes() syscalls (Peter Martuccelli)
- prevent netconsole freeze w/cable dis-/re-connect (Jeff Moyer)
- correct reboot_cpu validation for "reboot=s&lt;n&gt;" (Doug Ledford)
- fix mem/irq clean-up in olympic tokenring driver (Neil Horman)
- update network bonding driver to version 2.6.0 (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.2.EL" date="1094032800">- add maps/rlimits output with print-fatal-signals=2 (Ingo Molnar)
- backport ac97 sound support from upstream 2.4.27 (John Linville)
- eliminate kernel stack data leaks from USB drivers (Mark Cox)
- fix interrupt status mask in AMD PCnet32 driver (David Howells)
- fix module loading problems in ibmvscsic driver (David Howells)
- fix x86 shared runq mapping when ACPI data is bad (Bernd Schmidt)
- disable enhanced error handling on PCI-ISA bridges (David Howells)
- add memory-mapped i/o support to i810_audio driver (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.1.EL" date="1093860000">- (this is the first build for RHEL 3 Update 4)
- backport r8169 network driver changes from 2.4 (John Linville)
- update i810_audio sound driver to version 1.01 (John Linville)
- convert USB UHCI driver warning to debug message (Pete Zaitcev)
- backport 2.6 PROT_GROWSDOWN/UP mprotect() support (Jakub Jelinek)
- lower ppc64 console logging level of RTAS messages (David Howells)
- fix ppc64 handling of "smt-emabled=off" boot option (David Howells)
- correct socket sndbuf accounting w/IP_MULTICAST_LOOP (Neil Horman)
- reduce x86_64 user stack start randomization to 16K (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.EL" date="1092823200">- change TARGET_CPUS on x86_64 to include all on-line cpus (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-19.EL" date="1092304800">- fix possible races/overflows in file offset handling (Alexander Viro)
- correct logging of boot progress messages on Power5 (David Howells)
- extend ppc64 EEH support for other types of devices (David Howells)
- fix ibmveth driver to properly shut down and restart (David Howells)
- fix several races and overflows in ppc64 RTAS driver (David Howells)
- backport "acpi=noirq" support to work around Nocona hangs (Don Howard)
- conditionalize pbn_hp_diva to fix serial driver oops (Matthew Galgoci)
- add amd64 GART entry guard mappings for PCI mis-prefetch (Jim Paradis)
- upgrade SATA support again to resolve several problems (Jeff Garzik)
- qualify ia32e IRQ affinity disable with BIOS flag check (Jim Paradis)
- fix eeh_check_failure() on ppc64 to be interrupt safe (David Howells)
- correct ppc64 EEH macros to use appropriate data size (David Howells)
- fix x86/ia64 no-wait handling in smp_call_function() (Larry Woodman)
- fix "Filter target 0x203 not known ..." audit msgs (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-18.EL" date="1090404000">- prevent s390 mlock hangs with follow_page() rework (Ernie Petrides)
- fix Power5 initialization and handling of RAS IRQs (David Howells)
- fix ppc64 viocons driver deadlocks with printk() (David Howells)
- apply eh_timeout, netdump, cli fixes in diskdump (Tatsuo Uchida)
- add skip_mapped_pages tuning for page eviction (Stephen Tweedie)
- fix initrd's effect on ppc64 mem_end calculation (David Howells)
- allow HT support on ppc64 systems with single cpu (David Howells)
- backport v2.0.8 aic7xxx driver h/w support for Dell (Tom Coughlan)
- correct ppc64 device node searching in hvsi driver (David Howells)
- fix KMI compat problem w/pgprot_t in x86 NX support (Jim Paradis)
- resurrect mptfusion driver backup version 2.05.05 (Tom Coughlan)
- disable IRQ affinity setting on some ia32e systems (Jim Paradis)
- update SCSI whitelist for Dot Hill SANnet/StorEdge (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-17.EL" date="1089280800">- account for zone holes in big hash table allocator (Stephen Tweedie)
- prevent reserved stack space overflow of mmap_top (Ernie Petrides)
- fix USB crash in scan_async() with EHCI hardware (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-16.EL" date="1088848800">- enable exec-shield and add x86 NX support (Ingo Molnar, Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.19.EL" date="1088762400">- add owner check in inode_change_ok() for gid changes (Ernie Petrides)
- fix race in finish_task_switch() between wakeup/exit (Ernie Petrides)
- remove Samsung CD-ROM SN-124 from IDE DMA blacklist (Tom Coughlan)
- update e1000 network driver to version 5.2.52-k3 (John Linville)
- add auditing support for semtimedop syscalls (Peter Martuccelli)
- fix tasklet and locking bugs in Power5 hvsi driver (David Howells)
- fix megaraid2 handling of TUR cmds with SCSI CD-ROM (Adam Manthei)
- update SCSI whitelist for HP NS E1200-160 router (Tom Coughlan)
- prevent x86 read_ldt() from reading beyond kmap (Ernie Petrides)
- force single loadable segment in ia64 kernels (Jakub Jelinek)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.18.EL" date="1088157600">- implement ia64 work-around for TLB fetch timeout MCA (Larry Woodman)
- fix Power3 interrupt initialization in ppc64 setup (David Howells)
- correct info msg, prevent double panic in diskdump (Tatsuo Uchida)
- defend against NULL "mm" ptrs in page_referenced() (Rik van Riel)
- fix miscellaneous audit subsystem problems (Peter Martuccelli)
- prevent crash with tux CGI execution on x86_64 (Ingo Molnar)
- add installer info to SATA sx8 block driver (Jeff Garzik)
- turn on vary_io flag in SCSI ips driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.17.EL" date="1087984800">- allocate big system hash tables w/bootmem allocator (David Howells)
- prevent loading aic7xxx_old when aic7xxx is in use (Doug Ledford)
- implement stat() recovery from NFS ESTALE errors (Steve Dickson)
- fix raw/O_DIRECT i/o bug with unmapped pages (Stephen Tweedie)
- correct another locking hole in RAID1 handling (Doug Ledford)
- fix __x86_64__ conditional in megaraid2.c driver (Adam Manthei)
- fix unresolved symbols on ia64 in cciss driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.16.EL" date="1087898400">- make NFS sillydelete wait for unlink completion (Steve Dickson)
- prevent EIO w/concurrent O_DIRECT+buffered i/o (Stephen Tweedie)
- upgrade SATA support (core, libata, and drivers) (Jeff Garzik)
- implement futex() FUTEX_CMP_REQUEUE op (Al Viro, Pete Zaitcev)
- update b44 network driver to version 0.93 (John Linville)
- avoid unix_stream_sendmsg() ENOBUFS errors (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.15.EL" date="1087812000">- improve SCSI mid-layer error handling w/sdev_retry_q (Doug Ledford)
- eliminate rw-semaphore races between waiter/wakeup (David Howells)
- add locking and fix accounting bug in RAID1 handling (Doug Ledford)
- backport Carmel sx8.c driver from upstream 2.4 base (John Linville)
- rename ppc64-squadrons-* patches to ppc64-power5-* (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.14.EL" date="1087639200">- introduce support for IBM Squadrons/Power5 systems (David Howells)
- update aacraid driver to 1.1.5-2339 w/1.1.2 backup (Adam Manthei)
- allow sys_remap_file_pages() on unlocked ramfs VMAs (Larry Woodman)
- fix diskdump hangs during resets with aic79xx driver (Tatsuo Uchida)
- fix possible data corruption when using SHM_HUGETLB (Larry Woodman)
- set QLogic HbaApiNode proc file permissions to 0600 (Tom Coughlan)
- add IRQ blocking/restoring in add_gendisk/del_gendisk (Jeff Needle)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.13.EL" date="1087466400">- fix problem causing PCI bus 255 to be missing on ia64 (Ben Woodard)
- make nfs_statfs() recognize/handle fs size overflows (Steve Dickson)
- update QLogic driver to 7.00.03-RH1 w/6.07.02 backup (Tom Coughlan)
- allow procfs to utilize more dynamic inode numbers (David Howells)
- prevent inappropriate "unexpected IO-APIC" messages (Ernie Petrides)
- avoid lost dirty page bits in s390/s390x VM handling (Pete Zaitcev)
- fix ACPI SCI interrupt defaults and add kernel params (Jim Paradis)
- fix user-space access bugs in acpi/airo/decnet/sound (Alexander Viro)
- remove drivers/net/starfire.o from unsupported list (Ernie Petrides)
- fix mm_struct mem leak in copy_process() error path (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.12.EL" date="1087293600">- correct s390/s390x tests for PT_AUDITED flag (Peter Martuccelli)
- update e100 network driver to version 2.3.43-k1 (John Linville)
- update megaraid2 driver to 2.10.6 w/2.10.1.1 backup (Adam Manthei)
- add x86_64 auditing support for 32-bit-compat (Peter Martuccelli)
- fix ia64 unwind handling for UNW_INSN_SETNAT_MEMSTK (Jason Baron)
- update cciss driver to v2.4.52 for several fixes (Tom Coughlan)
- fix variable block mode tape handling in st driver (Tom Coughlan)
- incorporate latest Emulex fibre channel driver (Tom Coughlan)
- fix USB EHCI problem with BIOS-to-host handoff (Pete Zaitcev)
- update SCSI whitelist for DDN/Xyratex/SanDisk/CBOX3 (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.11.EL" date="1087207200">- upgrade to latest autofs4, remove from unsupported list (Jeff Moyer)
- fix memory corruption bug in audit driver code (Peter Martuccelli)
- store adjusted KSP value in ia64 diskdump support (Tatsuo Uchida)
- update e1000 network driver to version 5.2.52-k1 (John Linville)
- update ips driver to version 7.00.15 w/6.11.07 backup (Adam Manthei)
- implement USB device interlock between ioctls/SCSI-ops (Pete Zaitcev)
- update tg3 driver to version 3.6RH for upcoming chipsets (Dave Miller)
- downgrade several PCI cache line size debugging messages (Jim Paradis)
- correct x86_64 32-bit-compat support for AIO syscalls (Jeff Moyer)
- prevent FPU exception handling hangs on x86/x86_64 (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.10.EL" date="1086948000">- give wait.func highest priority in wake_up_filtered() (Larry Woodman)
- reduce system time when using sys_remap_file_pages() (Larry Woodman)
- enable CONFIG_SOFT_WATCHDOG module for ppc64 configs (David Howells)
- improve page allocation to avoid unnecessary swapping (Rik van Riel)
- implement diskdump support for ia64 with mptfusion (Tatsuo Uchida)
- disable native ia32 support for ia64 Montecito cpus (Jason Baron)
- save/restore P4/ia32e perf registers for oprofile (Will Cohen)
- fix oprofile ESCR_SET_EVENT_SELECT() event mask (Will Cohen)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.9.EL" date="1086775200">- update s390 zcrypt driver to version 1.2.1 (Pete Zaitcev)
- update network tg3 driver to version 3.5RH (Dave Miller)
- eliminate separate ia32e oprofile processor id (Will Cohen)
- update SCSI whitelist for IBM 2105/2145 devs (Doug Ledford)
- avoid EAGAIN errors on blocking UDP sockets (Steve Dickson)
- avoid putting locked inodes on dirty list (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.8.EL" date="1086688800">- decouple NFS O_DIRECT handling for performance gain (Steve Dickson)
- export page_is_ram() interface for amd64/ia32e arch (Jim Paradis)
- enable CONFIG_SCSI_SATA_* options in x86_64 configs (Jim Paradis)
- update mptfusion driver to 2.05.16 w/2.05.11.03 backup (Adam Manthei)
- fix nopage_sequential_readahead() and filemap_sync() (Larry Woodman)
- fix USB EHCI driver to avoid Squadrons install oops (Pete Zaitcev)
- add x86 NMI trigger switch support for debugging (Yuichi Nagahama)
- add dmi_blacklist[] entry for "Intel NA440BX DP" (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.7.EL" date="1086602400">- apply some minor scsi_dump_status() format tweaks (Doug Ledford)
- implement SCSI support for dynamic add (hot plug) (Doug Ledford)
- upgrade lvm driver logic to version 1.0.8-2 (Heinz Mauelshagen)
- fix x86_64 definition for inlined ffs() function (Jim Paradis)
- preserve VM_MAYEXEC for executable stack support (Jim Paradis)
- add extra SLBIEs for ppc64 Power5 DD2.0 errata (David Howells)
- add ppc64 32-bit compat for TIOCGICOUNT/MIWAIT (David Howells)
- hold file struct ref when removing POSIX locks (Steve Dickson)
- fix window scaling bug in tcp_ack_update_window() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.6.EL" date="1086343200">- make fsync() flush all pending NFS updates to disk (Steve Dickson)
- complete ia64 support for multiple I/O port spaces (Larry Woodman)
- fix sending of IP broadcast frames with TTL of zero (Neil Horman)
- prevent context switch storms under high VM loads (Larry Woodman)
- fix sigaltstack() errors w/JVM on hugemem kernels (Roland McGrath)
- add locking and improve output in scsi_dump_status() (Doug Ledford)
- add size boundary checking in scsi_resize_dma_pool() (Doug Ledford)
- fix SCSI request struct leak on command init failures (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.5.EL" date="1084528800">- overhaul ia64 SAL/MCA subsystem (Ben Woodard)
- enable x86_64 32-bit UID support (Jim Paradis)
- add initial diskdump support (Nobuhiro Tachino)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.4.EL" date="1084356000">- reduce chance of "VFS: Busy inodes after unmount." errs (Steve Dickson)
- convert "uaddr2" arg ptr in s390x futex() compat syscall (Pete Zaitcev)
- add ppc64 32-bit compat handler for PE_LOCKED_COPY ioctl (David Howells)
- update s390 dasd driver with several recent bug fixes (Pete Zaitcev)
- fix amd64 NUMA node scanning for Northbridge systems (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.3.EL" date="1084183200">- prevent exp_stopfodrop() oops during cluster failover (Steve Dickson)
- make nfs_file_commit() always flush the entire file (Steve Dickson)
- fix pcnet32 driver's MAC address selection on ppc64 (Julie DeWandel)
- backport /dev/random driver fixes for missed wakeups (Mark DeWandel)
- fix hang w/SoundBlaster 16-bit sampling w/odd count (Ernie Petrides)
- make s390 tape driver specify GPL module license type (Pete Zaitcev)
- correct buffer len value in ppc64 pSeries ipr driver (David Howells)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.2.EL" date="1083664800">- enable booting on 8-way Opteron systems (Jim Paradis)
- fix 32-bit-compat truncate64() on x86_64 (Jim Paradis)
- correct promiscuous mode counter handling (Dave Miller)
- support 128-GB ia64 systems w/HP zx1 chipset (Larry Woodman)
- add export of sys_ioctl() global symbol on s390x (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.1.EL" date="1083578400">- (this is the first build for RHEL 3 Update 3)
- reenable/fix linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- clean up file locks when NFS clients receive signals (Steve Dickson)
- complete ia64-specific LAuS syscall auditing support (Mark DeWandel)
- prevent NULL pointer dereference in page_referenced() (Rik van Riel)
- fix max sectors argument in lvm_snapshot_alloc() (Heinz Mauelshagen)
- allow AGP bus scanning to execute for all architectures (John Dennis)
- fix page_referenced() rss limit checks w/unmapped pages (Rik van Riel)
- correct locking and cr/lf problems in usbserial driver (Pete Zaitcev)
- add /proc/cpuinfo support for new ppc64 processors (Julie DeWandel)
- fix sense data handling on certain SCSI cmd retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.EL" date="1082541600">- fix clobbering of /proc/cpuinfo vendor_id on x86_64 (Jim Paradis)
- correct MCAST_MSFILTER/IP_MSFILTER size checking (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-14.EL" date="1081936800">- disable linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- prevent symlink buffer overflow in ISO-9660 fs (Ernie Petrides)
- check for skb overrun in IPV4/IPV6 IGMP handling (Dave Miller)
- fix possible hang in rebalance_laundry_zone() (Larry Woodman)
- correct zone_wired[] initialization for NUMA (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-13.EL" date="1081332000">- fix several critical libata bugs (Jeff Garzik)
- correct IPSEC XFRM policy ref counting (Dave Miller)
- add amd64/ia32e parsing for "acpi=off" arg (Jim Paradis)
- update tg3 driver to v3.1 for several fixes (Dave Miller)
- fix SCSI whitelist for Hitachi/HP DFx00, Apple Xserve (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-12.EL" date="1080295200">- add USB support for Handspring Treo 600 PDA syncing (Matthew Galgoci)
- clear state for CPEs during ia64 MCA SAL error logging (Ben Woodard)
- prevent DMA resource leak in QLogic driver error path (Tom Coughlan)
- change default QLogic driver device queue depth to 64 (Tom Coughlan)
- replace fabricated cciss drive geometry w/ENXIO error (Tom Coughlan)
- update SCSI whitelist for HP SureStore/StorageWorks (Tom Coughlan)
- disable CONFIG_ACPI_DEBUG in amd64/ia32e configs (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-11.EL" date="1078740000">- add yet another Intel ICH6 SATA PCI id (Jeff Garzik)
- fix ref counting in copy_process() error path (Larry Woodman)
- remove ia64 support for /proc/bus/mckinley/bitmap (Jason Baron)
- correct depmod versioning for unsupported modules (Ernie Petrides)
- prevent data corruption in ia32e phys_proc_id[] info (Larry Woodman)
- change default value for inactive_clean_percent to 30 (Larry Woodman)
- enable improved version of s390 on-demand timer patch (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-10.EL" date="1078221600">- incorporate late-breaking libata fixes (Jeff Garzik)
- enable amd64 syscall for tux support (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.17.EL" date="1078135200">- reduce s390 idle overhead with on-demand timer patch (Pete Zaitcev)
- complete ia64 NPTL support for 32-bit-EL executables (Jason Baron)
- add several ia64 syscall table entries for 32-bit-EL (Jason Baron)
- upgrade libata/SATA support, delete ich5-sata.patch (Jeff Garzik)
- check for mremap/vmtruncate race in move_one_page() (Jason Baron)
- prevent ia64 NaT-bit corruption during sig catching (Jason Baron)
- fix amd64 get_mtrr() parsing error with &gt;4GB memory (Jim Paradis)
- change amd64 default behavior to avoid TSC timer use (Jim Paradis)
- force s390utils upgrade to prevent zipl seg fault (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.16.EL" date="1078048800">- restore varyio capability in mptfusion driver update (Adam Manthei)
- enhance SCSI mid-layer queuing for indefinite retries (Doug Ledford)
- add ia64 reg reloads for 32-bit-EL strace -f support (Jason Baron)
- fix ia64 core dump support for 32-bit-EL executables (Jason Baron)
- add SCSI whitelist devs with BLIST_RETRY_ABORTED_CMD (Doug Ledford)
- remove stack-in-interpreter check in binfmt_elf.c (Julie DeWandel)
- clear all flags in exec_usermodehelper() for kmod (Alexander Viro)
- fix aacraid command completion (rq corruption) bugs (Tom Coughlan)
- correct cciss_proc_tape_report() type in flags decl (Tom Coughlan)
- enable USB-2.0-hub-based mice/keyboards to function (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.15.EL" date="1077962400">- fix amd64 oprofile linkage problem in ia32e support (Ernie Petrides)
- update ips driver to version 6.11.07 w/6.10.52 backup (Tom Coughlan)
- add size checks to DRM ATI r128 driver ioctl handling (John Dennis)
- avoid megaraid2 irq_disable calls for mem-mapped ctlrs (Tom Coughlan)
- upgrade firmware imbedded in QLogic driver to 3.02.24 (Tom Coughlan)
- correct ia64 memory accounting in overcommit mode 2 (Larry Woodman)
- implement softirq deferral to limit kernel stack depth (Ingo Molnar)
- reduce kernel stack usage in a couple of tux functions (Ingo Molnar)
- fix shared extended attribute ref counting in ext3 (Stephen Tweedie)
- clear SCSI sense data buffer between eh retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.14.EL" date="1077789600">- add .RH1 suffix to cciss driver version v2.4.50 (Tom Coughlan)
- implement initial LAuS syscall auditing support (Mark DeWandel)
- introduce GFS enablers for locking and sendfile ops (Ken Preslan)
- update QLogic driver to 6.07.01 w/6.06.00b11 backup (Tom Coughlan)
- improve netdump reliability w/asynchronous IPI param (Jeff Moyer)
- add ICH6 DSP audio support to i810_audio driver (Jeff Garzik)
- apply SCSI whitelist updates for several devices (Tom Coughlan)
- fix odd byte tape i/o handling in sym53c8xx driver (Tom Coughlan)
- correct minimum nfsd version that supports acls (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.13.EL" date="1077703200">- allow concurrent NFS direct i/o to same file if !append (Steve Dickson)
- introduce support for new Intel 64-bit ia32e processor (Larry Woodman)
- update mptfusion driver to 2.05.11.03 w/2.05.05 backup (Adam Manthei)
- remove fs/binfmt_misc.o from linux-modules-unsupported (Jason Baron)
- fix ia64 predicate register use in sig trampoline code (Jason Baron)
- add oprofile cpu type recognition for ia32e processor (Will Cohen)
- update e1000 network driver to version 5.2.30.1-k1 (Jeff Garzik)
- add more Intel PCI ids to match upstream 2.4 (Jeff Garzik)
- add ICH6 PATA support, PCI ids, irq routing (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.12.EL" date="1077530400">- add deferred page freeing for intr-context unmap_kvec() (Jeff Moyer)
- update megaraid2 driver to v2.10.1.1 w/v2.00.9 backup (Tom Coughlan)
- fix ppc64 pte hash table locking to avoid deadlocks (Julie DeWandel)
- fix ia64 data TLB init to prevent random boot-up hangs (Jason Baron)
- fix ia64 RNat register corruption with alt sig stacks (Jason Baron)
- allow smaller ia64 sig stacks in ia32 emulation layer (Jason Baron)
- backport ncpfs fixes to eliminate var-length arrays (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.11.EL" date="1077271200">- backport cisco aironet driver from 2.6.3-rc4 (Matthew Galgoci)
- update tg3 driver to v2.7 to fix status reg handling (Dave Miller)
- correct lost jiffies logic for x440/5 cyclone timer (Bernd Schmidt)
- fix open() error clean-up for unsupported O_DIRECT (Stephen Tweedie)
- prevent ia64 crashes when unmapping hugetlb pages (Jason Baron)
- add ppc64 processor support for future PPC970+ (Julie DeWandel)
- rework ppc64 32-bit-compat iptables support (Julie DeWandel)
- fix func ptr test in ethtool_set_ringparam() (Jeff Garzik)
- disable linux-2.4.21-scsi-affine-queue.patch (Doug Ledford)
- improve scsi_allow_ghost_devices description (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.10.EL" date="1077098400">- fix amd64 iommu bug causing data corruption on &gt;4GB systems (Jim Paradis)
- return EINVAL for unsupported ioctl32 syscalls on ppc64 (Julie DeWandel)
- remove incorrect BUG() call in __remove_inode_page() (Stephen Tweedie)
- fix s390 ctc driver problem causing build system hangs (Pete Zaitcev)
- fix s390 qeth driver error path to reset write_busy (Pete Zaitcev)
- update s390 zfcp driver to fix miscellaneous bugs (Pete Zaitcev)
- apply upstream nfs fixes for acl error handling (Steve Dickson)
- prevent kernel stack data leak via /dev/rtc (Ernie Petrides)
- allow AIO operations on sockets for non-inet (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.9.EL" date="1076925600">- restore genksyms_smp_prefix setting for non-x86 builds (Ernie Petrides)
- display/log memory stats whenever there's an OOM kill (Larry Woodman)
- update tg3 driver to v2.6, the latest upstream version (Jeff Garzik)
- update net bonding driver to v2.4.1, latest upstream (Jeff Garzik)
- fix irq, mem, printk, strtol bugs in cciss driver (Tom Coughlan)
- wait for board ready after hot add, cciss driver (Tom Coughlan)
- enable cciss adapter prefetch for x86 platforms (Tom Coughlan)
- add preserve_arg0 handling for ia32 emulation (Larry Woodman)
- fix ppc64 compat support for quota syscall (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.8.EL" date="1076580000">- remove Power-Blade-specific def for USB TEAC floppy (Julie DeWandel)
- fix s390 crash in iucv driver on connection shutdown (Pete Zaitcev)
- fix ia64 ACPI parsing for multinode IDE devs on x455 (Jim Paradis)
- fix amd64 core dumping of multithreaded 32-bit apps (Jim Paradis)
- fix s390 oprofile conditional and zero top addr bits (Will Cohen)
- add ipr driver v1.0.3 for IBM's PPC RAID adapters (Tom Coughlan)
- add {alloc,free}_netdev(), list macro, tg3 PCI ids (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.7.EL" date="1076407200">- restrict /proc/tty/driver directory access to root (Jeff Moyer)
- allow non-standard usr/sys VM splits at 2G/2G, 1G/3G (Ingo Molnar)
- extend existing ppc64 RTAS firmware flash interface (Mark DeWandel)
- fix ppc64 version of strncpy() to zero-pad buffers (Julie DeWandel)
- fix s390/x version of strncpy() to zero-pad buffers (Pete Zaitcev)
- fix generic version of strncpy() to zero-pad buffers (Jim Paradis)
- improve ppc64 segment table entry replacement logic (Julie DeWandel)
- correct type/cast of "len" in ppc64/kernel/nvram.c (Julie DeWandel)
- implement new ppc64 RTAS system call interface (Julie DeWandel)
- increase x86 RSDT table limit in ACPI parsing (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.6.EL" date="1076320800">- fix more usb-storage bugs for Power Blade support (Julie DeWandel)
- remove extra inactive_clean_pages-- in reclaim_page() (Larry Woodman)
- return proper error codes for do_munmap() failure in mremap (Dave Jones)
- fix binfmt_elf.c problems for apps with huge bss regions (Julie DeWandel)
- update cciss driver to v2.4.50 for Smart Array 6i support (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.5.EL" date="1075975200">- prevent netdump progress output from filling up log_buf (Jeff Moyer)
- add ppc64 RAS hook at end of panic() processing (Julie DeWandel)
- correct source IP address in ICMP error message (Dave Miller)
- fix smp deadlock with pdeath_signal posting (Roland McGrath)
- add ppc64 support for /proc/ppc64/lparcfg (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.4.EL" date="1075888800">- update nfsd mode-with-acls fix for upstream conformance (Steve Dickson)
- rework usb-storage locking to avoid hangs on disconnect (Pete Zaitcev)
- fix mmio alignment error in olympic token ring driver (Julie DeWandel)
- prevent tux logger-thread shutdown problems on ppc64 (Ingo Molnar)
- add ppc64 AltiVec chip support for Power Blades (Julie DeWandel)
- eliminate multi-threaded coredump hang potential (Ingo Molnar)
- fix ppc64 segfaults with tasks &gt; 2GB in size (Julie DeWandel)
- fix usb-storage memory-allocation/iowait deadlock (Alan Cox)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.3.EL" date="1075716000">- add amd64 support for PT_GNU_STACK with exec shield (Jim Paradis)
- fix s390 raid1 sync problem w/writes at end of dev (Pete Zaitcev)
- update s390 zcrypt driver to version 1.1.4 (Pete Zaitcev)
- fix output of large /proc/pid/statm values (Mark DeWandel)
- fix output of large /proc/partitions values (Mark DeWandel)
- enable ppc64 support for JS20 Power Blades (Julie DeWandel)
- fix kernel stack memory leak on fork failures (Dave Anderson)
- fix ipv6 packet quoting problem in icmpv6_send() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.2.EL" date="1075370400">- apply Intel's x86 microcode loader update (Jim Paradis)
- enhance PCI multifunction support for ppc64 (Julie DeWandel)
- fix nfsd returning bad mode bits when acls set (Steve Dickson)
- prevent unkillable zombies from detached NPTL threads (Ingo Molnar)
- avoid missing scsi disks in /proc/partitions on detach (Jason Baron)
- correct pte calculation inside zeromap_pte_range() loop (Ben Woodard)
- add inline function PDE() to help driver backporting (Matthew Galgoci)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.1.EL" date="1074679200">- (this is the first build for RHEL 3 Update 2)
- relocate various pieces of the "undo" patch (Patch Review Committee)
- rename s390 zcrypt and zfcp driver patches (Pete Zaitcev)
- add LKML discussion to COPYING.modules (Arjan van de Ven)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.EL" date="1073556000">- fix race condition between thread creation and signals (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-8.EL" date="1073469600">- fix amd64 eflags masking in 32-bit emulation of ptrace (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-7.EL" date="1073383200">- fix numerous ppc64 problems with /proc access (Julie DeWandel)
- allow user core files larger than 2GB in size (Dave Anderson)
- add ia64 support for Crestone Peak AGP bridges (John Dennis)
- fix unaligned kernel accesses in nfs_readdir() (Steve Dickson)
- add new_len/new_addr checks in do_mremap() (Ernie Petrides)
- fix nfs O_DIRECT corruption with &gt;4GB files (Steve Dickson)
- enable bus scan for AGP ctlrs on amd64 systems (John Dennis)
- limit PCI-alloc'ed physaddrs to 4GB on HP ia64 (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-6.EL" date="1070877600">- fix ppc64 firmware updates (Julie DeWandel)
- fix sync wakeup problem (Ingo Molnar)
- add ia64 cyclone support (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-5.EL" date="1070272800">- undo rejected patches (Stephen Tweedie, Arjan van de Ven, Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.20.EL" date="1069840800">- enable NUMA support in amd64 smp configs (Jim Paradis)
- prevent oopses with tux in OOM scenarios (Ingo Molnar)
- apply several ipv6 multicast bug fixes (Dave Miller)
- assign retval in copy_process() error path (Ingo Molnar)
- add lseek-in-/proc support for s390x "ps" (Pete Zaitcev)
- redefine zone_is_highmem() for Celestica (Dave Anderson)
- fix unresolved symbols in amd64 modules (Bill Nottingham)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.19.EL" date="1069754400">- fix tg3 rx_pending limit for BCM5705/BCM5782 chips (Jeff Garzik)
- reset page error flag prior to read of new contents (Jeff Moyer)
- enable CONFIG_HOTPLUG_PCI option for ia64 configs (Doug Ledford)
- fix inactive laundry list race in ramfs_writepage() (Dave Anderson)
- avoid out_of_memory() for wired pages when there's lomem (Dave Anderson)
- conditionalize ppc64 machdep_calls change for KMI compat (Ernie Petrides)
- limit anon/cache pages scanned in refill_inactive_zone() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.18.EL" date="1069668000">- create old version (rev. 5.64) of cmpci sound driver (Tom Coughlan)
- remove ac97.o, ad1848.o, cs4232.o from unsupported (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.17.EL" date="1069063200">- fix missing use of __GFP_HIGHMEM flag in pte_alloc_one() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.16.EL" date="1068890400">- rework scsi mid-layer queuing logic to fix error handling (Doug Ledford)
- fix pci_dma_sync_sg() scatterlist arg in megaraid2 driver (Tom Coughlan)
- move more-ptes-in-rmap-pte-chain logic to its own patch (Ernie Petrides)
- tag uses of __GENKSYMS__ with KMI/ABI compat comment (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.15.EL" date="1068804000">- fix MD multipath bugs causing crashes during fail-overs (Doug Ledford)
- add chain_ptep_t and revert pte_addr_t for KMI compat (Ernie Petrides)
- restore sub-timer-tick time-of-day granularity for ia64 (Jason Baron)
- modify agpgart and drm drivers for ia64 HP ZX1 support (John Dennis)
- fix ia64 32-bit emulation for several stat-related calls (Jason Baron)
- enable amd64 use of new ips driver w/config separation (Tom Coughlan)
- update e100 network driver to version 2.3.30-k1 (Jeff Garzik)
- update e1000 network driver to version 5.2.20-k1 (Jeff Garzik)
- apply scsi whitelist updates for IBM/CNSi/NEC devices (Tom Coughlan)
- reenable varyio for aic7xxx driver (hangs were unrelated) (Jeff Moyer)
- conditionalize NVIDIA_NFORCE3 to restore KMI compat (Ernie Petrides)
- prevent two ext3 panics on corrupted filesystems (Stephen Tweedie)
- apply two minor fixes to ppc64 RAS nvram reading (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.14.EL" date="1068717600">- update ServeRAID (ips) driver to version 6.10.52 (Tom Coughlan)
- configure xmon on by default in ppc64 configs (Julie DeWandel)
- create initial s390 zcrypt driver, version 1.1.2 (Pete Zaitcev)
- remove zfcp driver from linux-modules-unsupported (Pete Zaitcev)
- revise ppc64 reliability/serviceability support (Julie DeWandel)
- reduce kernel stack usage inside nfs_readdir() (Steve Dickson)
- add gameport dependency to cmpci driver config (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.13.EL" date="1068631200">- reduce UDP retransmissions and fix slow reads for NFS (Steve Dickson)
- implement wired page lists for better ramfs handling (Larry Woodman)
- fix vfork deadlock when child process causes core dump (Ingo Molnar)
- enhance AltSysRq-M output and fix deadlock potential (Larry Woodman)
- update cmpci sound driver for some HP IPF workstations (Tom Coughlan)
- correct tq_struct struct initialization in tg3 driver (Jeff Garzik)
- fix NFS file attribute inconsistency after rename (Steve Dickson)
- prevent ia64 machine checks w/sysreport on Olympia (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.12.EL" date="1068544800">- redesign refill_inactive_zone() for smarter deactivation (Larry Woodman)
- improve page deactivation scalability w/delayed laundering (Larry Woodman)
- rework locking and timer usage in s390 ctc network driver (Pete Zaitcev)
- allow xmon to be enabled at boot-time for ppc64 debugging (Julie DeWandel)
- reverse kscand's order of anon/cache active list traversal (Larry Woodman)
- force in-lining of br_read/write_lock/unlock routines (Julie DeWandel)
- fix mistaken fall-through cases in s390 chandev driver (Pete Zaitcev)
- make a few exported symbols available to OpenGFS (Stephen Tweedie)
- fix ld/st ordering bug causing lost signal wakeups (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.11.EL" date="1068112800">- make profile=X imply nmi_watchdog=1 and fix NMI w/d bugs (Ernie Petrides)
- add lock init in scsi_get_host_dev() to fix shutdown hang (Doug Ledford)
- enable distributed interrupts by default on ppc64 iSeries (Julie DeWandel)
- improve amd64 reporting of machine check errors (Jim Paradis)
- fix disabling of autonegotiation in tg3 driver (Dave Miller)
- add image name to s390 ioctl32 debug message (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.10.EL" date="1068026400">- fix file lock ownership by NPTL threads to be process-wide (Ernie Petrides)
- upgrade megaraid driver to version 1.18k and fix isr/fw sync (Tom Coughlan)
- upgrade megaraid2 driver to version 2.00.9 and enable varyio (Tom Coughlan)
- improve scsi mlqueue handling to enable BUSY/QUEUE_FULL fix (Doug Ledford)
- correct reporting of i/o errors in ppc64 viodasd driver (Julie DeWandel)
- update acenic driver to handle enabling of jumbo frame mode (Jeff Moyer)
- fix i386 PAGE_NONE bits to prevent get_user_page() hang (Roland McGrath)
- fix ia64 show_mem() handler to use efi_memmap_walk() call (Dave Anderson)
- replace spaces in slabinfo entry name for async poll table (Matt Wilson)
- fix race condition in buffer-head memory footprint patch (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.9.EL" date="1067940000">- improve spec file robustness in %post/%preun stanzas (Florian La Roche)
- add s390x iovec length checking for 32-bit reads/writes (Matt Wilson)
- use highmem for pte/ramfs page allocation w/__GFP_WIRED (Larry Woodman)
- upgrade oprofile support with bug fixes and enhancements (Will Cohen)
- fix infinite recursion in SCSI mid-layer post-processing (Jeff Moyer)
- introduce no-auto-start-on-add handling for SCSI blacklist (Jeff Moyer)
- enable s390 support for blk stats handling for iostat -x (Pete Zaitcev)
- fix LVS timer-related hang from ip_vs_conn_expire() bug (Ernie Petrides)
- correct module init in cpqarray driver to fix insmod crash (Tom Coughlan)
- incorporate ESB PATA support and fix a pirq_routers PCI id (Jeff Garzik)
- fix nfs async write deadlock potential w/nfs_writepage() (Steve Dickson)
- fix SCSI error handling for BUSY queue status messages (Doug Ledford)
- improve ppc64 32-bit ioctl support for use by ethtool (Julie DeWandel)
- add missing unlock in ip_mc_del_src() to fix IGMP deadlock (Dave Miller)
- change ppc64 reporting of floppy capacity to be 1.44 MB (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.8.EL" date="1067421600">- fix up various problems on Nforce3-based amd64 systems (Jim Paradis)
- double number of pte addrs in rmap pte_chain structs (Larry Woodman)
- restrict slab size for kernel data structs to 2 pages (Larry Woodman)
- clean up obsolete quicklist usage for ppc64 pte pages [rejected]
- prevent readdirplus from returning hidden mount points (Steve Dickson)
- prevent lockd deadlocks caused by export table locking (Steve Dickson)
- eliminate use of parallel task_struct init macro on ia64 [rejected]
- fix broken s390x overflow checks with 32-bit F_GETLK use (Matt Wilson)
- fix SCSI errors with "mt stoptions" and IDE tape drives (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.7.EL" date="1067162400">- fix bad checksumming interaction between e100 and bridge (Jeff Garzik)
- prevent system hang by OOM killing when overcommitted (Larry Woodman)
- un-inline ext3 error function to reduce stack usage (Stephen Tweedie)
- fix several ppc64 problems with interrupt handling (Julie DeWandel)
- correct amd64 identification in /dev/oprofile/cpu_type (Jim Paradis)
- move fput() call in do_tty_hangup() to avoid oops w/kon (Alexander Viro)
- eliminate creation of never-used task_struct slab cache (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.6.EL" date="1066903200">- reduce buffer-head memory footprint from read-only files (Ingo Molnar)
- update qeth driver for reduced stack usage and bug fixes (Pete Zaitcev)
- fix s390 qeth driver again to allow tcpdump to function (Pete Zaitcev)
- add exec_mmap() locking to prevent vma lookup races (Ernie Petrides)
- rework RPC slot allocation for further NFS improvements (Steve Dickson)
- reduce frequency of RPC retransmits during NFS writes (Steve Dickson)
- make generic/ext3 file system write handling 64-bit clean (Jeff Moyer)
- allow SMP scheduling rebalancing to occur every 200 msecs (Ingo Molnar)
- prevent races during IPC semaphore set and msg queue removal (Ingo Molnar)
- fix ACPI handling to identify trigger/polarity of PCI IRQs (Jim Paradis)
- correct amd64/ia64 acpi_disabled decls for post-boot access (Jeff Moyer)
- update ppc64 viocons driver with several bug fixes (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.5.EL" date="1066298400">- move fix for PPR use in sym53c8xx driver to its own patch (Ernie Petrides)
- correct pids exported by msgctl/semctl/shmctl/fcntl calls (Ulrich Drepper)
- apply s390 lcs driver wait queue init and locking updates (Pete Zaitcev)
- enable dummy network driver use in generic s390 config file (Pete Zaitcev)
- add missing ptrace hooks for exec and vfork-done events (Bill Nottingham)
- fix SMP timer race that triggered BUG_ON() in add_timer() (Ingo Molnar)
- fix several bogus ipvs boundary checks in ftp module [rejected]
- fix vfsmount queuing in attach_mnt() for CLONE_NEWNS [rejected]
- add net_device check to prevent oops in pppoe driver [rejected]
- fix memory leak in symlink error path of /proc driver [rejected]
- fix overflow in v1_disk2mem_dqblk() quota calculation [rejected]
- increase ppc64 ramdisk size to 8192k in p/iSeries configs (Jeremy Katz)
- lower amd64 TASK_UNMAPPED_32 to increase avail address space (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.4.EL" date="1066039200">- fix ppc64 stack pointer alignment in user signal handlers (Jakub Jelinek)
- increase amd64 exception stack size to 4k to avoid overflow (Jim Paradis)
- fix ppc64 interrupt rate accounting for vmstat and /proc (Julie DeWandel)
- extend amd64 NMI watchdog timeouts to tolerate bad 2nd cpu (Jim Paradis)
- allow s390 dasd driver to use noop elevator module (Pete Zaitcev)
- add free_irq() in error path of olympic token ring driver (Matt Wilson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.3.EL" date="1065866400">- make pid fields in ucred structures hold tgid values (Ulrich Drepper)
- prevent ppc64 iSeries virtual console writes &gt; 4k (Julie DeWandel)
- control ia64 unaligned access messages with new sysctl (Jeff Moyer)
- correct SCSI data direction on cmd to spin up disks (Pete Zaitcev)
- add do_brk() TASK_SIZE and address space wrap checks (Arjan van de Ven)
- limit PPR use in sym53c8xx driver for ppc64 Zapata drives (Doug Ledford)
- list ac97.o, ad1848.o, and cs4232.o modules as unsupported (Jeff Moyer)
- clean up conditional compilation in s390 zfcp driver (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.2.EL" date="1065693600">- identify whether i686 or athlon config in oops output (Arjan van de Ven)
- remove warning in reclaim_page() unmapped page path (Ernie Petrides)
- fix several lvm error handling paths causing memory leaks [rejected]
- correct i386 smp shutdown logic when netdump is enabled (Jeff Moyer)
- fix amd64 potential data leaks on FPU save/restore errors (Jim Paradis)
- prevent aic7xxx chip resets leading to PCI parity errors (Tom Coughlan)
- remove ia64 user tty warning on unaligned accesses (Arjan van de Ven)
- fix ppc64 /proc file buf overruns in viodasd driver (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.1.EL" date="1065607200">- (this is the first build for RHEL 3 Update 1)
- avoid m/ctime update for pipe writes on r/o file systems (Stephen Tweedie)
- prevent theoretical ext3 fs corruption in ext3_read_inode (Stephen Tweedie)
- enable AGRESSIVE_IDLE_STEAL to improve scheduler balancing (Ingo Molnar)
- fix potential ppc64 lock-up on ioctl32 un/reregistering (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.EL" date="1065175200">- extend ppc64 scsi timeout values for Zapata DVD-ROM drives (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-3.EL" date="1063965600">- make sure to release viotape op structure after use (Julie DeWandel)
- disable pgd/pmd quicklists on ppc64 (Mark DeWandel)
- temporarily disable aio on sockets (Jeff Moyer)
- correctly refile inodes to make them reclaimable (Harald Hoyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-2.EL" date="1063792800">- S390: update zfcp and cio drivers (Pete Zaitcev)
- IA64: add extra check to virtual mem_map (Larry Woodman, Dave Anderson)
- initialise local variables in ide-tape &amp; ide-scsi
- cap qla2200 tcq depth to 255
- switch version number scheme to kernel-2.4.21-N.EL</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063706400">- PPC64: invalidate evicted sbl entries in the erat (Julie DeWandel)
- increase ethernet tx_queue_len to 1000 (David Miller)
- in udp_{v6_}flush_pending_frames, reset up-&gt;len too (David Miller)
- S390: CMS reserved minidisk detection (Pete Zaitcev)
- call recount_segments() on a different occasion (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063620000">- really disable exec-shield (Roland McGrath)
- reduce stack randomisation, disable brk randomisation (Ingo Molnar)
- make e1000 driver 64 bit clean (Julie DeWandel)
- minor aio corner case error condition fix (Jeff Moyer)
- AMD64: more lenient check for call workaround (Ernie Petrides)
- PPC64: disable CONFIG_XMON (Mark DeWandel)
- S390: fix CCW slab selection (Pete Zaitcev)
- fix two-disk combined mode sata (Jeff Garzik)
- move buslogic scsi driver to supported, for vmware only (Tom Coughlan)
- change viocons message from KERN_WARNING to KERN_INFO (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063360800">- VM: handle race condition in reclaim_page (Stephen Tweedie, Larry Woodman)
- PPC64: fix "log_buffer broken" xmon issue (Julie DeWandel)
- fix compiler warnings in netdump (Jeff Moyer)
- AMD64: workaround for 32 bit compat mode page fault problem (Ernie Petrides)
- IA64: make perfmon root-only (Jason Baron)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063274400">- fix smp race in rebalance_laundry_zone()</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063188000">- fix compiler warnings when hugetlbfs is disabled (Pete Zaitcev)
- fix tux performance bug (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063101600">- don't evict kernel stack seg translation on ppc64 (Julie DeWandel)
- fix callers of do_page_fault on ppc64 (Mark DeWandel)
- AMD64 munmap return value, fix lsb failure (Jeff Moyer)
- fix for PPC64 32-bit ioctl (Jim Paradis)
- bring IA64 value of MINSIGSTKSZ in line with upstream (Jakub Jelinek)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063015200">- fix potential datacorruptor in viodasd driver (Julie DeWandel)
- fix race condition in s390 dirty bit handling (Pete Zaitcev)
- limit per-cpu slab cache size
- correct 32-bit readv/writev border cases on ppc64 (Matt Wilson)
- AMD Golem IO-APIC fixup for i686 kernel on AMD64 (Jeremy Katz)
- NFS Solaris 8 acl fix (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062756000">- minor nfs permissions bugfix (Steve Dickson)
- change mprotect return value to SuS mandated value (Arjan van de Ven)
- kernel-unsupported now provides kernel-modules (Jeremy Katz)
- correct __hugemem__modules typos in rhkernel.h
- fix subtle pmd corruption error (Larry Woodman, Dave Anderson)
- fix cut'n'paste error in SATA io port reservation
- restore NFSEXP_CROSSMNT ABI compatibility (Steve Dickson)
- round up executable name field length in core file (Jakub Jelinek)
- switch off exception_trace on amd64 (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062496800">- patch to access odd last sector on ia64 (Jason Baron)
- misc fixes from upstream (Arjan van de Ven)
- fix audigy driver (Jeff Garzik)
- tunable dcache reclaim priority for tux (Ingo Molnar)
- tg3 driver update (Jeff Garzik)
- ipv6 and icmp network bugfixes (David Miller)
- fix ppc64 memory access security bug (Julie DeWandel)
- reduce memory allocated for skb (Ingo Molnar)
- small smp fix for scalable timers (Ingo Molnar)
- make s390 recognise MSDOS partitions (Pete Zaitcev)
- small smp fixes in tux (Ingo Molnar)
- make mptfusion drivers supported on 4/4 split kernel (Tom Coughlan)
- add entries to scsi whitelist (Tom Coughlan)
- minor sata/ata driver updates (Jeff Garzik)
- small fixes to viodasd driver (Julie DeWandel)
- nfs_get_root and nfs access bit patches (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062064800">- don't show interrupts in /proc/stat for ppc64 (Matt Wilson)
- make sure sync returns in a reasonable time
- PPC64: fix for boot cpu not being cpu 0 (Julie DeWandel)
- zero sized write no longer updates mtime (Matt Wilson)
- fix video bios read corruption on ia64 (Larry Woodman)
- network fixes to tg3, bonding (Jeff Garzik)
- properly reserve legacy IDE regions in sata driver (Jeff Garzik)
- fix ppc64 signal handling bugs (Mark DeWandel)
- tux fixes (Ingo Molnar)
- tgkill syscall for s390(x) (Pete Zaitcev)
- amd64 32 bit compatibility fixes (Jim Paradis)
- ppc64 32 bit compatibility fixes (Julie DeWandel)
- fix 4G/4G follow_page problem (Ingo Molnar)
- reduce memory used by VMAs and dentries (Arjan van de Ven)
- make LVM snapshotting of ext3 work reliably (Stephen Tweedie)
- make netdump play better with the nmi watchdog (Jeff Moyer)
- QLA2200: disable irq mitigation, fix off-by-one (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061805600">- seq_file /proc/interrupts for x86 too (Ingo Molnar)
- fix memory leak in ia64 exec of ia32 binaries
- check tgid not pid in scm_check_creds()  (David Miller)
- VM fixes: shm swap priority, zeromap_page_range
- workaround VFS limitations for VXFS NFS export</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061546400">- use personality for 3GB userspace on x86 -hugemem (Ingo Molnar)
- add sysctl interface for lockd (Steve Dickson)
- don't prod VGA space on HP Pinnacle systems (Larry Woodman)
- fix for 32 bit binaries on amd64 (Jim Paradis)
- add preemption point to write_some_buffers (Julie DeWandel)
- sort ACPI table to get correct device ordering on HP (Larry Woodman)
- fix refcounting bug with ipv6 addresses on netdevs (David Miller)
- add s390 syscalls for tux (Pete Zaitcev)
- md multipath enablers (Doug Ledford)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061460000">- fix process and nice time accounting (Doug Ledford)
- amd64: syscall table updates, timer robustness (Jim Paradis)
- amd64 3GB personality for 32-bit processes (Jim Paradis)
- use 256MB pagesize for hugetlbfs on ia64 (Larry Woodman)
- make sure e100 only claims ipv4 checksumming
- igmpv3/mldv2 OOPS'er fix (David Miller)
- hugetlbfs: make chown work and allow uid=X,gid=Y mount options
- make larger mmap windows work (Ernie Petrides, Ingo Molnar)
- ia64: improve ia32 compatibility (Larry Woodman)
- fix bug in rpc retry code (Steve Dickson)
- make acpi pci hotplug modulable (Jeff Moyer)
- update (trivial) to megaraid 1.18j (Tom Coughlan) 
- enable varyio on mptfusion (Tom Coughlan)
- panic on oops to prevent data corruption opportunities (Ernie Petrides)
- small iorl locking fix (Doug Ledford)
- fix ppc64 get_wchan() bad deref (Mark DeWandel)
- fix aio read into mmap()d PROT_WRITE (Jeff Moyer, Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061373600">- libata update (Jeff Garzik)
- amd64 syscalls for xattrs &amp; ACLs (Jim Paradis)
- tux fixes (Julie DeWandel, Ingo Molnar)
- via &amp; i810 audio fixes (Jeff Garzik)
- small 4G/4G split bugfixes (Ingo Molnar)
- fix sigsuspend race on x86, amd64, ia64 (Mark DeWandel)
- ia32 behavior for FP denormal exceptions on ia64 (Jason Baron)
- get the set/get of NAT bits for ia64 correct (Jason Baron)
- ipsec update, adds cast6 encryption (David Miller)
- VM update: OOM bugfix &amp; page-&gt;flags atomic updates (Rik van Riel)
- reenable serpent encryption on ppc64
- bladecenter usb-ohci support (Pete Zaitcev)
- iorl fixes (Doug Ledford)
- network bonding driver oops fix (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060768800">- DAC960 back to bigmem supported, ne2k-pci &amp; usb audio to bigmem unsupported
- netdump updates for tg3 and e1000 (Jeff Moyer)
- put a hole between stack and mmap area (Ernie Petrides)
- process time accounting updates (Doug Ledford)
- fix null characters in TUX header (Julie DeWandel, Ingo Molnar)
- display correct executable when running interpreted script
- zfcp zSeries fibrechannel driver (Pete Zaitcev)
- ipsec updates (David Miller)
- fix 4G/4G race conditions (Ingo Molnar)
- rename -bigmem kernel to -hugemem to reflect changed tradeoffs
- optionally show task states from hangcheck timer (Jason Baron)
- various small bugfixes from upstream</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060423200">- fix scalable timer race condition  (Julie DeWandel, Ingo Molnar)
- print warning on boot with &gt;16GB RAM on -smp kernel (Arjan van de Ven)
- fix for xapic issue with ServerWorks chipsets (Ernie Petrides)
- remove spurious ioctl printk on ppc64 (Mark DeWandel)
- ppc64 wchan improvement (Mark DeWandel)
- hint @pause changes for ia64
- longer scsi scan timeout on ppc64 (Julie DeWandel)
- readv/writev for raw IO (Stephen Tweedie)
- fix for easy stack/mmap collisions (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060164000">- various XAPIC related fixes (Ingo Molnar)
- correct context switch and iowait stats with HT shared runqueues
- ext3 obscure deadlock fixes (Stephen Tweedie)
- knfsd fixes: blocked lock, symlink error &amp; missing bkl  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060077600">- de_thread bugfix from 2.6 upstream  (Matt Wilson)
- viocons driver update (Julie DeWandel)
- fix VM non-overcommit mode (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059991200">- plug data leak in aio code (Jeff Moyer)
- initial list of 4G/4G unsupported modules (Tom Coughlan)
- nfs softirq race fix (Steve Dickson)
- updated IPSEC patch (David Miller)
- networking updates/fixes from 2.4.22-preX (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059904800">- drop orlov allocator for now (Arjan van de Ven)
- correct HT cpu pair detection (Arjan van de Ven)
- build zImage.partial for netbooting on pSeries (Matt Wilson)
- fix missing symbols</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059818400">- export two AIO symbols for OCFS
- disable CONFIG_DEBUG_SLAB so performance testing can start
- crosshost mmap hooks for distributed filesystems (Stephen Tweedie)
- include partially linked zImage for pSeries netboot (Matt Wilson)
- nfs highmem fix, unmap when xdr_kmap() fails (Steve Dickson)
- update megaraid2 locking to work with IORL (Com Coughlan)
- make sure to build the qla2100 driver (Tom Coughlan)
- fix cdrom ioctl 32 bit compatibility for ppc64, amd64 (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059645600">- run depmod on install of unsupported modules (Arjan van de Ven)
- fix register corruption in IA64 lazy fpu handling (Larry Woodman)
- add b44 network driver (Jeff Garzik)
- make ppc64 pci interface routines compatible (Julie DeWandel)
- allow 32 bit userland on AMD64 and PPC64 to use volumes &gt; 2GB (Jeff Moyer)
- nfsd: acl related mount and export flags (Steve Dickson)
- fix nfs exp_fodrop oops (Steve Dickson)
- fix missed signal wakeups on ppc64 (Mark DeWandel)
- smp scalable timer bugfixes (Ingo Molnar)
- workaround for a prefetch bug in some Athlon CPUs (Ernie Petrides)
- code to make more modules unsupported for 4/4 split (Arjan van de Ven)
- various spec file and config cleanups
- viopath driver fix (Julie DeWandel)
- add match for 440gx chipset bioses (Arjan van de Ven)
- move epic100 and ne2k-pci back to supported (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059472800">- updated finegrained process accounting patch (Doug Ledford)
- make iSeries compile without CONFIG_ICOM (Julie DeWandel)
- nfsd: only set -&gt;reuse for tcp sockets, not udp  (Steve Dickson)
- enable the 4G/4G split on the i686-bigmem kernel only
- sysrq support for viocons (Julie DeWandel)
- limit pci_bus size changes to ppc64 (Jeff Garzik)
- fix for signal delivery race (Ernie Petrides, Mark DeWandel)
- add ShdPnd to /proc (Ingo Molnar)
- fix de_thread() hang (Ingo Molnar)
- add kernel support for CLONE_STOPPED (Ernie Petrides)
- make sure to initialise HVC console (Julie DeWandel)
- fix _SEG abort hit in ACPI code (Larry Woodman)
- build addon drivers on amd64 and ppc64 too (Tom Coughlan)
- build IPS driver on all architectures (Tom Coughlan)
- fix a few ia32 emulation bugs for IA64 (Larry Woodman)
- enable correct/new __clear_bit macro for IA64 (Larry Woodman)
- flexible mmap allows mappings of huge executable segments (Larry Woodman)
- sysrq-w for s390 (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058436000">- have s390 cpu_relax() also include barrier  (Pete Zaitcev)
- convert ppc64 xmon traceback code to ksymoops (Matt Wilson)
- rename kstat_sum() variable with aliasing problems  (Ingo Molnar)
- fix AIO-on-hugetlbfs crash (Ingo Molnar)
- update support for IA64 Long's Peak ACPI serial ports  (Larry Woodman)
- turn on xmon for both iSeries and pSeries (Matt Wilson)
- bugfix to make CLI work correctly on iSeries (Julie DeWandel)
- SATA bugfixes (Jeff Garzik)
- enable 4G/4G split in -BOOT kernel, due to syslinux trouble</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058349600">- fix s390 compile (Pete Zaitcev)
- taint the kernel on sii6512 driver link, GPL but no source available
- handle debug registers with 4G/4G split (Ingo Molnar)
- tgkill syscall for ppc64 (Julie DeWandel)
- fix NFSD/ACL/ext3/jbd deadlock (Stephen Tweedie, Steve Dickson)
- fix maxcpus=1 installation panic fix for ppc64 (Julie DeWandel)
- IDE byteswapping io functions for ppc64 (Julie DeWandel)
- update sata driver (Jeff Garzik)
- raise the number of /proc entries (Julie DeWandel)
- sticky sysrq key with timeout (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058263200">- make SysRq-W useable on s390 (Pete Zaitcev)
- updated process accounting patch (Doug Ledford)
- siginfo_t fixes for s390x and amd64 (Jakub Jelinek)
- clustered NFS fail-over support (Steve Dickson)
- autofs4 updates and fixes
- ia64 patches to reduce cpu power/temp in idle loop (Larry Woodman)
- add irqsafe up() for LVM locking (Stephen Tweedie)
- O_DIRECT fallback to synchronous allocation in holes (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058176800">- ia64 HP iommu: add sx1000 detection
- possible bug in s390x 32-bit emulation  (Roland McGrath)
- updated ipsec patch, should fix all current ipv6 bugs  (David Miller)
- finegrained process accounting (Doug Ledford)
- ICH5 pci irq routing, and associated ids (Jeff Garzik)
- fix the machine_real_restart() reboot path on 4G/4G (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057917600">- fix amd64 agp-gart code to work around hugetlbfs debug code (Jim Paradis)
- fix ppc32 pthread_cancel (Jakub Jelinek) 
- Do not sent IGMP leave messages unless IFF_UP  (David Miller)
- software iommu for ia64 systems without hardware iommu (Jason Baron)
- fix ext3 oops fix during dio, LTP failure (Arjan van de Ven, Stephen Tweedie)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057831200">- Remove illegal calls to dst_link_failure</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057831200">- enable HT scheduler for bigmem kernel
- add tgkill syscall for x86 and ia64
- make -BOOT kernel smaller w/ modular md and CONFIG_SMALL
- rmap VM updates
- 4G/4G agpgart potential corruption fix (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057744800">- switch off exec shield everywhere
- eliminate hostfs for amd64 (Jim Paradis)
- megaraid update, mostly vendor ID (Tom Coughlan)
- shrink boot kernel by disabling some config options
- additions for the SCSI whitelist (Tom Coughlan)
- ia64 extable fix (Jason Baron)
- viocons driver upgrade (Julie DeWandel)
- another ia64 mmu context wraparound deadlock fix (Larry Woodman)
- iSeries icom debugger patch (Julie DeWandel)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057658400">- Drop io_request_lock in usb scsiglue.c:device_reset</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057658400">- fix cpu_relax for amd64 and ia64 to include a barrier (Ingo Molnar)
- restore o_direct api compatibility (Stephen Tweedie)
- fix possible ext3 deadlock in o_direct patches (Stephen Tweedie)
- ACLs for JFS (Stephen Tweedie)
- fix /proc/cpuinfo runqueue printing (Ingo Molnar)
- via audio fixes, smaller emu10k1 patch (Alan Cox, Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057572000">- fix process accounting, tux ftp passwords and si_pid (Ingo Molnar)
- 32bit compat statfs fix (Guy Streeter)
- don't serialise exit on BKL when accounting is off (Ingo Molnar)
- truncate timeouts to 32 bits on 64bit systems (Ingo Molnar)
- fix network channel bonding (Jeff Garzik)
- split netdump patch into core and net-drivers (Jeff Garzik)
- delayed tlb flushing for ia64 (Larry Woodman)
- emu10k1 driver fixes
- kksymoops for AMD64 (Jim Paradis)
- select bugfixes from 2.4 upstream (Jeff Garzik)
- OOM tweaks (Rik van Riel)
- use seq_file for /proc/interrupts on ppc64 (Mark DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057140000">- add qdio and qeth drivers for s390(x)  (Phil Knirsch)
- slab cache scale bugfix (Larry Woodman)
- S390: qdio &amp; qeth drivers (Phil Knirsch)
- hangcheck timer for ppc64 (Julie DeWandel)
- fix race conditions in ia64 ia32 compat layer (Larry Woodman)
- update megaraid, aic7xxx, cciss and cpqarray drivers (Tom Coughlan)
- nfs xdr_shift_buf, tcp client corruption and alignment (Steve Dickson)
- rhconfig.h stuff for ppc64, s390 and s390x (Matt Wilson)
- AIO on sockets</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057053600">- kiobuf optimisations (Stephen Tweedie, Larry Woodman)
- ipsec update (David Miller)
- ipvs update to deal with timer changes (David Miller)
- 4G/4G split patch optimisations (Ingo Molnar)
- hangcheck timer (Jason Baron)
- recent (AGP 3.0) agpgart support (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056967200">- semtimedop() support on s390/s390x  (Ernie Petrides)
- fix a 4G bug that triggers on systems with &gt;30 CPUs (Ingo Molnar)
- updated SCSI SMP affine queueing patch  (Arjan van de Ven)
- page hash prefetch in do_generic_file_read bugfix (Julie DeWandel)
- updates the qlogic driver to the latest (Arjan van de Ven)
- slab cache SMP scalability tweaks (Ingo Molnar)
- ACPI 2.0 for IPF and AMD64 (Jim Paradis, Larry Woodman)
- statm fixes for hugetlbfs and remap_file_pages (Jason Baron)
- acpi serial port detection (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056708000">- iseries driver updates (Julie DeWandel)
- aio scalability and 2.5 backports  (Ingo Molnar)
- SMP scalable timers (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056621600">- make qlogic driver use new scsi infrastructure (Arjan van de Ven)
- export aio kvec functions
- fix statm oops
- compile fixes 
- NFS ACL over the wire protocol extensions (Steve Dickson)
- rate limit slab pruning, to limit IPI load on SMP systems (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056448800">- scsi request lock scaling (Ingo Molnar)
- cpu affinity for scsi command processing (Ingo Molnar)
- use softirqs instead of bhs for the scsi layer (Doug Ledford)
- igmpv3 fixes and improvements (David Miller)
- oprofile for ppc64 (Will Cohen)
- Increase MAX_ADDR_LEN from 8 to 32 for Infiniband over IP (Tom Coughlan)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056362400">- per-cpu kstat arrays (Ingo Molnar)
- optimise 4G/4G tlb flushing (Ingo Molnar)
- kiobuf reclaim together with buffer reclaim (Arjan van de Ven)
- more scalable gendisk statistics (Ingo Molnar)
- nfs reconnect fixes (Steve Dickson)
- add 32-bit compatibility for ustat system call on ppc64 (Julie DeWandel)
- scalable gettimeofday (Ingo Molnar)
- hugetlbfs ppc64 &amp; s390 bits (Mark DeWandel, Pete Zaitcev)
- hugetlbfs for ia64 (Jason Baron)
- qlogic scsi driver update (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056189600">- nfs patches (Steve Dickson)
- xapic improvements, summit support (Ingo Molnar)
- fix core dump name for multithreaded programs (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056103200">- merge up to marcelo's latest</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056016800">- oom killer fixes (Larry Woodman, Rik van Riel)
- tunable VM overcommit (Rik van Riel)
- hugetlbfs for amd64 (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055930400">- updated iseries virtual drivers (Julie DeWandel)
- nfs lockd improvements (Steve Dickson)
- remap_file_pages improvements (Ingo Molnar)
- /proc/efi/symtab patch for ia64 (Larry Woodman)
- disable O_PROFILE on UP x86 machines
- allow NMI watchdog profiling frequencies up to 10kHz (Ingo Molnar)
- statm (Jason Baron)
- hugetlbfs (Ingo Molnar)
- have nfsd honour ACLs on a per-export basis (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055844000">- Enable O_PROFILE on non-SMP configs (Stephen Tweedie)
- more conservative AIC config options
- Fix BOOT kernel panic while mounting /dev/cdrom (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055757600">- merge to 2.4.21 + selected ac bits
- ipsec upgrade (David Miller)
- HT scheduler patch fix (correct sibling counting)
- make bdflush writeout smoother
- AMD64 gdb fix (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055412000">- don't include unsupported drivers in -BOOT kernel
- merge up to 2.4.21-rc8 + selected ac bits
- FIXME: sysrq for 3170, dasd, odirect &amp; odirect for nfs</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com" date="1055412000">- oprofile for s390</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055239200">- statm (Jason Baron / Julie DeWandel)
- AIO 32-bit compat for 64-bit machines (Julie DeWandel)
- only do bufferhead reclaim in extreme situations (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055152800">- Serial ATA support (Jeff Garzik)
- mtp fusion 2.05.05+ (Dave Maley)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054893600">- XATTR/ACL patches, except NFS over the wire (Stephen Tweedie)
- ipsec module autoloading (David Miller)
- remap_file_pages (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054807200">- upgrade to latest -rmap with Ernie's fixes
- sysrq+C shows the stack dump of all CPUs
- ext3 truncate fix (Stephen Tweedie)
- NFS fixes for HZ=1000 machines (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054720800">- 4G/4G split fix (Ingo Molnar)
- ppc64 fixes (Guy Streeter, Rik van Riel)
- enable oprofile on amd64
- ipsec updates (David Miller)
- fork returns pid instead of task_struct* (Julie DeWandel)
- ia64 ptrace bugfixes (Dave Anderson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054634400">- HP diva serial driver (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054548000">- NFS over TCP patches (Steve Dickson)
- switch to using ppc64pseries/ppc64iseries arches instead of
  kernel-pseries and kernel-iseries (Jeremy Katz)
- egenera scsi bus rescan patch (Jeff Garzik)
- oprofile (Graydon Hoare)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054288800">- futex requeue (Ingo Molnar)
- enable NAPI for E1000
- signal latency and scheduler improvements (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054202400">- kscand oops fix (Ingo Molnar, Rik van Riel)
- pcnet32 fixes (Julie Dewandel)
- raid autorun (Pete Zaitcev)
- turn off CONFIG_SUNDANCE_MMIO (Jeff Garzik)
- flexible mmap (Larry Woodman)
- ppc64 fixes (Matt Wilson, Guy Streeter)
- loop softirq 10 times before giving up (Ingo Molnar)
- O_DIRECT for NFS (Steve Dickson)
- prevent md from shutting down active arrays (Doug Ledford)
- rmap updates, inode reclaim &amp; higher order allocations (Rik van Riel)
- network channel bonding (Jeff Garzik)</changelog><changelog author="Jim Paradis &lt;jparadis@redhat.com&gt;" date="1054116000">- Re-enable x86_64 in build
- x86_64-specific updates for exec-shield
- Bring in improved "nonx" support for x86_64 from upstream</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1054116000">- Hush s390 printks upon user SIGSEGV by default. It can be enabled back with
  a sysctl kernel.userprocess_debug.
- Enable optional 3270 console mode on s390.</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053684000">- get rid of vsyscall page (Arjan van de Ven)
- fix missing symbol copy_str_fromuser_size</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053424800">- exec-shield updates to fix hang-on-boot on some systems (Ingo Molnar)
- temporarily disabled the architectures, which got broken by exec-shield updates
- fix for LTP sigprocmask02 failure (Matt Wilson)
- ppc64 updates (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053338400">- pagecache scalability patch (Ingo Molnar)
- IPC semaphore scalability patch (Ingo Molnar)
- ppc64 updates (Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052992800">- exec-shield (Ingo Molnar)
- AMD64 ACPI updates (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052906400">- reenable O_DIRECT, O_DIRECT fixes and superbh-aio (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052820000">- vma merging (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052733600">- nmi profiler
- VM updates: rmap, dma zone isolation
- tux (Ingo Molnar)
- ext3 stall fixes (Ingo Molnar)
- e1000 fixes (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052474400">- config files overhaul (Arjan van de Ven)
- fix bug in mlock patch
- IPVS (Dave Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052388000">- import IO elevator changes from gingin
- critical VM fix
- matrox framebuffer patch for pseries (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052301600">- hammer nptl fixes (Ulrich Drepper)
- 4G/4G split (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052215200">- upgrade to 2.4.21-rc1-ac4 (minus -ac acpi and xapic changes)
- drop nfs patches since those seem to be in -ac</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052128800">- larger message buffer size + boot option (Mark DeWandel)
- AMD64: tls handling, coredump fixes (Jim Paradis)
- SMP &amp; highmem VM fixes (Ben LaHaise)
- HT+NUMA scheduler (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051956000">- ext3 orphan cleanup fix (Ernie Petrides)
- s390 affinity fixes (Pete Zaitcev)
- i386 vsyscall DSO changes (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051869600">- bugfixes and config changes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051783200">- enable semtimedop for other architectures (Ernie Petrides)
- large pci bus numbers (Julie DeWandel)
- bugfixes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051610400">- igmpv3 (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051524000">- generic 32bit compat stuff + amd64/ppc64/ipf pieces (Matt Wilson)
- clustered apic (XAPIC) support (Ingo Molnar)
- ppc64 architecture updates (Matt Wilson, Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051264800">- ppc64 fixes</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051178400">- collapse ipsec into one patch (David Miller)
- ppc64 build fix (Matt Wilson)
- improve smp scheduler fairness (Ingo Molnar)
- allow mlock for normal users, up to ulimit (Ingo Molnar)
- AMD64 port (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051092000">- clean up mechanism to pass extra CFLAGS so we don't override what's
  already there
- merge ia64 build stuff (Larry Woodman)
- merge varyio + superbh (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051005600">- merge up to 2.4.21-rc1
- IA64: virtual mem_map, acpi updates, netdump update, pte-highmem &amp; fealnx
- IA64: architecture specific patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050919200">- import davem's ipsec patch pile
- ppc64 kallsyms and dump_fpu patches (Matt Wilson)
- rmap updates (x86_64 &amp; bufferhead reclaim)
- ppc64 ptrace patch (Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050660000">- open up patch namespace 2000-5000 for network protocol changes
- renumber existing patches in that range</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050573600">- make sure to actually apply the rmap-updates patch
- iowait statistics
- ppc64 code merge (Mark &amp; Julie DeWandel)
- ppc64 build scripts (Matt Wilson)
- raise symlink recursion level to 8 (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050487200">- merge up to marcelo's latest
- pte-highmem bits for x86-64 and ppc64</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050400800">- merge up to 2.4.21-pre7-ac1
- drop semtimedop patches (now in -ac)
- drop nfs xprt_fixes, fix_softirq, d_drop and nfs-readeof (merged in -pre7)
- add !CONFIG_QUOTA compile fix for 2.4.21-pre7-ac1</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1050314400">- add LCS driver (endemic to s390)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050314400">- add rmap VM
- add kunmap_atomic debugging patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050141600">- remove dir.c part of NFS kmap_atomic patch for now
- using strlen as local variable name in nfs code kills, literally</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050055200">- merge S390(x) back in  (Pete Zaitcev)
- fix NFS kmap_atomic patch
- sched.c patch to disable interrupts in wake_forked_task  (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049968800">- AIO infrastructure  (Ben LaHaise)
- update NFS kmap_atomic patch  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049882400">- semtimedop patches  (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049796000">- I know understand linux-2.4.20-nfs-readeof.patch, so I merged it
- netdump update (Dave Anderson)
- 64 bit pci &amp; elf loader fix (Mark &amp; Julie)
- nptl whitespace patches, folded into nptl patch (Arjan van de Ven)
- rediff linux-2.4.18-smallpatches.patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049709600">- merge NFS patches by Steve Dickson (blame me for NFS kmap_atomic patch)
- split x86 syscall stuff out into separate patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049536800">- fix nptl patch, now it boots</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049450400">- port linux-2.4.20-o1-nptl.patch from gingin
- rediff a few patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049277600">- update linux-modules-unsupported (with Arjan)
- fix up the list a second time to fix module dependencies</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049191200">- copy -head into new AS3 branch
- remove i586 build
- remove 7.x compatibility (linux-2.4.9-fstat.patch)
- architecture patches get more breathing room (100 - 500)
- reserve patch numbers 1000 - 2000 for VM
- patch numbers 2000 - 5000 for bugfixes, changes and updates to
  existing drivers and filesystems
- remove inode reclaim patch (will be merged later as part of rmap)
- remove io priority scheduler (still experimental)
- remove nfs patches (linux-2.4.20-nfs-cto.patch,
  linux-2.4.20-nfs-access.patch &amp; linux-2.4.20-nfs-rdplus.patch)
- remove linux-2.4.18-gericom.patch
- update netdump from RH9 branch</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1048240800">- Added three NFS performance patches</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048240800">- add a timer for aging requests up</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048154400">- fix the sorting in the io elevator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048068000">- remerge ext3 orlov allocator and enable
- more priority io elevator infrastructure work</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1047117600">- merge ext3 orlov allocator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046772000">- go to 2.4.21-pre5-ac1
- split the rpm into a primary fileset and secondary (rare modules) fileset</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046253600">- go to 2.4.21-pre4-ac6
- drop lots of patches
- trim changelog to not have 2000, 2001 and 2002 anymore</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045476000">- downgrade pwc webcam driver one notch to the last known working version
- work around vm livelock
- make the cciss driver not enable irq's in it's irq handler</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1045130400">- fix for shared statistic &lt; 0</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045130400">- Signal fixes for LSB testsuite
- merge patch to fix init=/bin/sh
- 2.4.21-pre4-ac4 bugfixes (mostly IDE crashes)</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044784800">- merge 2.4.21-pre4-ac3 bugfixes</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1044352800">- Add ext3 fix for truncating negative i_blocks</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1044266400">- add oopsmeharder for debugging hard hangs</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044266400">- merge rmap15d
- set the sbp2 command buffer to 64 elements instead of 8</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1043834400">- merge tcp stall fix from DaveM
- merge bugfixes from 2.4.21-pre4</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1042452000">- Merge in the ACL and XATTR patches from the UL and BestBits trees.</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1042279200">- Merge in the LVM pvmove fix to current tree</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1042020000">- add AMD Golem fixup</changelog></package>
<package pkgid="6d533514691db3678387429780545ba68d7aecf8" name="kernel-unsupported" arch="x86_64"><version epoch="0" ver="2.4.21" rel="32.0.1.EL.XFS"/><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1117101600">- added SGI XFS patch set</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.0.1.EL" date="1116237600">- prevent shared memory lock/unlock w/o permissions (Dave Anderson)
- prevent mlock() resource limit bypass w/shm locking (Ernie Petrides)
- fix data corruption from pte_clear() races on &gt;4GB x86's (Larry Woodman)
- fix arg/env access in ELF core dumping and /proc reads (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.EL" date="1113559200">- fix data corruption w/ext3 xattr on 64-bit arches (Jason Baron)
- validate LCP frame lengths in PPP async handling (Dave Miller)
- enable forcedeth net driver builds in x86 configs (Jim Paradis)
- isolate IP fragment queues among various callers (Dave Miller)
- prevent busy inodes for symlinks after unmounts (Don Howard)
- revise PCI device ids extending ICH7 support (John Linville)
- work around broken xw4300 BIOS AHCI BAR setup (John Linville)
- add protocol validation in net bluetooth driver (John Linville)
- enable software watchdog timer in s390,x configs (Jan Glauber)
- fix data corruption w/uselib() on bad ELF libs (Ernie Petrides)
- add USB tablet init delay in wacom_probe() (Kristian Høgsberg)
- prevent core dumps with non-readable ELF interps (Dave Anderson)
- add maxevents validation in epoll_wait() handling (Ernie Petrides)
- add len validation in /dev/random poolsize sysctl (Ernie Petrides)
- correct size of ia64 syscall table initialization (Jason Baron)
- correct x86_64 user-mode i/o port validation (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-31.EL" date="1110448800">- fix missing ppc64 netdump/diskdump symbols (Nobuhiro Tachino)
- prevent ia64 unwind from traversing off stack (Jason Baron)
- disable 3w-9xxx driver builds on ppc64 (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-30.EL" date="1110362400">- fix obscure oops in tty init_dev() handling (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-29.EL" date="1109844000">- incorporate urgent late-breaking SATA fixes (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-28.EL" date="1109152800">- add more USB device support to visor driver (Pete Zaitcev)
- implement clustered APIC support for x86_64 (Larry Woodman)
- constrain x86 MSR writes based on cpu model (Jason Baron)
- increase max superbh size for performance (Stephen Tweedie)
- add locking to prevent oops in md_seq_show() (Doug Ledford)
- restore missing ia64 panic_on_oops handling (Tatsuo Uchida)
- implement Ethernet PCI quirk for HP xw9300 (Jim Paradis)
- revert NFS flock() avoidance to -27.7.EL (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.17.EL" date="1108980000">- rework NFS flock() avoidance w/FS_WANT_FLOCK for GFS (Ken Preslan)
- prevent inode corruption from delete/lookup races (Wendy Cheng)
- preserve registers for ia64 16-byte atomic ops (Geoff Gustafson)
- update SCSI whitelist for LSI/HP/STK/EMC devices (Tom Coughlan)
- disable vary_io in ips driver to avoid ctlr hangs (Tom Coughlan)
- correct handling of 2-TB device partitions (Peter Martuccelli)
- update support for ia64 perfmon facility (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.16.EL" date="1108720800">- implement diskdump support for SATA piix/promise (Nobuhiro Tachino)
- correct /proc/mtrr size values on EM64T platforms (Larry Woodman)
- restore page permissions after writes from ptrace() (Don Howard)
- fix /proc parent pids from multi-threaded forks (Ernie Petrides)
- enable software watchdog timer support on s390,x (Jan Glauber)
- update tg3 network driver to version 3.22RH (John Linville)
- incorporate 3w-9xxx driver version 2.24.00.011fw (Adam Manthei)
- correct ending boundary check in filemap_sync() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.15.EL" date="1108548000">- add e100 driver PCI device ids for ICH7 support (John Linville)
- restore obsolete but ignored e100 module params (John Linville)
- implement user-mode (gdb) access to ia64 gate page (Jason Baron)
- fix x86_64 FPU IP and DP values in SIGFPE context (Larry Woodman)
- add qla2200 module parameter to use NVRAM RIO val (Tom Coughlan)
- update 3w-xxxx driver to 1.02.00.037 w/.033 backup (Adam Manthei)
- fix crashes in video Firewire (ieee1394) driver (Bastien Nocera)
- prevent info leaks into ext3 journal disk blocks (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.14.EL" date="1108461600">- enhance AIO performance over NFS w/FS_AIO_SYNC hook (Steve Dickson)
- defer e100_tx_timeout() work from interrupt context (John Linville)
- correct IPV6 DST entry release to prevent route leak (Dave Miller)
- ignore MTU updates from invalid IPV6 ndisc packets (Dave Miller)
- add relevant PCI device ids to extend ICH7 support (John Linville)
- reduce system pauses during heavy page laundering (Larry Woodman)
- fix audit logging of paths w/predicate filter usage (Neil Horman)
- enable building of unsupported fusion isense module (Adam Manthei)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.13.EL" date="1108375200">- increase dxfer size limit for ppc64 SG_IO ioctl32 (David Howells)
- eliminate tty line discipline usage/switching races (Jason Baron)
- fix autofs recognition of ghosted direct map updates (Jeff Moyer)
- fix sg driver race between cmd completion and close (Tom Coughlan)
- prevent e100 data corruption from v.3.0.27-k2 update (John Linville)
- upgrade SATA support (core, libata, new/old drivers) (John Linville)
- implement diskdump support for sym53c8xx adapter (Yuichi Nagahama)
- add USB support for Wacom Cintiq/Intuos3 tablets (Kristian Høgsberg)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.12.EL" date="1107943200">- update e100 network driver to version 3.3.6-k2 (John Linville)
- correct cpu id macro for dual-core Opteron support (Jim Paradis)
- add "numa=off" message on x86_64 OOM kills w/NUMA (Larry Woodman)
- improve user/system timer tick accounting on s390,x (Pete Zaitcev)
- prevent EAGAIN errs from interrupted TCP recv() calls (Dave Miller)
- update cciss disk driver to version v2.4.54.RH1 (Adam Manthei)
- eliminate diskdump cpu id from frozen list (Nobuhiro Tachino)
- fix user-space access bug in USB vicam ioctl (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.11.EL" date="1107424800">- incorporate Emulex driver ioctl module version 1.0.13 (Tom Coughlan)
- eliminate potential call_lock deadlock with diskdump (Tatsuo Uchida)
- fix potential kiobuf_lock deadlock in free_kiovec() (Larry Woodman)
- add L2 cache descriptor for EM64T Irwindale processor (Neil Horman)
- prevent mmap() syscalls from choosing NULL mappings (Rik van Riel)
- include bounce buffer pages in show_mem() output (Larry Woodman)
- add I2C driver support for ICH5 in i2c-i801.c (John Linville)
- correct parport_pc errors on insmod failures (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.10.EL" date="1106906400">- fix futex_wait() race condition that allowed app hang (Ingo Molnar)
- add/correct write barrier placement in timer routines (David Howells)
- add x86_64 NMI switch support to debug kernel hangs (Yuichi Nagahama)
- restore CIV/LVI offset operation in i810_audio driver (John Linville)
- update e1000 network driver to version 5.6.10.1-k2 (John Linville)
- prevent bogus BUG_ON during multi-threaded core dump (Roland McGrath)
- fix x86_64 crash in huge_page_release() w/SHM_HUGETLB (Larry Woodman)
- fix possible mem corruption from /proc/kcore access (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.9.EL" date="1106647200">- fix core dumping over NFS mounts with "intr" option (Roland McGrath)
- prevent multi-threaded app hang from sys_wait4() race (Ingo Molnar)
- restore e1000 support for Intel PCI device id 1014 (John Linville)
- add ac97 quirk entries for HP xw6000/xw6200/xw8000 (John Linville)
- update b44 network driver to upstream version 0.95 (John Linville)
- revert NFS silly-delete and rpciod-hang patches (Steve Dickson)
- fix panics while backing up LVM snapshots (Heinz Mauelshagen)
- fix oops in redirect_target() on DHCP refresh (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.8.EL" date="1105696800">- rework ia64 INIT switch stacks for clean tracebacks (Tatsuo Uchida)
- fix USB raced timeout errors and ohci_complete_add() (Pete Zaitcev)
- add O_DIRECT handling in LVM driver handling (Heinz Mauelshagen)
- downgrade wait4() SIGCHLD/SIG_IGN warning message (Ingo Molnar)
- eliminate potential VMA list races with do_brk() (Dave Anderson)
- ignore ICMP Source Quench messages in tcp_v4_err() (Dave Miller)
- prevent VMA overlap crashes in insert_vm_struct() (Jason Baron)
- move flock() avoidance from NFS up to F/S layer (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.7.EL" date="1105437600">- fix 32-compat alt-stack signal handling on x86_64 (Geoff Gustafson)
- add initialization of ppc64 EEH error buffer size (David Howells)
- make ppc64 xmon work properly with Power5 console (David Howells)
- prevent infinite sync loop from NFS ESTALE writes (Steve Dickson)
- update 8139too network driver w/recent 2.4 fixes (John Linville)
- avoid netfilter oops when ip_conntrack is unloaded (Dave Miller)
- fix potential rpciod hangs during NFS sillydelete (Steve Dickson)
- avoid "No locks available" errors w/flock() on NFS (Ken Preslan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.6.EL" date="1104919200">- fix x86 phys proc ids for non-clustered APIC systems (Geoff Gustafson)
- return EINVAL on e100/e1000 rx-mini/rx-jumbo settings (John Linville)
- fix i810_audio regression from modified ICH6 PCI ids (John Linville)
- prevent race conditions in add_wait_queue_cond() macros (Jeff Moyer)
- fix FAT32 file system corruption w/writing 8M files (Alexander Viro)
- fix derivation/presentation of PHB unit ids on ppc64 (David Howells)
- close OpenFirmware stdin device at boot on ppc64 (David Woodhouse)
- fix 32-bit-compat regression in CMSG validations (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.5.EL" date="1103796000">- add "CommitLimit" data to /proc/meminfo output (Frank Hirtz)
- allow autofs to expire mounts on ppc64 arch (Jeff Moyer)
- add 3c59x EEPROM_RESET for 3c900 Boomerang (John Linville)
- ignore PTE mapping status in page_anon() (Larry Woodman)
- fix SIOCGIFHWADDR handling for zero addr_len (Dave Miller)
- add netdump support for x86_64, ia64, ppc64 (Dave Anderson)
- correct overcommit accounting on fork failure (Frank Hirtz)
- raise default ia64/ia32e swiotlb size to 64M (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.4.EL" date="1103709600">- add network CMSG validation checks (Dave Miller)
- fix data struct leak in ip_options_get() (Dave Miller)
- fix IGMP vulnerabilities in ip[6]_mc_source() (Dave Miller)
- fix e_phnum binfmt_elf loader vulnerability (Dave Anderson)
- clean x86_64 32-bit-compat syscall numbers (Jim Paradis)
- prevent ia64 floating point reg val leakage (Jason Baron)
- add USB io_edgeport driver size check (Peter Martuccelli)
- enable softirq deferral for x86_64 arch (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.3.EL" date="1102586400">- add data/param length sanity checks in smbfs (Alexander Viro)
- prevent /proc/&lt;PID&gt;/cmdline env data disclosure (Dave Anderson)
- make tulip_stop_rxtx() wait for DMA termination (John Linville)
- fix mm_stat regression introduced in -20.13.EL (Rik van Riel)
- correct return value from vlan_dev_change_mtu() (John Linville)
- serialize datagram read w/appropriate semaphore (Dave Miller)
- fix keyboard regression introduced in -24.EL (Peter Martuccelli)
- enable mmap/mprotect PROT_EXEC for legacy apps (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-26.2.EL" date="1101722400">- fix USB problems with keyboards and ia64 oopses (Pete Zaitcev)
- add i810 PCI IDs for nforce3/CK804 audio devices (Jim Paradis)
- fix ppc64 viodasd driver dev naming/limit bugs (David Howells)
- prevent tg3 fiber link bounces w/auto-negotiation (Dave Miller)
- add ac97 quirk handling for i810_audio driver (John Linville)
- prevent incorrect OOM killing with iscsi usage (Larry Woodman)
- create kiobuf cache to reduce lowmem contention (Larry Woodman)
- fix yet another binfmt_elf loader vulnerability (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.1.EL" date="1100512800">- (this is the first build for RHEL 3 Update 5)
- implement open() recovery from NFS ESTALE errors (Neil Horman)
- clean up warnings from lpfc and lpfc_703 Makefiles (Tom Coughlan)
- fix nessus-induced kernel panic with auditing (Peter Martuccelli)
- update 3c59x driver to LK1.1.18 and fix reset bug (John Linville)
- fix ext3 O_DIRECT bug in orphan list handling (Stephen Tweedie)
- flush cached dirty pages on NFS reads w/O_DIRECT (Steve Dickson)
- allow ia64 kernel unaligned access msg suppression (Neil Horman)
- correct test for performing buffer-head reclaim (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.EL" date="1100253600">- fix binfmt_elf loader vulnerabilities (Jim Paradis, Dave Anderson)
- limit kernel data struct slabs to single-page allocs (Larry Woodman)
- update Emulex driver to 7.1.14 (backup still 7.0.3) (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-24.EL" date="1100080800">- fix several ppc64 problems with signal catching (David Woodhouse)
- fix several bugs in /proc/ppc64/lparcfg driver (David Howells)
- fix possible diskdump hangs w/megaraid2 driver (Tatsuo Uchida)
- add support for IBM EM64T-based Groucho blade (Peter Martuccelli)
- fix regression in USB BIOS-&gt;kernel hand-off support (Pete Zaitcev)
- fix regression in ia64 kernel stack unwind handling (Don Howard)
- fix regression w/agpgart support of i8xx chipsets (Larry Woodman)
- add support for BLKSSZGET ioctl in cciss driver (Tom Coughlan)
- disable iSCSI builds in ppc64 and s390* configs (Tom Coughlan)
- update Emulex driver to 7.1.13 (backup still 7.0.3) (Tom Coughlan)
- correct SCSI whitelist for Chaparral FR1422 devices (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-23.EL" date="1098957600">- prevent kswapd from getting stuck in prune_icache() (Larry Woodman)
- fix ppc64 single-stepping into signal handlers (David Woodhouse)
- fix corruption from user stack expansion races (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-22.EL" date="1098093600">- prevent add/removal races in SCSI open handling (Doug Ledford)
- fix U3 agpgart regression with Intel i8xx chipsets (Dave Jones)
- update SCSI whitelist for IBM 1722/1724 devices (Tom Coughlan)
- correct TSS descriptor limit checking for x86_64 (Jim Paradis)
- add nforce3/CK804 device support and fix ACPI bug (Jim Paradis)
- add support for "forcedeth" net driver version 0.28 (Jim Paradis)
- enable diskdump support in amd64/ia32e configs (Nobuhiro Tachino)
- restore/improve linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- add missing page_cache_release() in launder_page() (Larry Woodman)
- update Emulex driver to 7.1.11 (backup still 7.0.3) (Tom Coughlan)
- add new USB ids to support latest Wacom tablets (Kristian Høgsberg)
- remove drivers/net/tun.o from unsupported list (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-21.EL" date="1096538400">- fix potential PTE race in do_anonymous_page() (Rik van Riel)
- add "Committed_AS" data to /proc/meminfo output (Frank Hirtz)
- revise DMA zone paging thresholds for x86_64 (Larry Woodman)
- prevent /proc/scsi/scsi oops during probes (David Woodhouse)
- avoid kswapd hangs via free_more_memory() hooks (Rik van Riel)
- update megaraid2 driver to 2.10.8.2 w/2.10.6 backup (Adam Manthei)
- fix do_notify_parent() panic from ptrace death race (Roland McGrath)
- fix large core file support on 64-bit architectures (Dave Anderson)
- enable tux on ia64 and increase max tux threads to 16 (Ingo Molnar)
- fix ia64/s390,x single-stepping w/signal handlers (David Woodhouse)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.14.EL" date="1096452000">- fix hang in SCSI starvation management code (David Howells)
- update SCSI whitelist for NETAPP LUN devices (Wendy Cheng)
- fix s390 cio handling during ESS fail-overs (Pete Zaitcev)
- update Emulex driver to 7.1.8 w/7.0.3 backup (Tom Coughlan)
- update Qlogic driver to 7.01.01 w/7.00.03 backup (Tom Coughlan)
- correct unlock/free order in proc_lookupfd() (Ernie Petrides)
- use ACPI for PCI interrupt routing on ia32e (Jim Paradis)
- allow cpus to boot w/APIC IDs &gt; 8 on ia32e (Jim Paradis)
- fix pid allocation when pid_max &gt; 32768 (Ernie Petrides)
- fix regs in multi-threaded ia64 core dumps (Keiichi Mori)
- enable sym53c8xx driver for ppc64 iSeries (David Howells)
- fix ac97 depmod errors w/hugemem configs (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.13.EL" date="1096365600">- fix aic79xx_osm.h/3c59x.c changes in prior rev (Tachino/Linville)
- allow for larger nfsd block sizes on some archs (Steve Dickson)
- fix possible aacraid driver panic in aac_info() (Tom Coughlan)
- fix xdr argsize check to handle writes &gt;= 2^31 (Steve Dickson)
- update e1000 network driver to version 5.3.19-k2 (John Linville)
- apply several cciss driver fixes (to 2.4.52.RH2) (Adam Manthei)
- fix x86_64 versions of cpu capability test macros (Jim Paradis)
- fix ppc64 HPTE memory corruption race condition (Rik van Riel)
- add sys_epoll support on s390,x (Stephen Tweedie, Pete Zaitcev)
- prevent keyboard.c warnings from mouse clicks (Norm Murray)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.12.EL" date="1096279200">- improve slab cache page reaping heuristics (Larry Woodman)
- implement diskdump support for x86_64 arch (Nobuhiro Tachino)
- add ia64 INIT trigger switch support for debugging (Tatsuo Uchida)
- fix several problems in handling of AIO on pipes (Jeff Moyer)
- update fixes for LTP read02 test hangs with tmpfs (Alexander Viro)
- fix x86_64 single-stepping out of signal handlers (Jim Paradis)
- increase size of ppc64 RTAS error log buffer (David Howells)
- increase max possible kNFSD lockd cookie size (Steve Dickson)
- backport 3c59x fixes for mii-tool problems w/10Mb (John Linville)
- incorporate Cisco's iscsi_sfnet initiator driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.11.EL" date="1095933600">- implement diskdump support for megaraid2 adapter (Tatsuo Uchida)
- update ips driver to version 7.10.18 w/7.00.15 backup (Tom Coughlan)
- correct max page aging interval boundary in kscand() (Larry Woodman)
- add ppc64 support for ptrace() with PT_SINGLESTEP (David Woodhouse)
- update e100 network driver to version 3.0.27-k2 (John Linville)
- fix LTP read02 test hangs when tmpfs is in use (Alexander Viro)
- get proc_dir_entry reference in proc_lookup() (Alexander Viro)
- add exports of several AIO-related interfaces (Larry Woodman)
- reduce swapping during excessive pagecache use (Larry Woodman)
- implement statfs64() syscall on x86 for NFS use (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.10.EL" date="1095847200">- implement early USB hand-off (BIOS-&gt;kernel) support (Pete Zaitcev)
- fix stack pointer calculation in x86 show() handling (Jeff Moyer)
- prevent interference between flock/POSIX lock types (Frank Hirtz)
- update pcnet32 network driver to version 1.30c (John Linville)
- add export of block_commit_write() f/s interface (Larry Woodman)
- implement diskdump support for dpt_i2o adapter (Tatsuo Uchida)
- update mptfusion driver to version 2.05.16.02 (Adam Manthei)
- move disk_dump_notifier_list to diskdumplib.c (Nobuhiro Tachino)
- update s390 zfcp driver to revision 5.31.2.11+ (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.9.EL" date="1095674400">- fix occasional ibmvscsic driver insmod crash (David Howells)
- disable linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- prevent double slashes in symlink auditing (Peter Martuccelli)
- fix overzealous compat32 setsockopt conversions (David Woodhouse)
- backport tulip driver fixes from upstream 2.4.28 (John Linville)
- update tg3 network driver to version 3.10RH (John Linville)
- implement sysctl to force igmp protocol versions (Neil Horman)
- add diskdump performance improvement info (Nobuhiro Tachino)
- fix s390 iucv lost connections and ping hangs (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.8.EL" date="1095588000">- prevent diskdump deadlock in case of die() recursion (Tatsuo Uchida)
- add x86/x86_64 support for ptrace() w/PT_SINGLESTEP (Roland McGrath)
- fix x86/x86_64 single-stepping into signal handlers (Roland McGrath)
- increase x86 value for MAX_MP_BUSSES definition to 260 (Ingo Molnar)
- eliminate ia64 potential for scheduler runq deadlock (Larry Woodman)
- add support for /proc/sys/kernel/mem_nmi_panic sysctl (Dave Anderson)
- prevent keyboard-initiated sysrq hangs in handle_sysrq() (Jeff Moyer)
- fix intermittent netdump hangs from cpu-frozen messages (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.7.EL" date="1095415200">- fix premature OOM killing change added in prior rev (Larry Woodman)
- backport vlan driver fixes from upstream 2.4.28-rc1 (John Linville)
- add _sb_findmap symbol export in s390/s390x kernels (Pete Zaitcev)
- add ppc64 support for 32-bit sendfile64() syscall (David Howells)
- fix 32-bit IPC_INFO shmctl() syscalls for ppc64 (David Howells)
- upgrade libata/SATA support to current 2.4 bits (John Linville)
- avoid USB device resets of shared/busy interfaces (Pete Zaitcev)
- fix miscellaneous problems in ppc64 icom driver (David Howells)
- fix ip_queue_maxlen sysctl for ip[6]_queue modules (Neil Horman)
- add module parm for max entries in NFS_ACL replies (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.6.EL" date="1095156000">- prevent OOM killer from kicking in prematurely (Larry Woodman)
- avoid NMI watchdog crashes during sysrq-m usage (Wendy Cheng)
- add auditing support for ia64 clone2 syscall (Peter Martuccelli)
- correct sign of auditing error codes for ia64 (Peter Martuccelli)
- implement ia64 auditing 32-bit-disable sysctl (Peter Martuccelli)
- fix ia64 faults w/stale VHPT-generated TLB entries (Dave Anderson)
- fix invalid x86_64 checksums for multicast packets (Mike Gahagan)
- fix incorrect blocking bug inside wakeup_kswapd() (Larry Woodman)
- validate appropriate media type in DVD drives (Doug Ledford)
- reduce s390 stack usage in qeth/qdio drivers (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.5.EL" date="1094810400">- prevent scenarios that lead to hang of kswapd (Larry Woodman)
- add locking for access to /proc/bus/usb/devices (Pete Zaitcev)
- correct x86 rescheduling to handle apm=power-off (Ingo Molnar)
- fix OOM killer locking and mm referencing holes (Larry Woodman)
- pin ia64 mapping for idle proc stack during boot (Larry Woodman)
- fix warning throttle for amd64 stack overflow check (Neil Horman)
- fix content lengths when using tux gzip compression (Ingo Molnar)
- add auditing support for pread/pwrite syscalls (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.4.EL" date="1094724000">- prevent bogus data in /proc/scsi/ibmvscsi/* (David Howells)
- update tg3 network driver to version 3.9RH (John Linville)
- improve ramfs memory alloc w/scarce highmem (Larry Woodman)
- correct several values in /proc/ppc64/lparcfg (David Howells)
- allow dirty page rebalancing under mem pressure (Rik van Riel)
- prevent memory leak in scsi_build_commandblocks() (Doug Ledford)
- fix potential kswapd deadlock w/disk quota usage (Larry Woodman)
- increase MAX_IO_APICS from 8 to 32 for x86_64 arch (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.3.EL" date="1094205600">- fix various error path bugs in bcm5820 driver (John Linville)
- validate addresses used with /dev/kmem accesses (Neil Horman)
- eliminate IPSEC tunnel leaks when using IPComp (Dave Miller)
- add auditing support for utimes() syscalls (Peter Martuccelli)
- prevent netconsole freeze w/cable dis-/re-connect (Jeff Moyer)
- correct reboot_cpu validation for "reboot=s&lt;n&gt;" (Doug Ledford)
- fix mem/irq clean-up in olympic tokenring driver (Neil Horman)
- update network bonding driver to version 2.6.0 (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.2.EL" date="1094032800">- add maps/rlimits output with print-fatal-signals=2 (Ingo Molnar)
- backport ac97 sound support from upstream 2.4.27 (John Linville)
- eliminate kernel stack data leaks from USB drivers (Mark Cox)
- fix interrupt status mask in AMD PCnet32 driver (David Howells)
- fix module loading problems in ibmvscsic driver (David Howells)
- fix x86 shared runq mapping when ACPI data is bad (Bernd Schmidt)
- disable enhanced error handling on PCI-ISA bridges (David Howells)
- add memory-mapped i/o support to i810_audio driver (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.1.EL" date="1093860000">- (this is the first build for RHEL 3 Update 4)
- backport r8169 network driver changes from 2.4 (John Linville)
- update i810_audio sound driver to version 1.01 (John Linville)
- convert USB UHCI driver warning to debug message (Pete Zaitcev)
- backport 2.6 PROT_GROWSDOWN/UP mprotect() support (Jakub Jelinek)
- lower ppc64 console logging level of RTAS messages (David Howells)
- fix ppc64 handling of "smt-emabled=off" boot option (David Howells)
- correct socket sndbuf accounting w/IP_MULTICAST_LOOP (Neil Horman)
- reduce x86_64 user stack start randomization to 16K (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.EL" date="1092823200">- change TARGET_CPUS on x86_64 to include all on-line cpus (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-19.EL" date="1092304800">- fix possible races/overflows in file offset handling (Alexander Viro)
- correct logging of boot progress messages on Power5 (David Howells)
- extend ppc64 EEH support for other types of devices (David Howells)
- fix ibmveth driver to properly shut down and restart (David Howells)
- fix several races and overflows in ppc64 RTAS driver (David Howells)
- backport "acpi=noirq" support to work around Nocona hangs (Don Howard)
- conditionalize pbn_hp_diva to fix serial driver oops (Matthew Galgoci)
- add amd64 GART entry guard mappings for PCI mis-prefetch (Jim Paradis)
- upgrade SATA support again to resolve several problems (Jeff Garzik)
- qualify ia32e IRQ affinity disable with BIOS flag check (Jim Paradis)
- fix eeh_check_failure() on ppc64 to be interrupt safe (David Howells)
- correct ppc64 EEH macros to use appropriate data size (David Howells)
- fix x86/ia64 no-wait handling in smp_call_function() (Larry Woodman)
- fix "Filter target 0x203 not known ..." audit msgs (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-18.EL" date="1090404000">- prevent s390 mlock hangs with follow_page() rework (Ernie Petrides)
- fix Power5 initialization and handling of RAS IRQs (David Howells)
- fix ppc64 viocons driver deadlocks with printk() (David Howells)
- apply eh_timeout, netdump, cli fixes in diskdump (Tatsuo Uchida)
- add skip_mapped_pages tuning for page eviction (Stephen Tweedie)
- fix initrd's effect on ppc64 mem_end calculation (David Howells)
- allow HT support on ppc64 systems with single cpu (David Howells)
- backport v2.0.8 aic7xxx driver h/w support for Dell (Tom Coughlan)
- correct ppc64 device node searching in hvsi driver (David Howells)
- fix KMI compat problem w/pgprot_t in x86 NX support (Jim Paradis)
- resurrect mptfusion driver backup version 2.05.05 (Tom Coughlan)
- disable IRQ affinity setting on some ia32e systems (Jim Paradis)
- update SCSI whitelist for Dot Hill SANnet/StorEdge (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-17.EL" date="1089280800">- account for zone holes in big hash table allocator (Stephen Tweedie)
- prevent reserved stack space overflow of mmap_top (Ernie Petrides)
- fix USB crash in scan_async() with EHCI hardware (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-16.EL" date="1088848800">- enable exec-shield and add x86 NX support (Ingo Molnar, Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.19.EL" date="1088762400">- add owner check in inode_change_ok() for gid changes (Ernie Petrides)
- fix race in finish_task_switch() between wakeup/exit (Ernie Petrides)
- remove Samsung CD-ROM SN-124 from IDE DMA blacklist (Tom Coughlan)
- update e1000 network driver to version 5.2.52-k3 (John Linville)
- add auditing support for semtimedop syscalls (Peter Martuccelli)
- fix tasklet and locking bugs in Power5 hvsi driver (David Howells)
- fix megaraid2 handling of TUR cmds with SCSI CD-ROM (Adam Manthei)
- update SCSI whitelist for HP NS E1200-160 router (Tom Coughlan)
- prevent x86 read_ldt() from reading beyond kmap (Ernie Petrides)
- force single loadable segment in ia64 kernels (Jakub Jelinek)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.18.EL" date="1088157600">- implement ia64 work-around for TLB fetch timeout MCA (Larry Woodman)
- fix Power3 interrupt initialization in ppc64 setup (David Howells)
- correct info msg, prevent double panic in diskdump (Tatsuo Uchida)
- defend against NULL "mm" ptrs in page_referenced() (Rik van Riel)
- fix miscellaneous audit subsystem problems (Peter Martuccelli)
- prevent crash with tux CGI execution on x86_64 (Ingo Molnar)
- add installer info to SATA sx8 block driver (Jeff Garzik)
- turn on vary_io flag in SCSI ips driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.17.EL" date="1087984800">- allocate big system hash tables w/bootmem allocator (David Howells)
- prevent loading aic7xxx_old when aic7xxx is in use (Doug Ledford)
- implement stat() recovery from NFS ESTALE errors (Steve Dickson)
- fix raw/O_DIRECT i/o bug with unmapped pages (Stephen Tweedie)
- correct another locking hole in RAID1 handling (Doug Ledford)
- fix __x86_64__ conditional in megaraid2.c driver (Adam Manthei)
- fix unresolved symbols on ia64 in cciss driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.16.EL" date="1087898400">- make NFS sillydelete wait for unlink completion (Steve Dickson)
- prevent EIO w/concurrent O_DIRECT+buffered i/o (Stephen Tweedie)
- upgrade SATA support (core, libata, and drivers) (Jeff Garzik)
- implement futex() FUTEX_CMP_REQUEUE op (Al Viro, Pete Zaitcev)
- update b44 network driver to version 0.93 (John Linville)
- avoid unix_stream_sendmsg() ENOBUFS errors (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.15.EL" date="1087812000">- improve SCSI mid-layer error handling w/sdev_retry_q (Doug Ledford)
- eliminate rw-semaphore races between waiter/wakeup (David Howells)
- add locking and fix accounting bug in RAID1 handling (Doug Ledford)
- backport Carmel sx8.c driver from upstream 2.4 base (John Linville)
- rename ppc64-squadrons-* patches to ppc64-power5-* (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.14.EL" date="1087639200">- introduce support for IBM Squadrons/Power5 systems (David Howells)
- update aacraid driver to 1.1.5-2339 w/1.1.2 backup (Adam Manthei)
- allow sys_remap_file_pages() on unlocked ramfs VMAs (Larry Woodman)
- fix diskdump hangs during resets with aic79xx driver (Tatsuo Uchida)
- fix possible data corruption when using SHM_HUGETLB (Larry Woodman)
- set QLogic HbaApiNode proc file permissions to 0600 (Tom Coughlan)
- add IRQ blocking/restoring in add_gendisk/del_gendisk (Jeff Needle)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.13.EL" date="1087466400">- fix problem causing PCI bus 255 to be missing on ia64 (Ben Woodard)
- make nfs_statfs() recognize/handle fs size overflows (Steve Dickson)
- update QLogic driver to 7.00.03-RH1 w/6.07.02 backup (Tom Coughlan)
- allow procfs to utilize more dynamic inode numbers (David Howells)
- prevent inappropriate "unexpected IO-APIC" messages (Ernie Petrides)
- avoid lost dirty page bits in s390/s390x VM handling (Pete Zaitcev)
- fix ACPI SCI interrupt defaults and add kernel params (Jim Paradis)
- fix user-space access bugs in acpi/airo/decnet/sound (Alexander Viro)
- remove drivers/net/starfire.o from unsupported list (Ernie Petrides)
- fix mm_struct mem leak in copy_process() error path (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.12.EL" date="1087293600">- correct s390/s390x tests for PT_AUDITED flag (Peter Martuccelli)
- update e100 network driver to version 2.3.43-k1 (John Linville)
- update megaraid2 driver to 2.10.6 w/2.10.1.1 backup (Adam Manthei)
- add x86_64 auditing support for 32-bit-compat (Peter Martuccelli)
- fix ia64 unwind handling for UNW_INSN_SETNAT_MEMSTK (Jason Baron)
- update cciss driver to v2.4.52 for several fixes (Tom Coughlan)
- fix variable block mode tape handling in st driver (Tom Coughlan)
- incorporate latest Emulex fibre channel driver (Tom Coughlan)
- fix USB EHCI problem with BIOS-to-host handoff (Pete Zaitcev)
- update SCSI whitelist for DDN/Xyratex/SanDisk/CBOX3 (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.11.EL" date="1087207200">- upgrade to latest autofs4, remove from unsupported list (Jeff Moyer)
- fix memory corruption bug in audit driver code (Peter Martuccelli)
- store adjusted KSP value in ia64 diskdump support (Tatsuo Uchida)
- update e1000 network driver to version 5.2.52-k1 (John Linville)
- update ips driver to version 7.00.15 w/6.11.07 backup (Adam Manthei)
- implement USB device interlock between ioctls/SCSI-ops (Pete Zaitcev)
- update tg3 driver to version 3.6RH for upcoming chipsets (Dave Miller)
- downgrade several PCI cache line size debugging messages (Jim Paradis)
- correct x86_64 32-bit-compat support for AIO syscalls (Jeff Moyer)
- prevent FPU exception handling hangs on x86/x86_64 (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.10.EL" date="1086948000">- give wait.func highest priority in wake_up_filtered() (Larry Woodman)
- reduce system time when using sys_remap_file_pages() (Larry Woodman)
- enable CONFIG_SOFT_WATCHDOG module for ppc64 configs (David Howells)
- improve page allocation to avoid unnecessary swapping (Rik van Riel)
- implement diskdump support for ia64 with mptfusion (Tatsuo Uchida)
- disable native ia32 support for ia64 Montecito cpus (Jason Baron)
- save/restore P4/ia32e perf registers for oprofile (Will Cohen)
- fix oprofile ESCR_SET_EVENT_SELECT() event mask (Will Cohen)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.9.EL" date="1086775200">- update s390 zcrypt driver to version 1.2.1 (Pete Zaitcev)
- update network tg3 driver to version 3.5RH (Dave Miller)
- eliminate separate ia32e oprofile processor id (Will Cohen)
- update SCSI whitelist for IBM 2105/2145 devs (Doug Ledford)
- avoid EAGAIN errors on blocking UDP sockets (Steve Dickson)
- avoid putting locked inodes on dirty list (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.8.EL" date="1086688800">- decouple NFS O_DIRECT handling for performance gain (Steve Dickson)
- export page_is_ram() interface for amd64/ia32e arch (Jim Paradis)
- enable CONFIG_SCSI_SATA_* options in x86_64 configs (Jim Paradis)
- update mptfusion driver to 2.05.16 w/2.05.11.03 backup (Adam Manthei)
- fix nopage_sequential_readahead() and filemap_sync() (Larry Woodman)
- fix USB EHCI driver to avoid Squadrons install oops (Pete Zaitcev)
- add x86 NMI trigger switch support for debugging (Yuichi Nagahama)
- add dmi_blacklist[] entry for "Intel NA440BX DP" (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.7.EL" date="1086602400">- apply some minor scsi_dump_status() format tweaks (Doug Ledford)
- implement SCSI support for dynamic add (hot plug) (Doug Ledford)
- upgrade lvm driver logic to version 1.0.8-2 (Heinz Mauelshagen)
- fix x86_64 definition for inlined ffs() function (Jim Paradis)
- preserve VM_MAYEXEC for executable stack support (Jim Paradis)
- add extra SLBIEs for ppc64 Power5 DD2.0 errata (David Howells)
- add ppc64 32-bit compat for TIOCGICOUNT/MIWAIT (David Howells)
- hold file struct ref when removing POSIX locks (Steve Dickson)
- fix window scaling bug in tcp_ack_update_window() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.6.EL" date="1086343200">- make fsync() flush all pending NFS updates to disk (Steve Dickson)
- complete ia64 support for multiple I/O port spaces (Larry Woodman)
- fix sending of IP broadcast frames with TTL of zero (Neil Horman)
- prevent context switch storms under high VM loads (Larry Woodman)
- fix sigaltstack() errors w/JVM on hugemem kernels (Roland McGrath)
- add locking and improve output in scsi_dump_status() (Doug Ledford)
- add size boundary checking in scsi_resize_dma_pool() (Doug Ledford)
- fix SCSI request struct leak on command init failures (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.5.EL" date="1084528800">- overhaul ia64 SAL/MCA subsystem (Ben Woodard)
- enable x86_64 32-bit UID support (Jim Paradis)
- add initial diskdump support (Nobuhiro Tachino)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.4.EL" date="1084356000">- reduce chance of "VFS: Busy inodes after unmount." errs (Steve Dickson)
- convert "uaddr2" arg ptr in s390x futex() compat syscall (Pete Zaitcev)
- add ppc64 32-bit compat handler for PE_LOCKED_COPY ioctl (David Howells)
- update s390 dasd driver with several recent bug fixes (Pete Zaitcev)
- fix amd64 NUMA node scanning for Northbridge systems (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.3.EL" date="1084183200">- prevent exp_stopfodrop() oops during cluster failover (Steve Dickson)
- make nfs_file_commit() always flush the entire file (Steve Dickson)
- fix pcnet32 driver's MAC address selection on ppc64 (Julie DeWandel)
- backport /dev/random driver fixes for missed wakeups (Mark DeWandel)
- fix hang w/SoundBlaster 16-bit sampling w/odd count (Ernie Petrides)
- make s390 tape driver specify GPL module license type (Pete Zaitcev)
- correct buffer len value in ppc64 pSeries ipr driver (David Howells)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.2.EL" date="1083664800">- enable booting on 8-way Opteron systems (Jim Paradis)
- fix 32-bit-compat truncate64() on x86_64 (Jim Paradis)
- correct promiscuous mode counter handling (Dave Miller)
- support 128-GB ia64 systems w/HP zx1 chipset (Larry Woodman)
- add export of sys_ioctl() global symbol on s390x (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.1.EL" date="1083578400">- (this is the first build for RHEL 3 Update 3)
- reenable/fix linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- clean up file locks when NFS clients receive signals (Steve Dickson)
- complete ia64-specific LAuS syscall auditing support (Mark DeWandel)
- prevent NULL pointer dereference in page_referenced() (Rik van Riel)
- fix max sectors argument in lvm_snapshot_alloc() (Heinz Mauelshagen)
- allow AGP bus scanning to execute for all architectures (John Dennis)
- fix page_referenced() rss limit checks w/unmapped pages (Rik van Riel)
- correct locking and cr/lf problems in usbserial driver (Pete Zaitcev)
- add /proc/cpuinfo support for new ppc64 processors (Julie DeWandel)
- fix sense data handling on certain SCSI cmd retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.EL" date="1082541600">- fix clobbering of /proc/cpuinfo vendor_id on x86_64 (Jim Paradis)
- correct MCAST_MSFILTER/IP_MSFILTER size checking (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-14.EL" date="1081936800">- disable linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- prevent symlink buffer overflow in ISO-9660 fs (Ernie Petrides)
- check for skb overrun in IPV4/IPV6 IGMP handling (Dave Miller)
- fix possible hang in rebalance_laundry_zone() (Larry Woodman)
- correct zone_wired[] initialization for NUMA (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-13.EL" date="1081332000">- fix several critical libata bugs (Jeff Garzik)
- correct IPSEC XFRM policy ref counting (Dave Miller)
- add amd64/ia32e parsing for "acpi=off" arg (Jim Paradis)
- update tg3 driver to v3.1 for several fixes (Dave Miller)
- fix SCSI whitelist for Hitachi/HP DFx00, Apple Xserve (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-12.EL" date="1080295200">- add USB support for Handspring Treo 600 PDA syncing (Matthew Galgoci)
- clear state for CPEs during ia64 MCA SAL error logging (Ben Woodard)
- prevent DMA resource leak in QLogic driver error path (Tom Coughlan)
- change default QLogic driver device queue depth to 64 (Tom Coughlan)
- replace fabricated cciss drive geometry w/ENXIO error (Tom Coughlan)
- update SCSI whitelist for HP SureStore/StorageWorks (Tom Coughlan)
- disable CONFIG_ACPI_DEBUG in amd64/ia32e configs (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-11.EL" date="1078740000">- add yet another Intel ICH6 SATA PCI id (Jeff Garzik)
- fix ref counting in copy_process() error path (Larry Woodman)
- remove ia64 support for /proc/bus/mckinley/bitmap (Jason Baron)
- correct depmod versioning for unsupported modules (Ernie Petrides)
- prevent data corruption in ia32e phys_proc_id[] info (Larry Woodman)
- change default value for inactive_clean_percent to 30 (Larry Woodman)
- enable improved version of s390 on-demand timer patch (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-10.EL" date="1078221600">- incorporate late-breaking libata fixes (Jeff Garzik)
- enable amd64 syscall for tux support (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.17.EL" date="1078135200">- reduce s390 idle overhead with on-demand timer patch (Pete Zaitcev)
- complete ia64 NPTL support for 32-bit-EL executables (Jason Baron)
- add several ia64 syscall table entries for 32-bit-EL (Jason Baron)
- upgrade libata/SATA support, delete ich5-sata.patch (Jeff Garzik)
- check for mremap/vmtruncate race in move_one_page() (Jason Baron)
- prevent ia64 NaT-bit corruption during sig catching (Jason Baron)
- fix amd64 get_mtrr() parsing error with &gt;4GB memory (Jim Paradis)
- change amd64 default behavior to avoid TSC timer use (Jim Paradis)
- force s390utils upgrade to prevent zipl seg fault (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.16.EL" date="1078048800">- restore varyio capability in mptfusion driver update (Adam Manthei)
- enhance SCSI mid-layer queuing for indefinite retries (Doug Ledford)
- add ia64 reg reloads for 32-bit-EL strace -f support (Jason Baron)
- fix ia64 core dump support for 32-bit-EL executables (Jason Baron)
- add SCSI whitelist devs with BLIST_RETRY_ABORTED_CMD (Doug Ledford)
- remove stack-in-interpreter check in binfmt_elf.c (Julie DeWandel)
- clear all flags in exec_usermodehelper() for kmod (Alexander Viro)
- fix aacraid command completion (rq corruption) bugs (Tom Coughlan)
- correct cciss_proc_tape_report() type in flags decl (Tom Coughlan)
- enable USB-2.0-hub-based mice/keyboards to function (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.15.EL" date="1077962400">- fix amd64 oprofile linkage problem in ia32e support (Ernie Petrides)
- update ips driver to version 6.11.07 w/6.10.52 backup (Tom Coughlan)
- add size checks to DRM ATI r128 driver ioctl handling (John Dennis)
- avoid megaraid2 irq_disable calls for mem-mapped ctlrs (Tom Coughlan)
- upgrade firmware imbedded in QLogic driver to 3.02.24 (Tom Coughlan)
- correct ia64 memory accounting in overcommit mode 2 (Larry Woodman)
- implement softirq deferral to limit kernel stack depth (Ingo Molnar)
- reduce kernel stack usage in a couple of tux functions (Ingo Molnar)
- fix shared extended attribute ref counting in ext3 (Stephen Tweedie)
- clear SCSI sense data buffer between eh retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.14.EL" date="1077789600">- add .RH1 suffix to cciss driver version v2.4.50 (Tom Coughlan)
- implement initial LAuS syscall auditing support (Mark DeWandel)
- introduce GFS enablers for locking and sendfile ops (Ken Preslan)
- update QLogic driver to 6.07.01 w/6.06.00b11 backup (Tom Coughlan)
- improve netdump reliability w/asynchronous IPI param (Jeff Moyer)
- add ICH6 DSP audio support to i810_audio driver (Jeff Garzik)
- apply SCSI whitelist updates for several devices (Tom Coughlan)
- fix odd byte tape i/o handling in sym53c8xx driver (Tom Coughlan)
- correct minimum nfsd version that supports acls (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.13.EL" date="1077703200">- allow concurrent NFS direct i/o to same file if !append (Steve Dickson)
- introduce support for new Intel 64-bit ia32e processor (Larry Woodman)
- update mptfusion driver to 2.05.11.03 w/2.05.05 backup (Adam Manthei)
- remove fs/binfmt_misc.o from linux-modules-unsupported (Jason Baron)
- fix ia64 predicate register use in sig trampoline code (Jason Baron)
- add oprofile cpu type recognition for ia32e processor (Will Cohen)
- update e1000 network driver to version 5.2.30.1-k1 (Jeff Garzik)
- add more Intel PCI ids to match upstream 2.4 (Jeff Garzik)
- add ICH6 PATA support, PCI ids, irq routing (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.12.EL" date="1077530400">- add deferred page freeing for intr-context unmap_kvec() (Jeff Moyer)
- update megaraid2 driver to v2.10.1.1 w/v2.00.9 backup (Tom Coughlan)
- fix ppc64 pte hash table locking to avoid deadlocks (Julie DeWandel)
- fix ia64 data TLB init to prevent random boot-up hangs (Jason Baron)
- fix ia64 RNat register corruption with alt sig stacks (Jason Baron)
- allow smaller ia64 sig stacks in ia32 emulation layer (Jason Baron)
- backport ncpfs fixes to eliminate var-length arrays (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.11.EL" date="1077271200">- backport cisco aironet driver from 2.6.3-rc4 (Matthew Galgoci)
- update tg3 driver to v2.7 to fix status reg handling (Dave Miller)
- correct lost jiffies logic for x440/5 cyclone timer (Bernd Schmidt)
- fix open() error clean-up for unsupported O_DIRECT (Stephen Tweedie)
- prevent ia64 crashes when unmapping hugetlb pages (Jason Baron)
- add ppc64 processor support for future PPC970+ (Julie DeWandel)
- rework ppc64 32-bit-compat iptables support (Julie DeWandel)
- fix func ptr test in ethtool_set_ringparam() (Jeff Garzik)
- disable linux-2.4.21-scsi-affine-queue.patch (Doug Ledford)
- improve scsi_allow_ghost_devices description (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.10.EL" date="1077098400">- fix amd64 iommu bug causing data corruption on &gt;4GB systems (Jim Paradis)
- return EINVAL for unsupported ioctl32 syscalls on ppc64 (Julie DeWandel)
- remove incorrect BUG() call in __remove_inode_page() (Stephen Tweedie)
- fix s390 ctc driver problem causing build system hangs (Pete Zaitcev)
- fix s390 qeth driver error path to reset write_busy (Pete Zaitcev)
- update s390 zfcp driver to fix miscellaneous bugs (Pete Zaitcev)
- apply upstream nfs fixes for acl error handling (Steve Dickson)
- prevent kernel stack data leak via /dev/rtc (Ernie Petrides)
- allow AIO operations on sockets for non-inet (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.9.EL" date="1076925600">- restore genksyms_smp_prefix setting for non-x86 builds (Ernie Petrides)
- display/log memory stats whenever there's an OOM kill (Larry Woodman)
- update tg3 driver to v2.6, the latest upstream version (Jeff Garzik)
- update net bonding driver to v2.4.1, latest upstream (Jeff Garzik)
- fix irq, mem, printk, strtol bugs in cciss driver (Tom Coughlan)
- wait for board ready after hot add, cciss driver (Tom Coughlan)
- enable cciss adapter prefetch for x86 platforms (Tom Coughlan)
- add preserve_arg0 handling for ia32 emulation (Larry Woodman)
- fix ppc64 compat support for quota syscall (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.8.EL" date="1076580000">- remove Power-Blade-specific def for USB TEAC floppy (Julie DeWandel)
- fix s390 crash in iucv driver on connection shutdown (Pete Zaitcev)
- fix ia64 ACPI parsing for multinode IDE devs on x455 (Jim Paradis)
- fix amd64 core dumping of multithreaded 32-bit apps (Jim Paradis)
- fix s390 oprofile conditional and zero top addr bits (Will Cohen)
- add ipr driver v1.0.3 for IBM's PPC RAID adapters (Tom Coughlan)
- add {alloc,free}_netdev(), list macro, tg3 PCI ids (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.7.EL" date="1076407200">- restrict /proc/tty/driver directory access to root (Jeff Moyer)
- allow non-standard usr/sys VM splits at 2G/2G, 1G/3G (Ingo Molnar)
- extend existing ppc64 RTAS firmware flash interface (Mark DeWandel)
- fix ppc64 version of strncpy() to zero-pad buffers (Julie DeWandel)
- fix s390/x version of strncpy() to zero-pad buffers (Pete Zaitcev)
- fix generic version of strncpy() to zero-pad buffers (Jim Paradis)
- improve ppc64 segment table entry replacement logic (Julie DeWandel)
- correct type/cast of "len" in ppc64/kernel/nvram.c (Julie DeWandel)
- implement new ppc64 RTAS system call interface (Julie DeWandel)
- increase x86 RSDT table limit in ACPI parsing (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.6.EL" date="1076320800">- fix more usb-storage bugs for Power Blade support (Julie DeWandel)
- remove extra inactive_clean_pages-- in reclaim_page() (Larry Woodman)
- return proper error codes for do_munmap() failure in mremap (Dave Jones)
- fix binfmt_elf.c problems for apps with huge bss regions (Julie DeWandel)
- update cciss driver to v2.4.50 for Smart Array 6i support (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.5.EL" date="1075975200">- prevent netdump progress output from filling up log_buf (Jeff Moyer)
- add ppc64 RAS hook at end of panic() processing (Julie DeWandel)
- correct source IP address in ICMP error message (Dave Miller)
- fix smp deadlock with pdeath_signal posting (Roland McGrath)
- add ppc64 support for /proc/ppc64/lparcfg (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.4.EL" date="1075888800">- update nfsd mode-with-acls fix for upstream conformance (Steve Dickson)
- rework usb-storage locking to avoid hangs on disconnect (Pete Zaitcev)
- fix mmio alignment error in olympic token ring driver (Julie DeWandel)
- prevent tux logger-thread shutdown problems on ppc64 (Ingo Molnar)
- add ppc64 AltiVec chip support for Power Blades (Julie DeWandel)
- eliminate multi-threaded coredump hang potential (Ingo Molnar)
- fix ppc64 segfaults with tasks &gt; 2GB in size (Julie DeWandel)
- fix usb-storage memory-allocation/iowait deadlock (Alan Cox)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.3.EL" date="1075716000">- add amd64 support for PT_GNU_STACK with exec shield (Jim Paradis)
- fix s390 raid1 sync problem w/writes at end of dev (Pete Zaitcev)
- update s390 zcrypt driver to version 1.1.4 (Pete Zaitcev)
- fix output of large /proc/pid/statm values (Mark DeWandel)
- fix output of large /proc/partitions values (Mark DeWandel)
- enable ppc64 support for JS20 Power Blades (Julie DeWandel)
- fix kernel stack memory leak on fork failures (Dave Anderson)
- fix ipv6 packet quoting problem in icmpv6_send() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.2.EL" date="1075370400">- apply Intel's x86 microcode loader update (Jim Paradis)
- enhance PCI multifunction support for ppc64 (Julie DeWandel)
- fix nfsd returning bad mode bits when acls set (Steve Dickson)
- prevent unkillable zombies from detached NPTL threads (Ingo Molnar)
- avoid missing scsi disks in /proc/partitions on detach (Jason Baron)
- correct pte calculation inside zeromap_pte_range() loop (Ben Woodard)
- add inline function PDE() to help driver backporting (Matthew Galgoci)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.1.EL" date="1074679200">- (this is the first build for RHEL 3 Update 2)
- relocate various pieces of the "undo" patch (Patch Review Committee)
- rename s390 zcrypt and zfcp driver patches (Pete Zaitcev)
- add LKML discussion to COPYING.modules (Arjan van de Ven)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.EL" date="1073556000">- fix race condition between thread creation and signals (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-8.EL" date="1073469600">- fix amd64 eflags masking in 32-bit emulation of ptrace (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-7.EL" date="1073383200">- fix numerous ppc64 problems with /proc access (Julie DeWandel)
- allow user core files larger than 2GB in size (Dave Anderson)
- add ia64 support for Crestone Peak AGP bridges (John Dennis)
- fix unaligned kernel accesses in nfs_readdir() (Steve Dickson)
- add new_len/new_addr checks in do_mremap() (Ernie Petrides)
- fix nfs O_DIRECT corruption with &gt;4GB files (Steve Dickson)
- enable bus scan for AGP ctlrs on amd64 systems (John Dennis)
- limit PCI-alloc'ed physaddrs to 4GB on HP ia64 (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-6.EL" date="1070877600">- fix ppc64 firmware updates (Julie DeWandel)
- fix sync wakeup problem (Ingo Molnar)
- add ia64 cyclone support (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-5.EL" date="1070272800">- undo rejected patches (Stephen Tweedie, Arjan van de Ven, Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.20.EL" date="1069840800">- enable NUMA support in amd64 smp configs (Jim Paradis)
- prevent oopses with tux in OOM scenarios (Ingo Molnar)
- apply several ipv6 multicast bug fixes (Dave Miller)
- assign retval in copy_process() error path (Ingo Molnar)
- add lseek-in-/proc support for s390x "ps" (Pete Zaitcev)
- redefine zone_is_highmem() for Celestica (Dave Anderson)
- fix unresolved symbols in amd64 modules (Bill Nottingham)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.19.EL" date="1069754400">- fix tg3 rx_pending limit for BCM5705/BCM5782 chips (Jeff Garzik)
- reset page error flag prior to read of new contents (Jeff Moyer)
- enable CONFIG_HOTPLUG_PCI option for ia64 configs (Doug Ledford)
- fix inactive laundry list race in ramfs_writepage() (Dave Anderson)
- avoid out_of_memory() for wired pages when there's lomem (Dave Anderson)
- conditionalize ppc64 machdep_calls change for KMI compat (Ernie Petrides)
- limit anon/cache pages scanned in refill_inactive_zone() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.18.EL" date="1069668000">- create old version (rev. 5.64) of cmpci sound driver (Tom Coughlan)
- remove ac97.o, ad1848.o, cs4232.o from unsupported (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.17.EL" date="1069063200">- fix missing use of __GFP_HIGHMEM flag in pte_alloc_one() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.16.EL" date="1068890400">- rework scsi mid-layer queuing logic to fix error handling (Doug Ledford)
- fix pci_dma_sync_sg() scatterlist arg in megaraid2 driver (Tom Coughlan)
- move more-ptes-in-rmap-pte-chain logic to its own patch (Ernie Petrides)
- tag uses of __GENKSYMS__ with KMI/ABI compat comment (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.15.EL" date="1068804000">- fix MD multipath bugs causing crashes during fail-overs (Doug Ledford)
- add chain_ptep_t and revert pte_addr_t for KMI compat (Ernie Petrides)
- restore sub-timer-tick time-of-day granularity for ia64 (Jason Baron)
- modify agpgart and drm drivers for ia64 HP ZX1 support (John Dennis)
- fix ia64 32-bit emulation for several stat-related calls (Jason Baron)
- enable amd64 use of new ips driver w/config separation (Tom Coughlan)
- update e100 network driver to version 2.3.30-k1 (Jeff Garzik)
- update e1000 network driver to version 5.2.20-k1 (Jeff Garzik)
- apply scsi whitelist updates for IBM/CNSi/NEC devices (Tom Coughlan)
- reenable varyio for aic7xxx driver (hangs were unrelated) (Jeff Moyer)
- conditionalize NVIDIA_NFORCE3 to restore KMI compat (Ernie Petrides)
- prevent two ext3 panics on corrupted filesystems (Stephen Tweedie)
- apply two minor fixes to ppc64 RAS nvram reading (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.14.EL" date="1068717600">- update ServeRAID (ips) driver to version 6.10.52 (Tom Coughlan)
- configure xmon on by default in ppc64 configs (Julie DeWandel)
- create initial s390 zcrypt driver, version 1.1.2 (Pete Zaitcev)
- remove zfcp driver from linux-modules-unsupported (Pete Zaitcev)
- revise ppc64 reliability/serviceability support (Julie DeWandel)
- reduce kernel stack usage inside nfs_readdir() (Steve Dickson)
- add gameport dependency to cmpci driver config (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.13.EL" date="1068631200">- reduce UDP retransmissions and fix slow reads for NFS (Steve Dickson)
- implement wired page lists for better ramfs handling (Larry Woodman)
- fix vfork deadlock when child process causes core dump (Ingo Molnar)
- enhance AltSysRq-M output and fix deadlock potential (Larry Woodman)
- update cmpci sound driver for some HP IPF workstations (Tom Coughlan)
- correct tq_struct struct initialization in tg3 driver (Jeff Garzik)
- fix NFS file attribute inconsistency after rename (Steve Dickson)
- prevent ia64 machine checks w/sysreport on Olympia (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.12.EL" date="1068544800">- redesign refill_inactive_zone() for smarter deactivation (Larry Woodman)
- improve page deactivation scalability w/delayed laundering (Larry Woodman)
- rework locking and timer usage in s390 ctc network driver (Pete Zaitcev)
- allow xmon to be enabled at boot-time for ppc64 debugging (Julie DeWandel)
- reverse kscand's order of anon/cache active list traversal (Larry Woodman)
- force in-lining of br_read/write_lock/unlock routines (Julie DeWandel)
- fix mistaken fall-through cases in s390 chandev driver (Pete Zaitcev)
- make a few exported symbols available to OpenGFS (Stephen Tweedie)
- fix ld/st ordering bug causing lost signal wakeups (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.11.EL" date="1068112800">- make profile=X imply nmi_watchdog=1 and fix NMI w/d bugs (Ernie Petrides)
- add lock init in scsi_get_host_dev() to fix shutdown hang (Doug Ledford)
- enable distributed interrupts by default on ppc64 iSeries (Julie DeWandel)
- improve amd64 reporting of machine check errors (Jim Paradis)
- fix disabling of autonegotiation in tg3 driver (Dave Miller)
- add image name to s390 ioctl32 debug message (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.10.EL" date="1068026400">- fix file lock ownership by NPTL threads to be process-wide (Ernie Petrides)
- upgrade megaraid driver to version 1.18k and fix isr/fw sync (Tom Coughlan)
- upgrade megaraid2 driver to version 2.00.9 and enable varyio (Tom Coughlan)
- improve scsi mlqueue handling to enable BUSY/QUEUE_FULL fix (Doug Ledford)
- correct reporting of i/o errors in ppc64 viodasd driver (Julie DeWandel)
- update acenic driver to handle enabling of jumbo frame mode (Jeff Moyer)
- fix i386 PAGE_NONE bits to prevent get_user_page() hang (Roland McGrath)
- fix ia64 show_mem() handler to use efi_memmap_walk() call (Dave Anderson)
- replace spaces in slabinfo entry name for async poll table (Matt Wilson)
- fix race condition in buffer-head memory footprint patch (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.9.EL" date="1067940000">- improve spec file robustness in %post/%preun stanzas (Florian La Roche)
- add s390x iovec length checking for 32-bit reads/writes (Matt Wilson)
- use highmem for pte/ramfs page allocation w/__GFP_WIRED (Larry Woodman)
- upgrade oprofile support with bug fixes and enhancements (Will Cohen)
- fix infinite recursion in SCSI mid-layer post-processing (Jeff Moyer)
- introduce no-auto-start-on-add handling for SCSI blacklist (Jeff Moyer)
- enable s390 support for blk stats handling for iostat -x (Pete Zaitcev)
- fix LVS timer-related hang from ip_vs_conn_expire() bug (Ernie Petrides)
- correct module init in cpqarray driver to fix insmod crash (Tom Coughlan)
- incorporate ESB PATA support and fix a pirq_routers PCI id (Jeff Garzik)
- fix nfs async write deadlock potential w/nfs_writepage() (Steve Dickson)
- fix SCSI error handling for BUSY queue status messages (Doug Ledford)
- improve ppc64 32-bit ioctl support for use by ethtool (Julie DeWandel)
- add missing unlock in ip_mc_del_src() to fix IGMP deadlock (Dave Miller)
- change ppc64 reporting of floppy capacity to be 1.44 MB (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.8.EL" date="1067421600">- fix up various problems on Nforce3-based amd64 systems (Jim Paradis)
- double number of pte addrs in rmap pte_chain structs (Larry Woodman)
- restrict slab size for kernel data structs to 2 pages (Larry Woodman)
- clean up obsolete quicklist usage for ppc64 pte pages [rejected]
- prevent readdirplus from returning hidden mount points (Steve Dickson)
- prevent lockd deadlocks caused by export table locking (Steve Dickson)
- eliminate use of parallel task_struct init macro on ia64 [rejected]
- fix broken s390x overflow checks with 32-bit F_GETLK use (Matt Wilson)
- fix SCSI errors with "mt stoptions" and IDE tape drives (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.7.EL" date="1067162400">- fix bad checksumming interaction between e100 and bridge (Jeff Garzik)
- prevent system hang by OOM killing when overcommitted (Larry Woodman)
- un-inline ext3 error function to reduce stack usage (Stephen Tweedie)
- fix several ppc64 problems with interrupt handling (Julie DeWandel)
- correct amd64 identification in /dev/oprofile/cpu_type (Jim Paradis)
- move fput() call in do_tty_hangup() to avoid oops w/kon (Alexander Viro)
- eliminate creation of never-used task_struct slab cache (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.6.EL" date="1066903200">- reduce buffer-head memory footprint from read-only files (Ingo Molnar)
- update qeth driver for reduced stack usage and bug fixes (Pete Zaitcev)
- fix s390 qeth driver again to allow tcpdump to function (Pete Zaitcev)
- add exec_mmap() locking to prevent vma lookup races (Ernie Petrides)
- rework RPC slot allocation for further NFS improvements (Steve Dickson)
- reduce frequency of RPC retransmits during NFS writes (Steve Dickson)
- make generic/ext3 file system write handling 64-bit clean (Jeff Moyer)
- allow SMP scheduling rebalancing to occur every 200 msecs (Ingo Molnar)
- prevent races during IPC semaphore set and msg queue removal (Ingo Molnar)
- fix ACPI handling to identify trigger/polarity of PCI IRQs (Jim Paradis)
- correct amd64/ia64 acpi_disabled decls for post-boot access (Jeff Moyer)
- update ppc64 viocons driver with several bug fixes (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.5.EL" date="1066298400">- move fix for PPR use in sym53c8xx driver to its own patch (Ernie Petrides)
- correct pids exported by msgctl/semctl/shmctl/fcntl calls (Ulrich Drepper)
- apply s390 lcs driver wait queue init and locking updates (Pete Zaitcev)
- enable dummy network driver use in generic s390 config file (Pete Zaitcev)
- add missing ptrace hooks for exec and vfork-done events (Bill Nottingham)
- fix SMP timer race that triggered BUG_ON() in add_timer() (Ingo Molnar)
- fix several bogus ipvs boundary checks in ftp module [rejected]
- fix vfsmount queuing in attach_mnt() for CLONE_NEWNS [rejected]
- add net_device check to prevent oops in pppoe driver [rejected]
- fix memory leak in symlink error path of /proc driver [rejected]
- fix overflow in v1_disk2mem_dqblk() quota calculation [rejected]
- increase ppc64 ramdisk size to 8192k in p/iSeries configs (Jeremy Katz)
- lower amd64 TASK_UNMAPPED_32 to increase avail address space (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.4.EL" date="1066039200">- fix ppc64 stack pointer alignment in user signal handlers (Jakub Jelinek)
- increase amd64 exception stack size to 4k to avoid overflow (Jim Paradis)
- fix ppc64 interrupt rate accounting for vmstat and /proc (Julie DeWandel)
- extend amd64 NMI watchdog timeouts to tolerate bad 2nd cpu (Jim Paradis)
- allow s390 dasd driver to use noop elevator module (Pete Zaitcev)
- add free_irq() in error path of olympic token ring driver (Matt Wilson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.3.EL" date="1065866400">- make pid fields in ucred structures hold tgid values (Ulrich Drepper)
- prevent ppc64 iSeries virtual console writes &gt; 4k (Julie DeWandel)
- control ia64 unaligned access messages with new sysctl (Jeff Moyer)
- correct SCSI data direction on cmd to spin up disks (Pete Zaitcev)
- add do_brk() TASK_SIZE and address space wrap checks (Arjan van de Ven)
- limit PPR use in sym53c8xx driver for ppc64 Zapata drives (Doug Ledford)
- list ac97.o, ad1848.o, and cs4232.o modules as unsupported (Jeff Moyer)
- clean up conditional compilation in s390 zfcp driver (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.2.EL" date="1065693600">- identify whether i686 or athlon config in oops output (Arjan van de Ven)
- remove warning in reclaim_page() unmapped page path (Ernie Petrides)
- fix several lvm error handling paths causing memory leaks [rejected]
- correct i386 smp shutdown logic when netdump is enabled (Jeff Moyer)
- fix amd64 potential data leaks on FPU save/restore errors (Jim Paradis)
- prevent aic7xxx chip resets leading to PCI parity errors (Tom Coughlan)
- remove ia64 user tty warning on unaligned accesses (Arjan van de Ven)
- fix ppc64 /proc file buf overruns in viodasd driver (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.1.EL" date="1065607200">- (this is the first build for RHEL 3 Update 1)
- avoid m/ctime update for pipe writes on r/o file systems (Stephen Tweedie)
- prevent theoretical ext3 fs corruption in ext3_read_inode (Stephen Tweedie)
- enable AGRESSIVE_IDLE_STEAL to improve scheduler balancing (Ingo Molnar)
- fix potential ppc64 lock-up on ioctl32 un/reregistering (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.EL" date="1065175200">- extend ppc64 scsi timeout values for Zapata DVD-ROM drives (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-3.EL" date="1063965600">- make sure to release viotape op structure after use (Julie DeWandel)
- disable pgd/pmd quicklists on ppc64 (Mark DeWandel)
- temporarily disable aio on sockets (Jeff Moyer)
- correctly refile inodes to make them reclaimable (Harald Hoyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-2.EL" date="1063792800">- S390: update zfcp and cio drivers (Pete Zaitcev)
- IA64: add extra check to virtual mem_map (Larry Woodman, Dave Anderson)
- initialise local variables in ide-tape &amp; ide-scsi
- cap qla2200 tcq depth to 255
- switch version number scheme to kernel-2.4.21-N.EL</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063706400">- PPC64: invalidate evicted sbl entries in the erat (Julie DeWandel)
- increase ethernet tx_queue_len to 1000 (David Miller)
- in udp_{v6_}flush_pending_frames, reset up-&gt;len too (David Miller)
- S390: CMS reserved minidisk detection (Pete Zaitcev)
- call recount_segments() on a different occasion (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063620000">- really disable exec-shield (Roland McGrath)
- reduce stack randomisation, disable brk randomisation (Ingo Molnar)
- make e1000 driver 64 bit clean (Julie DeWandel)
- minor aio corner case error condition fix (Jeff Moyer)
- AMD64: more lenient check for call workaround (Ernie Petrides)
- PPC64: disable CONFIG_XMON (Mark DeWandel)
- S390: fix CCW slab selection (Pete Zaitcev)
- fix two-disk combined mode sata (Jeff Garzik)
- move buslogic scsi driver to supported, for vmware only (Tom Coughlan)
- change viocons message from KERN_WARNING to KERN_INFO (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063360800">- VM: handle race condition in reclaim_page (Stephen Tweedie, Larry Woodman)
- PPC64: fix "log_buffer broken" xmon issue (Julie DeWandel)
- fix compiler warnings in netdump (Jeff Moyer)
- AMD64: workaround for 32 bit compat mode page fault problem (Ernie Petrides)
- IA64: make perfmon root-only (Jason Baron)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063274400">- fix smp race in rebalance_laundry_zone()</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063188000">- fix compiler warnings when hugetlbfs is disabled (Pete Zaitcev)
- fix tux performance bug (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063101600">- don't evict kernel stack seg translation on ppc64 (Julie DeWandel)
- fix callers of do_page_fault on ppc64 (Mark DeWandel)
- AMD64 munmap return value, fix lsb failure (Jeff Moyer)
- fix for PPC64 32-bit ioctl (Jim Paradis)
- bring IA64 value of MINSIGSTKSZ in line with upstream (Jakub Jelinek)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063015200">- fix potential datacorruptor in viodasd driver (Julie DeWandel)
- fix race condition in s390 dirty bit handling (Pete Zaitcev)
- limit per-cpu slab cache size
- correct 32-bit readv/writev border cases on ppc64 (Matt Wilson)
- AMD Golem IO-APIC fixup for i686 kernel on AMD64 (Jeremy Katz)
- NFS Solaris 8 acl fix (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062756000">- minor nfs permissions bugfix (Steve Dickson)
- change mprotect return value to SuS mandated value (Arjan van de Ven)
- kernel-unsupported now provides kernel-modules (Jeremy Katz)
- correct __hugemem__modules typos in rhkernel.h
- fix subtle pmd corruption error (Larry Woodman, Dave Anderson)
- fix cut'n'paste error in SATA io port reservation
- restore NFSEXP_CROSSMNT ABI compatibility (Steve Dickson)
- round up executable name field length in core file (Jakub Jelinek)
- switch off exception_trace on amd64 (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062496800">- patch to access odd last sector on ia64 (Jason Baron)
- misc fixes from upstream (Arjan van de Ven)
- fix audigy driver (Jeff Garzik)
- tunable dcache reclaim priority for tux (Ingo Molnar)
- tg3 driver update (Jeff Garzik)
- ipv6 and icmp network bugfixes (David Miller)
- fix ppc64 memory access security bug (Julie DeWandel)
- reduce memory allocated for skb (Ingo Molnar)
- small smp fix for scalable timers (Ingo Molnar)
- make s390 recognise MSDOS partitions (Pete Zaitcev)
- small smp fixes in tux (Ingo Molnar)
- make mptfusion drivers supported on 4/4 split kernel (Tom Coughlan)
- add entries to scsi whitelist (Tom Coughlan)
- minor sata/ata driver updates (Jeff Garzik)
- small fixes to viodasd driver (Julie DeWandel)
- nfs_get_root and nfs access bit patches (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062064800">- don't show interrupts in /proc/stat for ppc64 (Matt Wilson)
- make sure sync returns in a reasonable time
- PPC64: fix for boot cpu not being cpu 0 (Julie DeWandel)
- zero sized write no longer updates mtime (Matt Wilson)
- fix video bios read corruption on ia64 (Larry Woodman)
- network fixes to tg3, bonding (Jeff Garzik)
- properly reserve legacy IDE regions in sata driver (Jeff Garzik)
- fix ppc64 signal handling bugs (Mark DeWandel)
- tux fixes (Ingo Molnar)
- tgkill syscall for s390(x) (Pete Zaitcev)
- amd64 32 bit compatibility fixes (Jim Paradis)
- ppc64 32 bit compatibility fixes (Julie DeWandel)
- fix 4G/4G follow_page problem (Ingo Molnar)
- reduce memory used by VMAs and dentries (Arjan van de Ven)
- make LVM snapshotting of ext3 work reliably (Stephen Tweedie)
- make netdump play better with the nmi watchdog (Jeff Moyer)
- QLA2200: disable irq mitigation, fix off-by-one (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061805600">- seq_file /proc/interrupts for x86 too (Ingo Molnar)
- fix memory leak in ia64 exec of ia32 binaries
- check tgid not pid in scm_check_creds()  (David Miller)
- VM fixes: shm swap priority, zeromap_page_range
- workaround VFS limitations for VXFS NFS export</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061546400">- use personality for 3GB userspace on x86 -hugemem (Ingo Molnar)
- add sysctl interface for lockd (Steve Dickson)
- don't prod VGA space on HP Pinnacle systems (Larry Woodman)
- fix for 32 bit binaries on amd64 (Jim Paradis)
- add preemption point to write_some_buffers (Julie DeWandel)
- sort ACPI table to get correct device ordering on HP (Larry Woodman)
- fix refcounting bug with ipv6 addresses on netdevs (David Miller)
- add s390 syscalls for tux (Pete Zaitcev)
- md multipath enablers (Doug Ledford)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061460000">- fix process and nice time accounting (Doug Ledford)
- amd64: syscall table updates, timer robustness (Jim Paradis)
- amd64 3GB personality for 32-bit processes (Jim Paradis)
- use 256MB pagesize for hugetlbfs on ia64 (Larry Woodman)
- make sure e100 only claims ipv4 checksumming
- igmpv3/mldv2 OOPS'er fix (David Miller)
- hugetlbfs: make chown work and allow uid=X,gid=Y mount options
- make larger mmap windows work (Ernie Petrides, Ingo Molnar)
- ia64: improve ia32 compatibility (Larry Woodman)
- fix bug in rpc retry code (Steve Dickson)
- make acpi pci hotplug modulable (Jeff Moyer)
- update (trivial) to megaraid 1.18j (Tom Coughlan) 
- enable varyio on mptfusion (Tom Coughlan)
- panic on oops to prevent data corruption opportunities (Ernie Petrides)
- small iorl locking fix (Doug Ledford)
- fix ppc64 get_wchan() bad deref (Mark DeWandel)
- fix aio read into mmap()d PROT_WRITE (Jeff Moyer, Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061373600">- libata update (Jeff Garzik)
- amd64 syscalls for xattrs &amp; ACLs (Jim Paradis)
- tux fixes (Julie DeWandel, Ingo Molnar)
- via &amp; i810 audio fixes (Jeff Garzik)
- small 4G/4G split bugfixes (Ingo Molnar)
- fix sigsuspend race on x86, amd64, ia64 (Mark DeWandel)
- ia32 behavior for FP denormal exceptions on ia64 (Jason Baron)
- get the set/get of NAT bits for ia64 correct (Jason Baron)
- ipsec update, adds cast6 encryption (David Miller)
- VM update: OOM bugfix &amp; page-&gt;flags atomic updates (Rik van Riel)
- reenable serpent encryption on ppc64
- bladecenter usb-ohci support (Pete Zaitcev)
- iorl fixes (Doug Ledford)
- network bonding driver oops fix (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060768800">- DAC960 back to bigmem supported, ne2k-pci &amp; usb audio to bigmem unsupported
- netdump updates for tg3 and e1000 (Jeff Moyer)
- put a hole between stack and mmap area (Ernie Petrides)
- process time accounting updates (Doug Ledford)
- fix null characters in TUX header (Julie DeWandel, Ingo Molnar)
- display correct executable when running interpreted script
- zfcp zSeries fibrechannel driver (Pete Zaitcev)
- ipsec updates (David Miller)
- fix 4G/4G race conditions (Ingo Molnar)
- rename -bigmem kernel to -hugemem to reflect changed tradeoffs
- optionally show task states from hangcheck timer (Jason Baron)
- various small bugfixes from upstream</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060423200">- fix scalable timer race condition  (Julie DeWandel, Ingo Molnar)
- print warning on boot with &gt;16GB RAM on -smp kernel (Arjan van de Ven)
- fix for xapic issue with ServerWorks chipsets (Ernie Petrides)
- remove spurious ioctl printk on ppc64 (Mark DeWandel)
- ppc64 wchan improvement (Mark DeWandel)
- hint @pause changes for ia64
- longer scsi scan timeout on ppc64 (Julie DeWandel)
- readv/writev for raw IO (Stephen Tweedie)
- fix for easy stack/mmap collisions (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060164000">- various XAPIC related fixes (Ingo Molnar)
- correct context switch and iowait stats with HT shared runqueues
- ext3 obscure deadlock fixes (Stephen Tweedie)
- knfsd fixes: blocked lock, symlink error &amp; missing bkl  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060077600">- de_thread bugfix from 2.6 upstream  (Matt Wilson)
- viocons driver update (Julie DeWandel)
- fix VM non-overcommit mode (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059991200">- plug data leak in aio code (Jeff Moyer)
- initial list of 4G/4G unsupported modules (Tom Coughlan)
- nfs softirq race fix (Steve Dickson)
- updated IPSEC patch (David Miller)
- networking updates/fixes from 2.4.22-preX (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059904800">- drop orlov allocator for now (Arjan van de Ven)
- correct HT cpu pair detection (Arjan van de Ven)
- build zImage.partial for netbooting on pSeries (Matt Wilson)
- fix missing symbols</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059818400">- export two AIO symbols for OCFS
- disable CONFIG_DEBUG_SLAB so performance testing can start
- crosshost mmap hooks for distributed filesystems (Stephen Tweedie)
- include partially linked zImage for pSeries netboot (Matt Wilson)
- nfs highmem fix, unmap when xdr_kmap() fails (Steve Dickson)
- update megaraid2 locking to work with IORL (Com Coughlan)
- make sure to build the qla2100 driver (Tom Coughlan)
- fix cdrom ioctl 32 bit compatibility for ppc64, amd64 (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059645600">- run depmod on install of unsupported modules (Arjan van de Ven)
- fix register corruption in IA64 lazy fpu handling (Larry Woodman)
- add b44 network driver (Jeff Garzik)
- make ppc64 pci interface routines compatible (Julie DeWandel)
- allow 32 bit userland on AMD64 and PPC64 to use volumes &gt; 2GB (Jeff Moyer)
- nfsd: acl related mount and export flags (Steve Dickson)
- fix nfs exp_fodrop oops (Steve Dickson)
- fix missed signal wakeups on ppc64 (Mark DeWandel)
- smp scalable timer bugfixes (Ingo Molnar)
- workaround for a prefetch bug in some Athlon CPUs (Ernie Petrides)
- code to make more modules unsupported for 4/4 split (Arjan van de Ven)
- various spec file and config cleanups
- viopath driver fix (Julie DeWandel)
- add match for 440gx chipset bioses (Arjan van de Ven)
- move epic100 and ne2k-pci back to supported (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059472800">- updated finegrained process accounting patch (Doug Ledford)
- make iSeries compile without CONFIG_ICOM (Julie DeWandel)
- nfsd: only set -&gt;reuse for tcp sockets, not udp  (Steve Dickson)
- enable the 4G/4G split on the i686-bigmem kernel only
- sysrq support for viocons (Julie DeWandel)
- limit pci_bus size changes to ppc64 (Jeff Garzik)
- fix for signal delivery race (Ernie Petrides, Mark DeWandel)
- add ShdPnd to /proc (Ingo Molnar)
- fix de_thread() hang (Ingo Molnar)
- add kernel support for CLONE_STOPPED (Ernie Petrides)
- make sure to initialise HVC console (Julie DeWandel)
- fix _SEG abort hit in ACPI code (Larry Woodman)
- build addon drivers on amd64 and ppc64 too (Tom Coughlan)
- build IPS driver on all architectures (Tom Coughlan)
- fix a few ia32 emulation bugs for IA64 (Larry Woodman)
- enable correct/new __clear_bit macro for IA64 (Larry Woodman)
- flexible mmap allows mappings of huge executable segments (Larry Woodman)
- sysrq-w for s390 (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058436000">- have s390 cpu_relax() also include barrier  (Pete Zaitcev)
- convert ppc64 xmon traceback code to ksymoops (Matt Wilson)
- rename kstat_sum() variable with aliasing problems  (Ingo Molnar)
- fix AIO-on-hugetlbfs crash (Ingo Molnar)
- update support for IA64 Long's Peak ACPI serial ports  (Larry Woodman)
- turn on xmon for both iSeries and pSeries (Matt Wilson)
- bugfix to make CLI work correctly on iSeries (Julie DeWandel)
- SATA bugfixes (Jeff Garzik)
- enable 4G/4G split in -BOOT kernel, due to syslinux trouble</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058349600">- fix s390 compile (Pete Zaitcev)
- taint the kernel on sii6512 driver link, GPL but no source available
- handle debug registers with 4G/4G split (Ingo Molnar)
- tgkill syscall for ppc64 (Julie DeWandel)
- fix NFSD/ACL/ext3/jbd deadlock (Stephen Tweedie, Steve Dickson)
- fix maxcpus=1 installation panic fix for ppc64 (Julie DeWandel)
- IDE byteswapping io functions for ppc64 (Julie DeWandel)
- update sata driver (Jeff Garzik)
- raise the number of /proc entries (Julie DeWandel)
- sticky sysrq key with timeout (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058263200">- make SysRq-W useable on s390 (Pete Zaitcev)
- updated process accounting patch (Doug Ledford)
- siginfo_t fixes for s390x and amd64 (Jakub Jelinek)
- clustered NFS fail-over support (Steve Dickson)
- autofs4 updates and fixes
- ia64 patches to reduce cpu power/temp in idle loop (Larry Woodman)
- add irqsafe up() for LVM locking (Stephen Tweedie)
- O_DIRECT fallback to synchronous allocation in holes (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058176800">- ia64 HP iommu: add sx1000 detection
- possible bug in s390x 32-bit emulation  (Roland McGrath)
- updated ipsec patch, should fix all current ipv6 bugs  (David Miller)
- finegrained process accounting (Doug Ledford)
- ICH5 pci irq routing, and associated ids (Jeff Garzik)
- fix the machine_real_restart() reboot path on 4G/4G (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057917600">- fix amd64 agp-gart code to work around hugetlbfs debug code (Jim Paradis)
- fix ppc32 pthread_cancel (Jakub Jelinek) 
- Do not sent IGMP leave messages unless IFF_UP  (David Miller)
- software iommu for ia64 systems without hardware iommu (Jason Baron)
- fix ext3 oops fix during dio, LTP failure (Arjan van de Ven, Stephen Tweedie)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057831200">- Remove illegal calls to dst_link_failure</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057831200">- enable HT scheduler for bigmem kernel
- add tgkill syscall for x86 and ia64
- make -BOOT kernel smaller w/ modular md and CONFIG_SMALL
- rmap VM updates
- 4G/4G agpgart potential corruption fix (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057744800">- switch off exec shield everywhere
- eliminate hostfs for amd64 (Jim Paradis)
- megaraid update, mostly vendor ID (Tom Coughlan)
- shrink boot kernel by disabling some config options
- additions for the SCSI whitelist (Tom Coughlan)
- ia64 extable fix (Jason Baron)
- viocons driver upgrade (Julie DeWandel)
- another ia64 mmu context wraparound deadlock fix (Larry Woodman)
- iSeries icom debugger patch (Julie DeWandel)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057658400">- Drop io_request_lock in usb scsiglue.c:device_reset</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057658400">- fix cpu_relax for amd64 and ia64 to include a barrier (Ingo Molnar)
- restore o_direct api compatibility (Stephen Tweedie)
- fix possible ext3 deadlock in o_direct patches (Stephen Tweedie)
- ACLs for JFS (Stephen Tweedie)
- fix /proc/cpuinfo runqueue printing (Ingo Molnar)
- via audio fixes, smaller emu10k1 patch (Alan Cox, Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057572000">- fix process accounting, tux ftp passwords and si_pid (Ingo Molnar)
- 32bit compat statfs fix (Guy Streeter)
- don't serialise exit on BKL when accounting is off (Ingo Molnar)
- truncate timeouts to 32 bits on 64bit systems (Ingo Molnar)
- fix network channel bonding (Jeff Garzik)
- split netdump patch into core and net-drivers (Jeff Garzik)
- delayed tlb flushing for ia64 (Larry Woodman)
- emu10k1 driver fixes
- kksymoops for AMD64 (Jim Paradis)
- select bugfixes from 2.4 upstream (Jeff Garzik)
- OOM tweaks (Rik van Riel)
- use seq_file for /proc/interrupts on ppc64 (Mark DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057140000">- add qdio and qeth drivers for s390(x)  (Phil Knirsch)
- slab cache scale bugfix (Larry Woodman)
- S390: qdio &amp; qeth drivers (Phil Knirsch)
- hangcheck timer for ppc64 (Julie DeWandel)
- fix race conditions in ia64 ia32 compat layer (Larry Woodman)
- update megaraid, aic7xxx, cciss and cpqarray drivers (Tom Coughlan)
- nfs xdr_shift_buf, tcp client corruption and alignment (Steve Dickson)
- rhconfig.h stuff for ppc64, s390 and s390x (Matt Wilson)
- AIO on sockets</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057053600">- kiobuf optimisations (Stephen Tweedie, Larry Woodman)
- ipsec update (David Miller)
- ipvs update to deal with timer changes (David Miller)
- 4G/4G split patch optimisations (Ingo Molnar)
- hangcheck timer (Jason Baron)
- recent (AGP 3.0) agpgart support (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056967200">- semtimedop() support on s390/s390x  (Ernie Petrides)
- fix a 4G bug that triggers on systems with &gt;30 CPUs (Ingo Molnar)
- updated SCSI SMP affine queueing patch  (Arjan van de Ven)
- page hash prefetch in do_generic_file_read bugfix (Julie DeWandel)
- updates the qlogic driver to the latest (Arjan van de Ven)
- slab cache SMP scalability tweaks (Ingo Molnar)
- ACPI 2.0 for IPF and AMD64 (Jim Paradis, Larry Woodman)
- statm fixes for hugetlbfs and remap_file_pages (Jason Baron)
- acpi serial port detection (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056708000">- iseries driver updates (Julie DeWandel)
- aio scalability and 2.5 backports  (Ingo Molnar)
- SMP scalable timers (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056621600">- make qlogic driver use new scsi infrastructure (Arjan van de Ven)
- export aio kvec functions
- fix statm oops
- compile fixes 
- NFS ACL over the wire protocol extensions (Steve Dickson)
- rate limit slab pruning, to limit IPI load on SMP systems (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056448800">- scsi request lock scaling (Ingo Molnar)
- cpu affinity for scsi command processing (Ingo Molnar)
- use softirqs instead of bhs for the scsi layer (Doug Ledford)
- igmpv3 fixes and improvements (David Miller)
- oprofile for ppc64 (Will Cohen)
- Increase MAX_ADDR_LEN from 8 to 32 for Infiniband over IP (Tom Coughlan)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056362400">- per-cpu kstat arrays (Ingo Molnar)
- optimise 4G/4G tlb flushing (Ingo Molnar)
- kiobuf reclaim together with buffer reclaim (Arjan van de Ven)
- more scalable gendisk statistics (Ingo Molnar)
- nfs reconnect fixes (Steve Dickson)
- add 32-bit compatibility for ustat system call on ppc64 (Julie DeWandel)
- scalable gettimeofday (Ingo Molnar)
- hugetlbfs ppc64 &amp; s390 bits (Mark DeWandel, Pete Zaitcev)
- hugetlbfs for ia64 (Jason Baron)
- qlogic scsi driver update (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056189600">- nfs patches (Steve Dickson)
- xapic improvements, summit support (Ingo Molnar)
- fix core dump name for multithreaded programs (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056103200">- merge up to marcelo's latest</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056016800">- oom killer fixes (Larry Woodman, Rik van Riel)
- tunable VM overcommit (Rik van Riel)
- hugetlbfs for amd64 (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055930400">- updated iseries virtual drivers (Julie DeWandel)
- nfs lockd improvements (Steve Dickson)
- remap_file_pages improvements (Ingo Molnar)
- /proc/efi/symtab patch for ia64 (Larry Woodman)
- disable O_PROFILE on UP x86 machines
- allow NMI watchdog profiling frequencies up to 10kHz (Ingo Molnar)
- statm (Jason Baron)
- hugetlbfs (Ingo Molnar)
- have nfsd honour ACLs on a per-export basis (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055844000">- Enable O_PROFILE on non-SMP configs (Stephen Tweedie)
- more conservative AIC config options
- Fix BOOT kernel panic while mounting /dev/cdrom (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055757600">- merge to 2.4.21 + selected ac bits
- ipsec upgrade (David Miller)
- HT scheduler patch fix (correct sibling counting)
- make bdflush writeout smoother
- AMD64 gdb fix (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055412000">- don't include unsupported drivers in -BOOT kernel
- merge up to 2.4.21-rc8 + selected ac bits
- FIXME: sysrq for 3170, dasd, odirect &amp; odirect for nfs</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com" date="1055412000">- oprofile for s390</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055239200">- statm (Jason Baron / Julie DeWandel)
- AIO 32-bit compat for 64-bit machines (Julie DeWandel)
- only do bufferhead reclaim in extreme situations (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055152800">- Serial ATA support (Jeff Garzik)
- mtp fusion 2.05.05+ (Dave Maley)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054893600">- XATTR/ACL patches, except NFS over the wire (Stephen Tweedie)
- ipsec module autoloading (David Miller)
- remap_file_pages (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054807200">- upgrade to latest -rmap with Ernie's fixes
- sysrq+C shows the stack dump of all CPUs
- ext3 truncate fix (Stephen Tweedie)
- NFS fixes for HZ=1000 machines (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054720800">- 4G/4G split fix (Ingo Molnar)
- ppc64 fixes (Guy Streeter, Rik van Riel)
- enable oprofile on amd64
- ipsec updates (David Miller)
- fork returns pid instead of task_struct* (Julie DeWandel)
- ia64 ptrace bugfixes (Dave Anderson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054634400">- HP diva serial driver (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054548000">- NFS over TCP patches (Steve Dickson)
- switch to using ppc64pseries/ppc64iseries arches instead of
  kernel-pseries and kernel-iseries (Jeremy Katz)
- egenera scsi bus rescan patch (Jeff Garzik)
- oprofile (Graydon Hoare)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054288800">- futex requeue (Ingo Molnar)
- enable NAPI for E1000
- signal latency and scheduler improvements (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054202400">- kscand oops fix (Ingo Molnar, Rik van Riel)
- pcnet32 fixes (Julie Dewandel)
- raid autorun (Pete Zaitcev)
- turn off CONFIG_SUNDANCE_MMIO (Jeff Garzik)
- flexible mmap (Larry Woodman)
- ppc64 fixes (Matt Wilson, Guy Streeter)
- loop softirq 10 times before giving up (Ingo Molnar)
- O_DIRECT for NFS (Steve Dickson)
- prevent md from shutting down active arrays (Doug Ledford)
- rmap updates, inode reclaim &amp; higher order allocations (Rik van Riel)
- network channel bonding (Jeff Garzik)</changelog><changelog author="Jim Paradis &lt;jparadis@redhat.com&gt;" date="1054116000">- Re-enable x86_64 in build
- x86_64-specific updates for exec-shield
- Bring in improved "nonx" support for x86_64 from upstream</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1054116000">- Hush s390 printks upon user SIGSEGV by default. It can be enabled back with
  a sysctl kernel.userprocess_debug.
- Enable optional 3270 console mode on s390.</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053684000">- get rid of vsyscall page (Arjan van de Ven)
- fix missing symbol copy_str_fromuser_size</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053424800">- exec-shield updates to fix hang-on-boot on some systems (Ingo Molnar)
- temporarily disabled the architectures, which got broken by exec-shield updates
- fix for LTP sigprocmask02 failure (Matt Wilson)
- ppc64 updates (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053338400">- pagecache scalability patch (Ingo Molnar)
- IPC semaphore scalability patch (Ingo Molnar)
- ppc64 updates (Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052992800">- exec-shield (Ingo Molnar)
- AMD64 ACPI updates (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052906400">- reenable O_DIRECT, O_DIRECT fixes and superbh-aio (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052820000">- vma merging (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052733600">- nmi profiler
- VM updates: rmap, dma zone isolation
- tux (Ingo Molnar)
- ext3 stall fixes (Ingo Molnar)
- e1000 fixes (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052474400">- config files overhaul (Arjan van de Ven)
- fix bug in mlock patch
- IPVS (Dave Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052388000">- import IO elevator changes from gingin
- critical VM fix
- matrox framebuffer patch for pseries (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052301600">- hammer nptl fixes (Ulrich Drepper)
- 4G/4G split (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052215200">- upgrade to 2.4.21-rc1-ac4 (minus -ac acpi and xapic changes)
- drop nfs patches since those seem to be in -ac</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052128800">- larger message buffer size + boot option (Mark DeWandel)
- AMD64: tls handling, coredump fixes (Jim Paradis)
- SMP &amp; highmem VM fixes (Ben LaHaise)
- HT+NUMA scheduler (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051956000">- ext3 orphan cleanup fix (Ernie Petrides)
- s390 affinity fixes (Pete Zaitcev)
- i386 vsyscall DSO changes (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051869600">- bugfixes and config changes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051783200">- enable semtimedop for other architectures (Ernie Petrides)
- large pci bus numbers (Julie DeWandel)
- bugfixes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051610400">- igmpv3 (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051524000">- generic 32bit compat stuff + amd64/ppc64/ipf pieces (Matt Wilson)
- clustered apic (XAPIC) support (Ingo Molnar)
- ppc64 architecture updates (Matt Wilson, Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051264800">- ppc64 fixes</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051178400">- collapse ipsec into one patch (David Miller)
- ppc64 build fix (Matt Wilson)
- improve smp scheduler fairness (Ingo Molnar)
- allow mlock for normal users, up to ulimit (Ingo Molnar)
- AMD64 port (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051092000">- clean up mechanism to pass extra CFLAGS so we don't override what's
  already there
- merge ia64 build stuff (Larry Woodman)
- merge varyio + superbh (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051005600">- merge up to 2.4.21-rc1
- IA64: virtual mem_map, acpi updates, netdump update, pte-highmem &amp; fealnx
- IA64: architecture specific patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050919200">- import davem's ipsec patch pile
- ppc64 kallsyms and dump_fpu patches (Matt Wilson)
- rmap updates (x86_64 &amp; bufferhead reclaim)
- ppc64 ptrace patch (Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050660000">- open up patch namespace 2000-5000 for network protocol changes
- renumber existing patches in that range</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050573600">- make sure to actually apply the rmap-updates patch
- iowait statistics
- ppc64 code merge (Mark &amp; Julie DeWandel)
- ppc64 build scripts (Matt Wilson)
- raise symlink recursion level to 8 (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050487200">- merge up to marcelo's latest
- pte-highmem bits for x86-64 and ppc64</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050400800">- merge up to 2.4.21-pre7-ac1
- drop semtimedop patches (now in -ac)
- drop nfs xprt_fixes, fix_softirq, d_drop and nfs-readeof (merged in -pre7)
- add !CONFIG_QUOTA compile fix for 2.4.21-pre7-ac1</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1050314400">- add LCS driver (endemic to s390)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050314400">- add rmap VM
- add kunmap_atomic debugging patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050141600">- remove dir.c part of NFS kmap_atomic patch for now
- using strlen as local variable name in nfs code kills, literally</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050055200">- merge S390(x) back in  (Pete Zaitcev)
- fix NFS kmap_atomic patch
- sched.c patch to disable interrupts in wake_forked_task  (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049968800">- AIO infrastructure  (Ben LaHaise)
- update NFS kmap_atomic patch  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049882400">- semtimedop patches  (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049796000">- I know understand linux-2.4.20-nfs-readeof.patch, so I merged it
- netdump update (Dave Anderson)
- 64 bit pci &amp; elf loader fix (Mark &amp; Julie)
- nptl whitespace patches, folded into nptl patch (Arjan van de Ven)
- rediff linux-2.4.18-smallpatches.patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049709600">- merge NFS patches by Steve Dickson (blame me for NFS kmap_atomic patch)
- split x86 syscall stuff out into separate patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049536800">- fix nptl patch, now it boots</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049450400">- port linux-2.4.20-o1-nptl.patch from gingin
- rediff a few patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049277600">- update linux-modules-unsupported (with Arjan)
- fix up the list a second time to fix module dependencies</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049191200">- copy -head into new AS3 branch
- remove i586 build
- remove 7.x compatibility (linux-2.4.9-fstat.patch)
- architecture patches get more breathing room (100 - 500)
- reserve patch numbers 1000 - 2000 for VM
- patch numbers 2000 - 5000 for bugfixes, changes and updates to
  existing drivers and filesystems
- remove inode reclaim patch (will be merged later as part of rmap)
- remove io priority scheduler (still experimental)
- remove nfs patches (linux-2.4.20-nfs-cto.patch,
  linux-2.4.20-nfs-access.patch &amp; linux-2.4.20-nfs-rdplus.patch)
- remove linux-2.4.18-gericom.patch
- update netdump from RH9 branch</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1048240800">- Added three NFS performance patches</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048240800">- add a timer for aging requests up</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048154400">- fix the sorting in the io elevator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048068000">- remerge ext3 orlov allocator and enable
- more priority io elevator infrastructure work</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1047117600">- merge ext3 orlov allocator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046772000">- go to 2.4.21-pre5-ac1
- split the rpm into a primary fileset and secondary (rare modules) fileset</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046253600">- go to 2.4.21-pre4-ac6
- drop lots of patches
- trim changelog to not have 2000, 2001 and 2002 anymore</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045476000">- downgrade pwc webcam driver one notch to the last known working version
- work around vm livelock
- make the cciss driver not enable irq's in it's irq handler</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1045130400">- fix for shared statistic &lt; 0</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045130400">- Signal fixes for LSB testsuite
- merge patch to fix init=/bin/sh
- 2.4.21-pre4-ac4 bugfixes (mostly IDE crashes)</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044784800">- merge 2.4.21-pre4-ac3 bugfixes</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1044352800">- Add ext3 fix for truncating negative i_blocks</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1044266400">- add oopsmeharder for debugging hard hangs</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044266400">- merge rmap15d
- set the sbp2 command buffer to 64 elements instead of 8</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1043834400">- merge tcp stall fix from DaveM
- merge bugfixes from 2.4.21-pre4</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1042452000">- Merge in the ACL and XATTR patches from the UL and BestBits trees.</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1042279200">- Merge in the LVM pvmove fix to current tree</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1042020000">- add AMD Golem fixup</changelog></package>
<package pkgid="d04cfe17fad1eb2ddc9e5bce6a1b2989d6032016" name="kernel-unsupported" arch="ia32e"><version epoch="0" ver="2.4.21" rel="37.EL.XFS"/><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1128420000">- added SGI XFS patch set</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-37.EL" date="1126087200">- fix latent sendmsg() cmsghdr32 bug exposed in -36.EL (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-36.EL" date="1125655200">- fix sync() hangs from NFS file create/delete races (Steve Dickson)
- add support for HP Smart Array E400i in cciss driver (Tom Coughlan)
- defend against cmsghdr32 changes in sendmsg() handling (Dave Miller)
- correct OpenIPMI module version strings (v35 -&gt; 35.4) (Brian Maly)
- fix intermittent build failures under lpfc subdir (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-35.EL" date="1124445600">- disable FAN processing in Emulex driver (7.3.2) (Tom Coughlan)
- update cciss disk driver to version 2.4.58.RH1 (Tom Coughlan)
- update SCSI whitelist for EMC Invista devices (Tom Coughlan)
- fix diskdump regression w/module CRC errors (Nobuhiro Tachino)
- update SCSI whitelist for IBM ULT3580 TapeLibrary (Wendy Cheng)
- fix f/w upgrade hang, dmi_table bug in IPMI (Peter Martuccelli)
- fix x86_64 machine check regression from -32.10.EL (Brian Maly)
- validate XFRM policy in IPSEC setsockopt() calls (John Linville)
- fix intr kiobuf_init() regression from -32.11.EL (Larry Woodman)
- fix pollcomplete error in cciss diskdump support (Tom Coughlan)
- enforce CAP_NET_ADMIN perms for policy creation (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-34.EL" date="1122544800">- fix O_SYNC EIO error propagation through ext3/jbd (Stephen Tweedie)
- add support for Enterprise Southbridge II (ESB2) (Geoff Gustafson)
- implement devname callback for block device drivers (Doug Ledford)
- upgrade SATA support (core, libata, and drivers) (Jeff Garzik)
- add ia64 export of (*pm_power_off)() for IPMI (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-33.EL" date="1121767200">- update 3w-9xxx driver to version 2.24.03.008RH (Tom Coughlan)
- revise reserved port avoidance added in -32.8.EL (Steve Dickson)
- update OpenIPMI driver/configs to version v35 (Peter Martuccelli)
- add handling for NEC vendor ID in megaraid2 driver (Tom Coughlan)
- update SCSI whitelist for 3PARdata/Dell/SGI devices (Tom Coughlan)
- add support for netdump over bonded interfaces (Jeff Moyer)
- implement diskdump support for cciss devices (Tom Coughlan)
- add x86_64 ACPI Power Management timer support (Jim Paradis)
- add dual-core support on x86 and x86_64 arches (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.12.EL" date="1121421600">- constrain x86_64 MSR writes based on cpu model (Larry Woodman)
- correct smbfs mounts to support 32-bit uids/guids (Peter Staubach)
- eliminate long system pauses when kscand is running (Larry Woodman)
- update Emulex driver to 7.3.1, ioctl module to 1.2.1 (Tom Coughlan)
- update QLogic driver to 7.05.00-RH1 (w/new firmware) (Tom Coughlan)
- prevent ext3 EA/ACL block sharing/deletion races (Stephen Tweedie)
- fix dpt_i2o insmod oops during adpt_info() lookup (Neil Horman)
- fix dpt_i2o timeouts during long tape commands (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.11.EL" date="1121248800">- downgrade blk_queue_bounce_limit() msg to KERN_INFO (Neil Horman)
- update cciss disk driver to version 2.4.56.RH1 (Adam Manthei)
- update mptfusion driver to version 2.06.16i.01 (Tom Coughlan)
- prevent expand_kiobuf() calls during interrupts (Larry Woodman)
- update iscsi_sfnet driver to version 3.6.2.1 (Mike Christie)
- account for system ticks in ITIMER_PROF sig delivery (Don Howard)
- correct superbh ptr arg to superbh_will_bounce() (Stephen Tweedie)
- fix ext3 symlink perms created w/i386-BOOT kernels (Stephen Tweedie)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.10.EL" date="1121076000">- prevent bogus GART errs from amd64 Northbridge handling (Brian Maly)
- get correct link status in b44 driver's open routine (John Linville)
- check for missing EM64T support for better panic msg (Ernie Petrides)
- fix ref counting bug in x86[_64] __change_page_attr() (Dave Anderson)
- fix memory leak in success path of sys_init_module() (John Linville)
- add ia64 ptrace/sigreturn RSC reg priv level validation (Jason Baron)
- prevent connection list corruption in ip_vs_conn_flush() (Neil Horman)
- limit arg/env ptrs for x86_64/ia64 32-bit-compat execs (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.9.EL" date="1119002400">- fix crashes from failed ACPI root bus additions (Jim Paradis)
- correct insufficient lock owner checks in DRM code (Don Howard)
- add missing sanity checks in Coda ioctl handling (Alexander Viro)
- fix autofs errors with ghosting and expire event races (Jeff Moyer)
- reset ppc64 signal handler correctly for SA_ONESHOT (David Howells)
- store prev user stack pointer in ppc64 signal frames (David Howells)
- fix kernel_lock deadlock between sd_open()/sd_ioctl() (Larry Woodman)
- add ht flag in /proc/cpuinfo for EM64Ts w/hyperthreading (Brian Maly)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.8.EL" date="1118743200">- update e100 network driver to version 3.4.8-k2 (John Linville)
- preserve x86_64 32-bit-compat ptrace reg changes (Roland McGrath)
- add missing x86_64 support for PTRACE_SETOPTIONS (Roland McGrath)
- avoid using reserved ports for portmapper connections (Steve Dickson)
- prevent non-canonical %rip in x86_64 ptrace reg mods (Jim Paradis)
- prevent invalid fs/gs_base in x86_64 ptrace reg mods (Ernie Petrides)
- improve ISO-9660 fs robustness against bad CD formats (Peter Staubach)
- correct __get_user_pages() ref counting w/PG_reserved (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.7.EL" date="1118224800">- fix IPV6 isRouter flag and default router list handling (John Linville)
- eliminate unexpected IO-APIC msg from x86 kernel on amd64 (Jim Paradis)
- switch to reg stack on user-mode x86_64 stk seg faults (Dave Anderson)
- fix two time-related problems in the netconsole module (Dave Anderson)
- remove microcode.o from x86 hugemem unsupported list (Ernie Petrides)
- fix x86_64 committed space accounting w/overcommit=2 (Larry Woodman)
- enforce page locking resource limit in expand_stack() (Jason Baron)
- fix SCSI command block leak w/off-line non-zero LUNs (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.6.EL" date="1117533600">- fix races between POSIX locking and file closes (Peter Staubach)
- update tg3 network driver to version 3.27RH (John Linville)
- add ia64 frame size validation in syscall handling (Jason Baron)
- prevent info leaks into JFS metadata disk blocks (Stephen Tweedie)
- fix ext2 fast-symlink/EA compatibility problem (Stephen Tweedie)
- add x86_64 32-bit-compat SO_{SND,RCV}TIMEO support (Guy Streeter)
- add piix driver PCI device ids for ICH4-L support (John Linville)
- validate "ndigis" value in addition of ROSE routes (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.5.EL" date="1117101600">- update e1000 network driver to version 6.0.54-k2 (John Linville)
- fix arp_ip_traget failover with bonding driver mode 1 (Eric Paris)
- prevent indefinite postponement under __alloc_pages() (Ernie Petrides)
- capture ia64 reg state on all cpus for OS_INIT dumps (Nobuhiro Tachino)
- add documentation listing which drivers support netconsole (Jeff Moyer)
- fail opens of removable media drives if media not present (Pete Zaitcev)
- fix x86_64 find_target() oops in 32-bit-compat ptrace() (Ernie Petrides)
- prevent info leaks into ext2 directory entry blocks (Stephen Tweedie)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.4.EL" date="1115978400">- limit concurrent OOM kills using /proc/sys/vm/oom-kill (Ernie Petrides)
- rework ppc64 wchan fix to avoid module install crashes (David Woodhouse)
- fix diskdump signature check failures w/block_order=8 (Nobuhiro Tachino)
- fix data corruption from pte_clear() races on &gt;4GB x86's (Larry Woodman)
- avoid s390,x kernel stack overflows in network ctc driver (Pete Zaitcev)
- add description of /proc/stat to file system documentation (Brian Maly)
- avoid inode races in __refile_inode() and clear_inode() (Larry Woodman)
- fix arg/env access in ELF core dumping and /proc reads (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.3.EL" date="1115200800">- remove extra chars from scsi_logging_level mod param (Ernie Petrides)
- use GFP_NOFS allocs to avoid kswapd/rpciod deadlocks (Steve Dickson)
- fix ia64 kernel thread creation to force 64-bit tasks (Jason Baron)
- fix data corruption from 4K overflow in /proc/devices (Neil Horman)
- prevent mlock() resource limit bypass w/shm locking (Ernie Petrides)
- restrict MOXA ctlr firmware updates to privileged users (Brian Maly)
- support EM64T systems with mix of cpus with/without NX (Jim Paradis)
- allow modules to use get/put_task_struct() macros (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.2.EL" date="1114164000">- fix IDE disk accounting bug from wrong ios_in_flight (Larry Woodman)
- limit IGMP traffic to active link in bond_alb_xmit() (John Linville)
- fix audit refs to permit /var unmounting on shutdown (Dave Anderson)
- prevent IP4/6 output memory leaks of dst_entry structs (Dave Miller)
- enhance support for ethtool in 3c59x network driver (John Linville)
- fix launder_page() locking to avoid kswapd deadlock (Larry Woodman)
- suppress ide-floppy I/O errors when media isn't present (Brian Maly)
- make netdump more reliable on NAPI-enabled controllers (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.1.EL" date="1113991200">- (this is the first build for RHEL 3 Update 6)
- fix oops when io_setup() is called w/unwritable addr (Jeff Moyer)
- prevent kswapd hangs under launder_page() w/no bufs (Larry Woodman)
- fix autofs memory leaks when events share wait queues (Jeff Moyer)
- change IBM veth driver to indicate link is always up (David Howells)
- fix error resets and TF reg reads in SATA AHCI driver (Jeff Garzik)
- avoid dropping &gt;200-byte frames in sk98lin driver (John Linville)
- prevent shared memory lock/unlock w/o permissions (Dave Anderson)
- remove duplicate USB ESSENTIAL_REALITY defines (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.EL" date="1113559200">- fix data corruption w/ext3 xattr on 64-bit arches (Jason Baron)
- validate LCP frame lengths in PPP async handling (Dave Miller)
- enable forcedeth net driver builds in x86 configs (Jim Paradis)
- isolate IP fragment queues among various callers (Dave Miller)
- prevent busy inodes for symlinks after unmounts (Don Howard)
- revise PCI device ids extending ICH7 support (John Linville)
- work around broken xw4300 BIOS AHCI BAR setup (John Linville)
- add protocol validation in net bluetooth driver (John Linville)
- enable software watchdog timer in s390,x configs (Jan Glauber)
- fix data corruption w/uselib() on bad ELF libs (Ernie Petrides)
- add USB tablet init delay in wacom_probe() (Kristian Høgsberg)
- prevent core dumps with non-readable ELF interps (Dave Anderson)
- add maxevents validation in epoll_wait() handling (Ernie Petrides)
- add len validation in /dev/random poolsize sysctl (Ernie Petrides)
- correct size of ia64 syscall table initialization (Jason Baron)
- correct x86_64 user-mode i/o port validation (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-31.EL" date="1110448800">- fix missing ppc64 netdump/diskdump symbols (Nobuhiro Tachino)
- prevent ia64 unwind from traversing off stack (Jason Baron)
- disable 3w-9xxx driver builds on ppc64 (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-30.EL" date="1110362400">- fix obscure oops in tty init_dev() handling (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-29.EL" date="1109844000">- incorporate urgent late-breaking SATA fixes (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-28.EL" date="1109152800">- add more USB device support to visor driver (Pete Zaitcev)
- implement clustered APIC support for x86_64 (Larry Woodman)
- constrain x86 MSR writes based on cpu model (Jason Baron)
- increase max superbh size for performance (Stephen Tweedie)
- add locking to prevent oops in md_seq_show() (Doug Ledford)
- restore missing ia64 panic_on_oops handling (Tatsuo Uchida)
- implement Ethernet PCI quirk for HP xw9300 (Jim Paradis)
- revert NFS flock() avoidance to -27.7.EL (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.17.EL" date="1108980000">- rework NFS flock() avoidance w/FS_WANT_FLOCK for GFS (Ken Preslan)
- prevent inode corruption from delete/lookup races (Wendy Cheng)
- preserve registers for ia64 16-byte atomic ops (Geoff Gustafson)
- update SCSI whitelist for LSI/HP/STK/EMC devices (Tom Coughlan)
- disable vary_io in ips driver to avoid ctlr hangs (Tom Coughlan)
- correct handling of 2-TB device partitions (Peter Martuccelli)
- update support for ia64 perfmon facility (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.16.EL" date="1108720800">- implement diskdump support for SATA piix/promise (Nobuhiro Tachino)
- correct /proc/mtrr size values on EM64T platforms (Larry Woodman)
- restore page permissions after writes from ptrace() (Don Howard)
- fix /proc parent pids from multi-threaded forks (Ernie Petrides)
- enable software watchdog timer support on s390,x (Jan Glauber)
- update tg3 network driver to version 3.22RH (John Linville)
- incorporate 3w-9xxx driver version 2.24.00.011fw (Adam Manthei)
- correct ending boundary check in filemap_sync() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.15.EL" date="1108548000">- add e100 driver PCI device ids for ICH7 support (John Linville)
- restore obsolete but ignored e100 module params (John Linville)
- implement user-mode (gdb) access to ia64 gate page (Jason Baron)
- fix x86_64 FPU IP and DP values in SIGFPE context (Larry Woodman)
- add qla2200 module parameter to use NVRAM RIO val (Tom Coughlan)
- update 3w-xxxx driver to 1.02.00.037 w/.033 backup (Adam Manthei)
- fix crashes in video Firewire (ieee1394) driver (Bastien Nocera)
- prevent info leaks into ext3 journal disk blocks (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.14.EL" date="1108461600">- enhance AIO performance over NFS w/FS_AIO_SYNC hook (Steve Dickson)
- defer e100_tx_timeout() work from interrupt context (John Linville)
- correct IPV6 DST entry release to prevent route leak (Dave Miller)
- ignore MTU updates from invalid IPV6 ndisc packets (Dave Miller)
- add relevant PCI device ids to extend ICH7 support (John Linville)
- reduce system pauses during heavy page laundering (Larry Woodman)
- fix audit logging of paths w/predicate filter usage (Neil Horman)
- enable building of unsupported fusion isense module (Adam Manthei)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.13.EL" date="1108375200">- increase dxfer size limit for ppc64 SG_IO ioctl32 (David Howells)
- eliminate tty line discipline usage/switching races (Jason Baron)
- fix autofs recognition of ghosted direct map updates (Jeff Moyer)
- fix sg driver race between cmd completion and close (Tom Coughlan)
- prevent e100 data corruption from v.3.0.27-k2 update (John Linville)
- upgrade SATA support (core, libata, new/old drivers) (John Linville)
- implement diskdump support for sym53c8xx adapter (Yuichi Nagahama)
- add USB support for Wacom Cintiq/Intuos3 tablets (Kristian Høgsberg)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.12.EL" date="1107943200">- update e100 network driver to version 3.3.6-k2 (John Linville)
- correct cpu id macro for dual-core Opteron support (Jim Paradis)
- add "numa=off" message on x86_64 OOM kills w/NUMA (Larry Woodman)
- improve user/system timer tick accounting on s390,x (Pete Zaitcev)
- prevent EAGAIN errs from interrupted TCP recv() calls (Dave Miller)
- update cciss disk driver to version v2.4.54.RH1 (Adam Manthei)
- eliminate diskdump cpu id from frozen list (Nobuhiro Tachino)
- fix user-space access bug in USB vicam ioctl (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.11.EL" date="1107424800">- incorporate Emulex driver ioctl module version 1.0.13 (Tom Coughlan)
- eliminate potential call_lock deadlock with diskdump (Tatsuo Uchida)
- fix potential kiobuf_lock deadlock in free_kiovec() (Larry Woodman)
- add L2 cache descriptor for EM64T Irwindale processor (Neil Horman)
- prevent mmap() syscalls from choosing NULL mappings (Rik van Riel)
- include bounce buffer pages in show_mem() output (Larry Woodman)
- add I2C driver support for ICH5 in i2c-i801.c (John Linville)
- correct parport_pc errors on insmod failures (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.10.EL" date="1106906400">- fix futex_wait() race condition that allowed app hang (Ingo Molnar)
- add/correct write barrier placement in timer routines (David Howells)
- add x86_64 NMI switch support to debug kernel hangs (Yuichi Nagahama)
- restore CIV/LVI offset operation in i810_audio driver (John Linville)
- update e1000 network driver to version 5.6.10.1-k2 (John Linville)
- prevent bogus BUG_ON during multi-threaded core dump (Roland McGrath)
- fix x86_64 crash in huge_page_release() w/SHM_HUGETLB (Larry Woodman)
- fix possible mem corruption from /proc/kcore access (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.9.EL" date="1106647200">- fix core dumping over NFS mounts with "intr" option (Roland McGrath)
- prevent multi-threaded app hang from sys_wait4() race (Ingo Molnar)
- restore e1000 support for Intel PCI device id 1014 (John Linville)
- add ac97 quirk entries for HP xw6000/xw6200/xw8000 (John Linville)
- update b44 network driver to upstream version 0.95 (John Linville)
- revert NFS silly-delete and rpciod-hang patches (Steve Dickson)
- fix panics while backing up LVM snapshots (Heinz Mauelshagen)
- fix oops in redirect_target() on DHCP refresh (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.8.EL" date="1105696800">- rework ia64 INIT switch stacks for clean tracebacks (Tatsuo Uchida)
- fix USB raced timeout errors and ohci_complete_add() (Pete Zaitcev)
- add O_DIRECT handling in LVM driver handling (Heinz Mauelshagen)
- downgrade wait4() SIGCHLD/SIG_IGN warning message (Ingo Molnar)
- eliminate potential VMA list races with do_brk() (Dave Anderson)
- ignore ICMP Source Quench messages in tcp_v4_err() (Dave Miller)
- prevent VMA overlap crashes in insert_vm_struct() (Jason Baron)
- move flock() avoidance from NFS up to F/S layer (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.7.EL" date="1105437600">- fix 32-compat alt-stack signal handling on x86_64 (Geoff Gustafson)
- add initialization of ppc64 EEH error buffer size (David Howells)
- make ppc64 xmon work properly with Power5 console (David Howells)
- prevent infinite sync loop from NFS ESTALE writes (Steve Dickson)
- update 8139too network driver w/recent 2.4 fixes (John Linville)
- avoid netfilter oops when ip_conntrack is unloaded (Dave Miller)
- fix potential rpciod hangs during NFS sillydelete (Steve Dickson)
- avoid "No locks available" errors w/flock() on NFS (Ken Preslan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.6.EL" date="1104919200">- fix x86 phys proc ids for non-clustered APIC systems (Geoff Gustafson)
- return EINVAL on e100/e1000 rx-mini/rx-jumbo settings (John Linville)
- fix i810_audio regression from modified ICH6 PCI ids (John Linville)
- prevent race conditions in add_wait_queue_cond() macros (Jeff Moyer)
- fix FAT32 file system corruption w/writing 8M files (Alexander Viro)
- fix derivation/presentation of PHB unit ids on ppc64 (David Howells)
- close OpenFirmware stdin device at boot on ppc64 (David Woodhouse)
- fix 32-bit-compat regression in CMSG validations (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.5.EL" date="1103796000">- add "CommitLimit" data to /proc/meminfo output (Frank Hirtz)
- allow autofs to expire mounts on ppc64 arch (Jeff Moyer)
- add 3c59x EEPROM_RESET for 3c900 Boomerang (John Linville)
- ignore PTE mapping status in page_anon() (Larry Woodman)
- fix SIOCGIFHWADDR handling for zero addr_len (Dave Miller)
- add netdump support for x86_64, ia64, ppc64 (Dave Anderson)
- correct overcommit accounting on fork failure (Frank Hirtz)
- raise default ia64/ia32e swiotlb size to 64M (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.4.EL" date="1103709600">- add network CMSG validation checks (Dave Miller)
- fix data struct leak in ip_options_get() (Dave Miller)
- fix IGMP vulnerabilities in ip[6]_mc_source() (Dave Miller)
- fix e_phnum binfmt_elf loader vulnerability (Dave Anderson)
- clean x86_64 32-bit-compat syscall numbers (Jim Paradis)
- prevent ia64 floating point reg val leakage (Jason Baron)
- add USB io_edgeport driver size check (Peter Martuccelli)
- enable softirq deferral for x86_64 arch (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.3.EL" date="1102586400">- add data/param length sanity checks in smbfs (Alexander Viro)
- prevent /proc/&lt;PID&gt;/cmdline env data disclosure (Dave Anderson)
- make tulip_stop_rxtx() wait for DMA termination (John Linville)
- fix mm_stat regression introduced in -20.13.EL (Rik van Riel)
- correct return value from vlan_dev_change_mtu() (John Linville)
- serialize datagram read w/appropriate semaphore (Dave Miller)
- fix keyboard regression introduced in -24.EL (Peter Martuccelli)
- enable mmap/mprotect PROT_EXEC for legacy apps (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-26.2.EL" date="1101722400">- fix USB problems with keyboards and ia64 oopses (Pete Zaitcev)
- add i810 PCI IDs for nforce3/CK804 audio devices (Jim Paradis)
- fix ppc64 viodasd driver dev naming/limit bugs (David Howells)
- prevent tg3 fiber link bounces w/auto-negotiation (Dave Miller)
- add ac97 quirk handling for i810_audio driver (John Linville)
- prevent incorrect OOM killing with iscsi usage (Larry Woodman)
- create kiobuf cache to reduce lowmem contention (Larry Woodman)
- fix yet another binfmt_elf loader vulnerability (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.1.EL" date="1100512800">- (this is the first build for RHEL 3 Update 5)
- implement open() recovery from NFS ESTALE errors (Neil Horman)
- clean up warnings from lpfc and lpfc_703 Makefiles (Tom Coughlan)
- fix nessus-induced kernel panic with auditing (Peter Martuccelli)
- update 3c59x driver to LK1.1.18 and fix reset bug (John Linville)
- fix ext3 O_DIRECT bug in orphan list handling (Stephen Tweedie)
- flush cached dirty pages on NFS reads w/O_DIRECT (Steve Dickson)
- allow ia64 kernel unaligned access msg suppression (Neil Horman)
- correct test for performing buffer-head reclaim (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.EL" date="1100253600">- fix binfmt_elf loader vulnerabilities (Jim Paradis, Dave Anderson)
- limit kernel data struct slabs to single-page allocs (Larry Woodman)
- update Emulex driver to 7.1.14 (backup still 7.0.3) (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-24.EL" date="1100080800">- fix several ppc64 problems with signal catching (David Woodhouse)
- fix several bugs in /proc/ppc64/lparcfg driver (David Howells)
- fix possible diskdump hangs w/megaraid2 driver (Tatsuo Uchida)
- add support for IBM EM64T-based Groucho blade (Peter Martuccelli)
- fix regression in USB BIOS-&gt;kernel hand-off support (Pete Zaitcev)
- fix regression in ia64 kernel stack unwind handling (Don Howard)
- fix regression w/agpgart support of i8xx chipsets (Larry Woodman)
- add support for BLKSSZGET ioctl in cciss driver (Tom Coughlan)
- disable iSCSI builds in ppc64 and s390* configs (Tom Coughlan)
- update Emulex driver to 7.1.13 (backup still 7.0.3) (Tom Coughlan)
- correct SCSI whitelist for Chaparral FR1422 devices (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-23.EL" date="1098957600">- prevent kswapd from getting stuck in prune_icache() (Larry Woodman)
- fix ppc64 single-stepping into signal handlers (David Woodhouse)
- fix corruption from user stack expansion races (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-22.EL" date="1098093600">- prevent add/removal races in SCSI open handling (Doug Ledford)
- fix U3 agpgart regression with Intel i8xx chipsets (Dave Jones)
- update SCSI whitelist for IBM 1722/1724 devices (Tom Coughlan)
- correct TSS descriptor limit checking for x86_64 (Jim Paradis)
- add nforce3/CK804 device support and fix ACPI bug (Jim Paradis)
- add support for "forcedeth" net driver version 0.28 (Jim Paradis)
- enable diskdump support in amd64/ia32e configs (Nobuhiro Tachino)
- restore/improve linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- add missing page_cache_release() in launder_page() (Larry Woodman)
- update Emulex driver to 7.1.11 (backup still 7.0.3) (Tom Coughlan)
- add new USB ids to support latest Wacom tablets (Kristian Høgsberg)
- remove drivers/net/tun.o from unsupported list (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-21.EL" date="1096538400">- fix potential PTE race in do_anonymous_page() (Rik van Riel)
- add "Committed_AS" data to /proc/meminfo output (Frank Hirtz)
- revise DMA zone paging thresholds for x86_64 (Larry Woodman)
- prevent /proc/scsi/scsi oops during probes (David Woodhouse)
- avoid kswapd hangs via free_more_memory() hooks (Rik van Riel)
- update megaraid2 driver to 2.10.8.2 w/2.10.6 backup (Adam Manthei)
- fix do_notify_parent() panic from ptrace death race (Roland McGrath)
- fix large core file support on 64-bit architectures (Dave Anderson)
- enable tux on ia64 and increase max tux threads to 16 (Ingo Molnar)
- fix ia64/s390,x single-stepping w/signal handlers (David Woodhouse)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.14.EL" date="1096452000">- fix hang in SCSI starvation management code (David Howells)
- update SCSI whitelist for NETAPP LUN devices (Wendy Cheng)
- fix s390 cio handling during ESS fail-overs (Pete Zaitcev)
- update Emulex driver to 7.1.8 w/7.0.3 backup (Tom Coughlan)
- update Qlogic driver to 7.01.01 w/7.00.03 backup (Tom Coughlan)
- correct unlock/free order in proc_lookupfd() (Ernie Petrides)
- use ACPI for PCI interrupt routing on ia32e (Jim Paradis)
- allow cpus to boot w/APIC IDs &gt; 8 on ia32e (Jim Paradis)
- fix pid allocation when pid_max &gt; 32768 (Ernie Petrides)
- fix regs in multi-threaded ia64 core dumps (Keiichi Mori)
- enable sym53c8xx driver for ppc64 iSeries (David Howells)
- fix ac97 depmod errors w/hugemem configs (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.13.EL" date="1096365600">- fix aic79xx_osm.h/3c59x.c changes in prior rev (Tachino/Linville)
- allow for larger nfsd block sizes on some archs (Steve Dickson)
- fix possible aacraid driver panic in aac_info() (Tom Coughlan)
- fix xdr argsize check to handle writes &gt;= 2^31 (Steve Dickson)
- update e1000 network driver to version 5.3.19-k2 (John Linville)
- apply several cciss driver fixes (to 2.4.52.RH2) (Adam Manthei)
- fix x86_64 versions of cpu capability test macros (Jim Paradis)
- fix ppc64 HPTE memory corruption race condition (Rik van Riel)
- add sys_epoll support on s390,x (Stephen Tweedie, Pete Zaitcev)
- prevent keyboard.c warnings from mouse clicks (Norm Murray)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.12.EL" date="1096279200">- improve slab cache page reaping heuristics (Larry Woodman)
- implement diskdump support for x86_64 arch (Nobuhiro Tachino)
- add ia64 INIT trigger switch support for debugging (Tatsuo Uchida)
- fix several problems in handling of AIO on pipes (Jeff Moyer)
- update fixes for LTP read02 test hangs with tmpfs (Alexander Viro)
- fix x86_64 single-stepping out of signal handlers (Jim Paradis)
- increase size of ppc64 RTAS error log buffer (David Howells)
- increase max possible kNFSD lockd cookie size (Steve Dickson)
- backport 3c59x fixes for mii-tool problems w/10Mb (John Linville)
- incorporate Cisco's iscsi_sfnet initiator driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.11.EL" date="1095933600">- implement diskdump support for megaraid2 adapter (Tatsuo Uchida)
- update ips driver to version 7.10.18 w/7.00.15 backup (Tom Coughlan)
- correct max page aging interval boundary in kscand() (Larry Woodman)
- add ppc64 support for ptrace() with PT_SINGLESTEP (David Woodhouse)
- update e100 network driver to version 3.0.27-k2 (John Linville)
- fix LTP read02 test hangs when tmpfs is in use (Alexander Viro)
- get proc_dir_entry reference in proc_lookup() (Alexander Viro)
- add exports of several AIO-related interfaces (Larry Woodman)
- reduce swapping during excessive pagecache use (Larry Woodman)
- implement statfs64() syscall on x86 for NFS use (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.10.EL" date="1095847200">- implement early USB hand-off (BIOS-&gt;kernel) support (Pete Zaitcev)
- fix stack pointer calculation in x86 show() handling (Jeff Moyer)
- prevent interference between flock/POSIX lock types (Frank Hirtz)
- update pcnet32 network driver to version 1.30c (John Linville)
- add export of block_commit_write() f/s interface (Larry Woodman)
- implement diskdump support for dpt_i2o adapter (Tatsuo Uchida)
- update mptfusion driver to version 2.05.16.02 (Adam Manthei)
- move disk_dump_notifier_list to diskdumplib.c (Nobuhiro Tachino)
- update s390 zfcp driver to revision 5.31.2.11+ (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.9.EL" date="1095674400">- fix occasional ibmvscsic driver insmod crash (David Howells)
- disable linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- prevent double slashes in symlink auditing (Peter Martuccelli)
- fix overzealous compat32 setsockopt conversions (David Woodhouse)
- backport tulip driver fixes from upstream 2.4.28 (John Linville)
- update tg3 network driver to version 3.10RH (John Linville)
- implement sysctl to force igmp protocol versions (Neil Horman)
- add diskdump performance improvement info (Nobuhiro Tachino)
- fix s390 iucv lost connections and ping hangs (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.8.EL" date="1095588000">- prevent diskdump deadlock in case of die() recursion (Tatsuo Uchida)
- add x86/x86_64 support for ptrace() w/PT_SINGLESTEP (Roland McGrath)
- fix x86/x86_64 single-stepping into signal handlers (Roland McGrath)
- increase x86 value for MAX_MP_BUSSES definition to 260 (Ingo Molnar)
- eliminate ia64 potential for scheduler runq deadlock (Larry Woodman)
- add support for /proc/sys/kernel/mem_nmi_panic sysctl (Dave Anderson)
- prevent keyboard-initiated sysrq hangs in handle_sysrq() (Jeff Moyer)
- fix intermittent netdump hangs from cpu-frozen messages (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.7.EL" date="1095415200">- fix premature OOM killing change added in prior rev (Larry Woodman)
- backport vlan driver fixes from upstream 2.4.28-rc1 (John Linville)
- add _sb_findmap symbol export in s390/s390x kernels (Pete Zaitcev)
- add ppc64 support for 32-bit sendfile64() syscall (David Howells)
- fix 32-bit IPC_INFO shmctl() syscalls for ppc64 (David Howells)
- upgrade libata/SATA support to current 2.4 bits (John Linville)
- avoid USB device resets of shared/busy interfaces (Pete Zaitcev)
- fix miscellaneous problems in ppc64 icom driver (David Howells)
- fix ip_queue_maxlen sysctl for ip[6]_queue modules (Neil Horman)
- add module parm for max entries in NFS_ACL replies (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.6.EL" date="1095156000">- prevent OOM killer from kicking in prematurely (Larry Woodman)
- avoid NMI watchdog crashes during sysrq-m usage (Wendy Cheng)
- add auditing support for ia64 clone2 syscall (Peter Martuccelli)
- correct sign of auditing error codes for ia64 (Peter Martuccelli)
- implement ia64 auditing 32-bit-disable sysctl (Peter Martuccelli)
- fix ia64 faults w/stale VHPT-generated TLB entries (Dave Anderson)
- fix invalid x86_64 checksums for multicast packets (Mike Gahagan)
- fix incorrect blocking bug inside wakeup_kswapd() (Larry Woodman)
- validate appropriate media type in DVD drives (Doug Ledford)
- reduce s390 stack usage in qeth/qdio drivers (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.5.EL" date="1094810400">- prevent scenarios that lead to hang of kswapd (Larry Woodman)
- add locking for access to /proc/bus/usb/devices (Pete Zaitcev)
- correct x86 rescheduling to handle apm=power-off (Ingo Molnar)
- fix OOM killer locking and mm referencing holes (Larry Woodman)
- pin ia64 mapping for idle proc stack during boot (Larry Woodman)
- fix warning throttle for amd64 stack overflow check (Neil Horman)
- fix content lengths when using tux gzip compression (Ingo Molnar)
- add auditing support for pread/pwrite syscalls (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.4.EL" date="1094724000">- prevent bogus data in /proc/scsi/ibmvscsi/* (David Howells)
- update tg3 network driver to version 3.9RH (John Linville)
- improve ramfs memory alloc w/scarce highmem (Larry Woodman)
- correct several values in /proc/ppc64/lparcfg (David Howells)
- allow dirty page rebalancing under mem pressure (Rik van Riel)
- prevent memory leak in scsi_build_commandblocks() (Doug Ledford)
- fix potential kswapd deadlock w/disk quota usage (Larry Woodman)
- increase MAX_IO_APICS from 8 to 32 for x86_64 arch (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.3.EL" date="1094205600">- fix various error path bugs in bcm5820 driver (John Linville)
- validate addresses used with /dev/kmem accesses (Neil Horman)
- eliminate IPSEC tunnel leaks when using IPComp (Dave Miller)
- add auditing support for utimes() syscalls (Peter Martuccelli)
- prevent netconsole freeze w/cable dis-/re-connect (Jeff Moyer)
- correct reboot_cpu validation for "reboot=s&lt;n&gt;" (Doug Ledford)
- fix mem/irq clean-up in olympic tokenring driver (Neil Horman)
- update network bonding driver to version 2.6.0 (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.2.EL" date="1094032800">- add maps/rlimits output with print-fatal-signals=2 (Ingo Molnar)
- backport ac97 sound support from upstream 2.4.27 (John Linville)
- eliminate kernel stack data leaks from USB drivers (Mark Cox)
- fix interrupt status mask in AMD PCnet32 driver (David Howells)
- fix module loading problems in ibmvscsic driver (David Howells)
- fix x86 shared runq mapping when ACPI data is bad (Bernd Schmidt)
- disable enhanced error handling on PCI-ISA bridges (David Howells)
- add memory-mapped i/o support to i810_audio driver (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.1.EL" date="1093860000">- (this is the first build for RHEL 3 Update 4)
- backport r8169 network driver changes from 2.4 (John Linville)
- update i810_audio sound driver to version 1.01 (John Linville)
- convert USB UHCI driver warning to debug message (Pete Zaitcev)
- backport 2.6 PROT_GROWSDOWN/UP mprotect() support (Jakub Jelinek)
- lower ppc64 console logging level of RTAS messages (David Howells)
- fix ppc64 handling of "smt-emabled=off" boot option (David Howells)
- correct socket sndbuf accounting w/IP_MULTICAST_LOOP (Neil Horman)
- reduce x86_64 user stack start randomization to 16K (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.EL" date="1092823200">- change TARGET_CPUS on x86_64 to include all on-line cpus (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-19.EL" date="1092304800">- fix possible races/overflows in file offset handling (Alexander Viro)
- correct logging of boot progress messages on Power5 (David Howells)
- extend ppc64 EEH support for other types of devices (David Howells)
- fix ibmveth driver to properly shut down and restart (David Howells)
- fix several races and overflows in ppc64 RTAS driver (David Howells)
- backport "acpi=noirq" support to work around Nocona hangs (Don Howard)
- conditionalize pbn_hp_diva to fix serial driver oops (Matthew Galgoci)
- add amd64 GART entry guard mappings for PCI mis-prefetch (Jim Paradis)
- upgrade SATA support again to resolve several problems (Jeff Garzik)
- qualify ia32e IRQ affinity disable with BIOS flag check (Jim Paradis)
- fix eeh_check_failure() on ppc64 to be interrupt safe (David Howells)
- correct ppc64 EEH macros to use appropriate data size (David Howells)
- fix x86/ia64 no-wait handling in smp_call_function() (Larry Woodman)
- fix "Filter target 0x203 not known ..." audit msgs (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-18.EL" date="1090404000">- prevent s390 mlock hangs with follow_page() rework (Ernie Petrides)
- fix Power5 initialization and handling of RAS IRQs (David Howells)
- fix ppc64 viocons driver deadlocks with printk() (David Howells)
- apply eh_timeout, netdump, cli fixes in diskdump (Tatsuo Uchida)
- add skip_mapped_pages tuning for page eviction (Stephen Tweedie)
- fix initrd's effect on ppc64 mem_end calculation (David Howells)
- allow HT support on ppc64 systems with single cpu (David Howells)
- backport v2.0.8 aic7xxx driver h/w support for Dell (Tom Coughlan)
- correct ppc64 device node searching in hvsi driver (David Howells)
- fix KMI compat problem w/pgprot_t in x86 NX support (Jim Paradis)
- resurrect mptfusion driver backup version 2.05.05 (Tom Coughlan)
- disable IRQ affinity setting on some ia32e systems (Jim Paradis)
- update SCSI whitelist for Dot Hill SANnet/StorEdge (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-17.EL" date="1089280800">- account for zone holes in big hash table allocator (Stephen Tweedie)
- prevent reserved stack space overflow of mmap_top (Ernie Petrides)
- fix USB crash in scan_async() with EHCI hardware (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-16.EL" date="1088848800">- enable exec-shield and add x86 NX support (Ingo Molnar, Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.19.EL" date="1088762400">- add owner check in inode_change_ok() for gid changes (Ernie Petrides)
- fix race in finish_task_switch() between wakeup/exit (Ernie Petrides)
- remove Samsung CD-ROM SN-124 from IDE DMA blacklist (Tom Coughlan)
- update e1000 network driver to version 5.2.52-k3 (John Linville)
- add auditing support for semtimedop syscalls (Peter Martuccelli)
- fix tasklet and locking bugs in Power5 hvsi driver (David Howells)
- fix megaraid2 handling of TUR cmds with SCSI CD-ROM (Adam Manthei)
- update SCSI whitelist for HP NS E1200-160 router (Tom Coughlan)
- prevent x86 read_ldt() from reading beyond kmap (Ernie Petrides)
- force single loadable segment in ia64 kernels (Jakub Jelinek)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.18.EL" date="1088157600">- implement ia64 work-around for TLB fetch timeout MCA (Larry Woodman)
- fix Power3 interrupt initialization in ppc64 setup (David Howells)
- correct info msg, prevent double panic in diskdump (Tatsuo Uchida)
- defend against NULL "mm" ptrs in page_referenced() (Rik van Riel)
- fix miscellaneous audit subsystem problems (Peter Martuccelli)
- prevent crash with tux CGI execution on x86_64 (Ingo Molnar)
- add installer info to SATA sx8 block driver (Jeff Garzik)
- turn on vary_io flag in SCSI ips driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.17.EL" date="1087984800">- allocate big system hash tables w/bootmem allocator (David Howells)
- prevent loading aic7xxx_old when aic7xxx is in use (Doug Ledford)
- implement stat() recovery from NFS ESTALE errors (Steve Dickson)
- fix raw/O_DIRECT i/o bug with unmapped pages (Stephen Tweedie)
- correct another locking hole in RAID1 handling (Doug Ledford)
- fix __x86_64__ conditional in megaraid2.c driver (Adam Manthei)
- fix unresolved symbols on ia64 in cciss driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.16.EL" date="1087898400">- make NFS sillydelete wait for unlink completion (Steve Dickson)
- prevent EIO w/concurrent O_DIRECT+buffered i/o (Stephen Tweedie)
- upgrade SATA support (core, libata, and drivers) (Jeff Garzik)
- implement futex() FUTEX_CMP_REQUEUE op (Al Viro, Pete Zaitcev)
- update b44 network driver to version 0.93 (John Linville)
- avoid unix_stream_sendmsg() ENOBUFS errors (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.15.EL" date="1087812000">- improve SCSI mid-layer error handling w/sdev_retry_q (Doug Ledford)
- eliminate rw-semaphore races between waiter/wakeup (David Howells)
- add locking and fix accounting bug in RAID1 handling (Doug Ledford)
- backport Carmel sx8.c driver from upstream 2.4 base (John Linville)
- rename ppc64-squadrons-* patches to ppc64-power5-* (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.14.EL" date="1087639200">- introduce support for IBM Squadrons/Power5 systems (David Howells)
- update aacraid driver to 1.1.5-2339 w/1.1.2 backup (Adam Manthei)
- allow sys_remap_file_pages() on unlocked ramfs VMAs (Larry Woodman)
- fix diskdump hangs during resets with aic79xx driver (Tatsuo Uchida)
- fix possible data corruption when using SHM_HUGETLB (Larry Woodman)
- set QLogic HbaApiNode proc file permissions to 0600 (Tom Coughlan)
- add IRQ blocking/restoring in add_gendisk/del_gendisk (Jeff Needle)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.13.EL" date="1087466400">- fix problem causing PCI bus 255 to be missing on ia64 (Ben Woodard)
- make nfs_statfs() recognize/handle fs size overflows (Steve Dickson)
- update QLogic driver to 7.00.03-RH1 w/6.07.02 backup (Tom Coughlan)
- allow procfs to utilize more dynamic inode numbers (David Howells)
- prevent inappropriate "unexpected IO-APIC" messages (Ernie Petrides)
- avoid lost dirty page bits in s390/s390x VM handling (Pete Zaitcev)
- fix ACPI SCI interrupt defaults and add kernel params (Jim Paradis)
- fix user-space access bugs in acpi/airo/decnet/sound (Alexander Viro)
- remove drivers/net/starfire.o from unsupported list (Ernie Petrides)
- fix mm_struct mem leak in copy_process() error path (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.12.EL" date="1087293600">- correct s390/s390x tests for PT_AUDITED flag (Peter Martuccelli)
- update e100 network driver to version 2.3.43-k1 (John Linville)
- update megaraid2 driver to 2.10.6 w/2.10.1.1 backup (Adam Manthei)
- add x86_64 auditing support for 32-bit-compat (Peter Martuccelli)
- fix ia64 unwind handling for UNW_INSN_SETNAT_MEMSTK (Jason Baron)
- update cciss driver to v2.4.52 for several fixes (Tom Coughlan)
- fix variable block mode tape handling in st driver (Tom Coughlan)
- incorporate latest Emulex fibre channel driver (Tom Coughlan)
- fix USB EHCI problem with BIOS-to-host handoff (Pete Zaitcev)
- update SCSI whitelist for DDN/Xyratex/SanDisk/CBOX3 (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.11.EL" date="1087207200">- upgrade to latest autofs4, remove from unsupported list (Jeff Moyer)
- fix memory corruption bug in audit driver code (Peter Martuccelli)
- store adjusted KSP value in ia64 diskdump support (Tatsuo Uchida)
- update e1000 network driver to version 5.2.52-k1 (John Linville)
- update ips driver to version 7.00.15 w/6.11.07 backup (Adam Manthei)
- implement USB device interlock between ioctls/SCSI-ops (Pete Zaitcev)
- update tg3 driver to version 3.6RH for upcoming chipsets (Dave Miller)
- downgrade several PCI cache line size debugging messages (Jim Paradis)
- correct x86_64 32-bit-compat support for AIO syscalls (Jeff Moyer)
- prevent FPU exception handling hangs on x86/x86_64 (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.10.EL" date="1086948000">- give wait.func highest priority in wake_up_filtered() (Larry Woodman)
- reduce system time when using sys_remap_file_pages() (Larry Woodman)
- enable CONFIG_SOFT_WATCHDOG module for ppc64 configs (David Howells)
- improve page allocation to avoid unnecessary swapping (Rik van Riel)
- implement diskdump support for ia64 with mptfusion (Tatsuo Uchida)
- disable native ia32 support for ia64 Montecito cpus (Jason Baron)
- save/restore P4/ia32e perf registers for oprofile (Will Cohen)
- fix oprofile ESCR_SET_EVENT_SELECT() event mask (Will Cohen)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.9.EL" date="1086775200">- update s390 zcrypt driver to version 1.2.1 (Pete Zaitcev)
- update network tg3 driver to version 3.5RH (Dave Miller)
- eliminate separate ia32e oprofile processor id (Will Cohen)
- update SCSI whitelist for IBM 2105/2145 devs (Doug Ledford)
- avoid EAGAIN errors on blocking UDP sockets (Steve Dickson)
- avoid putting locked inodes on dirty list (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.8.EL" date="1086688800">- decouple NFS O_DIRECT handling for performance gain (Steve Dickson)
- export page_is_ram() interface for amd64/ia32e arch (Jim Paradis)
- enable CONFIG_SCSI_SATA_* options in x86_64 configs (Jim Paradis)
- update mptfusion driver to 2.05.16 w/2.05.11.03 backup (Adam Manthei)
- fix nopage_sequential_readahead() and filemap_sync() (Larry Woodman)
- fix USB EHCI driver to avoid Squadrons install oops (Pete Zaitcev)
- add x86 NMI trigger switch support for debugging (Yuichi Nagahama)
- add dmi_blacklist[] entry for "Intel NA440BX DP" (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.7.EL" date="1086602400">- apply some minor scsi_dump_status() format tweaks (Doug Ledford)
- implement SCSI support for dynamic add (hot plug) (Doug Ledford)
- upgrade lvm driver logic to version 1.0.8-2 (Heinz Mauelshagen)
- fix x86_64 definition for inlined ffs() function (Jim Paradis)
- preserve VM_MAYEXEC for executable stack support (Jim Paradis)
- add extra SLBIEs for ppc64 Power5 DD2.0 errata (David Howells)
- add ppc64 32-bit compat for TIOCGICOUNT/MIWAIT (David Howells)
- hold file struct ref when removing POSIX locks (Steve Dickson)
- fix window scaling bug in tcp_ack_update_window() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.6.EL" date="1086343200">- make fsync() flush all pending NFS updates to disk (Steve Dickson)
- complete ia64 support for multiple I/O port spaces (Larry Woodman)
- fix sending of IP broadcast frames with TTL of zero (Neil Horman)
- prevent context switch storms under high VM loads (Larry Woodman)
- fix sigaltstack() errors w/JVM on hugemem kernels (Roland McGrath)
- add locking and improve output in scsi_dump_status() (Doug Ledford)
- add size boundary checking in scsi_resize_dma_pool() (Doug Ledford)
- fix SCSI request struct leak on command init failures (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.5.EL" date="1084528800">- overhaul ia64 SAL/MCA subsystem (Ben Woodard)
- enable x86_64 32-bit UID support (Jim Paradis)
- add initial diskdump support (Nobuhiro Tachino)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.4.EL" date="1084356000">- reduce chance of "VFS: Busy inodes after unmount." errs (Steve Dickson)
- convert "uaddr2" arg ptr in s390x futex() compat syscall (Pete Zaitcev)
- add ppc64 32-bit compat handler for PE_LOCKED_COPY ioctl (David Howells)
- update s390 dasd driver with several recent bug fixes (Pete Zaitcev)
- fix amd64 NUMA node scanning for Northbridge systems (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.3.EL" date="1084183200">- prevent exp_stopfodrop() oops during cluster failover (Steve Dickson)
- make nfs_file_commit() always flush the entire file (Steve Dickson)
- fix pcnet32 driver's MAC address selection on ppc64 (Julie DeWandel)
- backport /dev/random driver fixes for missed wakeups (Mark DeWandel)
- fix hang w/SoundBlaster 16-bit sampling w/odd count (Ernie Petrides)
- make s390 tape driver specify GPL module license type (Pete Zaitcev)
- correct buffer len value in ppc64 pSeries ipr driver (David Howells)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.2.EL" date="1083664800">- enable booting on 8-way Opteron systems (Jim Paradis)
- fix 32-bit-compat truncate64() on x86_64 (Jim Paradis)
- correct promiscuous mode counter handling (Dave Miller)
- support 128-GB ia64 systems w/HP zx1 chipset (Larry Woodman)
- add export of sys_ioctl() global symbol on s390x (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.1.EL" date="1083578400">- (this is the first build for RHEL 3 Update 3)
- reenable/fix linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- clean up file locks when NFS clients receive signals (Steve Dickson)
- complete ia64-specific LAuS syscall auditing support (Mark DeWandel)
- prevent NULL pointer dereference in page_referenced() (Rik van Riel)
- fix max sectors argument in lvm_snapshot_alloc() (Heinz Mauelshagen)
- allow AGP bus scanning to execute for all architectures (John Dennis)
- fix page_referenced() rss limit checks w/unmapped pages (Rik van Riel)
- correct locking and cr/lf problems in usbserial driver (Pete Zaitcev)
- add /proc/cpuinfo support for new ppc64 processors (Julie DeWandel)
- fix sense data handling on certain SCSI cmd retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.EL" date="1082541600">- fix clobbering of /proc/cpuinfo vendor_id on x86_64 (Jim Paradis)
- correct MCAST_MSFILTER/IP_MSFILTER size checking (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-14.EL" date="1081936800">- disable linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- prevent symlink buffer overflow in ISO-9660 fs (Ernie Petrides)
- check for skb overrun in IPV4/IPV6 IGMP handling (Dave Miller)
- fix possible hang in rebalance_laundry_zone() (Larry Woodman)
- correct zone_wired[] initialization for NUMA (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-13.EL" date="1081332000">- fix several critical libata bugs (Jeff Garzik)
- correct IPSEC XFRM policy ref counting (Dave Miller)
- add amd64/ia32e parsing for "acpi=off" arg (Jim Paradis)
- update tg3 driver to v3.1 for several fixes (Dave Miller)
- fix SCSI whitelist for Hitachi/HP DFx00, Apple Xserve (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-12.EL" date="1080295200">- add USB support for Handspring Treo 600 PDA syncing (Matthew Galgoci)
- clear state for CPEs during ia64 MCA SAL error logging (Ben Woodard)
- prevent DMA resource leak in QLogic driver error path (Tom Coughlan)
- change default QLogic driver device queue depth to 64 (Tom Coughlan)
- replace fabricated cciss drive geometry w/ENXIO error (Tom Coughlan)
- update SCSI whitelist for HP SureStore/StorageWorks (Tom Coughlan)
- disable CONFIG_ACPI_DEBUG in amd64/ia32e configs (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-11.EL" date="1078740000">- add yet another Intel ICH6 SATA PCI id (Jeff Garzik)
- fix ref counting in copy_process() error path (Larry Woodman)
- remove ia64 support for /proc/bus/mckinley/bitmap (Jason Baron)
- correct depmod versioning for unsupported modules (Ernie Petrides)
- prevent data corruption in ia32e phys_proc_id[] info (Larry Woodman)
- change default value for inactive_clean_percent to 30 (Larry Woodman)
- enable improved version of s390 on-demand timer patch (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-10.EL" date="1078221600">- incorporate late-breaking libata fixes (Jeff Garzik)
- enable amd64 syscall for tux support (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.17.EL" date="1078135200">- reduce s390 idle overhead with on-demand timer patch (Pete Zaitcev)
- complete ia64 NPTL support for 32-bit-EL executables (Jason Baron)
- add several ia64 syscall table entries for 32-bit-EL (Jason Baron)
- upgrade libata/SATA support, delete ich5-sata.patch (Jeff Garzik)
- check for mremap/vmtruncate race in move_one_page() (Jason Baron)
- prevent ia64 NaT-bit corruption during sig catching (Jason Baron)
- fix amd64 get_mtrr() parsing error with &gt;4GB memory (Jim Paradis)
- change amd64 default behavior to avoid TSC timer use (Jim Paradis)
- force s390utils upgrade to prevent zipl seg fault (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.16.EL" date="1078048800">- restore varyio capability in mptfusion driver update (Adam Manthei)
- enhance SCSI mid-layer queuing for indefinite retries (Doug Ledford)
- add ia64 reg reloads for 32-bit-EL strace -f support (Jason Baron)
- fix ia64 core dump support for 32-bit-EL executables (Jason Baron)
- add SCSI whitelist devs with BLIST_RETRY_ABORTED_CMD (Doug Ledford)
- remove stack-in-interpreter check in binfmt_elf.c (Julie DeWandel)
- clear all flags in exec_usermodehelper() for kmod (Alexander Viro)
- fix aacraid command completion (rq corruption) bugs (Tom Coughlan)
- correct cciss_proc_tape_report() type in flags decl (Tom Coughlan)
- enable USB-2.0-hub-based mice/keyboards to function (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.15.EL" date="1077962400">- fix amd64 oprofile linkage problem in ia32e support (Ernie Petrides)
- update ips driver to version 6.11.07 w/6.10.52 backup (Tom Coughlan)
- add size checks to DRM ATI r128 driver ioctl handling (John Dennis)
- avoid megaraid2 irq_disable calls for mem-mapped ctlrs (Tom Coughlan)
- upgrade firmware imbedded in QLogic driver to 3.02.24 (Tom Coughlan)
- correct ia64 memory accounting in overcommit mode 2 (Larry Woodman)
- implement softirq deferral to limit kernel stack depth (Ingo Molnar)
- reduce kernel stack usage in a couple of tux functions (Ingo Molnar)
- fix shared extended attribute ref counting in ext3 (Stephen Tweedie)
- clear SCSI sense data buffer between eh retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.14.EL" date="1077789600">- add .RH1 suffix to cciss driver version v2.4.50 (Tom Coughlan)
- implement initial LAuS syscall auditing support (Mark DeWandel)
- introduce GFS enablers for locking and sendfile ops (Ken Preslan)
- update QLogic driver to 6.07.01 w/6.06.00b11 backup (Tom Coughlan)
- improve netdump reliability w/asynchronous IPI param (Jeff Moyer)
- add ICH6 DSP audio support to i810_audio driver (Jeff Garzik)
- apply SCSI whitelist updates for several devices (Tom Coughlan)
- fix odd byte tape i/o handling in sym53c8xx driver (Tom Coughlan)
- correct minimum nfsd version that supports acls (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.13.EL" date="1077703200">- allow concurrent NFS direct i/o to same file if !append (Steve Dickson)
- introduce support for new Intel 64-bit ia32e processor (Larry Woodman)
- update mptfusion driver to 2.05.11.03 w/2.05.05 backup (Adam Manthei)
- remove fs/binfmt_misc.o from linux-modules-unsupported (Jason Baron)
- fix ia64 predicate register use in sig trampoline code (Jason Baron)
- add oprofile cpu type recognition for ia32e processor (Will Cohen)
- update e1000 network driver to version 5.2.30.1-k1 (Jeff Garzik)
- add more Intel PCI ids to match upstream 2.4 (Jeff Garzik)
- add ICH6 PATA support, PCI ids, irq routing (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.12.EL" date="1077530400">- add deferred page freeing for intr-context unmap_kvec() (Jeff Moyer)
- update megaraid2 driver to v2.10.1.1 w/v2.00.9 backup (Tom Coughlan)
- fix ppc64 pte hash table locking to avoid deadlocks (Julie DeWandel)
- fix ia64 data TLB init to prevent random boot-up hangs (Jason Baron)
- fix ia64 RNat register corruption with alt sig stacks (Jason Baron)
- allow smaller ia64 sig stacks in ia32 emulation layer (Jason Baron)
- backport ncpfs fixes to eliminate var-length arrays (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.11.EL" date="1077271200">- backport cisco aironet driver from 2.6.3-rc4 (Matthew Galgoci)
- update tg3 driver to v2.7 to fix status reg handling (Dave Miller)
- correct lost jiffies logic for x440/5 cyclone timer (Bernd Schmidt)
- fix open() error clean-up for unsupported O_DIRECT (Stephen Tweedie)
- prevent ia64 crashes when unmapping hugetlb pages (Jason Baron)
- add ppc64 processor support for future PPC970+ (Julie DeWandel)
- rework ppc64 32-bit-compat iptables support (Julie DeWandel)
- fix func ptr test in ethtool_set_ringparam() (Jeff Garzik)
- disable linux-2.4.21-scsi-affine-queue.patch (Doug Ledford)
- improve scsi_allow_ghost_devices description (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.10.EL" date="1077098400">- fix amd64 iommu bug causing data corruption on &gt;4GB systems (Jim Paradis)
- return EINVAL for unsupported ioctl32 syscalls on ppc64 (Julie DeWandel)
- remove incorrect BUG() call in __remove_inode_page() (Stephen Tweedie)
- fix s390 ctc driver problem causing build system hangs (Pete Zaitcev)
- fix s390 qeth driver error path to reset write_busy (Pete Zaitcev)
- update s390 zfcp driver to fix miscellaneous bugs (Pete Zaitcev)
- apply upstream nfs fixes for acl error handling (Steve Dickson)
- prevent kernel stack data leak via /dev/rtc (Ernie Petrides)
- allow AIO operations on sockets for non-inet (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.9.EL" date="1076925600">- restore genksyms_smp_prefix setting for non-x86 builds (Ernie Petrides)
- display/log memory stats whenever there's an OOM kill (Larry Woodman)
- update tg3 driver to v2.6, the latest upstream version (Jeff Garzik)
- update net bonding driver to v2.4.1, latest upstream (Jeff Garzik)
- fix irq, mem, printk, strtol bugs in cciss driver (Tom Coughlan)
- wait for board ready after hot add, cciss driver (Tom Coughlan)
- enable cciss adapter prefetch for x86 platforms (Tom Coughlan)
- add preserve_arg0 handling for ia32 emulation (Larry Woodman)
- fix ppc64 compat support for quota syscall (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.8.EL" date="1076580000">- remove Power-Blade-specific def for USB TEAC floppy (Julie DeWandel)
- fix s390 crash in iucv driver on connection shutdown (Pete Zaitcev)
- fix ia64 ACPI parsing for multinode IDE devs on x455 (Jim Paradis)
- fix amd64 core dumping of multithreaded 32-bit apps (Jim Paradis)
- fix s390 oprofile conditional and zero top addr bits (Will Cohen)
- add ipr driver v1.0.3 for IBM's PPC RAID adapters (Tom Coughlan)
- add {alloc,free}_netdev(), list macro, tg3 PCI ids (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.7.EL" date="1076407200">- restrict /proc/tty/driver directory access to root (Jeff Moyer)
- allow non-standard usr/sys VM splits at 2G/2G, 1G/3G (Ingo Molnar)
- extend existing ppc64 RTAS firmware flash interface (Mark DeWandel)
- fix ppc64 version of strncpy() to zero-pad buffers (Julie DeWandel)
- fix s390/x version of strncpy() to zero-pad buffers (Pete Zaitcev)
- fix generic version of strncpy() to zero-pad buffers (Jim Paradis)
- improve ppc64 segment table entry replacement logic (Julie DeWandel)
- correct type/cast of "len" in ppc64/kernel/nvram.c (Julie DeWandel)
- implement new ppc64 RTAS system call interface (Julie DeWandel)
- increase x86 RSDT table limit in ACPI parsing (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.6.EL" date="1076320800">- fix more usb-storage bugs for Power Blade support (Julie DeWandel)
- remove extra inactive_clean_pages-- in reclaim_page() (Larry Woodman)
- return proper error codes for do_munmap() failure in mremap (Dave Jones)
- fix binfmt_elf.c problems for apps with huge bss regions (Julie DeWandel)
- update cciss driver to v2.4.50 for Smart Array 6i support (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.5.EL" date="1075975200">- prevent netdump progress output from filling up log_buf (Jeff Moyer)
- add ppc64 RAS hook at end of panic() processing (Julie DeWandel)
- correct source IP address in ICMP error message (Dave Miller)
- fix smp deadlock with pdeath_signal posting (Roland McGrath)
- add ppc64 support for /proc/ppc64/lparcfg (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.4.EL" date="1075888800">- update nfsd mode-with-acls fix for upstream conformance (Steve Dickson)
- rework usb-storage locking to avoid hangs on disconnect (Pete Zaitcev)
- fix mmio alignment error in olympic token ring driver (Julie DeWandel)
- prevent tux logger-thread shutdown problems on ppc64 (Ingo Molnar)
- add ppc64 AltiVec chip support for Power Blades (Julie DeWandel)
- eliminate multi-threaded coredump hang potential (Ingo Molnar)
- fix ppc64 segfaults with tasks &gt; 2GB in size (Julie DeWandel)
- fix usb-storage memory-allocation/iowait deadlock (Alan Cox)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.3.EL" date="1075716000">- add amd64 support for PT_GNU_STACK with exec shield (Jim Paradis)
- fix s390 raid1 sync problem w/writes at end of dev (Pete Zaitcev)
- update s390 zcrypt driver to version 1.1.4 (Pete Zaitcev)
- fix output of large /proc/pid/statm values (Mark DeWandel)
- fix output of large /proc/partitions values (Mark DeWandel)
- enable ppc64 support for JS20 Power Blades (Julie DeWandel)
- fix kernel stack memory leak on fork failures (Dave Anderson)
- fix ipv6 packet quoting problem in icmpv6_send() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.2.EL" date="1075370400">- apply Intel's x86 microcode loader update (Jim Paradis)
- enhance PCI multifunction support for ppc64 (Julie DeWandel)
- fix nfsd returning bad mode bits when acls set (Steve Dickson)
- prevent unkillable zombies from detached NPTL threads (Ingo Molnar)
- avoid missing scsi disks in /proc/partitions on detach (Jason Baron)
- correct pte calculation inside zeromap_pte_range() loop (Ben Woodard)
- add inline function PDE() to help driver backporting (Matthew Galgoci)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.1.EL" date="1074679200">- (this is the first build for RHEL 3 Update 2)
- relocate various pieces of the "undo" patch (Patch Review Committee)
- rename s390 zcrypt and zfcp driver patches (Pete Zaitcev)
- add LKML discussion to COPYING.modules (Arjan van de Ven)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.EL" date="1073556000">- fix race condition between thread creation and signals (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-8.EL" date="1073469600">- fix amd64 eflags masking in 32-bit emulation of ptrace (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-7.EL" date="1073383200">- fix numerous ppc64 problems with /proc access (Julie DeWandel)
- allow user core files larger than 2GB in size (Dave Anderson)
- add ia64 support for Crestone Peak AGP bridges (John Dennis)
- fix unaligned kernel accesses in nfs_readdir() (Steve Dickson)
- add new_len/new_addr checks in do_mremap() (Ernie Petrides)
- fix nfs O_DIRECT corruption with &gt;4GB files (Steve Dickson)
- enable bus scan for AGP ctlrs on amd64 systems (John Dennis)
- limit PCI-alloc'ed physaddrs to 4GB on HP ia64 (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-6.EL" date="1070877600">- fix ppc64 firmware updates (Julie DeWandel)
- fix sync wakeup problem (Ingo Molnar)
- add ia64 cyclone support (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-5.EL" date="1070272800">- undo rejected patches (Stephen Tweedie, Arjan van de Ven, Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.20.EL" date="1069840800">- enable NUMA support in amd64 smp configs (Jim Paradis)
- prevent oopses with tux in OOM scenarios (Ingo Molnar)
- apply several ipv6 multicast bug fixes (Dave Miller)
- assign retval in copy_process() error path (Ingo Molnar)
- add lseek-in-/proc support for s390x "ps" (Pete Zaitcev)
- redefine zone_is_highmem() for Celestica (Dave Anderson)
- fix unresolved symbols in amd64 modules (Bill Nottingham)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.19.EL" date="1069754400">- fix tg3 rx_pending limit for BCM5705/BCM5782 chips (Jeff Garzik)
- reset page error flag prior to read of new contents (Jeff Moyer)
- enable CONFIG_HOTPLUG_PCI option for ia64 configs (Doug Ledford)
- fix inactive laundry list race in ramfs_writepage() (Dave Anderson)
- avoid out_of_memory() for wired pages when there's lomem (Dave Anderson)
- conditionalize ppc64 machdep_calls change for KMI compat (Ernie Petrides)
- limit anon/cache pages scanned in refill_inactive_zone() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.18.EL" date="1069668000">- create old version (rev. 5.64) of cmpci sound driver (Tom Coughlan)
- remove ac97.o, ad1848.o, cs4232.o from unsupported (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.17.EL" date="1069063200">- fix missing use of __GFP_HIGHMEM flag in pte_alloc_one() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.16.EL" date="1068890400">- rework scsi mid-layer queuing logic to fix error handling (Doug Ledford)
- fix pci_dma_sync_sg() scatterlist arg in megaraid2 driver (Tom Coughlan)
- move more-ptes-in-rmap-pte-chain logic to its own patch (Ernie Petrides)
- tag uses of __GENKSYMS__ with KMI/ABI compat comment (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.15.EL" date="1068804000">- fix MD multipath bugs causing crashes during fail-overs (Doug Ledford)
- add chain_ptep_t and revert pte_addr_t for KMI compat (Ernie Petrides)
- restore sub-timer-tick time-of-day granularity for ia64 (Jason Baron)
- modify agpgart and drm drivers for ia64 HP ZX1 support (John Dennis)
- fix ia64 32-bit emulation for several stat-related calls (Jason Baron)
- enable amd64 use of new ips driver w/config separation (Tom Coughlan)
- update e100 network driver to version 2.3.30-k1 (Jeff Garzik)
- update e1000 network driver to version 5.2.20-k1 (Jeff Garzik)
- apply scsi whitelist updates for IBM/CNSi/NEC devices (Tom Coughlan)
- reenable varyio for aic7xxx driver (hangs were unrelated) (Jeff Moyer)
- conditionalize NVIDIA_NFORCE3 to restore KMI compat (Ernie Petrides)
- prevent two ext3 panics on corrupted filesystems (Stephen Tweedie)
- apply two minor fixes to ppc64 RAS nvram reading (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.14.EL" date="1068717600">- update ServeRAID (ips) driver to version 6.10.52 (Tom Coughlan)
- configure xmon on by default in ppc64 configs (Julie DeWandel)
- create initial s390 zcrypt driver, version 1.1.2 (Pete Zaitcev)
- remove zfcp driver from linux-modules-unsupported (Pete Zaitcev)
- revise ppc64 reliability/serviceability support (Julie DeWandel)
- reduce kernel stack usage inside nfs_readdir() (Steve Dickson)
- add gameport dependency to cmpci driver config (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.13.EL" date="1068631200">- reduce UDP retransmissions and fix slow reads for NFS (Steve Dickson)
- implement wired page lists for better ramfs handling (Larry Woodman)
- fix vfork deadlock when child process causes core dump (Ingo Molnar)
- enhance AltSysRq-M output and fix deadlock potential (Larry Woodman)
- update cmpci sound driver for some HP IPF workstations (Tom Coughlan)
- correct tq_struct struct initialization in tg3 driver (Jeff Garzik)
- fix NFS file attribute inconsistency after rename (Steve Dickson)
- prevent ia64 machine checks w/sysreport on Olympia (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.12.EL" date="1068544800">- redesign refill_inactive_zone() for smarter deactivation (Larry Woodman)
- improve page deactivation scalability w/delayed laundering (Larry Woodman)
- rework locking and timer usage in s390 ctc network driver (Pete Zaitcev)
- allow xmon to be enabled at boot-time for ppc64 debugging (Julie DeWandel)
- reverse kscand's order of anon/cache active list traversal (Larry Woodman)
- force in-lining of br_read/write_lock/unlock routines (Julie DeWandel)
- fix mistaken fall-through cases in s390 chandev driver (Pete Zaitcev)
- make a few exported symbols available to OpenGFS (Stephen Tweedie)
- fix ld/st ordering bug causing lost signal wakeups (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.11.EL" date="1068112800">- make profile=X imply nmi_watchdog=1 and fix NMI w/d bugs (Ernie Petrides)
- add lock init in scsi_get_host_dev() to fix shutdown hang (Doug Ledford)
- enable distributed interrupts by default on ppc64 iSeries (Julie DeWandel)
- improve amd64 reporting of machine check errors (Jim Paradis)
- fix disabling of autonegotiation in tg3 driver (Dave Miller)
- add image name to s390 ioctl32 debug message (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.10.EL" date="1068026400">- fix file lock ownership by NPTL threads to be process-wide (Ernie Petrides)
- upgrade megaraid driver to version 1.18k and fix isr/fw sync (Tom Coughlan)
- upgrade megaraid2 driver to version 2.00.9 and enable varyio (Tom Coughlan)
- improve scsi mlqueue handling to enable BUSY/QUEUE_FULL fix (Doug Ledford)
- correct reporting of i/o errors in ppc64 viodasd driver (Julie DeWandel)
- update acenic driver to handle enabling of jumbo frame mode (Jeff Moyer)
- fix i386 PAGE_NONE bits to prevent get_user_page() hang (Roland McGrath)
- fix ia64 show_mem() handler to use efi_memmap_walk() call (Dave Anderson)
- replace spaces in slabinfo entry name for async poll table (Matt Wilson)
- fix race condition in buffer-head memory footprint patch (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.9.EL" date="1067940000">- improve spec file robustness in %post/%preun stanzas (Florian La Roche)
- add s390x iovec length checking for 32-bit reads/writes (Matt Wilson)
- use highmem for pte/ramfs page allocation w/__GFP_WIRED (Larry Woodman)
- upgrade oprofile support with bug fixes and enhancements (Will Cohen)
- fix infinite recursion in SCSI mid-layer post-processing (Jeff Moyer)
- introduce no-auto-start-on-add handling for SCSI blacklist (Jeff Moyer)
- enable s390 support for blk stats handling for iostat -x (Pete Zaitcev)
- fix LVS timer-related hang from ip_vs_conn_expire() bug (Ernie Petrides)
- correct module init in cpqarray driver to fix insmod crash (Tom Coughlan)
- incorporate ESB PATA support and fix a pirq_routers PCI id (Jeff Garzik)
- fix nfs async write deadlock potential w/nfs_writepage() (Steve Dickson)
- fix SCSI error handling for BUSY queue status messages (Doug Ledford)
- improve ppc64 32-bit ioctl support for use by ethtool (Julie DeWandel)
- add missing unlock in ip_mc_del_src() to fix IGMP deadlock (Dave Miller)
- change ppc64 reporting of floppy capacity to be 1.44 MB (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.8.EL" date="1067421600">- fix up various problems on Nforce3-based amd64 systems (Jim Paradis)
- double number of pte addrs in rmap pte_chain structs (Larry Woodman)
- restrict slab size for kernel data structs to 2 pages (Larry Woodman)
- clean up obsolete quicklist usage for ppc64 pte pages [rejected]
- prevent readdirplus from returning hidden mount points (Steve Dickson)
- prevent lockd deadlocks caused by export table locking (Steve Dickson)
- eliminate use of parallel task_struct init macro on ia64 [rejected]
- fix broken s390x overflow checks with 32-bit F_GETLK use (Matt Wilson)
- fix SCSI errors with "mt stoptions" and IDE tape drives (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.7.EL" date="1067162400">- fix bad checksumming interaction between e100 and bridge (Jeff Garzik)
- prevent system hang by OOM killing when overcommitted (Larry Woodman)
- un-inline ext3 error function to reduce stack usage (Stephen Tweedie)
- fix several ppc64 problems with interrupt handling (Julie DeWandel)
- correct amd64 identification in /dev/oprofile/cpu_type (Jim Paradis)
- move fput() call in do_tty_hangup() to avoid oops w/kon (Alexander Viro)
- eliminate creation of never-used task_struct slab cache (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.6.EL" date="1066903200">- reduce buffer-head memory footprint from read-only files (Ingo Molnar)
- update qeth driver for reduced stack usage and bug fixes (Pete Zaitcev)
- fix s390 qeth driver again to allow tcpdump to function (Pete Zaitcev)
- add exec_mmap() locking to prevent vma lookup races (Ernie Petrides)
- rework RPC slot allocation for further NFS improvements (Steve Dickson)
- reduce frequency of RPC retransmits during NFS writes (Steve Dickson)
- make generic/ext3 file system write handling 64-bit clean (Jeff Moyer)
- allow SMP scheduling rebalancing to occur every 200 msecs (Ingo Molnar)
- prevent races during IPC semaphore set and msg queue removal (Ingo Molnar)
- fix ACPI handling to identify trigger/polarity of PCI IRQs (Jim Paradis)
- correct amd64/ia64 acpi_disabled decls for post-boot access (Jeff Moyer)
- update ppc64 viocons driver with several bug fixes (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.5.EL" date="1066298400">- move fix for PPR use in sym53c8xx driver to its own patch (Ernie Petrides)
- correct pids exported by msgctl/semctl/shmctl/fcntl calls (Ulrich Drepper)
- apply s390 lcs driver wait queue init and locking updates (Pete Zaitcev)
- enable dummy network driver use in generic s390 config file (Pete Zaitcev)
- add missing ptrace hooks for exec and vfork-done events (Bill Nottingham)
- fix SMP timer race that triggered BUG_ON() in add_timer() (Ingo Molnar)
- fix several bogus ipvs boundary checks in ftp module [rejected]
- fix vfsmount queuing in attach_mnt() for CLONE_NEWNS [rejected]
- add net_device check to prevent oops in pppoe driver [rejected]
- fix memory leak in symlink error path of /proc driver [rejected]
- fix overflow in v1_disk2mem_dqblk() quota calculation [rejected]
- increase ppc64 ramdisk size to 8192k in p/iSeries configs (Jeremy Katz)
- lower amd64 TASK_UNMAPPED_32 to increase avail address space (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.4.EL" date="1066039200">- fix ppc64 stack pointer alignment in user signal handlers (Jakub Jelinek)
- increase amd64 exception stack size to 4k to avoid overflow (Jim Paradis)
- fix ppc64 interrupt rate accounting for vmstat and /proc (Julie DeWandel)
- extend amd64 NMI watchdog timeouts to tolerate bad 2nd cpu (Jim Paradis)
- allow s390 dasd driver to use noop elevator module (Pete Zaitcev)
- add free_irq() in error path of olympic token ring driver (Matt Wilson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.3.EL" date="1065866400">- make pid fields in ucred structures hold tgid values (Ulrich Drepper)
- prevent ppc64 iSeries virtual console writes &gt; 4k (Julie DeWandel)
- control ia64 unaligned access messages with new sysctl (Jeff Moyer)
- correct SCSI data direction on cmd to spin up disks (Pete Zaitcev)
- add do_brk() TASK_SIZE and address space wrap checks (Arjan van de Ven)
- limit PPR use in sym53c8xx driver for ppc64 Zapata drives (Doug Ledford)
- list ac97.o, ad1848.o, and cs4232.o modules as unsupported (Jeff Moyer)
- clean up conditional compilation in s390 zfcp driver (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.2.EL" date="1065693600">- identify whether i686 or athlon config in oops output (Arjan van de Ven)
- remove warning in reclaim_page() unmapped page path (Ernie Petrides)
- fix several lvm error handling paths causing memory leaks [rejected]
- correct i386 smp shutdown logic when netdump is enabled (Jeff Moyer)
- fix amd64 potential data leaks on FPU save/restore errors (Jim Paradis)
- prevent aic7xxx chip resets leading to PCI parity errors (Tom Coughlan)
- remove ia64 user tty warning on unaligned accesses (Arjan van de Ven)
- fix ppc64 /proc file buf overruns in viodasd driver (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.1.EL" date="1065607200">- (this is the first build for RHEL 3 Update 1)
- avoid m/ctime update for pipe writes on r/o file systems (Stephen Tweedie)
- prevent theoretical ext3 fs corruption in ext3_read_inode (Stephen Tweedie)
- enable AGRESSIVE_IDLE_STEAL to improve scheduler balancing (Ingo Molnar)
- fix potential ppc64 lock-up on ioctl32 un/reregistering (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.EL" date="1065175200">- extend ppc64 scsi timeout values for Zapata DVD-ROM drives (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-3.EL" date="1063965600">- make sure to release viotape op structure after use (Julie DeWandel)
- disable pgd/pmd quicklists on ppc64 (Mark DeWandel)
- temporarily disable aio on sockets (Jeff Moyer)
- correctly refile inodes to make them reclaimable (Harald Hoyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-2.EL" date="1063792800">- S390: update zfcp and cio drivers (Pete Zaitcev)
- IA64: add extra check to virtual mem_map (Larry Woodman, Dave Anderson)
- initialise local variables in ide-tape &amp; ide-scsi
- cap qla2200 tcq depth to 255
- switch version number scheme to kernel-2.4.21-N.EL</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063706400">- PPC64: invalidate evicted sbl entries in the erat (Julie DeWandel)
- increase ethernet tx_queue_len to 1000 (David Miller)
- in udp_{v6_}flush_pending_frames, reset up-&gt;len too (David Miller)
- S390: CMS reserved minidisk detection (Pete Zaitcev)
- call recount_segments() on a different occasion (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063620000">- really disable exec-shield (Roland McGrath)
- reduce stack randomisation, disable brk randomisation (Ingo Molnar)
- make e1000 driver 64 bit clean (Julie DeWandel)
- minor aio corner case error condition fix (Jeff Moyer)
- AMD64: more lenient check for call workaround (Ernie Petrides)
- PPC64: disable CONFIG_XMON (Mark DeWandel)
- S390: fix CCW slab selection (Pete Zaitcev)
- fix two-disk combined mode sata (Jeff Garzik)
- move buslogic scsi driver to supported, for vmware only (Tom Coughlan)
- change viocons message from KERN_WARNING to KERN_INFO (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063360800">- VM: handle race condition in reclaim_page (Stephen Tweedie, Larry Woodman)
- PPC64: fix "log_buffer broken" xmon issue (Julie DeWandel)
- fix compiler warnings in netdump (Jeff Moyer)
- AMD64: workaround for 32 bit compat mode page fault problem (Ernie Petrides)
- IA64: make perfmon root-only (Jason Baron)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063274400">- fix smp race in rebalance_laundry_zone()</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063188000">- fix compiler warnings when hugetlbfs is disabled (Pete Zaitcev)
- fix tux performance bug (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063101600">- don't evict kernel stack seg translation on ppc64 (Julie DeWandel)
- fix callers of do_page_fault on ppc64 (Mark DeWandel)
- AMD64 munmap return value, fix lsb failure (Jeff Moyer)
- fix for PPC64 32-bit ioctl (Jim Paradis)
- bring IA64 value of MINSIGSTKSZ in line with upstream (Jakub Jelinek)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063015200">- fix potential datacorruptor in viodasd driver (Julie DeWandel)
- fix race condition in s390 dirty bit handling (Pete Zaitcev)
- limit per-cpu slab cache size
- correct 32-bit readv/writev border cases on ppc64 (Matt Wilson)
- AMD Golem IO-APIC fixup for i686 kernel on AMD64 (Jeremy Katz)
- NFS Solaris 8 acl fix (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062756000">- minor nfs permissions bugfix (Steve Dickson)
- change mprotect return value to SuS mandated value (Arjan van de Ven)
- kernel-unsupported now provides kernel-modules (Jeremy Katz)
- correct __hugemem__modules typos in rhkernel.h
- fix subtle pmd corruption error (Larry Woodman, Dave Anderson)
- fix cut'n'paste error in SATA io port reservation
- restore NFSEXP_CROSSMNT ABI compatibility (Steve Dickson)
- round up executable name field length in core file (Jakub Jelinek)
- switch off exception_trace on amd64 (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062496800">- patch to access odd last sector on ia64 (Jason Baron)
- misc fixes from upstream (Arjan van de Ven)
- fix audigy driver (Jeff Garzik)
- tunable dcache reclaim priority for tux (Ingo Molnar)
- tg3 driver update (Jeff Garzik)
- ipv6 and icmp network bugfixes (David Miller)
- fix ppc64 memory access security bug (Julie DeWandel)
- reduce memory allocated for skb (Ingo Molnar)
- small smp fix for scalable timers (Ingo Molnar)
- make s390 recognise MSDOS partitions (Pete Zaitcev)
- small smp fixes in tux (Ingo Molnar)
- make mptfusion drivers supported on 4/4 split kernel (Tom Coughlan)
- add entries to scsi whitelist (Tom Coughlan)
- minor sata/ata driver updates (Jeff Garzik)
- small fixes to viodasd driver (Julie DeWandel)
- nfs_get_root and nfs access bit patches (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062064800">- don't show interrupts in /proc/stat for ppc64 (Matt Wilson)
- make sure sync returns in a reasonable time
- PPC64: fix for boot cpu not being cpu 0 (Julie DeWandel)
- zero sized write no longer updates mtime (Matt Wilson)
- fix video bios read corruption on ia64 (Larry Woodman)
- network fixes to tg3, bonding (Jeff Garzik)
- properly reserve legacy IDE regions in sata driver (Jeff Garzik)
- fix ppc64 signal handling bugs (Mark DeWandel)
- tux fixes (Ingo Molnar)
- tgkill syscall for s390(x) (Pete Zaitcev)
- amd64 32 bit compatibility fixes (Jim Paradis)
- ppc64 32 bit compatibility fixes (Julie DeWandel)
- fix 4G/4G follow_page problem (Ingo Molnar)
- reduce memory used by VMAs and dentries (Arjan van de Ven)
- make LVM snapshotting of ext3 work reliably (Stephen Tweedie)
- make netdump play better with the nmi watchdog (Jeff Moyer)
- QLA2200: disable irq mitigation, fix off-by-one (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061805600">- seq_file /proc/interrupts for x86 too (Ingo Molnar)
- fix memory leak in ia64 exec of ia32 binaries
- check tgid not pid in scm_check_creds()  (David Miller)
- VM fixes: shm swap priority, zeromap_page_range
- workaround VFS limitations for VXFS NFS export</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061546400">- use personality for 3GB userspace on x86 -hugemem (Ingo Molnar)
- add sysctl interface for lockd (Steve Dickson)
- don't prod VGA space on HP Pinnacle systems (Larry Woodman)
- fix for 32 bit binaries on amd64 (Jim Paradis)
- add preemption point to write_some_buffers (Julie DeWandel)
- sort ACPI table to get correct device ordering on HP (Larry Woodman)
- fix refcounting bug with ipv6 addresses on netdevs (David Miller)
- add s390 syscalls for tux (Pete Zaitcev)
- md multipath enablers (Doug Ledford)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061460000">- fix process and nice time accounting (Doug Ledford)
- amd64: syscall table updates, timer robustness (Jim Paradis)
- amd64 3GB personality for 32-bit processes (Jim Paradis)
- use 256MB pagesize for hugetlbfs on ia64 (Larry Woodman)
- make sure e100 only claims ipv4 checksumming
- igmpv3/mldv2 OOPS'er fix (David Miller)
- hugetlbfs: make chown work and allow uid=X,gid=Y mount options
- make larger mmap windows work (Ernie Petrides, Ingo Molnar)
- ia64: improve ia32 compatibility (Larry Woodman)
- fix bug in rpc retry code (Steve Dickson)
- make acpi pci hotplug modulable (Jeff Moyer)
- update (trivial) to megaraid 1.18j (Tom Coughlan) 
- enable varyio on mptfusion (Tom Coughlan)
- panic on oops to prevent data corruption opportunities (Ernie Petrides)
- small iorl locking fix (Doug Ledford)
- fix ppc64 get_wchan() bad deref (Mark DeWandel)
- fix aio read into mmap()d PROT_WRITE (Jeff Moyer, Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061373600">- libata update (Jeff Garzik)
- amd64 syscalls for xattrs &amp; ACLs (Jim Paradis)
- tux fixes (Julie DeWandel, Ingo Molnar)
- via &amp; i810 audio fixes (Jeff Garzik)
- small 4G/4G split bugfixes (Ingo Molnar)
- fix sigsuspend race on x86, amd64, ia64 (Mark DeWandel)
- ia32 behavior for FP denormal exceptions on ia64 (Jason Baron)
- get the set/get of NAT bits for ia64 correct (Jason Baron)
- ipsec update, adds cast6 encryption (David Miller)
- VM update: OOM bugfix &amp; page-&gt;flags atomic updates (Rik van Riel)
- reenable serpent encryption on ppc64
- bladecenter usb-ohci support (Pete Zaitcev)
- iorl fixes (Doug Ledford)
- network bonding driver oops fix (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060768800">- DAC960 back to bigmem supported, ne2k-pci &amp; usb audio to bigmem unsupported
- netdump updates for tg3 and e1000 (Jeff Moyer)
- put a hole between stack and mmap area (Ernie Petrides)
- process time accounting updates (Doug Ledford)
- fix null characters in TUX header (Julie DeWandel, Ingo Molnar)
- display correct executable when running interpreted script
- zfcp zSeries fibrechannel driver (Pete Zaitcev)
- ipsec updates (David Miller)
- fix 4G/4G race conditions (Ingo Molnar)
- rename -bigmem kernel to -hugemem to reflect changed tradeoffs
- optionally show task states from hangcheck timer (Jason Baron)
- various small bugfixes from upstream</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060423200">- fix scalable timer race condition  (Julie DeWandel, Ingo Molnar)
- print warning on boot with &gt;16GB RAM on -smp kernel (Arjan van de Ven)
- fix for xapic issue with ServerWorks chipsets (Ernie Petrides)
- remove spurious ioctl printk on ppc64 (Mark DeWandel)
- ppc64 wchan improvement (Mark DeWandel)
- hint @pause changes for ia64
- longer scsi scan timeout on ppc64 (Julie DeWandel)
- readv/writev for raw IO (Stephen Tweedie)
- fix for easy stack/mmap collisions (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060164000">- various XAPIC related fixes (Ingo Molnar)
- correct context switch and iowait stats with HT shared runqueues
- ext3 obscure deadlock fixes (Stephen Tweedie)
- knfsd fixes: blocked lock, symlink error &amp; missing bkl  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060077600">- de_thread bugfix from 2.6 upstream  (Matt Wilson)
- viocons driver update (Julie DeWandel)
- fix VM non-overcommit mode (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059991200">- plug data leak in aio code (Jeff Moyer)
- initial list of 4G/4G unsupported modules (Tom Coughlan)
- nfs softirq race fix (Steve Dickson)
- updated IPSEC patch (David Miller)
- networking updates/fixes from 2.4.22-preX (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059904800">- drop orlov allocator for now (Arjan van de Ven)
- correct HT cpu pair detection (Arjan van de Ven)
- build zImage.partial for netbooting on pSeries (Matt Wilson)
- fix missing symbols</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059818400">- export two AIO symbols for OCFS
- disable CONFIG_DEBUG_SLAB so performance testing can start
- crosshost mmap hooks for distributed filesystems (Stephen Tweedie)
- include partially linked zImage for pSeries netboot (Matt Wilson)
- nfs highmem fix, unmap when xdr_kmap() fails (Steve Dickson)
- update megaraid2 locking to work with IORL (Com Coughlan)
- make sure to build the qla2100 driver (Tom Coughlan)
- fix cdrom ioctl 32 bit compatibility for ppc64, amd64 (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059645600">- run depmod on install of unsupported modules (Arjan van de Ven)
- fix register corruption in IA64 lazy fpu handling (Larry Woodman)
- add b44 network driver (Jeff Garzik)
- make ppc64 pci interface routines compatible (Julie DeWandel)
- allow 32 bit userland on AMD64 and PPC64 to use volumes &gt; 2GB (Jeff Moyer)
- nfsd: acl related mount and export flags (Steve Dickson)
- fix nfs exp_fodrop oops (Steve Dickson)
- fix missed signal wakeups on ppc64 (Mark DeWandel)
- smp scalable timer bugfixes (Ingo Molnar)
- workaround for a prefetch bug in some Athlon CPUs (Ernie Petrides)
- code to make more modules unsupported for 4/4 split (Arjan van de Ven)
- various spec file and config cleanups
- viopath driver fix (Julie DeWandel)
- add match for 440gx chipset bioses (Arjan van de Ven)
- move epic100 and ne2k-pci back to supported (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059472800">- updated finegrained process accounting patch (Doug Ledford)
- make iSeries compile without CONFIG_ICOM (Julie DeWandel)
- nfsd: only set -&gt;reuse for tcp sockets, not udp  (Steve Dickson)
- enable the 4G/4G split on the i686-bigmem kernel only
- sysrq support for viocons (Julie DeWandel)
- limit pci_bus size changes to ppc64 (Jeff Garzik)
- fix for signal delivery race (Ernie Petrides, Mark DeWandel)
- add ShdPnd to /proc (Ingo Molnar)
- fix de_thread() hang (Ingo Molnar)
- add kernel support for CLONE_STOPPED (Ernie Petrides)
- make sure to initialise HVC console (Julie DeWandel)
- fix _SEG abort hit in ACPI code (Larry Woodman)
- build addon drivers on amd64 and ppc64 too (Tom Coughlan)
- build IPS driver on all architectures (Tom Coughlan)
- fix a few ia32 emulation bugs for IA64 (Larry Woodman)
- enable correct/new __clear_bit macro for IA64 (Larry Woodman)
- flexible mmap allows mappings of huge executable segments (Larry Woodman)
- sysrq-w for s390 (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058436000">- have s390 cpu_relax() also include barrier  (Pete Zaitcev)
- convert ppc64 xmon traceback code to ksymoops (Matt Wilson)
- rename kstat_sum() variable with aliasing problems  (Ingo Molnar)
- fix AIO-on-hugetlbfs crash (Ingo Molnar)
- update support for IA64 Long's Peak ACPI serial ports  (Larry Woodman)
- turn on xmon for both iSeries and pSeries (Matt Wilson)
- bugfix to make CLI work correctly on iSeries (Julie DeWandel)
- SATA bugfixes (Jeff Garzik)
- enable 4G/4G split in -BOOT kernel, due to syslinux trouble</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058349600">- fix s390 compile (Pete Zaitcev)
- taint the kernel on sii6512 driver link, GPL but no source available
- handle debug registers with 4G/4G split (Ingo Molnar)
- tgkill syscall for ppc64 (Julie DeWandel)
- fix NFSD/ACL/ext3/jbd deadlock (Stephen Tweedie, Steve Dickson)
- fix maxcpus=1 installation panic fix for ppc64 (Julie DeWandel)
- IDE byteswapping io functions for ppc64 (Julie DeWandel)
- update sata driver (Jeff Garzik)
- raise the number of /proc entries (Julie DeWandel)
- sticky sysrq key with timeout (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058263200">- make SysRq-W useable on s390 (Pete Zaitcev)
- updated process accounting patch (Doug Ledford)
- siginfo_t fixes for s390x and amd64 (Jakub Jelinek)
- clustered NFS fail-over support (Steve Dickson)
- autofs4 updates and fixes
- ia64 patches to reduce cpu power/temp in idle loop (Larry Woodman)
- add irqsafe up() for LVM locking (Stephen Tweedie)
- O_DIRECT fallback to synchronous allocation in holes (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058176800">- ia64 HP iommu: add sx1000 detection
- possible bug in s390x 32-bit emulation  (Roland McGrath)
- updated ipsec patch, should fix all current ipv6 bugs  (David Miller)
- finegrained process accounting (Doug Ledford)
- ICH5 pci irq routing, and associated ids (Jeff Garzik)
- fix the machine_real_restart() reboot path on 4G/4G (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057917600">- fix amd64 agp-gart code to work around hugetlbfs debug code (Jim Paradis)
- fix ppc32 pthread_cancel (Jakub Jelinek) 
- Do not sent IGMP leave messages unless IFF_UP  (David Miller)
- software iommu for ia64 systems without hardware iommu (Jason Baron)
- fix ext3 oops fix during dio, LTP failure (Arjan van de Ven, Stephen Tweedie)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057831200">- Remove illegal calls to dst_link_failure</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057831200">- enable HT scheduler for bigmem kernel
- add tgkill syscall for x86 and ia64
- make -BOOT kernel smaller w/ modular md and CONFIG_SMALL
- rmap VM updates
- 4G/4G agpgart potential corruption fix (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057744800">- switch off exec shield everywhere
- eliminate hostfs for amd64 (Jim Paradis)
- megaraid update, mostly vendor ID (Tom Coughlan)
- shrink boot kernel by disabling some config options
- additions for the SCSI whitelist (Tom Coughlan)
- ia64 extable fix (Jason Baron)
- viocons driver upgrade (Julie DeWandel)
- another ia64 mmu context wraparound deadlock fix (Larry Woodman)
- iSeries icom debugger patch (Julie DeWandel)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057658400">- Drop io_request_lock in usb scsiglue.c:device_reset</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057658400">- fix cpu_relax for amd64 and ia64 to include a barrier (Ingo Molnar)
- restore o_direct api compatibility (Stephen Tweedie)
- fix possible ext3 deadlock in o_direct patches (Stephen Tweedie)
- ACLs for JFS (Stephen Tweedie)
- fix /proc/cpuinfo runqueue printing (Ingo Molnar)
- via audio fixes, smaller emu10k1 patch (Alan Cox, Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057572000">- fix process accounting, tux ftp passwords and si_pid (Ingo Molnar)
- 32bit compat statfs fix (Guy Streeter)
- don't serialise exit on BKL when accounting is off (Ingo Molnar)
- truncate timeouts to 32 bits on 64bit systems (Ingo Molnar)
- fix network channel bonding (Jeff Garzik)
- split netdump patch into core and net-drivers (Jeff Garzik)
- delayed tlb flushing for ia64 (Larry Woodman)
- emu10k1 driver fixes
- kksymoops for AMD64 (Jim Paradis)
- select bugfixes from 2.4 upstream (Jeff Garzik)
- OOM tweaks (Rik van Riel)
- use seq_file for /proc/interrupts on ppc64 (Mark DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057140000">- add qdio and qeth drivers for s390(x)  (Phil Knirsch)
- slab cache scale bugfix (Larry Woodman)
- S390: qdio &amp; qeth drivers (Phil Knirsch)
- hangcheck timer for ppc64 (Julie DeWandel)
- fix race conditions in ia64 ia32 compat layer (Larry Woodman)
- update megaraid, aic7xxx, cciss and cpqarray drivers (Tom Coughlan)
- nfs xdr_shift_buf, tcp client corruption and alignment (Steve Dickson)
- rhconfig.h stuff for ppc64, s390 and s390x (Matt Wilson)
- AIO on sockets</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057053600">- kiobuf optimisations (Stephen Tweedie, Larry Woodman)
- ipsec update (David Miller)
- ipvs update to deal with timer changes (David Miller)
- 4G/4G split patch optimisations (Ingo Molnar)
- hangcheck timer (Jason Baron)
- recent (AGP 3.0) agpgart support (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056967200">- semtimedop() support on s390/s390x  (Ernie Petrides)
- fix a 4G bug that triggers on systems with &gt;30 CPUs (Ingo Molnar)
- updated SCSI SMP affine queueing patch  (Arjan van de Ven)
- page hash prefetch in do_generic_file_read bugfix (Julie DeWandel)
- updates the qlogic driver to the latest (Arjan van de Ven)
- slab cache SMP scalability tweaks (Ingo Molnar)
- ACPI 2.0 for IPF and AMD64 (Jim Paradis, Larry Woodman)
- statm fixes for hugetlbfs and remap_file_pages (Jason Baron)
- acpi serial port detection (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056708000">- iseries driver updates (Julie DeWandel)
- aio scalability and 2.5 backports  (Ingo Molnar)
- SMP scalable timers (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056621600">- make qlogic driver use new scsi infrastructure (Arjan van de Ven)
- export aio kvec functions
- fix statm oops
- compile fixes 
- NFS ACL over the wire protocol extensions (Steve Dickson)
- rate limit slab pruning, to limit IPI load on SMP systems (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056448800">- scsi request lock scaling (Ingo Molnar)
- cpu affinity for scsi command processing (Ingo Molnar)
- use softirqs instead of bhs for the scsi layer (Doug Ledford)
- igmpv3 fixes and improvements (David Miller)
- oprofile for ppc64 (Will Cohen)
- Increase MAX_ADDR_LEN from 8 to 32 for Infiniband over IP (Tom Coughlan)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056362400">- per-cpu kstat arrays (Ingo Molnar)
- optimise 4G/4G tlb flushing (Ingo Molnar)
- kiobuf reclaim together with buffer reclaim (Arjan van de Ven)
- more scalable gendisk statistics (Ingo Molnar)
- nfs reconnect fixes (Steve Dickson)
- add 32-bit compatibility for ustat system call on ppc64 (Julie DeWandel)
- scalable gettimeofday (Ingo Molnar)
- hugetlbfs ppc64 &amp; s390 bits (Mark DeWandel, Pete Zaitcev)
- hugetlbfs for ia64 (Jason Baron)
- qlogic scsi driver update (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056189600">- nfs patches (Steve Dickson)
- xapic improvements, summit support (Ingo Molnar)
- fix core dump name for multithreaded programs (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056103200">- merge up to marcelo's latest</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056016800">- oom killer fixes (Larry Woodman, Rik van Riel)
- tunable VM overcommit (Rik van Riel)
- hugetlbfs for amd64 (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055930400">- updated iseries virtual drivers (Julie DeWandel)
- nfs lockd improvements (Steve Dickson)
- remap_file_pages improvements (Ingo Molnar)
- /proc/efi/symtab patch for ia64 (Larry Woodman)
- disable O_PROFILE on UP x86 machines
- allow NMI watchdog profiling frequencies up to 10kHz (Ingo Molnar)
- statm (Jason Baron)
- hugetlbfs (Ingo Molnar)
- have nfsd honour ACLs on a per-export basis (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055844000">- Enable O_PROFILE on non-SMP configs (Stephen Tweedie)
- more conservative AIC config options
- Fix BOOT kernel panic while mounting /dev/cdrom (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055757600">- merge to 2.4.21 + selected ac bits
- ipsec upgrade (David Miller)
- HT scheduler patch fix (correct sibling counting)
- make bdflush writeout smoother
- AMD64 gdb fix (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055412000">- don't include unsupported drivers in -BOOT kernel
- merge up to 2.4.21-rc8 + selected ac bits
- FIXME: sysrq for 3170, dasd, odirect &amp; odirect for nfs</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com" date="1055412000">- oprofile for s390</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055239200">- statm (Jason Baron / Julie DeWandel)
- AIO 32-bit compat for 64-bit machines (Julie DeWandel)
- only do bufferhead reclaim in extreme situations (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055152800">- Serial ATA support (Jeff Garzik)
- mtp fusion 2.05.05+ (Dave Maley)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054893600">- XATTR/ACL patches, except NFS over the wire (Stephen Tweedie)
- ipsec module autoloading (David Miller)
- remap_file_pages (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054807200">- upgrade to latest -rmap with Ernie's fixes
- sysrq+C shows the stack dump of all CPUs
- ext3 truncate fix (Stephen Tweedie)
- NFS fixes for HZ=1000 machines (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054720800">- 4G/4G split fix (Ingo Molnar)
- ppc64 fixes (Guy Streeter, Rik van Riel)
- enable oprofile on amd64
- ipsec updates (David Miller)
- fork returns pid instead of task_struct* (Julie DeWandel)
- ia64 ptrace bugfixes (Dave Anderson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054634400">- HP diva serial driver (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054548000">- NFS over TCP patches (Steve Dickson)
- switch to using ppc64pseries/ppc64iseries arches instead of
  kernel-pseries and kernel-iseries (Jeremy Katz)
- egenera scsi bus rescan patch (Jeff Garzik)
- oprofile (Graydon Hoare)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054288800">- futex requeue (Ingo Molnar)
- enable NAPI for E1000
- signal latency and scheduler improvements (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054202400">- kscand oops fix (Ingo Molnar, Rik van Riel)
- pcnet32 fixes (Julie Dewandel)
- raid autorun (Pete Zaitcev)
- turn off CONFIG_SUNDANCE_MMIO (Jeff Garzik)
- flexible mmap (Larry Woodman)
- ppc64 fixes (Matt Wilson, Guy Streeter)
- loop softirq 10 times before giving up (Ingo Molnar)
- O_DIRECT for NFS (Steve Dickson)
- prevent md from shutting down active arrays (Doug Ledford)
- rmap updates, inode reclaim &amp; higher order allocations (Rik van Riel)
- network channel bonding (Jeff Garzik)</changelog><changelog author="Jim Paradis &lt;jparadis@redhat.com&gt;" date="1054116000">- Re-enable x86_64 in build
- x86_64-specific updates for exec-shield
- Bring in improved "nonx" support for x86_64 from upstream</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1054116000">- Hush s390 printks upon user SIGSEGV by default. It can be enabled back with
  a sysctl kernel.userprocess_debug.
- Enable optional 3270 console mode on s390.</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053684000">- get rid of vsyscall page (Arjan van de Ven)
- fix missing symbol copy_str_fromuser_size</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053424800">- exec-shield updates to fix hang-on-boot on some systems (Ingo Molnar)
- temporarily disabled the architectures, which got broken by exec-shield updates
- fix for LTP sigprocmask02 failure (Matt Wilson)
- ppc64 updates (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053338400">- pagecache scalability patch (Ingo Molnar)
- IPC semaphore scalability patch (Ingo Molnar)
- ppc64 updates (Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052992800">- exec-shield (Ingo Molnar)
- AMD64 ACPI updates (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052906400">- reenable O_DIRECT, O_DIRECT fixes and superbh-aio (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052820000">- vma merging (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052733600">- nmi profiler
- VM updates: rmap, dma zone isolation
- tux (Ingo Molnar)
- ext3 stall fixes (Ingo Molnar)
- e1000 fixes (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052474400">- config files overhaul (Arjan van de Ven)
- fix bug in mlock patch
- IPVS (Dave Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052388000">- import IO elevator changes from gingin
- critical VM fix
- matrox framebuffer patch for pseries (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052301600">- hammer nptl fixes (Ulrich Drepper)
- 4G/4G split (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052215200">- upgrade to 2.4.21-rc1-ac4 (minus -ac acpi and xapic changes)
- drop nfs patches since those seem to be in -ac</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052128800">- larger message buffer size + boot option (Mark DeWandel)
- AMD64: tls handling, coredump fixes (Jim Paradis)
- SMP &amp; highmem VM fixes (Ben LaHaise)
- HT+NUMA scheduler (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051956000">- ext3 orphan cleanup fix (Ernie Petrides)
- s390 affinity fixes (Pete Zaitcev)
- i386 vsyscall DSO changes (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051869600">- bugfixes and config changes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051783200">- enable semtimedop for other architectures (Ernie Petrides)
- large pci bus numbers (Julie DeWandel)
- bugfixes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051610400">- igmpv3 (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051524000">- generic 32bit compat stuff + amd64/ppc64/ipf pieces (Matt Wilson)
- clustered apic (XAPIC) support (Ingo Molnar)
- ppc64 architecture updates (Matt Wilson, Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051264800">- ppc64 fixes</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051178400">- collapse ipsec into one patch (David Miller)
- ppc64 build fix (Matt Wilson)
- improve smp scheduler fairness (Ingo Molnar)
- allow mlock for normal users, up to ulimit (Ingo Molnar)
- AMD64 port (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051092000">- clean up mechanism to pass extra CFLAGS so we don't override what's
  already there
- merge ia64 build stuff (Larry Woodman)
- merge varyio + superbh (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051005600">- merge up to 2.4.21-rc1
- IA64: virtual mem_map, acpi updates, netdump update, pte-highmem &amp; fealnx
- IA64: architecture specific patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050919200">- import davem's ipsec patch pile
- ppc64 kallsyms and dump_fpu patches (Matt Wilson)
- rmap updates (x86_64 &amp; bufferhead reclaim)
- ppc64 ptrace patch (Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050660000">- open up patch namespace 2000-5000 for network protocol changes
- renumber existing patches in that range</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050573600">- make sure to actually apply the rmap-updates patch
- iowait statistics
- ppc64 code merge (Mark &amp; Julie DeWandel)
- ppc64 build scripts (Matt Wilson)
- raise symlink recursion level to 8 (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050487200">- merge up to marcelo's latest
- pte-highmem bits for x86-64 and ppc64</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050400800">- merge up to 2.4.21-pre7-ac1
- drop semtimedop patches (now in -ac)
- drop nfs xprt_fixes, fix_softirq, d_drop and nfs-readeof (merged in -pre7)
- add !CONFIG_QUOTA compile fix for 2.4.21-pre7-ac1</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1050314400">- add LCS driver (endemic to s390)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050314400">- add rmap VM
- add kunmap_atomic debugging patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050141600">- remove dir.c part of NFS kmap_atomic patch for now
- using strlen as local variable name in nfs code kills, literally</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050055200">- merge S390(x) back in  (Pete Zaitcev)
- fix NFS kmap_atomic patch
- sched.c patch to disable interrupts in wake_forked_task  (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049968800">- AIO infrastructure  (Ben LaHaise)
- update NFS kmap_atomic patch  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049882400">- semtimedop patches  (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049796000">- I know understand linux-2.4.20-nfs-readeof.patch, so I merged it
- netdump update (Dave Anderson)
- 64 bit pci &amp; elf loader fix (Mark &amp; Julie)
- nptl whitespace patches, folded into nptl patch (Arjan van de Ven)
- rediff linux-2.4.18-smallpatches.patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049709600">- merge NFS patches by Steve Dickson (blame me for NFS kmap_atomic patch)
- split x86 syscall stuff out into separate patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049536800">- fix nptl patch, now it boots</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049450400">- port linux-2.4.20 o1-nptl.patch from gingin
- rediff a few patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049277600">- update linux-modules-unsupported (with Arjan)
- fix up the list a second time to fix module dependencies</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049191200">- copy -head into new AS3 branch
- remove i586 build
- remove 7.x compatibility (linux-2.4.9-fstat.patch)
- architecture patches get more breathing room (100 - 500)
- reserve patch numbers 1000 - 2000 for VM
- patch numbers 2000 - 5000 for bugfixes, changes and updates to
  existing drivers and filesystems
- remove inode reclaim patch (will be merged later as part of rmap)
- remove io priority scheduler (still experimental)
- remove nfs patches (linux-2.4.20-nfs-cto.patch,
  linux-2.4.20-nfs-access.patch &amp; linux-2.4.20-nfs-rdplus.patch)
- remove linux-2.4.18-gericom.patch
- update netdump from RH9 branch</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1048240800">- Added three NFS performance patches</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048240800">- add a timer for aging requests up</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048154400">- fix the sorting in the io elevator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048068000">- remerge ext3 orlov allocator and enable
- more priority io elevator infrastructure work</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1047117600">- merge ext3 orlov allocator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046772000">- go to 2.4.21-pre5-ac1
- split the rpm into a primary fileset and secondary (rare modules) fileset</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046253600">- go to 2.4.21-pre4-ac6
- drop lots of patches
- trim changelog to not have 2000, 2001 and 2002 anymore</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045476000">- downgrade pwc webcam driver one notch to the last known working version
- work around vm livelock
- make the cciss driver not enable irq's in it's irq handler</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1045130400">- fix for shared statistic &lt; 0</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045130400">- Signal fixes for LSB testsuite
- merge patch to fix init=/bin/sh
- 2.4.21-pre4-ac4 bugfixes (mostly IDE crashes)</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044784800">- merge 2.4.21-pre4-ac3 bugfixes</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1044352800">- Add ext3 fix for truncating negative i_blocks</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1044266400">- add oopsmeharder for debugging hard hangs</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044266400">- merge rmap15d
- set the sbp2 command buffer to 64 elements instead of 8</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1043834400">- merge tcp stall fix from DaveM
- merge bugfixes from 2.4.21-pre4</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1042452000">- Merge in the ACL and XATTR patches from the UL and BestBits trees.</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1042279200">- Merge in the LVM pvmove fix to current tree</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1042020000">- add AMD Golem fixup</changelog></package>
<package pkgid="648d90a9011aeb6718014f830c65678c38b8a633" name="kernel-unsupported" arch="x86_64"><version epoch="0" ver="2.4.21" rel="37.EL.XFS"/><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1128420000">- added SGI XFS patch set</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-37.EL" date="1126087200">- fix latent sendmsg() cmsghdr32 bug exposed in -36.EL (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-36.EL" date="1125655200">- fix sync() hangs from NFS file create/delete races (Steve Dickson)
- add support for HP Smart Array E400i in cciss driver (Tom Coughlan)
- defend against cmsghdr32 changes in sendmsg() handling (Dave Miller)
- correct OpenIPMI module version strings (v35 -&gt; 35.4) (Brian Maly)
- fix intermittent build failures under lpfc subdir (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-35.EL" date="1124445600">- disable FAN processing in Emulex driver (7.3.2) (Tom Coughlan)
- update cciss disk driver to version 2.4.58.RH1 (Tom Coughlan)
- update SCSI whitelist for EMC Invista devices (Tom Coughlan)
- fix diskdump regression w/module CRC errors (Nobuhiro Tachino)
- update SCSI whitelist for IBM ULT3580 TapeLibrary (Wendy Cheng)
- fix f/w upgrade hang, dmi_table bug in IPMI (Peter Martuccelli)
- fix x86_64 machine check regression from -32.10.EL (Brian Maly)
- validate XFRM policy in IPSEC setsockopt() calls (John Linville)
- fix intr kiobuf_init() regression from -32.11.EL (Larry Woodman)
- fix pollcomplete error in cciss diskdump support (Tom Coughlan)
- enforce CAP_NET_ADMIN perms for policy creation (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-34.EL" date="1122544800">- fix O_SYNC EIO error propagation through ext3/jbd (Stephen Tweedie)
- add support for Enterprise Southbridge II (ESB2) (Geoff Gustafson)
- implement devname callback for block device drivers (Doug Ledford)
- upgrade SATA support (core, libata, and drivers) (Jeff Garzik)
- add ia64 export of (*pm_power_off)() for IPMI (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-33.EL" date="1121767200">- update 3w-9xxx driver to version 2.24.03.008RH (Tom Coughlan)
- revise reserved port avoidance added in -32.8.EL (Steve Dickson)
- update OpenIPMI driver/configs to version v35 (Peter Martuccelli)
- add handling for NEC vendor ID in megaraid2 driver (Tom Coughlan)
- update SCSI whitelist for 3PARdata/Dell/SGI devices (Tom Coughlan)
- add support for netdump over bonded interfaces (Jeff Moyer)
- implement diskdump support for cciss devices (Tom Coughlan)
- add x86_64 ACPI Power Management timer support (Jim Paradis)
- add dual-core support on x86 and x86_64 arches (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.12.EL" date="1121421600">- constrain x86_64 MSR writes based on cpu model (Larry Woodman)
- correct smbfs mounts to support 32-bit uids/guids (Peter Staubach)
- eliminate long system pauses when kscand is running (Larry Woodman)
- update Emulex driver to 7.3.1, ioctl module to 1.2.1 (Tom Coughlan)
- update QLogic driver to 7.05.00-RH1 (w/new firmware) (Tom Coughlan)
- prevent ext3 EA/ACL block sharing/deletion races (Stephen Tweedie)
- fix dpt_i2o insmod oops during adpt_info() lookup (Neil Horman)
- fix dpt_i2o timeouts during long tape commands (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.11.EL" date="1121248800">- downgrade blk_queue_bounce_limit() msg to KERN_INFO (Neil Horman)
- update cciss disk driver to version 2.4.56.RH1 (Adam Manthei)
- update mptfusion driver to version 2.06.16i.01 (Tom Coughlan)
- prevent expand_kiobuf() calls during interrupts (Larry Woodman)
- update iscsi_sfnet driver to version 3.6.2.1 (Mike Christie)
- account for system ticks in ITIMER_PROF sig delivery (Don Howard)
- correct superbh ptr arg to superbh_will_bounce() (Stephen Tweedie)
- fix ext3 symlink perms created w/i386-BOOT kernels (Stephen Tweedie)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.10.EL" date="1121076000">- prevent bogus GART errs from amd64 Northbridge handling (Brian Maly)
- get correct link status in b44 driver's open routine (John Linville)
- check for missing EM64T support for better panic msg (Ernie Petrides)
- fix ref counting bug in x86[_64] __change_page_attr() (Dave Anderson)
- fix memory leak in success path of sys_init_module() (John Linville)
- add ia64 ptrace/sigreturn RSC reg priv level validation (Jason Baron)
- prevent connection list corruption in ip_vs_conn_flush() (Neil Horman)
- limit arg/env ptrs for x86_64/ia64 32-bit-compat execs (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.9.EL" date="1119002400">- fix crashes from failed ACPI root bus additions (Jim Paradis)
- correct insufficient lock owner checks in DRM code (Don Howard)
- add missing sanity checks in Coda ioctl handling (Alexander Viro)
- fix autofs errors with ghosting and expire event races (Jeff Moyer)
- reset ppc64 signal handler correctly for SA_ONESHOT (David Howells)
- store prev user stack pointer in ppc64 signal frames (David Howells)
- fix kernel_lock deadlock between sd_open()/sd_ioctl() (Larry Woodman)
- add ht flag in /proc/cpuinfo for EM64Ts w/hyperthreading (Brian Maly)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.8.EL" date="1118743200">- update e100 network driver to version 3.4.8-k2 (John Linville)
- preserve x86_64 32-bit-compat ptrace reg changes (Roland McGrath)
- add missing x86_64 support for PTRACE_SETOPTIONS (Roland McGrath)
- avoid using reserved ports for portmapper connections (Steve Dickson)
- prevent non-canonical %rip in x86_64 ptrace reg mods (Jim Paradis)
- prevent invalid fs/gs_base in x86_64 ptrace reg mods (Ernie Petrides)
- improve ISO-9660 fs robustness against bad CD formats (Peter Staubach)
- correct __get_user_pages() ref counting w/PG_reserved (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.7.EL" date="1118224800">- fix IPV6 isRouter flag and default router list handling (John Linville)
- eliminate unexpected IO-APIC msg from x86 kernel on amd64 (Jim Paradis)
- switch to reg stack on user-mode x86_64 stk seg faults (Dave Anderson)
- fix two time-related problems in the netconsole module (Dave Anderson)
- remove microcode.o from x86 hugemem unsupported list (Ernie Petrides)
- fix x86_64 committed space accounting w/overcommit=2 (Larry Woodman)
- enforce page locking resource limit in expand_stack() (Jason Baron)
- fix SCSI command block leak w/off-line non-zero LUNs (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.6.EL" date="1117533600">- fix races between POSIX locking and file closes (Peter Staubach)
- update tg3 network driver to version 3.27RH (John Linville)
- add ia64 frame size validation in syscall handling (Jason Baron)
- prevent info leaks into JFS metadata disk blocks (Stephen Tweedie)
- fix ext2 fast-symlink/EA compatibility problem (Stephen Tweedie)
- add x86_64 32-bit-compat SO_{SND,RCV}TIMEO support (Guy Streeter)
- add piix driver PCI device ids for ICH4-L support (John Linville)
- validate "ndigis" value in addition of ROSE routes (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.5.EL" date="1117101600">- update e1000 network driver to version 6.0.54-k2 (John Linville)
- fix arp_ip_traget failover with bonding driver mode 1 (Eric Paris)
- prevent indefinite postponement under __alloc_pages() (Ernie Petrides)
- capture ia64 reg state on all cpus for OS_INIT dumps (Nobuhiro Tachino)
- add documentation listing which drivers support netconsole (Jeff Moyer)
- fail opens of removable media drives if media not present (Pete Zaitcev)
- fix x86_64 find_target() oops in 32-bit-compat ptrace() (Ernie Petrides)
- prevent info leaks into ext2 directory entry blocks (Stephen Tweedie)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.4.EL" date="1115978400">- limit concurrent OOM kills using /proc/sys/vm/oom-kill (Ernie Petrides)
- rework ppc64 wchan fix to avoid module install crashes (David Woodhouse)
- fix diskdump signature check failures w/block_order=8 (Nobuhiro Tachino)
- fix data corruption from pte_clear() races on &gt;4GB x86's (Larry Woodman)
- avoid s390,x kernel stack overflows in network ctc driver (Pete Zaitcev)
- add description of /proc/stat to file system documentation (Brian Maly)
- avoid inode races in __refile_inode() and clear_inode() (Larry Woodman)
- fix arg/env access in ELF core dumping and /proc reads (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.3.EL" date="1115200800">- remove extra chars from scsi_logging_level mod param (Ernie Petrides)
- use GFP_NOFS allocs to avoid kswapd/rpciod deadlocks (Steve Dickson)
- fix ia64 kernel thread creation to force 64-bit tasks (Jason Baron)
- fix data corruption from 4K overflow in /proc/devices (Neil Horman)
- prevent mlock() resource limit bypass w/shm locking (Ernie Petrides)
- restrict MOXA ctlr firmware updates to privileged users (Brian Maly)
- support EM64T systems with mix of cpus with/without NX (Jim Paradis)
- allow modules to use get/put_task_struct() macros (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.2.EL" date="1114164000">- fix IDE disk accounting bug from wrong ios_in_flight (Larry Woodman)
- limit IGMP traffic to active link in bond_alb_xmit() (John Linville)
- fix audit refs to permit /var unmounting on shutdown (Dave Anderson)
- prevent IP4/6 output memory leaks of dst_entry structs (Dave Miller)
- enhance support for ethtool in 3c59x network driver (John Linville)
- fix launder_page() locking to avoid kswapd deadlock (Larry Woodman)
- suppress ide-floppy I/O errors when media isn't present (Brian Maly)
- make netdump more reliable on NAPI-enabled controllers (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.1.EL" date="1113991200">- (this is the first build for RHEL 3 Update 6)
- fix oops when io_setup() is called w/unwritable addr (Jeff Moyer)
- prevent kswapd hangs under launder_page() w/no bufs (Larry Woodman)
- fix autofs memory leaks when events share wait queues (Jeff Moyer)
- change IBM veth driver to indicate link is always up (David Howells)
- fix error resets and TF reg reads in SATA AHCI driver (Jeff Garzik)
- avoid dropping &gt;200-byte frames in sk98lin driver (John Linville)
- prevent shared memory lock/unlock w/o permissions (Dave Anderson)
- remove duplicate USB ESSENTIAL_REALITY defines (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.EL" date="1113559200">- fix data corruption w/ext3 xattr on 64-bit arches (Jason Baron)
- validate LCP frame lengths in PPP async handling (Dave Miller)
- enable forcedeth net driver builds in x86 configs (Jim Paradis)
- isolate IP fragment queues among various callers (Dave Miller)
- prevent busy inodes for symlinks after unmounts (Don Howard)
- revise PCI device ids extending ICH7 support (John Linville)
- work around broken xw4300 BIOS AHCI BAR setup (John Linville)
- add protocol validation in net bluetooth driver (John Linville)
- enable software watchdog timer in s390,x configs (Jan Glauber)
- fix data corruption w/uselib() on bad ELF libs (Ernie Petrides)
- add USB tablet init delay in wacom_probe() (Kristian Høgsberg)
- prevent core dumps with non-readable ELF interps (Dave Anderson)
- add maxevents validation in epoll_wait() handling (Ernie Petrides)
- add len validation in /dev/random poolsize sysctl (Ernie Petrides)
- correct size of ia64 syscall table initialization (Jason Baron)
- correct x86_64 user-mode i/o port validation (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-31.EL" date="1110448800">- fix missing ppc64 netdump/diskdump symbols (Nobuhiro Tachino)
- prevent ia64 unwind from traversing off stack (Jason Baron)
- disable 3w-9xxx driver builds on ppc64 (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-30.EL" date="1110362400">- fix obscure oops in tty init_dev() handling (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-29.EL" date="1109844000">- incorporate urgent late-breaking SATA fixes (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-28.EL" date="1109152800">- add more USB device support to visor driver (Pete Zaitcev)
- implement clustered APIC support for x86_64 (Larry Woodman)
- constrain x86 MSR writes based on cpu model (Jason Baron)
- increase max superbh size for performance (Stephen Tweedie)
- add locking to prevent oops in md_seq_show() (Doug Ledford)
- restore missing ia64 panic_on_oops handling (Tatsuo Uchida)
- implement Ethernet PCI quirk for HP xw9300 (Jim Paradis)
- revert NFS flock() avoidance to -27.7.EL (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.17.EL" date="1108980000">- rework NFS flock() avoidance w/FS_WANT_FLOCK for GFS (Ken Preslan)
- prevent inode corruption from delete/lookup races (Wendy Cheng)
- preserve registers for ia64 16-byte atomic ops (Geoff Gustafson)
- update SCSI whitelist for LSI/HP/STK/EMC devices (Tom Coughlan)
- disable vary_io in ips driver to avoid ctlr hangs (Tom Coughlan)
- correct handling of 2-TB device partitions (Peter Martuccelli)
- update support for ia64 perfmon facility (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.16.EL" date="1108720800">- implement diskdump support for SATA piix/promise (Nobuhiro Tachino)
- correct /proc/mtrr size values on EM64T platforms (Larry Woodman)
- restore page permissions after writes from ptrace() (Don Howard)
- fix /proc parent pids from multi-threaded forks (Ernie Petrides)
- enable software watchdog timer support on s390,x (Jan Glauber)
- update tg3 network driver to version 3.22RH (John Linville)
- incorporate 3w-9xxx driver version 2.24.00.011fw (Adam Manthei)
- correct ending boundary check in filemap_sync() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.15.EL" date="1108548000">- add e100 driver PCI device ids for ICH7 support (John Linville)
- restore obsolete but ignored e100 module params (John Linville)
- implement user-mode (gdb) access to ia64 gate page (Jason Baron)
- fix x86_64 FPU IP and DP values in SIGFPE context (Larry Woodman)
- add qla2200 module parameter to use NVRAM RIO val (Tom Coughlan)
- update 3w-xxxx driver to 1.02.00.037 w/.033 backup (Adam Manthei)
- fix crashes in video Firewire (ieee1394) driver (Bastien Nocera)
- prevent info leaks into ext3 journal disk blocks (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.14.EL" date="1108461600">- enhance AIO performance over NFS w/FS_AIO_SYNC hook (Steve Dickson)
- defer e100_tx_timeout() work from interrupt context (John Linville)
- correct IPV6 DST entry release to prevent route leak (Dave Miller)
- ignore MTU updates from invalid IPV6 ndisc packets (Dave Miller)
- add relevant PCI device ids to extend ICH7 support (John Linville)
- reduce system pauses during heavy page laundering (Larry Woodman)
- fix audit logging of paths w/predicate filter usage (Neil Horman)
- enable building of unsupported fusion isense module (Adam Manthei)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.13.EL" date="1108375200">- increase dxfer size limit for ppc64 SG_IO ioctl32 (David Howells)
- eliminate tty line discipline usage/switching races (Jason Baron)
- fix autofs recognition of ghosted direct map updates (Jeff Moyer)
- fix sg driver race between cmd completion and close (Tom Coughlan)
- prevent e100 data corruption from v.3.0.27-k2 update (John Linville)
- upgrade SATA support (core, libata, new/old drivers) (John Linville)
- implement diskdump support for sym53c8xx adapter (Yuichi Nagahama)
- add USB support for Wacom Cintiq/Intuos3 tablets (Kristian Høgsberg)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.12.EL" date="1107943200">- update e100 network driver to version 3.3.6-k2 (John Linville)
- correct cpu id macro for dual-core Opteron support (Jim Paradis)
- add "numa=off" message on x86_64 OOM kills w/NUMA (Larry Woodman)
- improve user/system timer tick accounting on s390,x (Pete Zaitcev)
- prevent EAGAIN errs from interrupted TCP recv() calls (Dave Miller)
- update cciss disk driver to version v2.4.54.RH1 (Adam Manthei)
- eliminate diskdump cpu id from frozen list (Nobuhiro Tachino)
- fix user-space access bug in USB vicam ioctl (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.11.EL" date="1107424800">- incorporate Emulex driver ioctl module version 1.0.13 (Tom Coughlan)
- eliminate potential call_lock deadlock with diskdump (Tatsuo Uchida)
- fix potential kiobuf_lock deadlock in free_kiovec() (Larry Woodman)
- add L2 cache descriptor for EM64T Irwindale processor (Neil Horman)
- prevent mmap() syscalls from choosing NULL mappings (Rik van Riel)
- include bounce buffer pages in show_mem() output (Larry Woodman)
- add I2C driver support for ICH5 in i2c-i801.c (John Linville)
- correct parport_pc errors on insmod failures (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.10.EL" date="1106906400">- fix futex_wait() race condition that allowed app hang (Ingo Molnar)
- add/correct write barrier placement in timer routines (David Howells)
- add x86_64 NMI switch support to debug kernel hangs (Yuichi Nagahama)
- restore CIV/LVI offset operation in i810_audio driver (John Linville)
- update e1000 network driver to version 5.6.10.1-k2 (John Linville)
- prevent bogus BUG_ON during multi-threaded core dump (Roland McGrath)
- fix x86_64 crash in huge_page_release() w/SHM_HUGETLB (Larry Woodman)
- fix possible mem corruption from /proc/kcore access (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.9.EL" date="1106647200">- fix core dumping over NFS mounts with "intr" option (Roland McGrath)
- prevent multi-threaded app hang from sys_wait4() race (Ingo Molnar)
- restore e1000 support for Intel PCI device id 1014 (John Linville)
- add ac97 quirk entries for HP xw6000/xw6200/xw8000 (John Linville)
- update b44 network driver to upstream version 0.95 (John Linville)
- revert NFS silly-delete and rpciod-hang patches (Steve Dickson)
- fix panics while backing up LVM snapshots (Heinz Mauelshagen)
- fix oops in redirect_target() on DHCP refresh (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.8.EL" date="1105696800">- rework ia64 INIT switch stacks for clean tracebacks (Tatsuo Uchida)
- fix USB raced timeout errors and ohci_complete_add() (Pete Zaitcev)
- add O_DIRECT handling in LVM driver handling (Heinz Mauelshagen)
- downgrade wait4() SIGCHLD/SIG_IGN warning message (Ingo Molnar)
- eliminate potential VMA list races with do_brk() (Dave Anderson)
- ignore ICMP Source Quench messages in tcp_v4_err() (Dave Miller)
- prevent VMA overlap crashes in insert_vm_struct() (Jason Baron)
- move flock() avoidance from NFS up to F/S layer (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.7.EL" date="1105437600">- fix 32-compat alt-stack signal handling on x86_64 (Geoff Gustafson)
- add initialization of ppc64 EEH error buffer size (David Howells)
- make ppc64 xmon work properly with Power5 console (David Howells)
- prevent infinite sync loop from NFS ESTALE writes (Steve Dickson)
- update 8139too network driver w/recent 2.4 fixes (John Linville)
- avoid netfilter oops when ip_conntrack is unloaded (Dave Miller)
- fix potential rpciod hangs during NFS sillydelete (Steve Dickson)
- avoid "No locks available" errors w/flock() on NFS (Ken Preslan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.6.EL" date="1104919200">- fix x86 phys proc ids for non-clustered APIC systems (Geoff Gustafson)
- return EINVAL on e100/e1000 rx-mini/rx-jumbo settings (John Linville)
- fix i810_audio regression from modified ICH6 PCI ids (John Linville)
- prevent race conditions in add_wait_queue_cond() macros (Jeff Moyer)
- fix FAT32 file system corruption w/writing 8M files (Alexander Viro)
- fix derivation/presentation of PHB unit ids on ppc64 (David Howells)
- close OpenFirmware stdin device at boot on ppc64 (David Woodhouse)
- fix 32-bit-compat regression in CMSG validations (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.5.EL" date="1103796000">- add "CommitLimit" data to /proc/meminfo output (Frank Hirtz)
- allow autofs to expire mounts on ppc64 arch (Jeff Moyer)
- add 3c59x EEPROM_RESET for 3c900 Boomerang (John Linville)
- ignore PTE mapping status in page_anon() (Larry Woodman)
- fix SIOCGIFHWADDR handling for zero addr_len (Dave Miller)
- add netdump support for x86_64, ia64, ppc64 (Dave Anderson)
- correct overcommit accounting on fork failure (Frank Hirtz)
- raise default ia64/ia32e swiotlb size to 64M (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.4.EL" date="1103709600">- add network CMSG validation checks (Dave Miller)
- fix data struct leak in ip_options_get() (Dave Miller)
- fix IGMP vulnerabilities in ip[6]_mc_source() (Dave Miller)
- fix e_phnum binfmt_elf loader vulnerability (Dave Anderson)
- clean x86_64 32-bit-compat syscall numbers (Jim Paradis)
- prevent ia64 floating point reg val leakage (Jason Baron)
- add USB io_edgeport driver size check (Peter Martuccelli)
- enable softirq deferral for x86_64 arch (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.3.EL" date="1102586400">- add data/param length sanity checks in smbfs (Alexander Viro)
- prevent /proc/&lt;PID&gt;/cmdline env data disclosure (Dave Anderson)
- make tulip_stop_rxtx() wait for DMA termination (John Linville)
- fix mm_stat regression introduced in -20.13.EL (Rik van Riel)
- correct return value from vlan_dev_change_mtu() (John Linville)
- serialize datagram read w/appropriate semaphore (Dave Miller)
- fix keyboard regression introduced in -24.EL (Peter Martuccelli)
- enable mmap/mprotect PROT_EXEC for legacy apps (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-26.2.EL" date="1101722400">- fix USB problems with keyboards and ia64 oopses (Pete Zaitcev)
- add i810 PCI IDs for nforce3/CK804 audio devices (Jim Paradis)
- fix ppc64 viodasd driver dev naming/limit bugs (David Howells)
- prevent tg3 fiber link bounces w/auto-negotiation (Dave Miller)
- add ac97 quirk handling for i810_audio driver (John Linville)
- prevent incorrect OOM killing with iscsi usage (Larry Woodman)
- create kiobuf cache to reduce lowmem contention (Larry Woodman)
- fix yet another binfmt_elf loader vulnerability (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.1.EL" date="1100512800">- (this is the first build for RHEL 3 Update 5)
- implement open() recovery from NFS ESTALE errors (Neil Horman)
- clean up warnings from lpfc and lpfc_703 Makefiles (Tom Coughlan)
- fix nessus-induced kernel panic with auditing (Peter Martuccelli)
- update 3c59x driver to LK1.1.18 and fix reset bug (John Linville)
- fix ext3 O_DIRECT bug in orphan list handling (Stephen Tweedie)
- flush cached dirty pages on NFS reads w/O_DIRECT (Steve Dickson)
- allow ia64 kernel unaligned access msg suppression (Neil Horman)
- correct test for performing buffer-head reclaim (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.EL" date="1100253600">- fix binfmt_elf loader vulnerabilities (Jim Paradis, Dave Anderson)
- limit kernel data struct slabs to single-page allocs (Larry Woodman)
- update Emulex driver to 7.1.14 (backup still 7.0.3) (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-24.EL" date="1100080800">- fix several ppc64 problems with signal catching (David Woodhouse)
- fix several bugs in /proc/ppc64/lparcfg driver (David Howells)
- fix possible diskdump hangs w/megaraid2 driver (Tatsuo Uchida)
- add support for IBM EM64T-based Groucho blade (Peter Martuccelli)
- fix regression in USB BIOS-&gt;kernel hand-off support (Pete Zaitcev)
- fix regression in ia64 kernel stack unwind handling (Don Howard)
- fix regression w/agpgart support of i8xx chipsets (Larry Woodman)
- add support for BLKSSZGET ioctl in cciss driver (Tom Coughlan)
- disable iSCSI builds in ppc64 and s390* configs (Tom Coughlan)
- update Emulex driver to 7.1.13 (backup still 7.0.3) (Tom Coughlan)
- correct SCSI whitelist for Chaparral FR1422 devices (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-23.EL" date="1098957600">- prevent kswapd from getting stuck in prune_icache() (Larry Woodman)
- fix ppc64 single-stepping into signal handlers (David Woodhouse)
- fix corruption from user stack expansion races (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-22.EL" date="1098093600">- prevent add/removal races in SCSI open handling (Doug Ledford)
- fix U3 agpgart regression with Intel i8xx chipsets (Dave Jones)
- update SCSI whitelist for IBM 1722/1724 devices (Tom Coughlan)
- correct TSS descriptor limit checking for x86_64 (Jim Paradis)
- add nforce3/CK804 device support and fix ACPI bug (Jim Paradis)
- add support for "forcedeth" net driver version 0.28 (Jim Paradis)
- enable diskdump support in amd64/ia32e configs (Nobuhiro Tachino)
- restore/improve linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- add missing page_cache_release() in launder_page() (Larry Woodman)
- update Emulex driver to 7.1.11 (backup still 7.0.3) (Tom Coughlan)
- add new USB ids to support latest Wacom tablets (Kristian Høgsberg)
- remove drivers/net/tun.o from unsupported list (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-21.EL" date="1096538400">- fix potential PTE race in do_anonymous_page() (Rik van Riel)
- add "Committed_AS" data to /proc/meminfo output (Frank Hirtz)
- revise DMA zone paging thresholds for x86_64 (Larry Woodman)
- prevent /proc/scsi/scsi oops during probes (David Woodhouse)
- avoid kswapd hangs via free_more_memory() hooks (Rik van Riel)
- update megaraid2 driver to 2.10.8.2 w/2.10.6 backup (Adam Manthei)
- fix do_notify_parent() panic from ptrace death race (Roland McGrath)
- fix large core file support on 64-bit architectures (Dave Anderson)
- enable tux on ia64 and increase max tux threads to 16 (Ingo Molnar)
- fix ia64/s390,x single-stepping w/signal handlers (David Woodhouse)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.14.EL" date="1096452000">- fix hang in SCSI starvation management code (David Howells)
- update SCSI whitelist for NETAPP LUN devices (Wendy Cheng)
- fix s390 cio handling during ESS fail-overs (Pete Zaitcev)
- update Emulex driver to 7.1.8 w/7.0.3 backup (Tom Coughlan)
- update Qlogic driver to 7.01.01 w/7.00.03 backup (Tom Coughlan)
- correct unlock/free order in proc_lookupfd() (Ernie Petrides)
- use ACPI for PCI interrupt routing on ia32e (Jim Paradis)
- allow cpus to boot w/APIC IDs &gt; 8 on ia32e (Jim Paradis)
- fix pid allocation when pid_max &gt; 32768 (Ernie Petrides)
- fix regs in multi-threaded ia64 core dumps (Keiichi Mori)
- enable sym53c8xx driver for ppc64 iSeries (David Howells)
- fix ac97 depmod errors w/hugemem configs (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.13.EL" date="1096365600">- fix aic79xx_osm.h/3c59x.c changes in prior rev (Tachino/Linville)
- allow for larger nfsd block sizes on some archs (Steve Dickson)
- fix possible aacraid driver panic in aac_info() (Tom Coughlan)
- fix xdr argsize check to handle writes &gt;= 2^31 (Steve Dickson)
- update e1000 network driver to version 5.3.19-k2 (John Linville)
- apply several cciss driver fixes (to 2.4.52.RH2) (Adam Manthei)
- fix x86_64 versions of cpu capability test macros (Jim Paradis)
- fix ppc64 HPTE memory corruption race condition (Rik van Riel)
- add sys_epoll support on s390,x (Stephen Tweedie, Pete Zaitcev)
- prevent keyboard.c warnings from mouse clicks (Norm Murray)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.12.EL" date="1096279200">- improve slab cache page reaping heuristics (Larry Woodman)
- implement diskdump support for x86_64 arch (Nobuhiro Tachino)
- add ia64 INIT trigger switch support for debugging (Tatsuo Uchida)
- fix several problems in handling of AIO on pipes (Jeff Moyer)
- update fixes for LTP read02 test hangs with tmpfs (Alexander Viro)
- fix x86_64 single-stepping out of signal handlers (Jim Paradis)
- increase size of ppc64 RTAS error log buffer (David Howells)
- increase max possible kNFSD lockd cookie size (Steve Dickson)
- backport 3c59x fixes for mii-tool problems w/10Mb (John Linville)
- incorporate Cisco's iscsi_sfnet initiator driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.11.EL" date="1095933600">- implement diskdump support for megaraid2 adapter (Tatsuo Uchida)
- update ips driver to version 7.10.18 w/7.00.15 backup (Tom Coughlan)
- correct max page aging interval boundary in kscand() (Larry Woodman)
- add ppc64 support for ptrace() with PT_SINGLESTEP (David Woodhouse)
- update e100 network driver to version 3.0.27-k2 (John Linville)
- fix LTP read02 test hangs when tmpfs is in use (Alexander Viro)
- get proc_dir_entry reference in proc_lookup() (Alexander Viro)
- add exports of several AIO-related interfaces (Larry Woodman)
- reduce swapping during excessive pagecache use (Larry Woodman)
- implement statfs64() syscall on x86 for NFS use (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.10.EL" date="1095847200">- implement early USB hand-off (BIOS-&gt;kernel) support (Pete Zaitcev)
- fix stack pointer calculation in x86 show() handling (Jeff Moyer)
- prevent interference between flock/POSIX lock types (Frank Hirtz)
- update pcnet32 network driver to version 1.30c (John Linville)
- add export of block_commit_write() f/s interface (Larry Woodman)
- implement diskdump support for dpt_i2o adapter (Tatsuo Uchida)
- update mptfusion driver to version 2.05.16.02 (Adam Manthei)
- move disk_dump_notifier_list to diskdumplib.c (Nobuhiro Tachino)
- update s390 zfcp driver to revision 5.31.2.11+ (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.9.EL" date="1095674400">- fix occasional ibmvscsic driver insmod crash (David Howells)
- disable linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- prevent double slashes in symlink auditing (Peter Martuccelli)
- fix overzealous compat32 setsockopt conversions (David Woodhouse)
- backport tulip driver fixes from upstream 2.4.28 (John Linville)
- update tg3 network driver to version 3.10RH (John Linville)
- implement sysctl to force igmp protocol versions (Neil Horman)
- add diskdump performance improvement info (Nobuhiro Tachino)
- fix s390 iucv lost connections and ping hangs (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.8.EL" date="1095588000">- prevent diskdump deadlock in case of die() recursion (Tatsuo Uchida)
- add x86/x86_64 support for ptrace() w/PT_SINGLESTEP (Roland McGrath)
- fix x86/x86_64 single-stepping into signal handlers (Roland McGrath)
- increase x86 value for MAX_MP_BUSSES definition to 260 (Ingo Molnar)
- eliminate ia64 potential for scheduler runq deadlock (Larry Woodman)
- add support for /proc/sys/kernel/mem_nmi_panic sysctl (Dave Anderson)
- prevent keyboard-initiated sysrq hangs in handle_sysrq() (Jeff Moyer)
- fix intermittent netdump hangs from cpu-frozen messages (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.7.EL" date="1095415200">- fix premature OOM killing change added in prior rev (Larry Woodman)
- backport vlan driver fixes from upstream 2.4.28-rc1 (John Linville)
- add _sb_findmap symbol export in s390/s390x kernels (Pete Zaitcev)
- add ppc64 support for 32-bit sendfile64() syscall (David Howells)
- fix 32-bit IPC_INFO shmctl() syscalls for ppc64 (David Howells)
- upgrade libata/SATA support to current 2.4 bits (John Linville)
- avoid USB device resets of shared/busy interfaces (Pete Zaitcev)
- fix miscellaneous problems in ppc64 icom driver (David Howells)
- fix ip_queue_maxlen sysctl for ip[6]_queue modules (Neil Horman)
- add module parm for max entries in NFS_ACL replies (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.6.EL" date="1095156000">- prevent OOM killer from kicking in prematurely (Larry Woodman)
- avoid NMI watchdog crashes during sysrq-m usage (Wendy Cheng)
- add auditing support for ia64 clone2 syscall (Peter Martuccelli)
- correct sign of auditing error codes for ia64 (Peter Martuccelli)
- implement ia64 auditing 32-bit-disable sysctl (Peter Martuccelli)
- fix ia64 faults w/stale VHPT-generated TLB entries (Dave Anderson)
- fix invalid x86_64 checksums for multicast packets (Mike Gahagan)
- fix incorrect blocking bug inside wakeup_kswapd() (Larry Woodman)
- validate appropriate media type in DVD drives (Doug Ledford)
- reduce s390 stack usage in qeth/qdio drivers (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.5.EL" date="1094810400">- prevent scenarios that lead to hang of kswapd (Larry Woodman)
- add locking for access to /proc/bus/usb/devices (Pete Zaitcev)
- correct x86 rescheduling to handle apm=power-off (Ingo Molnar)
- fix OOM killer locking and mm referencing holes (Larry Woodman)
- pin ia64 mapping for idle proc stack during boot (Larry Woodman)
- fix warning throttle for amd64 stack overflow check (Neil Horman)
- fix content lengths when using tux gzip compression (Ingo Molnar)
- add auditing support for pread/pwrite syscalls (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.4.EL" date="1094724000">- prevent bogus data in /proc/scsi/ibmvscsi/* (David Howells)
- update tg3 network driver to version 3.9RH (John Linville)
- improve ramfs memory alloc w/scarce highmem (Larry Woodman)
- correct several values in /proc/ppc64/lparcfg (David Howells)
- allow dirty page rebalancing under mem pressure (Rik van Riel)
- prevent memory leak in scsi_build_commandblocks() (Doug Ledford)
- fix potential kswapd deadlock w/disk quota usage (Larry Woodman)
- increase MAX_IO_APICS from 8 to 32 for x86_64 arch (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.3.EL" date="1094205600">- fix various error path bugs in bcm5820 driver (John Linville)
- validate addresses used with /dev/kmem accesses (Neil Horman)
- eliminate IPSEC tunnel leaks when using IPComp (Dave Miller)
- add auditing support for utimes() syscalls (Peter Martuccelli)
- prevent netconsole freeze w/cable dis-/re-connect (Jeff Moyer)
- correct reboot_cpu validation for "reboot=s&lt;n&gt;" (Doug Ledford)
- fix mem/irq clean-up in olympic tokenring driver (Neil Horman)
- update network bonding driver to version 2.6.0 (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.2.EL" date="1094032800">- add maps/rlimits output with print-fatal-signals=2 (Ingo Molnar)
- backport ac97 sound support from upstream 2.4.27 (John Linville)
- eliminate kernel stack data leaks from USB drivers (Mark Cox)
- fix interrupt status mask in AMD PCnet32 driver (David Howells)
- fix module loading problems in ibmvscsic driver (David Howells)
- fix x86 shared runq mapping when ACPI data is bad (Bernd Schmidt)
- disable enhanced error handling on PCI-ISA bridges (David Howells)
- add memory-mapped i/o support to i810_audio driver (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.1.EL" date="1093860000">- (this is the first build for RHEL 3 Update 4)
- backport r8169 network driver changes from 2.4 (John Linville)
- update i810_audio sound driver to version 1.01 (John Linville)
- convert USB UHCI driver warning to debug message (Pete Zaitcev)
- backport 2.6 PROT_GROWSDOWN/UP mprotect() support (Jakub Jelinek)
- lower ppc64 console logging level of RTAS messages (David Howells)
- fix ppc64 handling of "smt-emabled=off" boot option (David Howells)
- correct socket sndbuf accounting w/IP_MULTICAST_LOOP (Neil Horman)
- reduce x86_64 user stack start randomization to 16K (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.EL" date="1092823200">- change TARGET_CPUS on x86_64 to include all on-line cpus (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-19.EL" date="1092304800">- fix possible races/overflows in file offset handling (Alexander Viro)
- correct logging of boot progress messages on Power5 (David Howells)
- extend ppc64 EEH support for other types of devices (David Howells)
- fix ibmveth driver to properly shut down and restart (David Howells)
- fix several races and overflows in ppc64 RTAS driver (David Howells)
- backport "acpi=noirq" support to work around Nocona hangs (Don Howard)
- conditionalize pbn_hp_diva to fix serial driver oops (Matthew Galgoci)
- add amd64 GART entry guard mappings for PCI mis-prefetch (Jim Paradis)
- upgrade SATA support again to resolve several problems (Jeff Garzik)
- qualify ia32e IRQ affinity disable with BIOS flag check (Jim Paradis)
- fix eeh_check_failure() on ppc64 to be interrupt safe (David Howells)
- correct ppc64 EEH macros to use appropriate data size (David Howells)
- fix x86/ia64 no-wait handling in smp_call_function() (Larry Woodman)
- fix "Filter target 0x203 not known ..." audit msgs (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-18.EL" date="1090404000">- prevent s390 mlock hangs with follow_page() rework (Ernie Petrides)
- fix Power5 initialization and handling of RAS IRQs (David Howells)
- fix ppc64 viocons driver deadlocks with printk() (David Howells)
- apply eh_timeout, netdump, cli fixes in diskdump (Tatsuo Uchida)
- add skip_mapped_pages tuning for page eviction (Stephen Tweedie)
- fix initrd's effect on ppc64 mem_end calculation (David Howells)
- allow HT support on ppc64 systems with single cpu (David Howells)
- backport v2.0.8 aic7xxx driver h/w support for Dell (Tom Coughlan)
- correct ppc64 device node searching in hvsi driver (David Howells)
- fix KMI compat problem w/pgprot_t in x86 NX support (Jim Paradis)
- resurrect mptfusion driver backup version 2.05.05 (Tom Coughlan)
- disable IRQ affinity setting on some ia32e systems (Jim Paradis)
- update SCSI whitelist for Dot Hill SANnet/StorEdge (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-17.EL" date="1089280800">- account for zone holes in big hash table allocator (Stephen Tweedie)
- prevent reserved stack space overflow of mmap_top (Ernie Petrides)
- fix USB crash in scan_async() with EHCI hardware (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-16.EL" date="1088848800">- enable exec-shield and add x86 NX support (Ingo Molnar, Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.19.EL" date="1088762400">- add owner check in inode_change_ok() for gid changes (Ernie Petrides)
- fix race in finish_task_switch() between wakeup/exit (Ernie Petrides)
- remove Samsung CD-ROM SN-124 from IDE DMA blacklist (Tom Coughlan)
- update e1000 network driver to version 5.2.52-k3 (John Linville)
- add auditing support for semtimedop syscalls (Peter Martuccelli)
- fix tasklet and locking bugs in Power5 hvsi driver (David Howells)
- fix megaraid2 handling of TUR cmds with SCSI CD-ROM (Adam Manthei)
- update SCSI whitelist for HP NS E1200-160 router (Tom Coughlan)
- prevent x86 read_ldt() from reading beyond kmap (Ernie Petrides)
- force single loadable segment in ia64 kernels (Jakub Jelinek)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.18.EL" date="1088157600">- implement ia64 work-around for TLB fetch timeout MCA (Larry Woodman)
- fix Power3 interrupt initialization in ppc64 setup (David Howells)
- correct info msg, prevent double panic in diskdump (Tatsuo Uchida)
- defend against NULL "mm" ptrs in page_referenced() (Rik van Riel)
- fix miscellaneous audit subsystem problems (Peter Martuccelli)
- prevent crash with tux CGI execution on x86_64 (Ingo Molnar)
- add installer info to SATA sx8 block driver (Jeff Garzik)
- turn on vary_io flag in SCSI ips driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.17.EL" date="1087984800">- allocate big system hash tables w/bootmem allocator (David Howells)
- prevent loading aic7xxx_old when aic7xxx is in use (Doug Ledford)
- implement stat() recovery from NFS ESTALE errors (Steve Dickson)
- fix raw/O_DIRECT i/o bug with unmapped pages (Stephen Tweedie)
- correct another locking hole in RAID1 handling (Doug Ledford)
- fix __x86_64__ conditional in megaraid2.c driver (Adam Manthei)
- fix unresolved symbols on ia64 in cciss driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.16.EL" date="1087898400">- make NFS sillydelete wait for unlink completion (Steve Dickson)
- prevent EIO w/concurrent O_DIRECT+buffered i/o (Stephen Tweedie)
- upgrade SATA support (core, libata, and drivers) (Jeff Garzik)
- implement futex() FUTEX_CMP_REQUEUE op (Al Viro, Pete Zaitcev)
- update b44 network driver to version 0.93 (John Linville)
- avoid unix_stream_sendmsg() ENOBUFS errors (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.15.EL" date="1087812000">- improve SCSI mid-layer error handling w/sdev_retry_q (Doug Ledford)
- eliminate rw-semaphore races between waiter/wakeup (David Howells)
- add locking and fix accounting bug in RAID1 handling (Doug Ledford)
- backport Carmel sx8.c driver from upstream 2.4 base (John Linville)
- rename ppc64-squadrons-* patches to ppc64-power5-* (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.14.EL" date="1087639200">- introduce support for IBM Squadrons/Power5 systems (David Howells)
- update aacraid driver to 1.1.5-2339 w/1.1.2 backup (Adam Manthei)
- allow sys_remap_file_pages() on unlocked ramfs VMAs (Larry Woodman)
- fix diskdump hangs during resets with aic79xx driver (Tatsuo Uchida)
- fix possible data corruption when using SHM_HUGETLB (Larry Woodman)
- set QLogic HbaApiNode proc file permissions to 0600 (Tom Coughlan)
- add IRQ blocking/restoring in add_gendisk/del_gendisk (Jeff Needle)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.13.EL" date="1087466400">- fix problem causing PCI bus 255 to be missing on ia64 (Ben Woodard)
- make nfs_statfs() recognize/handle fs size overflows (Steve Dickson)
- update QLogic driver to 7.00.03-RH1 w/6.07.02 backup (Tom Coughlan)
- allow procfs to utilize more dynamic inode numbers (David Howells)
- prevent inappropriate "unexpected IO-APIC" messages (Ernie Petrides)
- avoid lost dirty page bits in s390/s390x VM handling (Pete Zaitcev)
- fix ACPI SCI interrupt defaults and add kernel params (Jim Paradis)
- fix user-space access bugs in acpi/airo/decnet/sound (Alexander Viro)
- remove drivers/net/starfire.o from unsupported list (Ernie Petrides)
- fix mm_struct mem leak in copy_process() error path (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.12.EL" date="1087293600">- correct s390/s390x tests for PT_AUDITED flag (Peter Martuccelli)
- update e100 network driver to version 2.3.43-k1 (John Linville)
- update megaraid2 driver to 2.10.6 w/2.10.1.1 backup (Adam Manthei)
- add x86_64 auditing support for 32-bit-compat (Peter Martuccelli)
- fix ia64 unwind handling for UNW_INSN_SETNAT_MEMSTK (Jason Baron)
- update cciss driver to v2.4.52 for several fixes (Tom Coughlan)
- fix variable block mode tape handling in st driver (Tom Coughlan)
- incorporate latest Emulex fibre channel driver (Tom Coughlan)
- fix USB EHCI problem with BIOS-to-host handoff (Pete Zaitcev)
- update SCSI whitelist for DDN/Xyratex/SanDisk/CBOX3 (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.11.EL" date="1087207200">- upgrade to latest autofs4, remove from unsupported list (Jeff Moyer)
- fix memory corruption bug in audit driver code (Peter Martuccelli)
- store adjusted KSP value in ia64 diskdump support (Tatsuo Uchida)
- update e1000 network driver to version 5.2.52-k1 (John Linville)
- update ips driver to version 7.00.15 w/6.11.07 backup (Adam Manthei)
- implement USB device interlock between ioctls/SCSI-ops (Pete Zaitcev)
- update tg3 driver to version 3.6RH for upcoming chipsets (Dave Miller)
- downgrade several PCI cache line size debugging messages (Jim Paradis)
- correct x86_64 32-bit-compat support for AIO syscalls (Jeff Moyer)
- prevent FPU exception handling hangs on x86/x86_64 (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.10.EL" date="1086948000">- give wait.func highest priority in wake_up_filtered() (Larry Woodman)
- reduce system time when using sys_remap_file_pages() (Larry Woodman)
- enable CONFIG_SOFT_WATCHDOG module for ppc64 configs (David Howells)
- improve page allocation to avoid unnecessary swapping (Rik van Riel)
- implement diskdump support for ia64 with mptfusion (Tatsuo Uchida)
- disable native ia32 support for ia64 Montecito cpus (Jason Baron)
- save/restore P4/ia32e perf registers for oprofile (Will Cohen)
- fix oprofile ESCR_SET_EVENT_SELECT() event mask (Will Cohen)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.9.EL" date="1086775200">- update s390 zcrypt driver to version 1.2.1 (Pete Zaitcev)
- update network tg3 driver to version 3.5RH (Dave Miller)
- eliminate separate ia32e oprofile processor id (Will Cohen)
- update SCSI whitelist for IBM 2105/2145 devs (Doug Ledford)
- avoid EAGAIN errors on blocking UDP sockets (Steve Dickson)
- avoid putting locked inodes on dirty list (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.8.EL" date="1086688800">- decouple NFS O_DIRECT handling for performance gain (Steve Dickson)
- export page_is_ram() interface for amd64/ia32e arch (Jim Paradis)
- enable CONFIG_SCSI_SATA_* options in x86_64 configs (Jim Paradis)
- update mptfusion driver to 2.05.16 w/2.05.11.03 backup (Adam Manthei)
- fix nopage_sequential_readahead() and filemap_sync() (Larry Woodman)
- fix USB EHCI driver to avoid Squadrons install oops (Pete Zaitcev)
- add x86 NMI trigger switch support for debugging (Yuichi Nagahama)
- add dmi_blacklist[] entry for "Intel NA440BX DP" (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.7.EL" date="1086602400">- apply some minor scsi_dump_status() format tweaks (Doug Ledford)
- implement SCSI support for dynamic add (hot plug) (Doug Ledford)
- upgrade lvm driver logic to version 1.0.8-2 (Heinz Mauelshagen)
- fix x86_64 definition for inlined ffs() function (Jim Paradis)
- preserve VM_MAYEXEC for executable stack support (Jim Paradis)
- add extra SLBIEs for ppc64 Power5 DD2.0 errata (David Howells)
- add ppc64 32-bit compat for TIOCGICOUNT/MIWAIT (David Howells)
- hold file struct ref when removing POSIX locks (Steve Dickson)
- fix window scaling bug in tcp_ack_update_window() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.6.EL" date="1086343200">- make fsync() flush all pending NFS updates to disk (Steve Dickson)
- complete ia64 support for multiple I/O port spaces (Larry Woodman)
- fix sending of IP broadcast frames with TTL of zero (Neil Horman)
- prevent context switch storms under high VM loads (Larry Woodman)
- fix sigaltstack() errors w/JVM on hugemem kernels (Roland McGrath)
- add locking and improve output in scsi_dump_status() (Doug Ledford)
- add size boundary checking in scsi_resize_dma_pool() (Doug Ledford)
- fix SCSI request struct leak on command init failures (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.5.EL" date="1084528800">- overhaul ia64 SAL/MCA subsystem (Ben Woodard)
- enable x86_64 32-bit UID support (Jim Paradis)
- add initial diskdump support (Nobuhiro Tachino)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.4.EL" date="1084356000">- reduce chance of "VFS: Busy inodes after unmount." errs (Steve Dickson)
- convert "uaddr2" arg ptr in s390x futex() compat syscall (Pete Zaitcev)
- add ppc64 32-bit compat handler for PE_LOCKED_COPY ioctl (David Howells)
- update s390 dasd driver with several recent bug fixes (Pete Zaitcev)
- fix amd64 NUMA node scanning for Northbridge systems (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.3.EL" date="1084183200">- prevent exp_stopfodrop() oops during cluster failover (Steve Dickson)
- make nfs_file_commit() always flush the entire file (Steve Dickson)
- fix pcnet32 driver's MAC address selection on ppc64 (Julie DeWandel)
- backport /dev/random driver fixes for missed wakeups (Mark DeWandel)
- fix hang w/SoundBlaster 16-bit sampling w/odd count (Ernie Petrides)
- make s390 tape driver specify GPL module license type (Pete Zaitcev)
- correct buffer len value in ppc64 pSeries ipr driver (David Howells)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.2.EL" date="1083664800">- enable booting on 8-way Opteron systems (Jim Paradis)
- fix 32-bit-compat truncate64() on x86_64 (Jim Paradis)
- correct promiscuous mode counter handling (Dave Miller)
- support 128-GB ia64 systems w/HP zx1 chipset (Larry Woodman)
- add export of sys_ioctl() global symbol on s390x (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.1.EL" date="1083578400">- (this is the first build for RHEL 3 Update 3)
- reenable/fix linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- clean up file locks when NFS clients receive signals (Steve Dickson)
- complete ia64-specific LAuS syscall auditing support (Mark DeWandel)
- prevent NULL pointer dereference in page_referenced() (Rik van Riel)
- fix max sectors argument in lvm_snapshot_alloc() (Heinz Mauelshagen)
- allow AGP bus scanning to execute for all architectures (John Dennis)
- fix page_referenced() rss limit checks w/unmapped pages (Rik van Riel)
- correct locking and cr/lf problems in usbserial driver (Pete Zaitcev)
- add /proc/cpuinfo support for new ppc64 processors (Julie DeWandel)
- fix sense data handling on certain SCSI cmd retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.EL" date="1082541600">- fix clobbering of /proc/cpuinfo vendor_id on x86_64 (Jim Paradis)
- correct MCAST_MSFILTER/IP_MSFILTER size checking (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-14.EL" date="1081936800">- disable linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- prevent symlink buffer overflow in ISO-9660 fs (Ernie Petrides)
- check for skb overrun in IPV4/IPV6 IGMP handling (Dave Miller)
- fix possible hang in rebalance_laundry_zone() (Larry Woodman)
- correct zone_wired[] initialization for NUMA (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-13.EL" date="1081332000">- fix several critical libata bugs (Jeff Garzik)
- correct IPSEC XFRM policy ref counting (Dave Miller)
- add amd64/ia32e parsing for "acpi=off" arg (Jim Paradis)
- update tg3 driver to v3.1 for several fixes (Dave Miller)
- fix SCSI whitelist for Hitachi/HP DFx00, Apple Xserve (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-12.EL" date="1080295200">- add USB support for Handspring Treo 600 PDA syncing (Matthew Galgoci)
- clear state for CPEs during ia64 MCA SAL error logging (Ben Woodard)
- prevent DMA resource leak in QLogic driver error path (Tom Coughlan)
- change default QLogic driver device queue depth to 64 (Tom Coughlan)
- replace fabricated cciss drive geometry w/ENXIO error (Tom Coughlan)
- update SCSI whitelist for HP SureStore/StorageWorks (Tom Coughlan)
- disable CONFIG_ACPI_DEBUG in amd64/ia32e configs (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-11.EL" date="1078740000">- add yet another Intel ICH6 SATA PCI id (Jeff Garzik)
- fix ref counting in copy_process() error path (Larry Woodman)
- remove ia64 support for /proc/bus/mckinley/bitmap (Jason Baron)
- correct depmod versioning for unsupported modules (Ernie Petrides)
- prevent data corruption in ia32e phys_proc_id[] info (Larry Woodman)
- change default value for inactive_clean_percent to 30 (Larry Woodman)
- enable improved version of s390 on-demand timer patch (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-10.EL" date="1078221600">- incorporate late-breaking libata fixes (Jeff Garzik)
- enable amd64 syscall for tux support (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.17.EL" date="1078135200">- reduce s390 idle overhead with on-demand timer patch (Pete Zaitcev)
- complete ia64 NPTL support for 32-bit-EL executables (Jason Baron)
- add several ia64 syscall table entries for 32-bit-EL (Jason Baron)
- upgrade libata/SATA support, delete ich5-sata.patch (Jeff Garzik)
- check for mremap/vmtruncate race in move_one_page() (Jason Baron)
- prevent ia64 NaT-bit corruption during sig catching (Jason Baron)
- fix amd64 get_mtrr() parsing error with &gt;4GB memory (Jim Paradis)
- change amd64 default behavior to avoid TSC timer use (Jim Paradis)
- force s390utils upgrade to prevent zipl seg fault (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.16.EL" date="1078048800">- restore varyio capability in mptfusion driver update (Adam Manthei)
- enhance SCSI mid-layer queuing for indefinite retries (Doug Ledford)
- add ia64 reg reloads for 32-bit-EL strace -f support (Jason Baron)
- fix ia64 core dump support for 32-bit-EL executables (Jason Baron)
- add SCSI whitelist devs with BLIST_RETRY_ABORTED_CMD (Doug Ledford)
- remove stack-in-interpreter check in binfmt_elf.c (Julie DeWandel)
- clear all flags in exec_usermodehelper() for kmod (Alexander Viro)
- fix aacraid command completion (rq corruption) bugs (Tom Coughlan)
- correct cciss_proc_tape_report() type in flags decl (Tom Coughlan)
- enable USB-2.0-hub-based mice/keyboards to function (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.15.EL" date="1077962400">- fix amd64 oprofile linkage problem in ia32e support (Ernie Petrides)
- update ips driver to version 6.11.07 w/6.10.52 backup (Tom Coughlan)
- add size checks to DRM ATI r128 driver ioctl handling (John Dennis)
- avoid megaraid2 irq_disable calls for mem-mapped ctlrs (Tom Coughlan)
- upgrade firmware imbedded in QLogic driver to 3.02.24 (Tom Coughlan)
- correct ia64 memory accounting in overcommit mode 2 (Larry Woodman)
- implement softirq deferral to limit kernel stack depth (Ingo Molnar)
- reduce kernel stack usage in a couple of tux functions (Ingo Molnar)
- fix shared extended attribute ref counting in ext3 (Stephen Tweedie)
- clear SCSI sense data buffer between eh retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.14.EL" date="1077789600">- add .RH1 suffix to cciss driver version v2.4.50 (Tom Coughlan)
- implement initial LAuS syscall auditing support (Mark DeWandel)
- introduce GFS enablers for locking and sendfile ops (Ken Preslan)
- update QLogic driver to 6.07.01 w/6.06.00b11 backup (Tom Coughlan)
- improve netdump reliability w/asynchronous IPI param (Jeff Moyer)
- add ICH6 DSP audio support to i810_audio driver (Jeff Garzik)
- apply SCSI whitelist updates for several devices (Tom Coughlan)
- fix odd byte tape i/o handling in sym53c8xx driver (Tom Coughlan)
- correct minimum nfsd version that supports acls (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.13.EL" date="1077703200">- allow concurrent NFS direct i/o to same file if !append (Steve Dickson)
- introduce support for new Intel 64-bit ia32e processor (Larry Woodman)
- update mptfusion driver to 2.05.11.03 w/2.05.05 backup (Adam Manthei)
- remove fs/binfmt_misc.o from linux-modules-unsupported (Jason Baron)
- fix ia64 predicate register use in sig trampoline code (Jason Baron)
- add oprofile cpu type recognition for ia32e processor (Will Cohen)
- update e1000 network driver to version 5.2.30.1-k1 (Jeff Garzik)
- add more Intel PCI ids to match upstream 2.4 (Jeff Garzik)
- add ICH6 PATA support, PCI ids, irq routing (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.12.EL" date="1077530400">- add deferred page freeing for intr-context unmap_kvec() (Jeff Moyer)
- update megaraid2 driver to v2.10.1.1 w/v2.00.9 backup (Tom Coughlan)
- fix ppc64 pte hash table locking to avoid deadlocks (Julie DeWandel)
- fix ia64 data TLB init to prevent random boot-up hangs (Jason Baron)
- fix ia64 RNat register corruption with alt sig stacks (Jason Baron)
- allow smaller ia64 sig stacks in ia32 emulation layer (Jason Baron)
- backport ncpfs fixes to eliminate var-length arrays (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.11.EL" date="1077271200">- backport cisco aironet driver from 2.6.3-rc4 (Matthew Galgoci)
- update tg3 driver to v2.7 to fix status reg handling (Dave Miller)
- correct lost jiffies logic for x440/5 cyclone timer (Bernd Schmidt)
- fix open() error clean-up for unsupported O_DIRECT (Stephen Tweedie)
- prevent ia64 crashes when unmapping hugetlb pages (Jason Baron)
- add ppc64 processor support for future PPC970+ (Julie DeWandel)
- rework ppc64 32-bit-compat iptables support (Julie DeWandel)
- fix func ptr test in ethtool_set_ringparam() (Jeff Garzik)
- disable linux-2.4.21-scsi-affine-queue.patch (Doug Ledford)
- improve scsi_allow_ghost_devices description (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.10.EL" date="1077098400">- fix amd64 iommu bug causing data corruption on &gt;4GB systems (Jim Paradis)
- return EINVAL for unsupported ioctl32 syscalls on ppc64 (Julie DeWandel)
- remove incorrect BUG() call in __remove_inode_page() (Stephen Tweedie)
- fix s390 ctc driver problem causing build system hangs (Pete Zaitcev)
- fix s390 qeth driver error path to reset write_busy (Pete Zaitcev)
- update s390 zfcp driver to fix miscellaneous bugs (Pete Zaitcev)
- apply upstream nfs fixes for acl error handling (Steve Dickson)
- prevent kernel stack data leak via /dev/rtc (Ernie Petrides)
- allow AIO operations on sockets for non-inet (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.9.EL" date="1076925600">- restore genksyms_smp_prefix setting for non-x86 builds (Ernie Petrides)
- display/log memory stats whenever there's an OOM kill (Larry Woodman)
- update tg3 driver to v2.6, the latest upstream version (Jeff Garzik)
- update net bonding driver to v2.4.1, latest upstream (Jeff Garzik)
- fix irq, mem, printk, strtol bugs in cciss driver (Tom Coughlan)
- wait for board ready after hot add, cciss driver (Tom Coughlan)
- enable cciss adapter prefetch for x86 platforms (Tom Coughlan)
- add preserve_arg0 handling for ia32 emulation (Larry Woodman)
- fix ppc64 compat support for quota syscall (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.8.EL" date="1076580000">- remove Power-Blade-specific def for USB TEAC floppy (Julie DeWandel)
- fix s390 crash in iucv driver on connection shutdown (Pete Zaitcev)
- fix ia64 ACPI parsing for multinode IDE devs on x455 (Jim Paradis)
- fix amd64 core dumping of multithreaded 32-bit apps (Jim Paradis)
- fix s390 oprofile conditional and zero top addr bits (Will Cohen)
- add ipr driver v1.0.3 for IBM's PPC RAID adapters (Tom Coughlan)
- add {alloc,free}_netdev(), list macro, tg3 PCI ids (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.7.EL" date="1076407200">- restrict /proc/tty/driver directory access to root (Jeff Moyer)
- allow non-standard usr/sys VM splits at 2G/2G, 1G/3G (Ingo Molnar)
- extend existing ppc64 RTAS firmware flash interface (Mark DeWandel)
- fix ppc64 version of strncpy() to zero-pad buffers (Julie DeWandel)
- fix s390/x version of strncpy() to zero-pad buffers (Pete Zaitcev)
- fix generic version of strncpy() to zero-pad buffers (Jim Paradis)
- improve ppc64 segment table entry replacement logic (Julie DeWandel)
- correct type/cast of "len" in ppc64/kernel/nvram.c (Julie DeWandel)
- implement new ppc64 RTAS system call interface (Julie DeWandel)
- increase x86 RSDT table limit in ACPI parsing (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.6.EL" date="1076320800">- fix more usb-storage bugs for Power Blade support (Julie DeWandel)
- remove extra inactive_clean_pages-- in reclaim_page() (Larry Woodman)
- return proper error codes for do_munmap() failure in mremap (Dave Jones)
- fix binfmt_elf.c problems for apps with huge bss regions (Julie DeWandel)
- update cciss driver to v2.4.50 for Smart Array 6i support (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.5.EL" date="1075975200">- prevent netdump progress output from filling up log_buf (Jeff Moyer)
- add ppc64 RAS hook at end of panic() processing (Julie DeWandel)
- correct source IP address in ICMP error message (Dave Miller)
- fix smp deadlock with pdeath_signal posting (Roland McGrath)
- add ppc64 support for /proc/ppc64/lparcfg (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.4.EL" date="1075888800">- update nfsd mode-with-acls fix for upstream conformance (Steve Dickson)
- rework usb-storage locking to avoid hangs on disconnect (Pete Zaitcev)
- fix mmio alignment error in olympic token ring driver (Julie DeWandel)
- prevent tux logger-thread shutdown problems on ppc64 (Ingo Molnar)
- add ppc64 AltiVec chip support for Power Blades (Julie DeWandel)
- eliminate multi-threaded coredump hang potential (Ingo Molnar)
- fix ppc64 segfaults with tasks &gt; 2GB in size (Julie DeWandel)
- fix usb-storage memory-allocation/iowait deadlock (Alan Cox)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.3.EL" date="1075716000">- add amd64 support for PT_GNU_STACK with exec shield (Jim Paradis)
- fix s390 raid1 sync problem w/writes at end of dev (Pete Zaitcev)
- update s390 zcrypt driver to version 1.1.4 (Pete Zaitcev)
- fix output of large /proc/pid/statm values (Mark DeWandel)
- fix output of large /proc/partitions values (Mark DeWandel)
- enable ppc64 support for JS20 Power Blades (Julie DeWandel)
- fix kernel stack memory leak on fork failures (Dave Anderson)
- fix ipv6 packet quoting problem in icmpv6_send() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.2.EL" date="1075370400">- apply Intel's x86 microcode loader update (Jim Paradis)
- enhance PCI multifunction support for ppc64 (Julie DeWandel)
- fix nfsd returning bad mode bits when acls set (Steve Dickson)
- prevent unkillable zombies from detached NPTL threads (Ingo Molnar)
- avoid missing scsi disks in /proc/partitions on detach (Jason Baron)
- correct pte calculation inside zeromap_pte_range() loop (Ben Woodard)
- add inline function PDE() to help driver backporting (Matthew Galgoci)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.1.EL" date="1074679200">- (this is the first build for RHEL 3 Update 2)
- relocate various pieces of the "undo" patch (Patch Review Committee)
- rename s390 zcrypt and zfcp driver patches (Pete Zaitcev)
- add LKML discussion to COPYING.modules (Arjan van de Ven)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.EL" date="1073556000">- fix race condition between thread creation and signals (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-8.EL" date="1073469600">- fix amd64 eflags masking in 32-bit emulation of ptrace (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-7.EL" date="1073383200">- fix numerous ppc64 problems with /proc access (Julie DeWandel)
- allow user core files larger than 2GB in size (Dave Anderson)
- add ia64 support for Crestone Peak AGP bridges (John Dennis)
- fix unaligned kernel accesses in nfs_readdir() (Steve Dickson)
- add new_len/new_addr checks in do_mremap() (Ernie Petrides)
- fix nfs O_DIRECT corruption with &gt;4GB files (Steve Dickson)
- enable bus scan for AGP ctlrs on amd64 systems (John Dennis)
- limit PCI-alloc'ed physaddrs to 4GB on HP ia64 (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-6.EL" date="1070877600">- fix ppc64 firmware updates (Julie DeWandel)
- fix sync wakeup problem (Ingo Molnar)
- add ia64 cyclone support (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-5.EL" date="1070272800">- undo rejected patches (Stephen Tweedie, Arjan van de Ven, Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.20.EL" date="1069840800">- enable NUMA support in amd64 smp configs (Jim Paradis)
- prevent oopses with tux in OOM scenarios (Ingo Molnar)
- apply several ipv6 multicast bug fixes (Dave Miller)
- assign retval in copy_process() error path (Ingo Molnar)
- add lseek-in-/proc support for s390x "ps" (Pete Zaitcev)
- redefine zone_is_highmem() for Celestica (Dave Anderson)
- fix unresolved symbols in amd64 modules (Bill Nottingham)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.19.EL" date="1069754400">- fix tg3 rx_pending limit for BCM5705/BCM5782 chips (Jeff Garzik)
- reset page error flag prior to read of new contents (Jeff Moyer)
- enable CONFIG_HOTPLUG_PCI option for ia64 configs (Doug Ledford)
- fix inactive laundry list race in ramfs_writepage() (Dave Anderson)
- avoid out_of_memory() for wired pages when there's lomem (Dave Anderson)
- conditionalize ppc64 machdep_calls change for KMI compat (Ernie Petrides)
- limit anon/cache pages scanned in refill_inactive_zone() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.18.EL" date="1069668000">- create old version (rev. 5.64) of cmpci sound driver (Tom Coughlan)
- remove ac97.o, ad1848.o, cs4232.o from unsupported (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.17.EL" date="1069063200">- fix missing use of __GFP_HIGHMEM flag in pte_alloc_one() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.16.EL" date="1068890400">- rework scsi mid-layer queuing logic to fix error handling (Doug Ledford)
- fix pci_dma_sync_sg() scatterlist arg in megaraid2 driver (Tom Coughlan)
- move more-ptes-in-rmap-pte-chain logic to its own patch (Ernie Petrides)
- tag uses of __GENKSYMS__ with KMI/ABI compat comment (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.15.EL" date="1068804000">- fix MD multipath bugs causing crashes during fail-overs (Doug Ledford)
- add chain_ptep_t and revert pte_addr_t for KMI compat (Ernie Petrides)
- restore sub-timer-tick time-of-day granularity for ia64 (Jason Baron)
- modify agpgart and drm drivers for ia64 HP ZX1 support (John Dennis)
- fix ia64 32-bit emulation for several stat-related calls (Jason Baron)
- enable amd64 use of new ips driver w/config separation (Tom Coughlan)
- update e100 network driver to version 2.3.30-k1 (Jeff Garzik)
- update e1000 network driver to version 5.2.20-k1 (Jeff Garzik)
- apply scsi whitelist updates for IBM/CNSi/NEC devices (Tom Coughlan)
- reenable varyio for aic7xxx driver (hangs were unrelated) (Jeff Moyer)
- conditionalize NVIDIA_NFORCE3 to restore KMI compat (Ernie Petrides)
- prevent two ext3 panics on corrupted filesystems (Stephen Tweedie)
- apply two minor fixes to ppc64 RAS nvram reading (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.14.EL" date="1068717600">- update ServeRAID (ips) driver to version 6.10.52 (Tom Coughlan)
- configure xmon on by default in ppc64 configs (Julie DeWandel)
- create initial s390 zcrypt driver, version 1.1.2 (Pete Zaitcev)
- remove zfcp driver from linux-modules-unsupported (Pete Zaitcev)
- revise ppc64 reliability/serviceability support (Julie DeWandel)
- reduce kernel stack usage inside nfs_readdir() (Steve Dickson)
- add gameport dependency to cmpci driver config (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.13.EL" date="1068631200">- reduce UDP retransmissions and fix slow reads for NFS (Steve Dickson)
- implement wired page lists for better ramfs handling (Larry Woodman)
- fix vfork deadlock when child process causes core dump (Ingo Molnar)
- enhance AltSysRq-M output and fix deadlock potential (Larry Woodman)
- update cmpci sound driver for some HP IPF workstations (Tom Coughlan)
- correct tq_struct struct initialization in tg3 driver (Jeff Garzik)
- fix NFS file attribute inconsistency after rename (Steve Dickson)
- prevent ia64 machine checks w/sysreport on Olympia (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.12.EL" date="1068544800">- redesign refill_inactive_zone() for smarter deactivation (Larry Woodman)
- improve page deactivation scalability w/delayed laundering (Larry Woodman)
- rework locking and timer usage in s390 ctc network driver (Pete Zaitcev)
- allow xmon to be enabled at boot-time for ppc64 debugging (Julie DeWandel)
- reverse kscand's order of anon/cache active list traversal (Larry Woodman)
- force in-lining of br_read/write_lock/unlock routines (Julie DeWandel)
- fix mistaken fall-through cases in s390 chandev driver (Pete Zaitcev)
- make a few exported symbols available to OpenGFS (Stephen Tweedie)
- fix ld/st ordering bug causing lost signal wakeups (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.11.EL" date="1068112800">- make profile=X imply nmi_watchdog=1 and fix NMI w/d bugs (Ernie Petrides)
- add lock init in scsi_get_host_dev() to fix shutdown hang (Doug Ledford)
- enable distributed interrupts by default on ppc64 iSeries (Julie DeWandel)
- improve amd64 reporting of machine check errors (Jim Paradis)
- fix disabling of autonegotiation in tg3 driver (Dave Miller)
- add image name to s390 ioctl32 debug message (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.10.EL" date="1068026400">- fix file lock ownership by NPTL threads to be process-wide (Ernie Petrides)
- upgrade megaraid driver to version 1.18k and fix isr/fw sync (Tom Coughlan)
- upgrade megaraid2 driver to version 2.00.9 and enable varyio (Tom Coughlan)
- improve scsi mlqueue handling to enable BUSY/QUEUE_FULL fix (Doug Ledford)
- correct reporting of i/o errors in ppc64 viodasd driver (Julie DeWandel)
- update acenic driver to handle enabling of jumbo frame mode (Jeff Moyer)
- fix i386 PAGE_NONE bits to prevent get_user_page() hang (Roland McGrath)
- fix ia64 show_mem() handler to use efi_memmap_walk() call (Dave Anderson)
- replace spaces in slabinfo entry name for async poll table (Matt Wilson)
- fix race condition in buffer-head memory footprint patch (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.9.EL" date="1067940000">- improve spec file robustness in %post/%preun stanzas (Florian La Roche)
- add s390x iovec length checking for 32-bit reads/writes (Matt Wilson)
- use highmem for pte/ramfs page allocation w/__GFP_WIRED (Larry Woodman)
- upgrade oprofile support with bug fixes and enhancements (Will Cohen)
- fix infinite recursion in SCSI mid-layer post-processing (Jeff Moyer)
- introduce no-auto-start-on-add handling for SCSI blacklist (Jeff Moyer)
- enable s390 support for blk stats handling for iostat -x (Pete Zaitcev)
- fix LVS timer-related hang from ip_vs_conn_expire() bug (Ernie Petrides)
- correct module init in cpqarray driver to fix insmod crash (Tom Coughlan)
- incorporate ESB PATA support and fix a pirq_routers PCI id (Jeff Garzik)
- fix nfs async write deadlock potential w/nfs_writepage() (Steve Dickson)
- fix SCSI error handling for BUSY queue status messages (Doug Ledford)
- improve ppc64 32-bit ioctl support for use by ethtool (Julie DeWandel)
- add missing unlock in ip_mc_del_src() to fix IGMP deadlock (Dave Miller)
- change ppc64 reporting of floppy capacity to be 1.44 MB (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.8.EL" date="1067421600">- fix up various problems on Nforce3-based amd64 systems (Jim Paradis)
- double number of pte addrs in rmap pte_chain structs (Larry Woodman)
- restrict slab size for kernel data structs to 2 pages (Larry Woodman)
- clean up obsolete quicklist usage for ppc64 pte pages [rejected]
- prevent readdirplus from returning hidden mount points (Steve Dickson)
- prevent lockd deadlocks caused by export table locking (Steve Dickson)
- eliminate use of parallel task_struct init macro on ia64 [rejected]
- fix broken s390x overflow checks with 32-bit F_GETLK use (Matt Wilson)
- fix SCSI errors with "mt stoptions" and IDE tape drives (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.7.EL" date="1067162400">- fix bad checksumming interaction between e100 and bridge (Jeff Garzik)
- prevent system hang by OOM killing when overcommitted (Larry Woodman)
- un-inline ext3 error function to reduce stack usage (Stephen Tweedie)
- fix several ppc64 problems with interrupt handling (Julie DeWandel)
- correct amd64 identification in /dev/oprofile/cpu_type (Jim Paradis)
- move fput() call in do_tty_hangup() to avoid oops w/kon (Alexander Viro)
- eliminate creation of never-used task_struct slab cache (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.6.EL" date="1066903200">- reduce buffer-head memory footprint from read-only files (Ingo Molnar)
- update qeth driver for reduced stack usage and bug fixes (Pete Zaitcev)
- fix s390 qeth driver again to allow tcpdump to function (Pete Zaitcev)
- add exec_mmap() locking to prevent vma lookup races (Ernie Petrides)
- rework RPC slot allocation for further NFS improvements (Steve Dickson)
- reduce frequency of RPC retransmits during NFS writes (Steve Dickson)
- make generic/ext3 file system write handling 64-bit clean (Jeff Moyer)
- allow SMP scheduling rebalancing to occur every 200 msecs (Ingo Molnar)
- prevent races during IPC semaphore set and msg queue removal (Ingo Molnar)
- fix ACPI handling to identify trigger/polarity of PCI IRQs (Jim Paradis)
- correct amd64/ia64 acpi_disabled decls for post-boot access (Jeff Moyer)
- update ppc64 viocons driver with several bug fixes (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.5.EL" date="1066298400">- move fix for PPR use in sym53c8xx driver to its own patch (Ernie Petrides)
- correct pids exported by msgctl/semctl/shmctl/fcntl calls (Ulrich Drepper)
- apply s390 lcs driver wait queue init and locking updates (Pete Zaitcev)
- enable dummy network driver use in generic s390 config file (Pete Zaitcev)
- add missing ptrace hooks for exec and vfork-done events (Bill Nottingham)
- fix SMP timer race that triggered BUG_ON() in add_timer() (Ingo Molnar)
- fix several bogus ipvs boundary checks in ftp module [rejected]
- fix vfsmount queuing in attach_mnt() for CLONE_NEWNS [rejected]
- add net_device check to prevent oops in pppoe driver [rejected]
- fix memory leak in symlink error path of /proc driver [rejected]
- fix overflow in v1_disk2mem_dqblk() quota calculation [rejected]
- increase ppc64 ramdisk size to 8192k in p/iSeries configs (Jeremy Katz)
- lower amd64 TASK_UNMAPPED_32 to increase avail address space (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.4.EL" date="1066039200">- fix ppc64 stack pointer alignment in user signal handlers (Jakub Jelinek)
- increase amd64 exception stack size to 4k to avoid overflow (Jim Paradis)
- fix ppc64 interrupt rate accounting for vmstat and /proc (Julie DeWandel)
- extend amd64 NMI watchdog timeouts to tolerate bad 2nd cpu (Jim Paradis)
- allow s390 dasd driver to use noop elevator module (Pete Zaitcev)
- add free_irq() in error path of olympic token ring driver (Matt Wilson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.3.EL" date="1065866400">- make pid fields in ucred structures hold tgid values (Ulrich Drepper)
- prevent ppc64 iSeries virtual console writes &gt; 4k (Julie DeWandel)
- control ia64 unaligned access messages with new sysctl (Jeff Moyer)
- correct SCSI data direction on cmd to spin up disks (Pete Zaitcev)
- add do_brk() TASK_SIZE and address space wrap checks (Arjan van de Ven)
- limit PPR use in sym53c8xx driver for ppc64 Zapata drives (Doug Ledford)
- list ac97.o, ad1848.o, and cs4232.o modules as unsupported (Jeff Moyer)
- clean up conditional compilation in s390 zfcp driver (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.2.EL" date="1065693600">- identify whether i686 or athlon config in oops output (Arjan van de Ven)
- remove warning in reclaim_page() unmapped page path (Ernie Petrides)
- fix several lvm error handling paths causing memory leaks [rejected]
- correct i386 smp shutdown logic when netdump is enabled (Jeff Moyer)
- fix amd64 potential data leaks on FPU save/restore errors (Jim Paradis)
- prevent aic7xxx chip resets leading to PCI parity errors (Tom Coughlan)
- remove ia64 user tty warning on unaligned accesses (Arjan van de Ven)
- fix ppc64 /proc file buf overruns in viodasd driver (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.1.EL" date="1065607200">- (this is the first build for RHEL 3 Update 1)
- avoid m/ctime update for pipe writes on r/o file systems (Stephen Tweedie)
- prevent theoretical ext3 fs corruption in ext3_read_inode (Stephen Tweedie)
- enable AGRESSIVE_IDLE_STEAL to improve scheduler balancing (Ingo Molnar)
- fix potential ppc64 lock-up on ioctl32 un/reregistering (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.EL" date="1065175200">- extend ppc64 scsi timeout values for Zapata DVD-ROM drives (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-3.EL" date="1063965600">- make sure to release viotape op structure after use (Julie DeWandel)
- disable pgd/pmd quicklists on ppc64 (Mark DeWandel)
- temporarily disable aio on sockets (Jeff Moyer)
- correctly refile inodes to make them reclaimable (Harald Hoyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-2.EL" date="1063792800">- S390: update zfcp and cio drivers (Pete Zaitcev)
- IA64: add extra check to virtual mem_map (Larry Woodman, Dave Anderson)
- initialise local variables in ide-tape &amp; ide-scsi
- cap qla2200 tcq depth to 255
- switch version number scheme to kernel-2.4.21-N.EL</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063706400">- PPC64: invalidate evicted sbl entries in the erat (Julie DeWandel)
- increase ethernet tx_queue_len to 1000 (David Miller)
- in udp_{v6_}flush_pending_frames, reset up-&gt;len too (David Miller)
- S390: CMS reserved minidisk detection (Pete Zaitcev)
- call recount_segments() on a different occasion (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063620000">- really disable exec-shield (Roland McGrath)
- reduce stack randomisation, disable brk randomisation (Ingo Molnar)
- make e1000 driver 64 bit clean (Julie DeWandel)
- minor aio corner case error condition fix (Jeff Moyer)
- AMD64: more lenient check for call workaround (Ernie Petrides)
- PPC64: disable CONFIG_XMON (Mark DeWandel)
- S390: fix CCW slab selection (Pete Zaitcev)
- fix two-disk combined mode sata (Jeff Garzik)
- move buslogic scsi driver to supported, for vmware only (Tom Coughlan)
- change viocons message from KERN_WARNING to KERN_INFO (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063360800">- VM: handle race condition in reclaim_page (Stephen Tweedie, Larry Woodman)
- PPC64: fix "log_buffer broken" xmon issue (Julie DeWandel)
- fix compiler warnings in netdump (Jeff Moyer)
- AMD64: workaround for 32 bit compat mode page fault problem (Ernie Petrides)
- IA64: make perfmon root-only (Jason Baron)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063274400">- fix smp race in rebalance_laundry_zone()</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063188000">- fix compiler warnings when hugetlbfs is disabled (Pete Zaitcev)
- fix tux performance bug (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063101600">- don't evict kernel stack seg translation on ppc64 (Julie DeWandel)
- fix callers of do_page_fault on ppc64 (Mark DeWandel)
- AMD64 munmap return value, fix lsb failure (Jeff Moyer)
- fix for PPC64 32-bit ioctl (Jim Paradis)
- bring IA64 value of MINSIGSTKSZ in line with upstream (Jakub Jelinek)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063015200">- fix potential datacorruptor in viodasd driver (Julie DeWandel)
- fix race condition in s390 dirty bit handling (Pete Zaitcev)
- limit per-cpu slab cache size
- correct 32-bit readv/writev border cases on ppc64 (Matt Wilson)
- AMD Golem IO-APIC fixup for i686 kernel on AMD64 (Jeremy Katz)
- NFS Solaris 8 acl fix (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062756000">- minor nfs permissions bugfix (Steve Dickson)
- change mprotect return value to SuS mandated value (Arjan van de Ven)
- kernel-unsupported now provides kernel-modules (Jeremy Katz)
- correct __hugemem__modules typos in rhkernel.h
- fix subtle pmd corruption error (Larry Woodman, Dave Anderson)
- fix cut'n'paste error in SATA io port reservation
- restore NFSEXP_CROSSMNT ABI compatibility (Steve Dickson)
- round up executable name field length in core file (Jakub Jelinek)
- switch off exception_trace on amd64 (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062496800">- patch to access odd last sector on ia64 (Jason Baron)
- misc fixes from upstream (Arjan van de Ven)
- fix audigy driver (Jeff Garzik)
- tunable dcache reclaim priority for tux (Ingo Molnar)
- tg3 driver update (Jeff Garzik)
- ipv6 and icmp network bugfixes (David Miller)
- fix ppc64 memory access security bug (Julie DeWandel)
- reduce memory allocated for skb (Ingo Molnar)
- small smp fix for scalable timers (Ingo Molnar)
- make s390 recognise MSDOS partitions (Pete Zaitcev)
- small smp fixes in tux (Ingo Molnar)
- make mptfusion drivers supported on 4/4 split kernel (Tom Coughlan)
- add entries to scsi whitelist (Tom Coughlan)
- minor sata/ata driver updates (Jeff Garzik)
- small fixes to viodasd driver (Julie DeWandel)
- nfs_get_root and nfs access bit patches (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062064800">- don't show interrupts in /proc/stat for ppc64 (Matt Wilson)
- make sure sync returns in a reasonable time
- PPC64: fix for boot cpu not being cpu 0 (Julie DeWandel)
- zero sized write no longer updates mtime (Matt Wilson)
- fix video bios read corruption on ia64 (Larry Woodman)
- network fixes to tg3, bonding (Jeff Garzik)
- properly reserve legacy IDE regions in sata driver (Jeff Garzik)
- fix ppc64 signal handling bugs (Mark DeWandel)
- tux fixes (Ingo Molnar)
- tgkill syscall for s390(x) (Pete Zaitcev)
- amd64 32 bit compatibility fixes (Jim Paradis)
- ppc64 32 bit compatibility fixes (Julie DeWandel)
- fix 4G/4G follow_page problem (Ingo Molnar)
- reduce memory used by VMAs and dentries (Arjan van de Ven)
- make LVM snapshotting of ext3 work reliably (Stephen Tweedie)
- make netdump play better with the nmi watchdog (Jeff Moyer)
- QLA2200: disable irq mitigation, fix off-by-one (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061805600">- seq_file /proc/interrupts for x86 too (Ingo Molnar)
- fix memory leak in ia64 exec of ia32 binaries
- check tgid not pid in scm_check_creds()  (David Miller)
- VM fixes: shm swap priority, zeromap_page_range
- workaround VFS limitations for VXFS NFS export</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061546400">- use personality for 3GB userspace on x86 -hugemem (Ingo Molnar)
- add sysctl interface for lockd (Steve Dickson)
- don't prod VGA space on HP Pinnacle systems (Larry Woodman)
- fix for 32 bit binaries on amd64 (Jim Paradis)
- add preemption point to write_some_buffers (Julie DeWandel)
- sort ACPI table to get correct device ordering on HP (Larry Woodman)
- fix refcounting bug with ipv6 addresses on netdevs (David Miller)
- add s390 syscalls for tux (Pete Zaitcev)
- md multipath enablers (Doug Ledford)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061460000">- fix process and nice time accounting (Doug Ledford)
- amd64: syscall table updates, timer robustness (Jim Paradis)
- amd64 3GB personality for 32-bit processes (Jim Paradis)
- use 256MB pagesize for hugetlbfs on ia64 (Larry Woodman)
- make sure e100 only claims ipv4 checksumming
- igmpv3/mldv2 OOPS'er fix (David Miller)
- hugetlbfs: make chown work and allow uid=X,gid=Y mount options
- make larger mmap windows work (Ernie Petrides, Ingo Molnar)
- ia64: improve ia32 compatibility (Larry Woodman)
- fix bug in rpc retry code (Steve Dickson)
- make acpi pci hotplug modulable (Jeff Moyer)
- update (trivial) to megaraid 1.18j (Tom Coughlan) 
- enable varyio on mptfusion (Tom Coughlan)
- panic on oops to prevent data corruption opportunities (Ernie Petrides)
- small iorl locking fix (Doug Ledford)
- fix ppc64 get_wchan() bad deref (Mark DeWandel)
- fix aio read into mmap()d PROT_WRITE (Jeff Moyer, Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061373600">- libata update (Jeff Garzik)
- amd64 syscalls for xattrs &amp; ACLs (Jim Paradis)
- tux fixes (Julie DeWandel, Ingo Molnar)
- via &amp; i810 audio fixes (Jeff Garzik)
- small 4G/4G split bugfixes (Ingo Molnar)
- fix sigsuspend race on x86, amd64, ia64 (Mark DeWandel)
- ia32 behavior for FP denormal exceptions on ia64 (Jason Baron)
- get the set/get of NAT bits for ia64 correct (Jason Baron)
- ipsec update, adds cast6 encryption (David Miller)
- VM update: OOM bugfix &amp; page-&gt;flags atomic updates (Rik van Riel)
- reenable serpent encryption on ppc64
- bladecenter usb-ohci support (Pete Zaitcev)
- iorl fixes (Doug Ledford)
- network bonding driver oops fix (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060768800">- DAC960 back to bigmem supported, ne2k-pci &amp; usb audio to bigmem unsupported
- netdump updates for tg3 and e1000 (Jeff Moyer)
- put a hole between stack and mmap area (Ernie Petrides)
- process time accounting updates (Doug Ledford)
- fix null characters in TUX header (Julie DeWandel, Ingo Molnar)
- display correct executable when running interpreted script
- zfcp zSeries fibrechannel driver (Pete Zaitcev)
- ipsec updates (David Miller)
- fix 4G/4G race conditions (Ingo Molnar)
- rename -bigmem kernel to -hugemem to reflect changed tradeoffs
- optionally show task states from hangcheck timer (Jason Baron)
- various small bugfixes from upstream</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060423200">- fix scalable timer race condition  (Julie DeWandel, Ingo Molnar)
- print warning on boot with &gt;16GB RAM on -smp kernel (Arjan van de Ven)
- fix for xapic issue with ServerWorks chipsets (Ernie Petrides)
- remove spurious ioctl printk on ppc64 (Mark DeWandel)
- ppc64 wchan improvement (Mark DeWandel)
- hint @pause changes for ia64
- longer scsi scan timeout on ppc64 (Julie DeWandel)
- readv/writev for raw IO (Stephen Tweedie)
- fix for easy stack/mmap collisions (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060164000">- various XAPIC related fixes (Ingo Molnar)
- correct context switch and iowait stats with HT shared runqueues
- ext3 obscure deadlock fixes (Stephen Tweedie)
- knfsd fixes: blocked lock, symlink error &amp; missing bkl  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060077600">- de_thread bugfix from 2.6 upstream  (Matt Wilson)
- viocons driver update (Julie DeWandel)
- fix VM non-overcommit mode (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059991200">- plug data leak in aio code (Jeff Moyer)
- initial list of 4G/4G unsupported modules (Tom Coughlan)
- nfs softirq race fix (Steve Dickson)
- updated IPSEC patch (David Miller)
- networking updates/fixes from 2.4.22-preX (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059904800">- drop orlov allocator for now (Arjan van de Ven)
- correct HT cpu pair detection (Arjan van de Ven)
- build zImage.partial for netbooting on pSeries (Matt Wilson)
- fix missing symbols</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059818400">- export two AIO symbols for OCFS
- disable CONFIG_DEBUG_SLAB so performance testing can start
- crosshost mmap hooks for distributed filesystems (Stephen Tweedie)
- include partially linked zImage for pSeries netboot (Matt Wilson)
- nfs highmem fix, unmap when xdr_kmap() fails (Steve Dickson)
- update megaraid2 locking to work with IORL (Com Coughlan)
- make sure to build the qla2100 driver (Tom Coughlan)
- fix cdrom ioctl 32 bit compatibility for ppc64, amd64 (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059645600">- run depmod on install of unsupported modules (Arjan van de Ven)
- fix register corruption in IA64 lazy fpu handling (Larry Woodman)
- add b44 network driver (Jeff Garzik)
- make ppc64 pci interface routines compatible (Julie DeWandel)
- allow 32 bit userland on AMD64 and PPC64 to use volumes &gt; 2GB (Jeff Moyer)
- nfsd: acl related mount and export flags (Steve Dickson)
- fix nfs exp_fodrop oops (Steve Dickson)
- fix missed signal wakeups on ppc64 (Mark DeWandel)
- smp scalable timer bugfixes (Ingo Molnar)
- workaround for a prefetch bug in some Athlon CPUs (Ernie Petrides)
- code to make more modules unsupported for 4/4 split (Arjan van de Ven)
- various spec file and config cleanups
- viopath driver fix (Julie DeWandel)
- add match for 440gx chipset bioses (Arjan van de Ven)
- move epic100 and ne2k-pci back to supported (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059472800">- updated finegrained process accounting patch (Doug Ledford)
- make iSeries compile without CONFIG_ICOM (Julie DeWandel)
- nfsd: only set -&gt;reuse for tcp sockets, not udp  (Steve Dickson)
- enable the 4G/4G split on the i686-bigmem kernel only
- sysrq support for viocons (Julie DeWandel)
- limit pci_bus size changes to ppc64 (Jeff Garzik)
- fix for signal delivery race (Ernie Petrides, Mark DeWandel)
- add ShdPnd to /proc (Ingo Molnar)
- fix de_thread() hang (Ingo Molnar)
- add kernel support for CLONE_STOPPED (Ernie Petrides)
- make sure to initialise HVC console (Julie DeWandel)
- fix _SEG abort hit in ACPI code (Larry Woodman)
- build addon drivers on amd64 and ppc64 too (Tom Coughlan)
- build IPS driver on all architectures (Tom Coughlan)
- fix a few ia32 emulation bugs for IA64 (Larry Woodman)
- enable correct/new __clear_bit macro for IA64 (Larry Woodman)
- flexible mmap allows mappings of huge executable segments (Larry Woodman)
- sysrq-w for s390 (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058436000">- have s390 cpu_relax() also include barrier  (Pete Zaitcev)
- convert ppc64 xmon traceback code to ksymoops (Matt Wilson)
- rename kstat_sum() variable with aliasing problems  (Ingo Molnar)
- fix AIO-on-hugetlbfs crash (Ingo Molnar)
- update support for IA64 Long's Peak ACPI serial ports  (Larry Woodman)
- turn on xmon for both iSeries and pSeries (Matt Wilson)
- bugfix to make CLI work correctly on iSeries (Julie DeWandel)
- SATA bugfixes (Jeff Garzik)
- enable 4G/4G split in -BOOT kernel, due to syslinux trouble</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058349600">- fix s390 compile (Pete Zaitcev)
- taint the kernel on sii6512 driver link, GPL but no source available
- handle debug registers with 4G/4G split (Ingo Molnar)
- tgkill syscall for ppc64 (Julie DeWandel)
- fix NFSD/ACL/ext3/jbd deadlock (Stephen Tweedie, Steve Dickson)
- fix maxcpus=1 installation panic fix for ppc64 (Julie DeWandel)
- IDE byteswapping io functions for ppc64 (Julie DeWandel)
- update sata driver (Jeff Garzik)
- raise the number of /proc entries (Julie DeWandel)
- sticky sysrq key with timeout (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058263200">- make SysRq-W useable on s390 (Pete Zaitcev)
- updated process accounting patch (Doug Ledford)
- siginfo_t fixes for s390x and amd64 (Jakub Jelinek)
- clustered NFS fail-over support (Steve Dickson)
- autofs4 updates and fixes
- ia64 patches to reduce cpu power/temp in idle loop (Larry Woodman)
- add irqsafe up() for LVM locking (Stephen Tweedie)
- O_DIRECT fallback to synchronous allocation in holes (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058176800">- ia64 HP iommu: add sx1000 detection
- possible bug in s390x 32-bit emulation  (Roland McGrath)
- updated ipsec patch, should fix all current ipv6 bugs  (David Miller)
- finegrained process accounting (Doug Ledford)
- ICH5 pci irq routing, and associated ids (Jeff Garzik)
- fix the machine_real_restart() reboot path on 4G/4G (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057917600">- fix amd64 agp-gart code to work around hugetlbfs debug code (Jim Paradis)
- fix ppc32 pthread_cancel (Jakub Jelinek) 
- Do not sent IGMP leave messages unless IFF_UP  (David Miller)
- software iommu for ia64 systems without hardware iommu (Jason Baron)
- fix ext3 oops fix during dio, LTP failure (Arjan van de Ven, Stephen Tweedie)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057831200">- Remove illegal calls to dst_link_failure</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057831200">- enable HT scheduler for bigmem kernel
- add tgkill syscall for x86 and ia64
- make -BOOT kernel smaller w/ modular md and CONFIG_SMALL
- rmap VM updates
- 4G/4G agpgart potential corruption fix (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057744800">- switch off exec shield everywhere
- eliminate hostfs for amd64 (Jim Paradis)
- megaraid update, mostly vendor ID (Tom Coughlan)
- shrink boot kernel by disabling some config options
- additions for the SCSI whitelist (Tom Coughlan)
- ia64 extable fix (Jason Baron)
- viocons driver upgrade (Julie DeWandel)
- another ia64 mmu context wraparound deadlock fix (Larry Woodman)
- iSeries icom debugger patch (Julie DeWandel)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057658400">- Drop io_request_lock in usb scsiglue.c:device_reset</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057658400">- fix cpu_relax for amd64 and ia64 to include a barrier (Ingo Molnar)
- restore o_direct api compatibility (Stephen Tweedie)
- fix possible ext3 deadlock in o_direct patches (Stephen Tweedie)
- ACLs for JFS (Stephen Tweedie)
- fix /proc/cpuinfo runqueue printing (Ingo Molnar)
- via audio fixes, smaller emu10k1 patch (Alan Cox, Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057572000">- fix process accounting, tux ftp passwords and si_pid (Ingo Molnar)
- 32bit compat statfs fix (Guy Streeter)
- don't serialise exit on BKL when accounting is off (Ingo Molnar)
- truncate timeouts to 32 bits on 64bit systems (Ingo Molnar)
- fix network channel bonding (Jeff Garzik)
- split netdump patch into core and net-drivers (Jeff Garzik)
- delayed tlb flushing for ia64 (Larry Woodman)
- emu10k1 driver fixes
- kksymoops for AMD64 (Jim Paradis)
- select bugfixes from 2.4 upstream (Jeff Garzik)
- OOM tweaks (Rik van Riel)
- use seq_file for /proc/interrupts on ppc64 (Mark DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057140000">- add qdio and qeth drivers for s390(x)  (Phil Knirsch)
- slab cache scale bugfix (Larry Woodman)
- S390: qdio &amp; qeth drivers (Phil Knirsch)
- hangcheck timer for ppc64 (Julie DeWandel)
- fix race conditions in ia64 ia32 compat layer (Larry Woodman)
- update megaraid, aic7xxx, cciss and cpqarray drivers (Tom Coughlan)
- nfs xdr_shift_buf, tcp client corruption and alignment (Steve Dickson)
- rhconfig.h stuff for ppc64, s390 and s390x (Matt Wilson)
- AIO on sockets</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057053600">- kiobuf optimisations (Stephen Tweedie, Larry Woodman)
- ipsec update (David Miller)
- ipvs update to deal with timer changes (David Miller)
- 4G/4G split patch optimisations (Ingo Molnar)
- hangcheck timer (Jason Baron)
- recent (AGP 3.0) agpgart support (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056967200">- semtimedop() support on s390/s390x  (Ernie Petrides)
- fix a 4G bug that triggers on systems with &gt;30 CPUs (Ingo Molnar)
- updated SCSI SMP affine queueing patch  (Arjan van de Ven)
- page hash prefetch in do_generic_file_read bugfix (Julie DeWandel)
- updates the qlogic driver to the latest (Arjan van de Ven)
- slab cache SMP scalability tweaks (Ingo Molnar)
- ACPI 2.0 for IPF and AMD64 (Jim Paradis, Larry Woodman)
- statm fixes for hugetlbfs and remap_file_pages (Jason Baron)
- acpi serial port detection (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056708000">- iseries driver updates (Julie DeWandel)
- aio scalability and 2.5 backports  (Ingo Molnar)
- SMP scalable timers (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056621600">- make qlogic driver use new scsi infrastructure (Arjan van de Ven)
- export aio kvec functions
- fix statm oops
- compile fixes 
- NFS ACL over the wire protocol extensions (Steve Dickson)
- rate limit slab pruning, to limit IPI load on SMP systems (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056448800">- scsi request lock scaling (Ingo Molnar)
- cpu affinity for scsi command processing (Ingo Molnar)
- use softirqs instead of bhs for the scsi layer (Doug Ledford)
- igmpv3 fixes and improvements (David Miller)
- oprofile for ppc64 (Will Cohen)
- Increase MAX_ADDR_LEN from 8 to 32 for Infiniband over IP (Tom Coughlan)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056362400">- per-cpu kstat arrays (Ingo Molnar)
- optimise 4G/4G tlb flushing (Ingo Molnar)
- kiobuf reclaim together with buffer reclaim (Arjan van de Ven)
- more scalable gendisk statistics (Ingo Molnar)
- nfs reconnect fixes (Steve Dickson)
- add 32-bit compatibility for ustat system call on ppc64 (Julie DeWandel)
- scalable gettimeofday (Ingo Molnar)
- hugetlbfs ppc64 &amp; s390 bits (Mark DeWandel, Pete Zaitcev)
- hugetlbfs for ia64 (Jason Baron)
- qlogic scsi driver update (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056189600">- nfs patches (Steve Dickson)
- xapic improvements, summit support (Ingo Molnar)
- fix core dump name for multithreaded programs (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056103200">- merge up to marcelo's latest</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056016800">- oom killer fixes (Larry Woodman, Rik van Riel)
- tunable VM overcommit (Rik van Riel)
- hugetlbfs for amd64 (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055930400">- updated iseries virtual drivers (Julie DeWandel)
- nfs lockd improvements (Steve Dickson)
- remap_file_pages improvements (Ingo Molnar)
- /proc/efi/symtab patch for ia64 (Larry Woodman)
- disable O_PROFILE on UP x86 machines
- allow NMI watchdog profiling frequencies up to 10kHz (Ingo Molnar)
- statm (Jason Baron)
- hugetlbfs (Ingo Molnar)
- have nfsd honour ACLs on a per-export basis (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055844000">- Enable O_PROFILE on non-SMP configs (Stephen Tweedie)
- more conservative AIC config options
- Fix BOOT kernel panic while mounting /dev/cdrom (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055757600">- merge to 2.4.21 + selected ac bits
- ipsec upgrade (David Miller)
- HT scheduler patch fix (correct sibling counting)
- make bdflush writeout smoother
- AMD64 gdb fix (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055412000">- don't include unsupported drivers in -BOOT kernel
- merge up to 2.4.21-rc8 + selected ac bits
- FIXME: sysrq for 3170, dasd, odirect &amp; odirect for nfs</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com" date="1055412000">- oprofile for s390</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055239200">- statm (Jason Baron / Julie DeWandel)
- AIO 32-bit compat for 64-bit machines (Julie DeWandel)
- only do bufferhead reclaim in extreme situations (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055152800">- Serial ATA support (Jeff Garzik)
- mtp fusion 2.05.05+ (Dave Maley)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054893600">- XATTR/ACL patches, except NFS over the wire (Stephen Tweedie)
- ipsec module autoloading (David Miller)
- remap_file_pages (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054807200">- upgrade to latest -rmap with Ernie's fixes
- sysrq+C shows the stack dump of all CPUs
- ext3 truncate fix (Stephen Tweedie)
- NFS fixes for HZ=1000 machines (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054720800">- 4G/4G split fix (Ingo Molnar)
- ppc64 fixes (Guy Streeter, Rik van Riel)
- enable oprofile on amd64
- ipsec updates (David Miller)
- fork returns pid instead of task_struct* (Julie DeWandel)
- ia64 ptrace bugfixes (Dave Anderson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054634400">- HP diva serial driver (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054548000">- NFS over TCP patches (Steve Dickson)
- switch to using ppc64pseries/ppc64iseries arches instead of
  kernel-pseries and kernel-iseries (Jeremy Katz)
- egenera scsi bus rescan patch (Jeff Garzik)
- oprofile (Graydon Hoare)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054288800">- futex requeue (Ingo Molnar)
- enable NAPI for E1000
- signal latency and scheduler improvements (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054202400">- kscand oops fix (Ingo Molnar, Rik van Riel)
- pcnet32 fixes (Julie Dewandel)
- raid autorun (Pete Zaitcev)
- turn off CONFIG_SUNDANCE_MMIO (Jeff Garzik)
- flexible mmap (Larry Woodman)
- ppc64 fixes (Matt Wilson, Guy Streeter)
- loop softirq 10 times before giving up (Ingo Molnar)
- O_DIRECT for NFS (Steve Dickson)
- prevent md from shutting down active arrays (Doug Ledford)
- rmap updates, inode reclaim &amp; higher order allocations (Rik van Riel)
- network channel bonding (Jeff Garzik)</changelog><changelog author="Jim Paradis &lt;jparadis@redhat.com&gt;" date="1054116000">- Re-enable x86_64 in build
- x86_64-specific updates for exec-shield
- Bring in improved "nonx" support for x86_64 from upstream</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1054116000">- Hush s390 printks upon user SIGSEGV by default. It can be enabled back with
  a sysctl kernel.userprocess_debug.
- Enable optional 3270 console mode on s390.</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053684000">- get rid of vsyscall page (Arjan van de Ven)
- fix missing symbol copy_str_fromuser_size</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053424800">- exec-shield updates to fix hang-on-boot on some systems (Ingo Molnar)
- temporarily disabled the architectures, which got broken by exec-shield updates
- fix for LTP sigprocmask02 failure (Matt Wilson)
- ppc64 updates (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053338400">- pagecache scalability patch (Ingo Molnar)
- IPC semaphore scalability patch (Ingo Molnar)
- ppc64 updates (Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052992800">- exec-shield (Ingo Molnar)
- AMD64 ACPI updates (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052906400">- reenable O_DIRECT, O_DIRECT fixes and superbh-aio (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052820000">- vma merging (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052733600">- nmi profiler
- VM updates: rmap, dma zone isolation
- tux (Ingo Molnar)
- ext3 stall fixes (Ingo Molnar)
- e1000 fixes (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052474400">- config files overhaul (Arjan van de Ven)
- fix bug in mlock patch
- IPVS (Dave Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052388000">- import IO elevator changes from gingin
- critical VM fix
- matrox framebuffer patch for pseries (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052301600">- hammer nptl fixes (Ulrich Drepper)
- 4G/4G split (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052215200">- upgrade to 2.4.21-rc1-ac4 (minus -ac acpi and xapic changes)
- drop nfs patches since those seem to be in -ac</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052128800">- larger message buffer size + boot option (Mark DeWandel)
- AMD64: tls handling, coredump fixes (Jim Paradis)
- SMP &amp; highmem VM fixes (Ben LaHaise)
- HT+NUMA scheduler (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051956000">- ext3 orphan cleanup fix (Ernie Petrides)
- s390 affinity fixes (Pete Zaitcev)
- i386 vsyscall DSO changes (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051869600">- bugfixes and config changes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051783200">- enable semtimedop for other architectures (Ernie Petrides)
- large pci bus numbers (Julie DeWandel)
- bugfixes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051610400">- igmpv3 (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051524000">- generic 32bit compat stuff + amd64/ppc64/ipf pieces (Matt Wilson)
- clustered apic (XAPIC) support (Ingo Molnar)
- ppc64 architecture updates (Matt Wilson, Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051264800">- ppc64 fixes</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051178400">- collapse ipsec into one patch (David Miller)
- ppc64 build fix (Matt Wilson)
- improve smp scheduler fairness (Ingo Molnar)
- allow mlock for normal users, up to ulimit (Ingo Molnar)
- AMD64 port (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051092000">- clean up mechanism to pass extra CFLAGS so we don't override what's
  already there
- merge ia64 build stuff (Larry Woodman)
- merge varyio + superbh (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051005600">- merge up to 2.4.21-rc1
- IA64: virtual mem_map, acpi updates, netdump update, pte-highmem &amp; fealnx
- IA64: architecture specific patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050919200">- import davem's ipsec patch pile
- ppc64 kallsyms and dump_fpu patches (Matt Wilson)
- rmap updates (x86_64 &amp; bufferhead reclaim)
- ppc64 ptrace patch (Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050660000">- open up patch namespace 2000-5000 for network protocol changes
- renumber existing patches in that range</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050573600">- make sure to actually apply the rmap-updates patch
- iowait statistics
- ppc64 code merge (Mark &amp; Julie DeWandel)
- ppc64 build scripts (Matt Wilson)
- raise symlink recursion level to 8 (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050487200">- merge up to marcelo's latest
- pte-highmem bits for x86-64 and ppc64</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050400800">- merge up to 2.4.21-pre7-ac1
- drop semtimedop patches (now in -ac)
- drop nfs xprt_fixes, fix_softirq, d_drop and nfs-readeof (merged in -pre7)
- add !CONFIG_QUOTA compile fix for 2.4.21-pre7-ac1</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1050314400">- add LCS driver (endemic to s390)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050314400">- add rmap VM
- add kunmap_atomic debugging patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050141600">- remove dir.c part of NFS kmap_atomic patch for now
- using strlen as local variable name in nfs code kills, literally</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050055200">- merge S390(x) back in  (Pete Zaitcev)
- fix NFS kmap_atomic patch
- sched.c patch to disable interrupts in wake_forked_task  (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049968800">- AIO infrastructure  (Ben LaHaise)
- update NFS kmap_atomic patch  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049882400">- semtimedop patches  (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049796000">- I know understand linux-2.4.20-nfs-readeof.patch, so I merged it
- netdump update (Dave Anderson)
- 64 bit pci &amp; elf loader fix (Mark &amp; Julie)
- nptl whitespace patches, folded into nptl patch (Arjan van de Ven)
- rediff linux-2.4.18-smallpatches.patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049709600">- merge NFS patches by Steve Dickson (blame me for NFS kmap_atomic patch)
- split x86 syscall stuff out into separate patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049536800">- fix nptl patch, now it boots</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049450400">- port linux-2.4.20 o1-nptl.patch from gingin
- rediff a few patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049277600">- update linux-modules-unsupported (with Arjan)
- fix up the list a second time to fix module dependencies</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049191200">- copy -head into new AS3 branch
- remove i586 build
- remove 7.x compatibility (linux-2.4.9-fstat.patch)
- architecture patches get more breathing room (100 - 500)
- reserve patch numbers 1000 - 2000 for VM
- patch numbers 2000 - 5000 for bugfixes, changes and updates to
  existing drivers and filesystems
- remove inode reclaim patch (will be merged later as part of rmap)
- remove io priority scheduler (still experimental)
- remove nfs patches (linux-2.4.20-nfs-cto.patch,
  linux-2.4.20-nfs-access.patch &amp; linux-2.4.20-nfs-rdplus.patch)
- remove linux-2.4.18-gericom.patch
- update netdump from RH9 branch</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1048240800">- Added three NFS performance patches</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048240800">- add a timer for aging requests up</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048154400">- fix the sorting in the io elevator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048068000">- remerge ext3 orlov allocator and enable
- more priority io elevator infrastructure work</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1047117600">- merge ext3 orlov allocator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046772000">- go to 2.4.21-pre5-ac1
- split the rpm into a primary fileset and secondary (rare modules) fileset</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046253600">- go to 2.4.21-pre4-ac6
- drop lots of patches
- trim changelog to not have 2000, 2001 and 2002 anymore</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045476000">- downgrade pwc webcam driver one notch to the last known working version
- work around vm livelock
- make the cciss driver not enable irq's in it's irq handler</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1045130400">- fix for shared statistic &lt; 0</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045130400">- Signal fixes for LSB testsuite
- merge patch to fix init=/bin/sh
- 2.4.21-pre4-ac4 bugfixes (mostly IDE crashes)</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044784800">- merge 2.4.21-pre4-ac3 bugfixes</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1044352800">- Add ext3 fix for truncating negative i_blocks</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1044266400">- add oopsmeharder for debugging hard hangs</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044266400">- merge rmap15d
- set the sbp2 command buffer to 64 elements instead of 8</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1043834400">- merge tcp stall fix from DaveM
- merge bugfixes from 2.4.21-pre4</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1042452000">- Merge in the ACL and XATTR patches from the UL and BestBits trees.</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1042279200">- Merge in the LVM pvmove fix to current tree</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1042020000">- add AMD Golem fixup</changelog></package>
<package pkgid="3f64de066da9c59b78b95f56005413e9609e6c47" name="libacl" arch="x86_64"><version epoch="0" ver="2.2.23" rel="1"/></package>
<package pkgid="df6b17c45b9614558672aee5f7a601a92f59b4d1" name="libacl-devel" arch="x86_64"><version epoch="0" ver="2.2.23" rel="1"/></package>
<package pkgid="b1002c9c6ebd05871ae1e1608573644d31119710" name="libattr-devel" arch="x86_64"><version epoch="0" ver="2.4.16" rel="1"/></package>
<package pkgid="2d25338847b6ca132529273c6a30811d77ed1820" name="xfsdump" arch="x86_64"><version epoch="0" ver="2.2.21" rel="1"/></package>
<package pkgid="047f5657fb7d284e095e5a6799d8e52166372766" name="xfsprogs" arch="x86_64"><version epoch="0" ver="2.6.13" rel="1"/></package>
<package pkgid="027a106f0b64884120f06c5bd0206162fad32ec7" name="xfsprogs-devel" arch="x86_64"><version epoch="0" ver="2.6.13" rel="1"/></package>
<package pkgid="0bb79c0edab7f6f36d1e4219b553ec40135e70f4" name="SL_firefox_parentlock_fix" arch="noarch"><version epoch="0" ver="1.0" rel="3"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.0-2" date="1158624000">- Fixed seamonkey's script</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.0-2" date="1158624000">- Fixed scripts by puting a \ infront of the $'s
- Added bit to seamonkey trigger script so that it works
- Added postun script so we clean up ourserves.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.0-1" date="1158364800">- First go round of putting in the parentlock removers</changelog></package>
<package pkgid="08fa98fa6ddfda147b6cc4cdc4f2d5b4b84932cc" name="ethereal" arch="x86_64"><version epoch="0" ver="0.10.14" rel="9.SWITCH.TO.WIRESHARK.1"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 0.10.14-9.SWITCH.TO.WIRESHARK.1" date="1158364800">- Created a blank set of rpm's that all depend on wireshark</changelog></package>
<package pkgid="959554c86a1adcbf54f53b17b7f56957149590b4" name="ethereal-gnome" arch="x86_64"><version epoch="0" ver="0.10.14" rel="9.SWITCH.TO.WIRESHARK.1"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 0.10.14-9.SWITCH.TO.WIRESHARK.1" date="1158364800">- Created a blank set of rpm's that all depend on wireshark</changelog></package>
<package pkgid="4b3e22b288fbde750761d497d8987bb008156fb9" name="pam_krb5" arch="x86_64"><version epoch="0" ver="2.2.8" rel="2"/><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.8-1" date="1143676800">- don't try to validate creds in a password-changing situation, because the
  attempt will always fail unless the matching key is in the keytab, which
  should never be the case for the password-changing service (#187303, rbasch)
- if v4 has been disabled completely, go ahead and try to set 2b tokens
  because we're going to end up having to do that anyway (#182378)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.7-2" date="1142035200">- fixup man page conflicts in %install</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; - 2.2.6-2.2" date="1141862400">- don't use paths in man pages - avoids multilib conflicts</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.7-1" date="1140566400">- add v4 credential conversion for "use_shmem" and "external" cases (though
  it should be redundant with "use_shmem") (#182239)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.6-2" date="1139875200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.6-1" date="1139270400">- add a "krb4_use_as_req" option so that obtaining v4 creds kinit-style can
  be disabled completely (Hugo Meiland)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.5-1" date="1138320000">- don't log debug messages that we're skipping session setup/teardown unless
  debugging is enabled (#179037)
- try to build the module with -Bsymbolic if we can figure out how to do that</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1137542400">- include the NEWS file as documentation</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.4-1" date="1137456000">- fix reporting of the exact reason why a password change failed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.3-1" date="1135036800">- fix a compile problem caused by a missing #include (Jesse Keating)</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt; - 2.2.2-1.3" date="1134172800">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.2-1" date="1132617600">- don't leak the keytab descriptor during validation (#173681)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.1-1" date="1132099200">- update to 2.2.1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.0-2" date="1131753600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.0-1" date="1131753600">- update to 2.2.0</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.1.95-0" date="1128556800">- update to 2.1.95</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.1.2-1" date="1093910400">- update to 2.1.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.1.1-1" date="1087862400">- update to 2.1.1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.1.0-1" date="1082592000">- update to 2.1.0</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.0.11-1" date="1080086400">- update to 2.0.11</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.0.10-1" date="1079481600">- update to 2.0.10</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.0.9-1" date="1079481600">- update to 2.0.9</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.0.8-1" date="1079481600">- update to 2.0.8</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.0.7-1" date="1078963200">- update to 2.0.7</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.0.6-1" date="1077926400">- update to 2.0.6</changelog><changelog author="Harald Hoyer &lt;harald@redhat.com&gt; - 2.0.5-3" date="1077667200">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.0.5-2" date="1069804800">- actually changelog the update to 2.0.5</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.0.5-1" date="1069804800">- update to 2.0.5</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.0.4-1" date="1065830400">- update to 2.0.4</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.0.3-1" date="1064016000">- update to 2.0.3</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.0.2-1" date="1062806400">- update to 2.0.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.0.1-1" date="1060905600">- update to 2.0.1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.0-1" date="1060387200">- update to 2.0</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.60-1" date="1043971200">- fix uninitialized pointer crash reading cached return values</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.59-1" date="1043884800">- fix crash with per-user stashes and return values</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.58-1" date="1043798400">- fix configure to not link with both libk5crypto and libcrypto</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.57-1" date="1043712000">- force -fPIC
- add --with-moduledir, --with-krb5-libs, --with-krbafs-libs to configure
- add per-user stashes and return values</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.56-1" date="1022630400">- guess a default cell name
- fix what's hopefully the last parser bug</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.55-2" date="1021593600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.55-1" date="1017100800">- handle account management for expired accounts correctly</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.54-1" date="1016668800">- reorder configuration checks so that setting afs_cells will properly
  force krb4_convert on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.53-1" date="1016668800">- fix what's hopefully the last parser bug</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.52-1" date="1016496000">- apply patch from David Howells to add retain_tokens option</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.51-1" date="1015545600">- fix what's hopefully the last parser bug</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.50-3" date="1014508800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.50-2" date="1014249600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.50-1" date="1013817600">- documentation updates (no code changes)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.49-1" date="1013558400">- set PAM_USER using the user's parsed name, converted back to a local name
- add account management service (checks for key expiration and krb5_kuserok())
- handle account expiration errors</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.48-1" date="1012003200">- autoconf fixes</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.47-2" date="1004140800">- bump release number and rebuild to link with new version of krbafs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.47-1" date="1001462400">- fix parsing of options which have multiple whitespace-separated values,
  like afs_cells</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.46-1" date="999734400">- link with libresolv to get res_search, tip from Justin McNutt, who
  built it statically
- explicitly link with libdes425
- handle cases where getpwnam_r fails but still sets the result pointer
- if use_authtok is given and there is no authtok, error out</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.45-1" date="998956800">- set the default realm when a default realm is specified</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.44-1" date="998611200">- only use Kerberos error codes when there is no PAM error yet</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.43-1" date="998524800">- add minimum UID support (#52358)
- don't link pam_krb5 with libkrbafs
- make all options in krb5.conf available as PAM config arguments</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996624000">- merge patch from Chris Chiappa for building with Heimdal</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996019200">- note that we had to prepend the current directory to a given path in
  dlopen.c when we had to (noted by Onime Clement)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.42-1" date="995414400">- return PAM_NEW_AUTHTOK_REQD when attempts to get initial credentials
  fail with KRB5KDC_ERR_KEY_EXP (noted by Onime Clement)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994982400">- add info about accessing the CVS repository to the README
- parser cleanups (thanks to Dane Skow for a more complicated sample)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- buildprereq the krbafs-devel package</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994464000">- don't set forwardable and assorted other flags when getting password-
  changing service ticket (noted, and fix supplied, by Onime Clement)
- try __posix_getpwnam_r on Solaris before we try getpwnam_r, which may
  or may not be expecting the same number/type of arguments (noted by
  Onime Clement)
- use krb5_aname_to_localname to convert the principal to a login name
  and set PAM_USER to the result when authenticating
- some autoconf fixes for failure cases</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993600000">- use krb5_change_password() to change passwords</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992390400">- use getpwnam_r instead of getpwnam when available</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992044800">- cleanup some autoconf checks</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- don't call initialize_krb5_error_table() or initialize_ovk_error_table()
  if they're not found at compile-time (reported for RHL 6.x by Chris Riley)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991353600">- note that [pam] is still checked in addition to [appdefaults]
- note that AFS and Kerberos IV support requires working Kerberos IV
  configuration files (i.e., kinit -4 needs to work) (doc changes
  suggested by Martin Schulz)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991180800">- add max_timeout, timeout_shift, initial_timeout, and addressless options
  (patches from Simon Wilkinson)
- fix the README to document the [appdefaults] section instead of [pam]
- change example host and cell names in the README to use example domains</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- don't delete tokens unless we're also removing ticket files (report and
  patch from Sean Dilda)
- report initialization errors better</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988329600">- treat semicolons as a comment character, like hash marks (bug reported by
  Greg Francis at Gonzaga University)
- use the [:blank:] equivalence class to simplify the configuration file parser
- don't mess with the real environment
- implement mostly-complete aging support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986688000">- tweak the man page (can't use italics and bold simultaneously)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986601600">- restore the default TGS value (#35015)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985824000">- fix a debug message
- fix uninitialized pointer error</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985651200">- don't fail to fixup the krb5 ccache if something goes wrong obtaining
  v4 credentials or creating a krb4 ticket file (#33262)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- fixup the man page
- log return code from k_setpag() when debugging
- create credentials and get tokens when setcred is called for REINITIALIZE</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985219200">- don't twiddle ownerships until after we get AFS tokens
- use the current time instead of the issue time when storing v4 creds, since
  we don't know the issuing host's byte order
- depend on a PAM development header again instead of pam-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- add a separate config file parser for compatibility with settings that
  predate the appdefault API
- use a version script under Linux to avoid polluting the global namespace
- don't have a default for afs_cells
- need to close the file when we succeed in fixing permissions (noted by
  jlkatz@eos.ncsu.edu)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985046400">- use the appdefault API to read krb5.conf if available
- create v4 tickets in such a way as to allow 1.2.2 to not think there's
  something fishy going on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- don't log unknown user names to syslog -- they might be sensitive information</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="981763200">- handle cases where krb5_init_context() fails</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979776000">- be more careful around memory allocation (fixes from David J. MacKenzie)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979603200">- no fair trying to make me authenticate '(null)'</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975715200">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973728000">- only try to delete ccache files once
- ignore extra data in v4 TGTs, but log that we got some
- require "validate" to be true to try validating, and fail if validation fails</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972000000">- catch and ignore errors reading keys from the keytab (for xscreensaver, vlock)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971913600">- fix prompting when the module's first in the stack and the user does not have
  a corresponding principal in the local realm
- properly implement TGT validation
- change a few non-error status messages into debugging messages
- sync the README and the various man pages up</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- fix "use_authtok" logic when password was not set by previous module
- require pam-devel to build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967420800">- fix errors with multiple addresses (#16847)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="966470400">- change summary</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="965952000">- fix handling of null passwords</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- fixes for Solaris 7 from Trevor Schroeder</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- add Seth Vidal's no_user_check flag
- document no_user_check and skip_first_pass options in the man pages
- rebuild against Kerberos 5 1.2 (release 15)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960249600">- move man pages to /usr/share/man</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="958608000">- Make errors chown()ing ccache files non-fatal if (getuid() != 0), suggested
  by Steve Langasek.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="958435200">- Attempt to get initial Kerberos IV credentials when we get Kerberos 5 creds</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="956275200">- Chris Chiappa's modifications for customizing the ccache directory</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="956188800">- Mark Dawson's fix for krb4_convert not being forced on when afs_cells defined</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="953856000">- fix problem with leftover ticket files after multiple setcred() calls</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="953596800">- add proper copyright statements
- save password for modules later in the stack</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="952128000">- clean up prompter</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="952041600">- add krbafs as a requirement</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="949708800">- pick up non-afs PAM config files again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="949536000">- autoconf and putenv() fixes for broken apps
- fix for compressed man pages</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="947894400">- tweak passwd, su, and vlock configuration files</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="947289600">- added both modules to spec file</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="945907200">- adapted the original spec file from pam_ldap</changelog></package>
<package pkgid="b1b1421054887a4e65c93b58116d887913953579" name="krb5-fermi-config" arch="noarch"><version epoch="0" ver="1.15" rel="1.LTS3"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.10-1.LTS3" date="1123286400">- updated the krb5.conf.template file to version 1.10</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.9-4.LTS" date="1099440000">- added config-krb5.conf.aklog and /etc/sysconfig/krb5.conf.aklog
- added triggers to run config-krb5.conf.aklog with AFS triggers</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.9-3.LTS" date="1096675200">- fixed script that says it's 1.8a
- made the rpm a noarch</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.9-1.LTS" date="1096416000">- updated to 1.9</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1081296000">- added .sdsc.edu to the FNAL.GOV realm</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1081296000">- added .sdsc.edu to the FNAL.GOV realm</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1080950400">- Changed krb5.conf.template to put PAM section at top.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1076371200">- Fixed it so that it no longer moves the current krb5.conf out of the way
if it does not have to.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1074297600">- Updated to krb5conf 1.8a</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1068595200">- Put back in the krb.conf, but with proper settings, and triggers</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1065312000">- Cleaned out krb.conf so it quits messing things up.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1065312000">- Converted to krb5conf 1.7.  I had missed a few things the first time</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1064534400">- Added triggers for the xinetd configs</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1049760000">- Took out the check that took krb.conf completely out.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1049328000">- Took /etc/krb.conf out</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1028937600">- Changed the requires, put in a check before it does ssh config</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1022284800">- Fixed a bug in the krb5.conf template (removed two 4's)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1020816000">- Made changes to the config xinetd script</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1020729600">- Configured to use the krb5conf v1_6 stuff</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1004054400">- Changed spec file so that it moves the /etc/krb5.conf file</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1004054400">- Changed the krb5.conf.template file so that the Pam part was first, 
also lengthened ticket time
- Edited the spec file so that it doesn't automatically move the /etc/krb5.conf file</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1002067200">- Made changes for pam usage in krb.conf and krb5.conf
- Also removed the linking of /usr/krb5 and /usr/kerberos</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="998956800">- Upgraded from krb5conf 1.5.  Also put in changes for xinetd.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="992390400">- Made improvements to the makehostkeys script.  I also have it check 
  for the varias files (sshd_config, services) before modifying them.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="991785600">- The config-inetd.conf script has been changed to look for services
  that have a kerberos equal.  If these services were originally turned
  off, then the kerberized version is turned off.  I also took out the
  keytab-convert program, as this is dependant on one particular flavor
  of fermi kerberos.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="990576000">- I added the keytab-convert program into the config rpm, with it's
  corresponding manpage.  It will also be in the normal kerberos rpm
  but in the bin area.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="990489600">- I changed things to the version 1.4.  I also added the config-sshd_config
  script, as well as the config-hostkeys script.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="989452800">- I finished with the config-services and config-inetd.conf scripts.
  I also changed how the /usr/krb5 and /usr/kerberos were linked.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="988848000">- I put the raw scripts into the package from Fermi.  These will
  need to be rewritten so that they don't depend on Fermi packages.</changelog></package>
<package pkgid="b7ac57ab4668faee6ee5324b7d2f3923cda09c68" name="krb5-fermi-krb5.conf" arch="noarch"><version epoch="0" ver="1.15" rel="1.LTS3"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.15-1.LTS3" date="1157068800">- updated the krb5.conf.template file to version 1.15</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.10-1.LTS3" date="1123286400">- updated the krb5.conf.template file to version 1.10</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.9-3.LTS" date="1096675200">- fixed script that says it's 1.8a
- made the rpm a noarch</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.9-1.LTS" date="1096416000">- updated to 1.9</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1081296000">- added .sdsc.edu to the FNAL.GOV realm</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1080950400">- Changed krb5.conf.template to put PAM section at top.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1076371200">- Fixed it so that it no longer moves the current krb5.conf out of the way
if it does not have to.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1065398400">- Created krb5-fermi-krb5.conf from krb5-fermi-config.</changelog></package>
<package pkgid="4babf5c59a55eac5d1378b1020cb328e50938c1e" name="zz_sshd_aklog" arch="noarch"><version epoch="0" ver="3.9" rel="2"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9-2" date="1156377600">- Changed /etc/ssh/sshd_conf to /etc/ssh/sshd_config</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9-1" date="1156204800">- Changed it so that it applies to the 3.9 release</changelog></package>
<package pkgid="71d9918da7c7ae9648d1c86288597924a36384b8" name="zz_sshd_pam" arch="noarch"><version epoch="0" ver="3.9" rel="2"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9-2" date="1156377600">- Changed /etc/ssh/sshd_conf to /etc/ssh/sshd_config</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9-1" date="1156204800">- First go round</changelog></package>
<package pkgid="c6eb81369aae52400e2f4653c27ccf29e7a26a1b" name="openssh" arch="x86_64"><version epoch="0" ver="3.9p1" rel="8.SLF.3.16"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.16" date="1156896000">- Uncommented out the fermi patches (60 and 61)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.16" date="1156896000">- Built to do aklog with the --with-afs-krb5 config option</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.15" date="1156377600">- Commented out patches 60 and 61 because they are fermi specific</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.14" date="1156377600">- Renumbered 50+ and 60+ patches
- Added Patch52 for machines with multiple IP addresses
- Added Patch53 for turning X11 forwarding on</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.13" date="1156204800">- Uncommented out patch52 (sshd_config kerberos only)
- Uncommentd out patch 53 (pam.d/sshd use cryptocard pam)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.13" date="1156204800">- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- Added patches to have pam.d/sshd use the cryptocard pam (commented out)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.12" date="1155254400">- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have sshd_config be kerberos only (commented out)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.4.12" date="1145059200">- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="0d4f02353d41ccc6eead4556eb98ac4282cf3c38" name="openssh-askpass" arch="x86_64"><version epoch="0" ver="3.9p1" rel="8.SLF.3.16"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.16" date="1156896000">- Uncommented out the fermi patches (60 and 61)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.16" date="1156896000">- Built to do aklog with the --with-afs-krb5 config option</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.15" date="1156377600">- Commented out patches 60 and 61 because they are fermi specific</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.14" date="1156377600">- Renumbered 50+ and 60+ patches
- Added Patch52 for machines with multiple IP addresses
- Added Patch53 for turning X11 forwarding on</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.13" date="1156204800">- Uncommented out patch52 (sshd_config kerberos only)
- Uncommentd out patch 53 (pam.d/sshd use cryptocard pam)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.13" date="1156204800">- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- Added patches to have pam.d/sshd use the cryptocard pam (commented out)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.12" date="1155254400">- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have sshd_config be kerberos only (commented out)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.4.12" date="1145059200">- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="18bcd1b29cd15f763eba1deedbd6862e6c177cc4" name="openssh-askpass-gnome" arch="x86_64"><version epoch="0" ver="3.9p1" rel="8.SLF.3.16"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.16" date="1156896000">- Uncommented out the fermi patches (60 and 61)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.16" date="1156896000">- Built to do aklog with the --with-afs-krb5 config option</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.15" date="1156377600">- Commented out patches 60 and 61 because they are fermi specific</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.14" date="1156377600">- Renumbered 50+ and 60+ patches
- Added Patch52 for machines with multiple IP addresses
- Added Patch53 for turning X11 forwarding on</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.13" date="1156204800">- Uncommented out patch52 (sshd_config kerberos only)
- Uncommentd out patch 53 (pam.d/sshd use cryptocard pam)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.13" date="1156204800">- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- Added patches to have pam.d/sshd use the cryptocard pam (commented out)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.12" date="1155254400">- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have sshd_config be kerberos only (commented out)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.4.12" date="1145059200">- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="53d0a13ca6ba1dd4a129484ad24d8a8742c21f75" name="openssh-clients" arch="x86_64"><version epoch="0" ver="3.9p1" rel="8.SLF.3.16"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.16" date="1156896000">- Uncommented out the fermi patches (60 and 61)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.16" date="1156896000">- Built to do aklog with the --with-afs-krb5 config option</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.15" date="1156377600">- Commented out patches 60 and 61 because they are fermi specific</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.14" date="1156377600">- Renumbered 50+ and 60+ patches
- Added Patch52 for machines with multiple IP addresses
- Added Patch53 for turning X11 forwarding on</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.13" date="1156204800">- Uncommented out patch52 (sshd_config kerberos only)
- Uncommentd out patch 53 (pam.d/sshd use cryptocard pam)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.13" date="1156204800">- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- Added patches to have pam.d/sshd use the cryptocard pam (commented out)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.12" date="1155254400">- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have sshd_config be kerberos only (commented out)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.4.12" date="1145059200">- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="2e4e68db85447573150dbd54af4aecc535f2fb50" name="openssh-server" arch="x86_64"><version epoch="0" ver="3.9p1" rel="8.SLF.3.16"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.16" date="1156896000">- Uncommented out the fermi patches (60 and 61)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.16" date="1156896000">- Built to do aklog with the --with-afs-krb5 config option</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.15" date="1156377600">- Commented out patches 60 and 61 because they are fermi specific</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.14" date="1156377600">- Renumbered 50+ and 60+ patches
- Added Patch52 for machines with multiple IP addresses
- Added Patch53 for turning X11 forwarding on</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.13" date="1156204800">- Uncommented out patch52 (sshd_config kerberos only)
- Uncommentd out patch 53 (pam.d/sshd use cryptocard pam)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.13" date="1156204800">- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- Added patches to have pam.d/sshd use the cryptocard pam (commented out)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.12" date="1155254400">- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have sshd_config be kerberos only (commented out)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.4.12" date="1145059200">- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="8a67a2c52a1f8c506daba3adedf87ff10a319cf9" name="openssh" arch="x86_64"><version epoch="0" ver="3.9p1" rel="8.SLF.3.17"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.17" date="1158019200">- Fixed sftp path in sshd_config
- Took out "KerberosGetAFSToken no" from sshd_config</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.16" date="1156896000">- Uncommented out the fermi patches (60 and 61)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.16" date="1156896000">- Built to do aklog with the --with-afs-krb5 config option</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.15" date="1156377600">- Commented out patches 60 and 61 because they are fermi specific</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.14" date="1156377600">- Renumbered 50+ and 60+ patches
- Added Patch52 for machines with multiple IP addresses
- Added Patch53 for turning X11 forwarding on</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.13" date="1156204800">- Uncommented out patch52 (sshd_config kerberos only)
- Uncommentd out patch 53 (pam.d/sshd use cryptocard pam)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.13" date="1156204800">- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- Added patches to have pam.d/sshd use the cryptocard pam (commented out)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.12" date="1155254400">- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have sshd_config be kerberos only (commented out)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.4.12" date="1145059200">- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="9305521af9afc4db801498e185fa27653401619b" name="openssh-askpass" arch="x86_64"><version epoch="0" ver="3.9p1" rel="8.SLF.3.17"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.17" date="1158019200">- Fixed sftp path in sshd_config
- Took out "KerberosGetAFSToken no" from sshd_config</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.16" date="1156896000">- Uncommented out the fermi patches (60 and 61)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.16" date="1156896000">- Built to do aklog with the --with-afs-krb5 config option</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.15" date="1156377600">- Commented out patches 60 and 61 because they are fermi specific</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.14" date="1156377600">- Renumbered 50+ and 60+ patches
- Added Patch52 for machines with multiple IP addresses
- Added Patch53 for turning X11 forwarding on</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.13" date="1156204800">- Uncommented out patch52 (sshd_config kerberos only)
- Uncommentd out patch 53 (pam.d/sshd use cryptocard pam)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.13" date="1156204800">- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- Added patches to have pam.d/sshd use the cryptocard pam (commented out)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.12" date="1155254400">- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have sshd_config be kerberos only (commented out)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.4.12" date="1145059200">- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="5c0517b0a6d0f4b92bf75922616624ccd9f72492" name="openssh-askpass-gnome" arch="x86_64"><version epoch="0" ver="3.9p1" rel="8.SLF.3.17"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.17" date="1158019200">- Fixed sftp path in sshd_config
- Took out "KerberosGetAFSToken no" from sshd_config</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.16" date="1156896000">- Uncommented out the fermi patches (60 and 61)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.16" date="1156896000">- Built to do aklog with the --with-afs-krb5 config option</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.15" date="1156377600">- Commented out patches 60 and 61 because they are fermi specific</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.14" date="1156377600">- Renumbered 50+ and 60+ patches
- Added Patch52 for machines with multiple IP addresses
- Added Patch53 for turning X11 forwarding on</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.13" date="1156204800">- Uncommented out patch52 (sshd_config kerberos only)
- Uncommentd out patch 53 (pam.d/sshd use cryptocard pam)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.13" date="1156204800">- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- Added patches to have pam.d/sshd use the cryptocard pam (commented out)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.12" date="1155254400">- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have sshd_config be kerberos only (commented out)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.4.12" date="1145059200">- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="04c14403501ad054b46066d3d43b19bdc3cc2d6d" name="openssh-clients" arch="x86_64"><version epoch="0" ver="3.9p1" rel="8.SLF.3.17"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.17" date="1158019200">- Fixed sftp path in sshd_config
- Took out "KerberosGetAFSToken no" from sshd_config</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.16" date="1156896000">- Uncommented out the fermi patches (60 and 61)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.16" date="1156896000">- Built to do aklog with the --with-afs-krb5 config option</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.15" date="1156377600">- Commented out patches 60 and 61 because they are fermi specific</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.14" date="1156377600">- Renumbered 50+ and 60+ patches
- Added Patch52 for machines with multiple IP addresses
- Added Patch53 for turning X11 forwarding on</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.13" date="1156204800">- Uncommented out patch52 (sshd_config kerberos only)
- Uncommentd out patch 53 (pam.d/sshd use cryptocard pam)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.13" date="1156204800">- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- Added patches to have pam.d/sshd use the cryptocard pam (commented out)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.12" date="1155254400">- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have sshd_config be kerberos only (commented out)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.4.12" date="1145059200">- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="332f1ec9098652193fda430ca1dc4569e118ef40" name="openssh-server" arch="x86_64"><version epoch="0" ver="3.9p1" rel="8.SLF.3.17"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.17" date="1158019200">- Fixed sftp path in sshd_config
- Took out "KerberosGetAFSToken no" from sshd_config</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.16" date="1156896000">- Uncommented out the fermi patches (60 and 61)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.16" date="1156896000">- Built to do aklog with the --with-afs-krb5 config option</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.15" date="1156377600">- Commented out patches 60 and 61 because they are fermi specific</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.14" date="1156377600">- Renumbered 50+ and 60+ patches
- Added Patch52 for machines with multiple IP addresses
- Added Patch53 for turning X11 forwarding on</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.13" date="1156204800">- Uncommented out patch52 (sshd_config kerberos only)
- Uncommentd out patch 53 (pam.d/sshd use cryptocard pam)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.13" date="1156204800">- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- Added patches to have pam.d/sshd use the cryptocard pam (commented out)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.12" date="1155254400">- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have sshd_config be kerberos only (commented out)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.4.12" date="1145059200">- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="000f5deae3ef94fd492b12c963526a2fc7a8b025" name="zz_sshd_aklog" arch="noarch"><version epoch="0" ver="3.9" rel="3"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9-3" date="1156377600">- Rearranged when things got done</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9-2" date="1156377600">- Changed /etc/ssh/sshd_conf to /etc/ssh/sshd_config</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9-1" date="1156204800">- Changed it so that it applies to the 3.9 release</changelog></package>
<package pkgid="f4258d7992550dcfd3c05c6db339e84897ccea1f" name="zz_sshd_nonkerberized" arch="noarch"><version epoch="0" ver="3.9" rel="1"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9-1" date="1156204800">- Changed to the configuration files for openssh 3.9.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.1-1" date="1134691200">- Really really fixed that Priviledged Separation User problem.</changelog></package>
<package pkgid="28515bfbc2b37a50a9b4b55392eae44673fb3f9f" name="zz_sshd_pam" arch="noarch"><version epoch="0" ver="3.9" rel="3"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9-3" date="1156377600">- Remove %triggerpostun and switched it to %postun</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9-2" date="1156377600">- Changed /etc/ssh/sshd_conf to /etc/ssh/sshd_config</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9-1" date="1156204800">- First go round</changelog></package>
<package pkgid="53981f02ce5313940d825e92d662b489997bd05c" name="openssh" arch="x86_64"><version epoch="0" ver="3.9p1" rel="8.SLF.3.18"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.18" date="1159833600">- Built to do aklog with the --with-afs-krb5 config option
- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/
- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have pam.d/sshd use the cryptocard pam (fermi only)
- Added patches to have sshd_config be kerberos only (fermi only)
- Took out "KerberosGetAFSToken no" from sshd_config (fermi only)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.17" date="1159488000">- CVE-2006-5051 don't call cleanups from signal handler (#208347)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.16" date="1159401600">- CVE-2006-4924 prevent DoS on deattack detector code (#207955)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.15" date="1146528000">- fixed the scp-no-system patch to return zero from scp when copy
  succeeded (#190147)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.14" date="1141344000">- changed the audit patch so it tolerates kernels without auditing
  support</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.13" date="1140652800">- don't overwrite last argument of scp if multiple files are copied
  and it isn't a directory (patch by Bjorn Augustsson #178923)
- send final nonquery messages from pam_authenticate to client
  when kbd_int is used (#174995)
- removed another syslog call from signal handler (#180607)
- enable syslog in chroot by opening syslog fd permanently (#182281)
- fixed audit patch so it prevents login when auditing fails (#182930)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="6726761d632d7aef0b93906ec518e51f0657ce37" name="openssh-askpass" arch="x86_64"><version epoch="0" ver="3.9p1" rel="8.SLF.3.18"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.18" date="1159833600">- Built to do aklog with the --with-afs-krb5 config option
- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/
- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have pam.d/sshd use the cryptocard pam (fermi only)
- Added patches to have sshd_config be kerberos only (fermi only)
- Took out "KerberosGetAFSToken no" from sshd_config (fermi only)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.17" date="1159488000">- CVE-2006-5051 don't call cleanups from signal handler (#208347)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.16" date="1159401600">- CVE-2006-4924 prevent DoS on deattack detector code (#207955)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.15" date="1146528000">- fixed the scp-no-system patch to return zero from scp when copy
  succeeded (#190147)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.14" date="1141344000">- changed the audit patch so it tolerates kernels without auditing
  support</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.13" date="1140652800">- don't overwrite last argument of scp if multiple files are copied
  and it isn't a directory (patch by Bjorn Augustsson #178923)
- send final nonquery messages from pam_authenticate to client
  when kbd_int is used (#174995)
- removed another syslog call from signal handler (#180607)
- enable syslog in chroot by opening syslog fd permanently (#182281)
- fixed audit patch so it prevents login when auditing fails (#182930)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="121b81fb549600eba814526e1d1b77ab0a955f65" name="openssh-askpass-gnome" arch="x86_64"><version epoch="0" ver="3.9p1" rel="8.SLF.3.18"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.18" date="1159833600">- Built to do aklog with the --with-afs-krb5 config option
- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/
- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have pam.d/sshd use the cryptocard pam (fermi only)
- Added patches to have sshd_config be kerberos only (fermi only)
- Took out "KerberosGetAFSToken no" from sshd_config (fermi only)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.17" date="1159488000">- CVE-2006-5051 don't call cleanups from signal handler (#208347)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.16" date="1159401600">- CVE-2006-4924 prevent DoS on deattack detector code (#207955)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.15" date="1146528000">- fixed the scp-no-system patch to return zero from scp when copy
  succeeded (#190147)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.14" date="1141344000">- changed the audit patch so it tolerates kernels without auditing
  support</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.13" date="1140652800">- don't overwrite last argument of scp if multiple files are copied
  and it isn't a directory (patch by Bjorn Augustsson #178923)
- send final nonquery messages from pam_authenticate to client
  when kbd_int is used (#174995)
- removed another syslog call from signal handler (#180607)
- enable syslog in chroot by opening syslog fd permanently (#182281)
- fixed audit patch so it prevents login when auditing fails (#182930)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="2f23c25fe0363fb6740508921a56ff287423898f" name="openssh-clients" arch="x86_64"><version epoch="0" ver="3.9p1" rel="8.SLF.3.18"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.18" date="1159833600">- Built to do aklog with the --with-afs-krb5 config option
- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/
- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have pam.d/sshd use the cryptocard pam (fermi only)
- Added patches to have sshd_config be kerberos only (fermi only)
- Took out "KerberosGetAFSToken no" from sshd_config (fermi only)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.17" date="1159488000">- CVE-2006-5051 don't call cleanups from signal handler (#208347)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.16" date="1159401600">- CVE-2006-4924 prevent DoS on deattack detector code (#207955)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.15" date="1146528000">- fixed the scp-no-system patch to return zero from scp when copy
  succeeded (#190147)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.14" date="1141344000">- changed the audit patch so it tolerates kernels without auditing
  support</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.13" date="1140652800">- don't overwrite last argument of scp if multiple files are copied
  and it isn't a directory (patch by Bjorn Augustsson #178923)
- send final nonquery messages from pam_authenticate to client
  when kbd_int is used (#174995)
- removed another syslog call from signal handler (#180607)
- enable syslog in chroot by opening syslog fd permanently (#182281)
- fixed audit patch so it prevents login when auditing fails (#182930)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="15d91892ea0fbbdfc1aa649ffdd9a7315c056c62" name="openssh-server" arch="x86_64"><version epoch="0" ver="3.9p1" rel="8.SLF.3.18"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.18" date="1159833600">- Built to do aklog with the --with-afs-krb5 config option
- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/
- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have pam.d/sshd use the cryptocard pam (fermi only)
- Added patches to have sshd_config be kerberos only (fermi only)
- Took out "KerberosGetAFSToken no" from sshd_config (fermi only)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.17" date="1159488000">- CVE-2006-5051 don't call cleanups from signal handler (#208347)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.16" date="1159401600">- CVE-2006-4924 prevent DoS on deattack detector code (#207955)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.15" date="1146528000">- fixed the scp-no-system patch to return zero from scp when copy
  succeeded (#190147)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.14" date="1141344000">- changed the audit patch so it tolerates kernels without auditing
  support</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.13" date="1140652800">- don't overwrite last argument of scp if multiple files are copied
  and it isn't a directory (patch by Bjorn Augustsson #178923)
- send final nonquery messages from pam_authenticate to client
  when kbd_int is used (#174995)
- removed another syslog call from signal handler (#180607)
- enable syslog in chroot by opening syslog fd permanently (#182281)
- fixed audit patch so it prevents login when auditing fails (#182930)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="413d54c0b06920c888626c75a702b3353dfaece0" name="zz_sshd_aklog" arch="noarch"><version epoch="0" ver="3.9" rel="4"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9-3" date="1156377600">- Rearranged when things got done</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9-2" date="1156377600">- Changed /etc/ssh/sshd_conf to /etc/ssh/sshd_config</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9-1" date="1156204800">- Changed it so that it applies to the 3.9 release</changelog></package>
<package pkgid="9b142742451bb369e0ff30a26bd0d6fff1642296" name="openssh" arch="x86_64"><version epoch="0" ver="3.9p1" rel="8.SLF.3.20"/><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.SLF.3.20" date="1163203200">- CVE-2006-5794 properly detect failed key verify in monitor (#21640)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.18" date="1159833600">- Built to do aklog with the --with-afs-krb5 config option
- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/
- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have pam.d/sshd use the cryptocard pam (fermi only)
- Added patches to have sshd_config be kerberos only (fermi only)
- Took out "KerberosGetAFSToken no" from sshd_config (fermi only)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.17" date="1159488000">- CVE-2006-5051 don't call cleanups from signal handler (#208347)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.16" date="1159401600">- CVE-2006-4924 prevent DoS on deattack detector code (#207955)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.15" date="1146528000">- fixed the scp-no-system patch to return zero from scp when copy
  succeeded (#190147)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.14" date="1141344000">- changed the audit patch so it tolerates kernels without auditing
  support</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.13" date="1140652800">- don't overwrite last argument of scp if multiple files are copied
  and it isn't a directory (patch by Bjorn Augustsson #178923)
- send final nonquery messages from pam_authenticate to client
  when kbd_int is used (#174995)
- removed another syslog call from signal handler (#180607)
- enable syslog in chroot by opening syslog fd permanently (#182281)
- fixed audit patch so it prevents login when auditing fails (#182930)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="4a77945e378cf3a963a3847cf55a0ab88d70104c" name="openssh-askpass" arch="x86_64"><version epoch="0" ver="3.9p1" rel="8.SLF.3.20"/><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.SLF.3.20" date="1163203200">- CVE-2006-5794 properly detect failed key verify in monitor (#21640)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.18" date="1159833600">- Built to do aklog with the --with-afs-krb5 config option
- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/
- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have pam.d/sshd use the cryptocard pam (fermi only)
- Added patches to have sshd_config be kerberos only (fermi only)
- Took out "KerberosGetAFSToken no" from sshd_config (fermi only)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.17" date="1159488000">- CVE-2006-5051 don't call cleanups from signal handler (#208347)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.16" date="1159401600">- CVE-2006-4924 prevent DoS on deattack detector code (#207955)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.15" date="1146528000">- fixed the scp-no-system patch to return zero from scp when copy
  succeeded (#190147)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.14" date="1141344000">- changed the audit patch so it tolerates kernels without auditing
  support</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.13" date="1140652800">- don't overwrite last argument of scp if multiple files are copied
  and it isn't a directory (patch by Bjorn Augustsson #178923)
- send final nonquery messages from pam_authenticate to client
  when kbd_int is used (#174995)
- removed another syslog call from signal handler (#180607)
- enable syslog in chroot by opening syslog fd permanently (#182281)
- fixed audit patch so it prevents login when auditing fails (#182930)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="cf666858b589f29462af528b3a0087aa7c0e17be" name="openssh-askpass-gnome" arch="x86_64"><version epoch="0" ver="3.9p1" rel="8.SLF.3.20"/><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.SLF.3.20" date="1163203200">- CVE-2006-5794 properly detect failed key verify in monitor (#21640)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.18" date="1159833600">- Built to do aklog with the --with-afs-krb5 config option
- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/
- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have pam.d/sshd use the cryptocard pam (fermi only)
- Added patches to have sshd_config be kerberos only (fermi only)
- Took out "KerberosGetAFSToken no" from sshd_config (fermi only)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.17" date="1159488000">- CVE-2006-5051 don't call cleanups from signal handler (#208347)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.16" date="1159401600">- CVE-2006-4924 prevent DoS on deattack detector code (#207955)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.15" date="1146528000">- fixed the scp-no-system patch to return zero from scp when copy
  succeeded (#190147)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.14" date="1141344000">- changed the audit patch so it tolerates kernels without auditing
  support</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.13" date="1140652800">- don't overwrite last argument of scp if multiple files are copied
  and it isn't a directory (patch by Bjorn Augustsson #178923)
- send final nonquery messages from pam_authenticate to client
  when kbd_int is used (#174995)
- removed another syslog call from signal handler (#180607)
- enable syslog in chroot by opening syslog fd permanently (#182281)
- fixed audit patch so it prevents login when auditing fails (#182930)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="06df4c67a19fd2bd07c63e0898e613e3dad246da" name="openssh-clients" arch="x86_64"><version epoch="0" ver="3.9p1" rel="8.SLF.3.20"/><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.SLF.3.20" date="1163203200">- CVE-2006-5794 properly detect failed key verify in monitor (#21640)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.18" date="1159833600">- Built to do aklog with the --with-afs-krb5 config option
- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/
- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have pam.d/sshd use the cryptocard pam (fermi only)
- Added patches to have sshd_config be kerberos only (fermi only)
- Took out "KerberosGetAFSToken no" from sshd_config (fermi only)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.17" date="1159488000">- CVE-2006-5051 don't call cleanups from signal handler (#208347)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.16" date="1159401600">- CVE-2006-4924 prevent DoS on deattack detector code (#207955)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.15" date="1146528000">- fixed the scp-no-system patch to return zero from scp when copy
  succeeded (#190147)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.14" date="1141344000">- changed the audit patch so it tolerates kernels without auditing
  support</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.13" date="1140652800">- don't overwrite last argument of scp if multiple files are copied
  and it isn't a directory (patch by Bjorn Augustsson #178923)
- send final nonquery messages from pam_authenticate to client
  when kbd_int is used (#174995)
- removed another syslog call from signal handler (#180607)
- enable syslog in chroot by opening syslog fd permanently (#182281)
- fixed audit patch so it prevents login when auditing fails (#182930)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="6d1ddd32938ceda6f55d3638da7cac694ac830a6" name="openssh-debuginfo" arch="x86_64"><version epoch="0" ver="3.9p1" rel="8.SLF.3.20"/><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.SLF.3.20" date="1163203200">- CVE-2006-5794 properly detect failed key verify in monitor (#21640)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.18" date="1159833600">- Built to do aklog with the --with-afs-krb5 config option
- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/
- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have pam.d/sshd use the cryptocard pam (fermi only)
- Added patches to have sshd_config be kerberos only (fermi only)
- Took out "KerberosGetAFSToken no" from sshd_config (fermi only)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.17" date="1159488000">- CVE-2006-5051 don't call cleanups from signal handler (#208347)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.16" date="1159401600">- CVE-2006-4924 prevent DoS on deattack detector code (#207955)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.15" date="1146528000">- fixed the scp-no-system patch to return zero from scp when copy
  succeeded (#190147)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.14" date="1141344000">- changed the audit patch so it tolerates kernels without auditing
  support</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.13" date="1140652800">- don't overwrite last argument of scp if multiple files are copied
  and it isn't a directory (patch by Bjorn Augustsson #178923)
- send final nonquery messages from pam_authenticate to client
  when kbd_int is used (#174995)
- removed another syslog call from signal handler (#180607)
- enable syslog in chroot by opening syslog fd permanently (#182281)
- fixed audit patch so it prevents login when auditing fails (#182930)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="169be12a5fbf314b6b5010f52f696628ff3f5d40" name="openssh-server" arch="x86_64"><version epoch="0" ver="3.9p1" rel="8.SLF.3.20"/><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.SLF.3.20" date="1163203200">- CVE-2006-5794 properly detect failed key verify in monitor (#21640)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.18" date="1159833600">- Built to do aklog with the --with-afs-krb5 config option
- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/
- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have pam.d/sshd use the cryptocard pam (fermi only)
- Added patches to have sshd_config be kerberos only (fermi only)
- Took out "KerberosGetAFSToken no" from sshd_config (fermi only)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.17" date="1159488000">- CVE-2006-5051 don't call cleanups from signal handler (#208347)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.16" date="1159401600">- CVE-2006-4924 prevent DoS on deattack detector code (#207955)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.15" date="1146528000">- fixed the scp-no-system patch to return zero from scp when copy
  succeeded (#190147)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.14" date="1141344000">- changed the audit patch so it tolerates kernels without auditing
  support</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.13" date="1140652800">- don't overwrite last argument of scp if multiple files are copied
  and it isn't a directory (patch by Bjorn Augustsson #178923)
- send final nonquery messages from pam_authenticate to client
  when kbd_int is used (#174995)
- removed another syslog call from signal handler (#180607)
- enable syslog in chroot by opening syslog fd permanently (#182281)
- fixed audit patch so it prevents login when auditing fails (#182930)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="b46a7e214f49b38c201e46a9739617b4c1ce59c8" name="sendmail" arch="x86_64"><version epoch="0" ver="8.12.11" rel="4.SLF3.6"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 8.12.11-4.SLF3.6" date="1165449600">- Put in MASQUERADE_AS(`fnal.gov') into the sendmail-redhat.mc
- Put in define(`confQUEUE_LA', `30')dnl into the sendmail-redhat.mc
- Put in define(`confREFUSE_LA', `50')dnlinto the sendmail-redhat.mc</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.6" date="1149897600">- second incarnation of patch for CVE-2006-1173 (VU#146718)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.5" date="1148428800">- fixed CVE-2006-1173 (VU#146718): possible denial of service issue caused by
  malformed multipart messages (#191203)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.4" date="1142899200">- fixed another time_t timeout problem in the VU patch in usersmtp.c</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.3" date="1142726400">- fixed adaption failure in VU#834865</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.2" date="1142035200">- fixed VU#834865 (#184465)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.1.1" date="1116028800">- enabled _FFR_DEAL_WITH_ERROR_SSL to stop read error messages on saturated
  networks (#146635), thanks to Kevin Krafthefer for the hint</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.1" date="1088640000">- fixed init script to not complain missing sendmail-cf package (#126975)
- better message in /etc/mail/Makefile for missing sendmail-cf package.</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3" date="1088035200">- made /etc/mail/Makefile complain missing sendmail-cf package (#123348)
- moved back to /usr/share/ssl/certs as certificate directory (commented out)
  (#125795)
- fixed ownership of %{_includedir}/libmilter (#73977)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-3.3" date="1084492800">- added trigger to reenable sendmail after update from 8.12.10</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-3" date="1077235200">- RH3.0E version: sasl1, no pie, old_setup (provide /etc/aliases)
- new switches for pie and old_setup</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-2.1" date="1076025600">- new Sendmail.conf for sasl1 (#114726)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-2" date="1075334400">- added information for saslauthd and AUTH (#113463)
- fixed STATUS_FILE in sendmail-redhat.mc (#114302)
- reset mta after update if mta was sendmail (#114257)
- enabled pie for ia64 again</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-1.3" date="1075161600">- removed /etc/aliases (now in setup)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-1.2" date="1074816000">- /usr/lib/sendmail is in alternatives, now
- removed trailing / from stdir
- fixed define for STATUS_FILE</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-1.1" date="1074729600">- disabled pie for ia64</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-1" date="1074643200">- new version 8.12.11
- pie</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.10-7" date="1073952000">- fc2 version (with sasl2)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.10-6" date="1073952000">- reverted to sasl1 for 3.0E: added with_sasl1
- spec file cleanup
- new location for statistics file (/var/log/)</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1071446400">- Fix download url.</changelog><changelog author="Jeff Johnson &lt;jbj@jbj.org&gt; 8.12.10-5" date="1071360000">- rebuild against db-4.2.52.</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1071187200">- fix pam alternatives handling
- add patch from Jakub Jelinek for PIE</changelog><changelog author="Karsten Hopp &lt;karsten@redhat.de&gt; 8.12.10-3" date="1070668800">- fix usage of RPM_OPT_FLAGS variable in spec file
- add makecert.sh script to -doc subpackage
- add cert paths to sendmail.mc</changelog><changelog author="Karsten Hopp &lt;karsten@redhat.de&gt; " date="1069891200">- fix alternatives (#109313)
- enable TLS</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1067299200">- add some more system account entries into /etc/aliases
- add example for a mixed IPv6/IPv4 setup</changelog><changelog author="Harald Hoyer &lt;harald@redhat.de&gt; 8.12.10-2" date="1067040000">- added with_ options</changelog><changelog author="Jeff Johnson &lt;jbj@jbj.org&gt; 8.12.10-1.2" date="1064534400">- rebuild against db-4.2.42.</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1063929600">- update to 8.12.10</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1063843200">- add security patches for CAN-2003-0694 and CAN-2003-0681</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1062460800">- move debug information from sendmail into debuginfo rpm
- on %post make sure /etc/aliases.db and /etc/mail/*.db is correctly
  owned by root
- do not set confTRUSTED_USER to smmsp in sendmail-redhat.mc</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1060387200">- run "make -C /etc/mail" (maybe generating new sendmail.cf, then newaliases
- added $SENDMAIL_OPTARG that could be set by /etc/sysconfig/sendmail #99224</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1059609600">- adjust rpm license tag to say "Sendmail"</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1057363200">- enable pie only for a few archs
- enable full optims for s390 again, compiler seems to be fixed</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1057017600">- apply patch from Ulrich Drepper to support -pie</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1054425600">- make init script more robust #91879</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1052697600">- sendmail-cf requires m4, #90513</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 8.12.9-6" date="1052524800">- move Sendmail.conf from /usr/lib/sasl to /usr/lib/sasl2 and change the
  default pwcheck method to "saslauthd"</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 8.12.9-5" date="1052179200">- configure to use libsasl2 instead of libsasl to avoid linking with both
  (we also link to libldap, which now uses libsasl2)
- link with -ldb instead of -ldb-4.0 on all releases after RHL 7.3 instead
  of just 7.3 (all versions of db4-devel thereafter are expected to provide
  the right linking setup)</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1050451200">- add a "umask 022" before building the *.cf files in /etc/mail/Makefile</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1049500800">- mark /etc/mail/Makefile as config(noreplace) #87688
- mark /etc/pam.d/smtp as config(noreplace) #87731</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1049068800">- update to 8.12.9</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048723200">- call make with the target "all" #86005
- add start/stop/restart as Makefile targets
- add another security patch</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1046908800">- add correct db4-devel requirements for newer releases
- completely re-do many ifdef code in the spec-file
- fix some issues building for older RHL releases</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1046131200">- rebuilt</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1046131200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1046131200">- update to 8.12.8</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1045008000">- rebuilt</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1043280000">- add a confTRUSTED_USER line into sendmail.mc, submit.mc is already ok
- add patch from sendmail.org for cf/m4/proto.m4</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1042502400">- do not reject all numeric login names if hesiod support is
  compiled in.   #80060
- remove reference to non-existing man-pages #74552</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1042416000">- sendmail-8.12.7-etrn.patch from Jos Vos &lt;jos@xos.nl&gt;
- submit.mc: enable "use_ct_file" by default  #80519
- add _FFR_MILTER_ROOT_UNSAFE  #78223</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1042329600">- update to 8.12.7
- hack to make lib64 version work
- downgrade s390 optims to make it compile</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1041897600">- add openssl-devel as a build-time requirement
- preprocess the config file to add the right version of %{_lib}
- add kerberos -I and -L flags to build configuration, needed for newer
  versions of libssl</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1039651200">- always have a queue run interval for sm-msp-queue   #81424
- Jos Vos suggests adding another variable for sm-client queue-run</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1038873600">- add the following changes from Adrian Havill &lt;havill@redhat.com&gt;
  to our default sendmail.mc file:
	- added commented-out-by-default common AUTH/SSL examples
	- updated m4 example and rpm reference
	- added more comment documentation
	- add commented out confAUTO_REBUILD example
	- improve description about MASQUERADE_AS</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1037664000">- add to submit.mc: define(`_MTA_HOST_', `[127.0.0.1]')
  to deliver directly to localhost IP instead of going through DNS
- submit.mc: exchange msp and use_ct_file to better enable it
- do not undefine UUCP_RELAY and BITNET_RELAY
- sendmail.mc: use LOCAL_DOMAIN instead of "Cw" directly
- sendmail.mc: add commented out MASQUERADE_AS example
- re-enable DAEMON variable for now</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1037145600">- remove absolute path names from the PAM configuration, allowing it to be
  used by any arch on a multilib system</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1036368000">- fix mailman alias  #75129</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1036281600">- update to 8.12.6</changelog><changelog author="Phil Knirsch &lt;pknirsch@redhat.com&gt; 8.12.5-7.2" date="1033776000">- Drop optflags to default to build correctly on s390(x).</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 8.12.5-7.1" date="1031875200">- Added fix to build on x86_64</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1030665600">- clean up some specfile cruft
- add more pseudo accounts to /etc/aliases</changelog><changelog author="Phil Knirsch &lt;pknirsch@redhat.com&gt;" date="1027641600">- Only generate new cf files if the /usr/share/sendmail-cf/m4/cf.m4 exists.</changelog><changelog author="Phil Knirsch &lt;pknirsch@redhat.com&gt;" date="1027555200">- Changed the behaviour in /etc/mail/Makefile to generate the sendmail.cf and
  submit.cf from the mc files if they changed.
- Added a small README.redhat that descibed the new mc file behaviour and the
  split into sendmail.cf and submit.cf.</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1027555200">- suggestions form Stephane Lentz:
	- add correct include statement into submit.mc (like sendmail.mc)
	- add commented out further suggestions into submit.mc
	- disable ident lookups</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1026432000">- fix initscript for the second daemon and pidfile location #67910</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1025568000">- update to 8.12.5</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1025222400">- add further queue runs, slight spec-file cleanups</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1023840000">- update to 8.12.4, adjust smrsh patch</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1022198400">- automated rebuild</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1018742400">- update to 8.12.3</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1017187200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1017100800">- fix alternatives --remove  #61737
- add sendmail/SECURITY as docu #61870, #61545</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1016668800">- add libsm.a    #61270
- change from /etc/sendmail.cf to /etc/mail/sendmail.cf
- add milter patch</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="1016064000">- ignore DAEMON=no; that configuration no longer functions</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1016064000">- make sure more version information is in the cf file #54418
- do not use "-b" flag when patching in spec file
- require newer chkconfig version #61035
- fix preun script #60880
- add TMPF to access file creation #60956</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1015718400">- mv include files to /usr/include/libmilter/ #60795
- do not use "-f" option to virtusertable #60196
- ad an example smarthost entry to config file #58298</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 8.12.2-5" date="1015632000">- use alternatives --initscript support
- run chkconfig --add before alternatives</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 8.12.2-3" date="1014940800">- run alternatives --remove in %preun
- add some prereqs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 8.12.2-2" date="1014681600">- fix smmsp useradd invocation in %pre
- switch back to db3 for storing db files</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 8.12.2-1" date="1014249600">- update to 8.12.2 (adds STARTTLS support without need for sfio)
- don't forcibly strip binaries; let the build root handle it
- add creation of the smmsp account (51/51) in %pre
- enable hesiod map support
- modify default config to use an MSP
- comment out 'O AutoRebuildAliases' in %post, otherwise sendmail will
  fail to restart on upgrades</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1014249600">- add proper ifdefs around new alternative stuff to also be able
  to build this for older releases</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 8.11.6-12" date="1012608000">- %triggerpostun on older versions to make sure alternatives work on
  upgrades</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 8.11.6-11" date="1012521600">- clean up alternatives somewhat, provide /usr/sbin/sendmail &amp; friends</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 8.11.6-10" date="1012521600">- Use alternatives</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1011744000">- fix quotation in spec-file</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1010707200">- integrate ugly logic to compile this src.rpm also on older Red Hat
  Linux releases
- clean up spec file and patches a bit
- add db4 support</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1010620800">- fix another path to correct docu
- include sendmail/README in the docu
- compile with -D_FFR_WORKAROUND_BROKEN_NAMESERVERS, but do not
  enable this at runtime
- devel subpackage files owned by root now</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1007769600">- change "-q" to "-s" as option to make #57216
- move milter lib into separate "devel" sub-package
- add include files to devel sub-package #56064
- fix pointer in access file to docu #54351</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1000166400">- add libmilter docu
- add support for userdb to /etc/mail/Makefile
- use "btree" database files if a userdb is used
- buildrequires tcp_wrappers</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="999302400">- fix libmilter support
- fix init script to use /etc/mail/Makefile #52932</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="998784000">- add libmilter library</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="998611200">- update to 8.11.6
- correctly use /etc/mail/statistics</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="997401600">- change init script back to older conventions #51297
- remove DoS patch, not needed anymore #51247</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="997142400">- add option '-t' to procmail for local mail delivery</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="996019200">- point to the map files in sendmail.cf as pointed out by
  David Beveridge &lt;David@beveridge.com&gt;</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="995932800">- add build requires #49695
- do not call "userdel"</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="994809600">- change sendmail.cf to "noreplace"</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="991958400">- update to 8.11.4</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="989452800">- update to 8.11.3
- add "localhost.localdomain" to the list of hostnames accepted
  for local delivery "Cw" in /etc/mail/sendmail.mc
- add patches from Pekka Savola &lt;pekkas@netcore.fi&gt;
	- Enable IPv6 at compile time, patch for glibc 2.2 from PLD
	- Add a commented-out IPv6 daemon .mc line to sendmail.mc
	- buildrequire: openldap-devel, cyrus-sasl-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="983318400">- add noreplace for /etc/sysconfig/sendmail and /etc/mail/sendmail.mc</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="982800000">- add changes from Christopher McCrory &lt;chrismcc@pricegrabber.com&gt;:
	- prepare /etc/mail/Makefile for more maps not shipped with this rpm
	- changed sendmail.mc to include some more commented out options,
	  so that people are directly pointed at important options
	- add /etc/pam.d/smtp for AUTH
	- add FEATURE(use_ct_file) and /etc/mail/trusted-users</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="982368000">- don't obsolete postfix and exim, only conflict (for RHN purposes)</changelog><changelog author="Trond Eivind Glomsr&#xF8;d &lt;teg@redhat.com&gt;" date="982281600">- obsolete and conflict with exim and postfix</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="982195200">- fix devision by zero bug in #20395
- mv /usr/lib/sendmail-cf /usr/share/sendmail-cf</changelog><changelog author="Trond Eivind Glomsr&#xF8;d &lt;teg@redhat.com&gt;" date="981590400">- i18n tweaks to initscript</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="981590400">- aliases.db should be owned by group root</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="980380800">- prepare for startup-script translation</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="980294400">- enable daemon mode again, but only listen to the loopback device
  instead of all devices.
- do not include check.tar with old anti-spam rules</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="979344000">- fix configuration of /etc/aliases</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="978998400">- fix interoperation problems with communigate pro
- disable msa</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="978652800">- update to (security release) 8.11.2
- build also on RHL 6.x #16061
- include smrsh man-page #17901
- use the "-f" flag for makemap to preserve case for virtusertable
  and userdb in /etc/mail/Makefile - suggested by Harald Hoyer
- fix /usr/doc -&gt; usr/share/doc in docu #20611
- wrong path in sendmail.mc #20691
- tcp-wrapper support wasn't enabled correctly #21642
- do not expose user "root" when masquerading like in older releases #21643
- disable the VRFY and EXPN smtp commands #21801
- disable queue-runs for normal users (restrictqrun privacy flag)
- fix typo in sendmail.mc #21880, #22682
- disable daemon mode to see what needs fixing</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="970531200">- update to 8.11.1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968457600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="966988800">- apply fixes for LDAP maps being closed too soon</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="966297600">- provide /usr/lib/sasl/Sendmail.conf so that people know we can use it (#16064)</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="965692800">- enable listening on the smtp port again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="965433600">- fix "missing find_m4.sh" problem by defining M4=/usr/bin/m4 (#14767)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="965088000">- okay, enable LDAP support again
- enable SMTP auth support via Cyrus SASL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="964569600">- disable the LDAP support until we can remove the sendmail-&gt;OpenLDAP-&gt;perl dep
- fix prereq</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="964569600">- update to sendmail 8.11.0
- add LDAP support</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="964137600">- move initscript back</changelog><changelog author="Prospector &lt;bugzilla@redhat.com&gt;" date="963446400">- automatic rebuild</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="963187200">- require procmail
- add further aliases</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="963100800">- prereq init.d
- fix typo</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="962755200">- ignore error from useradd</changelog><changelog author="Than Ngo &lt;than@redhat.de&gt;" date="962409600">- FHS fixes
- /etc/rc.d/init.d -&gt; /etc/init.d
- fix initscript</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="961804800">- change to /usr/share/man</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="961632000">- turn off daemon behaviour by default</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="961372800">- rebuild, fix dependencies</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="960681600">- prereq /usr/sbin/useradd</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="958780800">- enable MAP_REGEX
- enable tcp_wrapper support</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="958694400">- fix etc/mail/aliases -&gt; /etc/aliases in sendmail-redhat.mc</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="957398400">- update to 8.10.1
- fix build without sendmail installed
- add 'mailnull' user</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="953164800">- update to 8.10.0
- remove compatiblity chkconfig links
- add a mailnull user for sendmail to use</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="950832000">- break the hard link for makemap and create it as a symlnk (#8223)</changelog><changelog author="Bernhard Rosenkr&#xE4;nzer &lt;bero@redhat.com&gt;" date="950832000">- Fix location of mailertable (Bug #6035)</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="949795200">- fixes for non-root builds (#8178)</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="949536000">- change perms on /etc/sysconfig/sendmail from 0755 to 0644
- allow compressed man-pages</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="944179200">- add patch to prevent the DoS when rebuilding aliases</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="936230400">- install man pages, not groff output (#3746).
- use dnl not '#' in m4 comment (#3749).
- add FEATURE(mailtertable) to the config -- example file needs this (#4649).
- use db2 not db1.</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="936144000">- add 127.0.0.1 to /etc/mail/access to avoid IDENT: relay problem (#3178).</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="936144000">- chkconfig --del in preun, not postun (#3982)</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="934848000">- initscript munging</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="930960000">- fixed typo bug in comment in the default .mc file (#2812)</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="924566400">- fox the awk scripts in the postinstall
- enable FEATURE(accept_unresolvable_domains) by default to make laptop
  users happy.</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="924480000">- make the redhat.mc be a separate source files. Sanitize patches that used
  to touch it.
- install redhat.mc as /etc/sendmail.mc so that people can easily modify
  their sendmail.cf configurations.</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="923356800">- fixed virtusertable patch
- make smrsh look into /etc/smrsh</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="922752000">- remove noreplace attr from sednmail.cf.</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="922406400">- provide a more sane /etc/mail/access default config file
- use makemap to initializa the empty databases, not touch
- added a small, but helpful /etc/mail/Makefile</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="922147200">- correxct dangling symlinks.
- check for map file existence in %post.</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt; " date="922060800">- auto rebuild in the new build environment (release 3)</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="921888000">- improved 8.9.3 config from Mike McHenry &lt;mmchen@minn.net&gt;</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="921628800">- version 8.9.3</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="914976000">- build for 6.0
- use the libdb1 stuff correctly</changelog><changelog author="Michael K. Johnson &lt;johnsonm@redhat.com&gt;" date="906422400">- Allow empty QUEUE in /etc/sysconfig/sendmail for those who
  want to run sendmail in daemon mode without processing the
  queue regularly.</changelog><changelog author="Michael K. Johnson &lt;johnsonm@redhat.com&gt;" date="906076800">- /etc/sysconfig/sendmail</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="904348800">- recompile statically linked binary for 5.2/sparc</changelog><changelog author="Prospector System &lt;bugs@redhat.com&gt;" date="894412800">- translations modified for de, fr, tr</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="894153600">- enhanced initscripts</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="894067200">- added a rmail patch</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="878169600">- argh!  Fixed some of the db1 handling that had to be added for glibc 2.1</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="877737600">- added support for db1 on SPARC</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="877046400">- added chkconfig support
- various spec file cleanups
- changed group to Networking/Daemons (from Daemons).  Sure, it runs on
  non networked systems, but who really *needs* it then?</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="876355200">- made /etc/mail/deny.db a ghost
- removed preun that used to remove deny.db (ghost handles that now)
- NOTE: upgrading from the sendmail packages in 4.8, 4.8.1, and possibly
  4.9 (all Red Hat betas between 4.2 and 5.0) could cause problems.  You
  may need to do a makemap in /etc/mail and a newaliases after upgrading
  from those packages.  Upgrading from 4.2 or prior should be fine.</changelog><changelog author="Erik Troan &lt;ewt@redhat.com&gt;" date="876182400">- made aliases.db a ghost</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="875059200">- fixed preuninstall script to handle aliases.db on upgrades properly</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="874368000">- fixed post-install output and changed /var/spool/mqueue to 755</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="874022400">- fixed /usr/lib/sendmail-cf paths</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="873849600">- updated to 8.8.7
- added some spam filtration
- combined some makefile patches
- added BuildRoot support</changelog><changelog author="Erik Troan &lt;ewt@redhat.com&gt;" date="873331200">- marked initscript symlinks as missingok
- run newalises after creating /var/spool/mqueue</changelog><changelog author="Erik Troan &lt;ewt@redhat.com&gt;" date="866160000">- built against glibc, udated release to -6 (skipped -5!)</changelog><changelog author="Erik Troan &lt;ewt@redhat.com&gt;" date="859939200">- Added -nsl on the Alpha (for glibc to provide NIS functions).</changelog><changelog author="Erik Troan &lt;ewt@redhat.com&gt;" date="857433600">- Added nis support.</changelog></package>
<package pkgid="28c108c0deb0c341c7a018561b6a484a79862696" name="sendmail-cf" arch="x86_64"><version epoch="0" ver="8.12.11" rel="4.SLF3.6"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 8.12.11-4.SLF3.6" date="1165449600">- Put in MASQUERADE_AS(`fnal.gov') into the sendmail-redhat.mc
- Put in define(`confQUEUE_LA', `30')dnl into the sendmail-redhat.mc
- Put in define(`confREFUSE_LA', `50')dnlinto the sendmail-redhat.mc</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.6" date="1149897600">- second incarnation of patch for CVE-2006-1173 (VU#146718)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.5" date="1148428800">- fixed CVE-2006-1173 (VU#146718): possible denial of service issue caused by
  malformed multipart messages (#191203)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.4" date="1142899200">- fixed another time_t timeout problem in the VU patch in usersmtp.c</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.3" date="1142726400">- fixed adaption failure in VU#834865</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.2" date="1142035200">- fixed VU#834865 (#184465)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.1.1" date="1116028800">- enabled _FFR_DEAL_WITH_ERROR_SSL to stop read error messages on saturated
  networks (#146635), thanks to Kevin Krafthefer for the hint</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.1" date="1088640000">- fixed init script to not complain missing sendmail-cf package (#126975)
- better message in /etc/mail/Makefile for missing sendmail-cf package.</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3" date="1088035200">- made /etc/mail/Makefile complain missing sendmail-cf package (#123348)
- moved back to /usr/share/ssl/certs as certificate directory (commented out)
  (#125795)
- fixed ownership of %{_includedir}/libmilter (#73977)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-3.3" date="1084492800">- added trigger to reenable sendmail after update from 8.12.10</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-3" date="1077235200">- RH3.0E version: sasl1, no pie, old_setup (provide /etc/aliases)
- new switches for pie and old_setup</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-2.1" date="1076025600">- new Sendmail.conf for sasl1 (#114726)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-2" date="1075334400">- added information for saslauthd and AUTH (#113463)
- fixed STATUS_FILE in sendmail-redhat.mc (#114302)
- reset mta after update if mta was sendmail (#114257)
- enabled pie for ia64 again</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-1.3" date="1075161600">- removed /etc/aliases (now in setup)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-1.2" date="1074816000">- /usr/lib/sendmail is in alternatives, now
- removed trailing / from stdir
- fixed define for STATUS_FILE</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-1.1" date="1074729600">- disabled pie for ia64</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-1" date="1074643200">- new version 8.12.11
- pie</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.10-7" date="1073952000">- fc2 version (with sasl2)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.10-6" date="1073952000">- reverted to sasl1 for 3.0E: added with_sasl1
- spec file cleanup
- new location for statistics file (/var/log/)</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1071446400">- Fix download url.</changelog><changelog author="Jeff Johnson &lt;jbj@jbj.org&gt; 8.12.10-5" date="1071360000">- rebuild against db-4.2.52.</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1071187200">- fix pam alternatives handling
- add patch from Jakub Jelinek for PIE</changelog><changelog author="Karsten Hopp &lt;karsten@redhat.de&gt; 8.12.10-3" date="1070668800">- fix usage of RPM_OPT_FLAGS variable in spec file
- add makecert.sh script to -doc subpackage
- add cert paths to sendmail.mc</changelog><changelog author="Karsten Hopp &lt;karsten@redhat.de&gt; " date="1069891200">- fix alternatives (#109313)
- enable TLS</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1067299200">- add some more system account entries into /etc/aliases
- add example for a mixed IPv6/IPv4 setup</changelog><changelog author="Harald Hoyer &lt;harald@redhat.de&gt; 8.12.10-2" date="1067040000">- added with_ options</changelog><changelog author="Jeff Johnson &lt;jbj@jbj.org&gt; 8.12.10-1.2" date="1064534400">- rebuild against db-4.2.42.</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1063929600">- update to 8.12.10</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1063843200">- add security patches for CAN-2003-0694 and CAN-2003-0681</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1062460800">- move debug information from sendmail into debuginfo rpm
- on %post make sure /etc/aliases.db and /etc/mail/*.db is correctly
  owned by root
- do not set confTRUSTED_USER to smmsp in sendmail-redhat.mc</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1060387200">- run "make -C /etc/mail" (maybe generating new sendmail.cf, then newaliases
- added $SENDMAIL_OPTARG that could be set by /etc/sysconfig/sendmail #99224</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1059609600">- adjust rpm license tag to say "Sendmail"</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1057363200">- enable pie only for a few archs
- enable full optims for s390 again, compiler seems to be fixed</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1057017600">- apply patch from Ulrich Drepper to support -pie</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1054425600">- make init script more robust #91879</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1052697600">- sendmail-cf requires m4, #90513</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 8.12.9-6" date="1052524800">- move Sendmail.conf from /usr/lib/sasl to /usr/lib/sasl2 and change the
  default pwcheck method to "saslauthd"</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 8.12.9-5" date="1052179200">- configure to use libsasl2 instead of libsasl to avoid linking with both
  (we also link to libldap, which now uses libsasl2)
- link with -ldb instead of -ldb-4.0 on all releases after RHL 7.3 instead
  of just 7.3 (all versions of db4-devel thereafter are expected to provide
  the right linking setup)</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1050451200">- add a "umask 022" before building the *.cf files in /etc/mail/Makefile</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1049500800">- mark /etc/mail/Makefile as config(noreplace) #87688
- mark /etc/pam.d/smtp as config(noreplace) #87731</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1049068800">- update to 8.12.9</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048723200">- call make with the target "all" #86005
- add start/stop/restart as Makefile targets
- add another security patch</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1046908800">- add correct db4-devel requirements for newer releases
- completely re-do many ifdef code in the spec-file
- fix some issues building for older RHL releases</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1046131200">- rebuilt</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1046131200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1046131200">- update to 8.12.8</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1045008000">- rebuilt</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1043280000">- add a confTRUSTED_USER line into sendmail.mc, submit.mc is already ok
- add patch from sendmail.org for cf/m4/proto.m4</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1042502400">- do not reject all numeric login names if hesiod support is
  compiled in.   #80060
- remove reference to non-existing man-pages #74552</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1042416000">- sendmail-8.12.7-etrn.patch from Jos Vos &lt;jos@xos.nl&gt;
- submit.mc: enable "use_ct_file" by default  #80519
- add _FFR_MILTER_ROOT_UNSAFE  #78223</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1042329600">- update to 8.12.7
- hack to make lib64 version work
- downgrade s390 optims to make it compile</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1041897600">- add openssl-devel as a build-time requirement
- preprocess the config file to add the right version of %{_lib}
- add kerberos -I and -L flags to build configuration, needed for newer
  versions of libssl</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1039651200">- always have a queue run interval for sm-msp-queue   #81424
- Jos Vos suggests adding another variable for sm-client queue-run</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1038873600">- add the following changes from Adrian Havill &lt;havill@redhat.com&gt;
  to our default sendmail.mc file:
	- added commented-out-by-default common AUTH/SSL examples
	- updated m4 example and rpm reference
	- added more comment documentation
	- add commented out confAUTO_REBUILD example
	- improve description about MASQUERADE_AS</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1037664000">- add to submit.mc: define(`_MTA_HOST_', `[127.0.0.1]')
  to deliver directly to localhost IP instead of going through DNS
- submit.mc: exchange msp and use_ct_file to better enable it
- do not undefine UUCP_RELAY and BITNET_RELAY
- sendmail.mc: use LOCAL_DOMAIN instead of "Cw" directly
- sendmail.mc: add commented out MASQUERADE_AS example
- re-enable DAEMON variable for now</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1037145600">- remove absolute path names from the PAM configuration, allowing it to be
  used by any arch on a multilib system</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1036368000">- fix mailman alias  #75129</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1036281600">- update to 8.12.6</changelog><changelog author="Phil Knirsch &lt;pknirsch@redhat.com&gt; 8.12.5-7.2" date="1033776000">- Drop optflags to default to build correctly on s390(x).</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 8.12.5-7.1" date="1031875200">- Added fix to build on x86_64</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1030665600">- clean up some specfile cruft
- add more pseudo accounts to /etc/aliases</changelog><changelog author="Phil Knirsch &lt;pknirsch@redhat.com&gt;" date="1027641600">- Only generate new cf files if the /usr/share/sendmail-cf/m4/cf.m4 exists.</changelog><changelog author="Phil Knirsch &lt;pknirsch@redhat.com&gt;" date="1027555200">- Changed the behaviour in /etc/mail/Makefile to generate the sendmail.cf and
  submit.cf from the mc files if they changed.
- Added a small README.redhat that descibed the new mc file behaviour and the
  split into sendmail.cf and submit.cf.</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1027555200">- suggestions form Stephane Lentz:
	- add correct include statement into submit.mc (like sendmail.mc)
	- add commented out further suggestions into submit.mc
	- disable ident lookups</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1026432000">- fix initscript for the second daemon and pidfile location #67910</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1025568000">- update to 8.12.5</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1025222400">- add further queue runs, slight spec-file cleanups</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1023840000">- update to 8.12.4, adjust smrsh patch</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1022198400">- automated rebuild</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1018742400">- update to 8.12.3</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1017187200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1017100800">- fix alternatives --remove  #61737
- add sendmail/SECURITY as docu #61870, #61545</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1016668800">- add libsm.a    #61270
- change from /etc/sendmail.cf to /etc/mail/sendmail.cf
- add milter patch</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="1016064000">- ignore DAEMON=no; that configuration no longer functions</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1016064000">- make sure more version information is in the cf file #54418
- do not use "-b" flag when patching in spec file
- require newer chkconfig version #61035
- fix preun script #60880
- add TMPF to access file creation #60956</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1015718400">- mv include files to /usr/include/libmilter/ #60795
- do not use "-f" option to virtusertable #60196
- ad an example smarthost entry to config file #58298</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 8.12.2-5" date="1015632000">- use alternatives --initscript support
- run chkconfig --add before alternatives</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 8.12.2-3" date="1014940800">- run alternatives --remove in %preun
- add some prereqs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 8.12.2-2" date="1014681600">- fix smmsp useradd invocation in %pre
- switch back to db3 for storing db files</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 8.12.2-1" date="1014249600">- update to 8.12.2 (adds STARTTLS support without need for sfio)
- don't forcibly strip binaries; let the build root handle it
- add creation of the smmsp account (51/51) in %pre
- enable hesiod map support
- modify default config to use an MSP
- comment out 'O AutoRebuildAliases' in %post, otherwise sendmail will
  fail to restart on upgrades</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1014249600">- add proper ifdefs around new alternative stuff to also be able
  to build this for older releases</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 8.11.6-12" date="1012608000">- %triggerpostun on older versions to make sure alternatives work on
  upgrades</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 8.11.6-11" date="1012521600">- clean up alternatives somewhat, provide /usr/sbin/sendmail &amp; friends</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 8.11.6-10" date="1012521600">- Use alternatives</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1011744000">- fix quotation in spec-file</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1010707200">- integrate ugly logic to compile this src.rpm also on older Red Hat
  Linux releases
- clean up spec file and patches a bit
- add db4 support</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1010620800">- fix another path to correct docu
- include sendmail/README in the docu
- compile with -D_FFR_WORKAROUND_BROKEN_NAMESERVERS, but do not
  enable this at runtime
- devel subpackage files owned by root now</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1007769600">- change "-q" to "-s" as option to make #57216
- move milter lib into separate "devel" sub-package
- add include files to devel sub-package #56064
- fix pointer in access file to docu #54351</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1000166400">- add libmilter docu
- add support for userdb to /etc/mail/Makefile
- use "btree" database files if a userdb is used
- buildrequires tcp_wrappers</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="999302400">- fix libmilter support
- fix init script to use /etc/mail/Makefile #52932</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="998784000">- add libmilter library</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="998611200">- update to 8.11.6
- correctly use /etc/mail/statistics</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="997401600">- change init script back to older conventions #51297
- remove DoS patch, not needed anymore #51247</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="997142400">- add option '-t' to procmail for local mail delivery</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="996019200">- point to the map files in sendmail.cf as pointed out by
  David Beveridge &lt;David@beveridge.com&gt;</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="995932800">- add build requires #49695
- do not call "userdel"</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="994809600">- change sendmail.cf to "noreplace"</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="991958400">- update to 8.11.4</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="989452800">- update to 8.11.3
- add "localhost.localdomain" to the list of hostnames accepted
  for local delivery "Cw" in /etc/mail/sendmail.mc
- add patches from Pekka Savola &lt;pekkas@netcore.fi&gt;
	- Enable IPv6 at compile time, patch for glibc 2.2 from PLD
	- Add a commented-out IPv6 daemon .mc line to sendmail.mc
	- buildrequire: openldap-devel, cyrus-sasl-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="983318400">- add noreplace for /etc/sysconfig/sendmail and /etc/mail/sendmail.mc</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="982800000">- add changes from Christopher McCrory &lt;chrismcc@pricegrabber.com&gt;:
	- prepare /etc/mail/Makefile for more maps not shipped with this rpm
	- changed sendmail.mc to include some more commented out options,
	  so that people are directly pointed at important options
	- add /etc/pam.d/smtp for AUTH
	- add FEATURE(use_ct_file) and /etc/mail/trusted-users</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="982368000">- don't obsolete postfix and exim, only conflict (for RHN purposes)</changelog><changelog author="Trond Eivind Glomsr&#xF8;d &lt;teg@redhat.com&gt;" date="982281600">- obsolete and conflict with exim and postfix</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="982195200">- fix devision by zero bug in #20395
- mv /usr/lib/sendmail-cf /usr/share/sendmail-cf</changelog><changelog author="Trond Eivind Glomsr&#xF8;d &lt;teg@redhat.com&gt;" date="981590400">- i18n tweaks to initscript</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="981590400">- aliases.db should be owned by group root</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="980380800">- prepare for startup-script translation</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="980294400">- enable daemon mode again, but only listen to the loopback device
  instead of all devices.
- do not include check.tar with old anti-spam rules</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="979344000">- fix configuration of /etc/aliases</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="978998400">- fix interoperation problems with communigate pro
- disable msa</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="978652800">- update to (security release) 8.11.2
- build also on RHL 6.x #16061
- include smrsh man-page #17901
- use the "-f" flag for makemap to preserve case for virtusertable
  and userdb in /etc/mail/Makefile - suggested by Harald Hoyer
- fix /usr/doc -&gt; usr/share/doc in docu #20611
- wrong path in sendmail.mc #20691
- tcp-wrapper support wasn't enabled correctly #21642
- do not expose user "root" when masquerading like in older releases #21643
- disable the VRFY and EXPN smtp commands #21801
- disable queue-runs for normal users (restrictqrun privacy flag)
- fix typo in sendmail.mc #21880, #22682
- disable daemon mode to see what needs fixing</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="970531200">- update to 8.11.1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968457600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="966988800">- apply fixes for LDAP maps being closed too soon</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="966297600">- provide /usr/lib/sasl/Sendmail.conf so that people know we can use it (#16064)</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="965692800">- enable listening on the smtp port again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="965433600">- fix "missing find_m4.sh" problem by defining M4=/usr/bin/m4 (#14767)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="965088000">- okay, enable LDAP support again
- enable SMTP auth support via Cyrus SASL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="964569600">- disable the LDAP support until we can remove the sendmail-&gt;OpenLDAP-&gt;perl dep
- fix prereq</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="964569600">- update to sendmail 8.11.0
- add LDAP support</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="964137600">- move initscript back</changelog><changelog author="Prospector &lt;bugzilla@redhat.com&gt;" date="963446400">- automatic rebuild</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="963187200">- require procmail
- add further aliases</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="963100800">- prereq init.d
- fix typo</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="962755200">- ignore error from useradd</changelog><changelog author="Than Ngo &lt;than@redhat.de&gt;" date="962409600">- FHS fixes
- /etc/rc.d/init.d -&gt; /etc/init.d
- fix initscript</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="961804800">- change to /usr/share/man</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="961632000">- turn off daemon behaviour by default</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="961372800">- rebuild, fix dependencies</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="960681600">- prereq /usr/sbin/useradd</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="958780800">- enable MAP_REGEX
- enable tcp_wrapper support</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="958694400">- fix etc/mail/aliases -&gt; /etc/aliases in sendmail-redhat.mc</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="957398400">- update to 8.10.1
- fix build without sendmail installed
- add 'mailnull' user</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="953164800">- update to 8.10.0
- remove compatiblity chkconfig links
- add a mailnull user for sendmail to use</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="950832000">- break the hard link for makemap and create it as a symlnk (#8223)</changelog><changelog author="Bernhard Rosenkr&#xE4;nzer &lt;bero@redhat.com&gt;" date="950832000">- Fix location of mailertable (Bug #6035)</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="949795200">- fixes for non-root builds (#8178)</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="949536000">- change perms on /etc/sysconfig/sendmail from 0755 to 0644
- allow compressed man-pages</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="944179200">- add patch to prevent the DoS when rebuilding aliases</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="936230400">- install man pages, not groff output (#3746).
- use dnl not '#' in m4 comment (#3749).
- add FEATURE(mailtertable) to the config -- example file needs this (#4649).
- use db2 not db1.</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="936144000">- add 127.0.0.1 to /etc/mail/access to avoid IDENT: relay problem (#3178).</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="936144000">- chkconfig --del in preun, not postun (#3982)</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="934848000">- initscript munging</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="930960000">- fixed typo bug in comment in the default .mc file (#2812)</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="924566400">- fox the awk scripts in the postinstall
- enable FEATURE(accept_unresolvable_domains) by default to make laptop
  users happy.</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="924480000">- make the redhat.mc be a separate source files. Sanitize patches that used
  to touch it.
- install redhat.mc as /etc/sendmail.mc so that people can easily modify
  their sendmail.cf configurations.</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="923356800">- fixed virtusertable patch
- make smrsh look into /etc/smrsh</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="922752000">- remove noreplace attr from sednmail.cf.</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="922406400">- provide a more sane /etc/mail/access default config file
- use makemap to initializa the empty databases, not touch
- added a small, but helpful /etc/mail/Makefile</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="922147200">- correxct dangling symlinks.
- check for map file existence in %post.</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt; " date="922060800">- auto rebuild in the new build environment (release 3)</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="921888000">- improved 8.9.3 config from Mike McHenry &lt;mmchen@minn.net&gt;</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="921628800">- version 8.9.3</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="914976000">- build for 6.0
- use the libdb1 stuff correctly</changelog><changelog author="Michael K. Johnson &lt;johnsonm@redhat.com&gt;" date="906422400">- Allow empty QUEUE in /etc/sysconfig/sendmail for those who
  want to run sendmail in daemon mode without processing the
  queue regularly.</changelog><changelog author="Michael K. Johnson &lt;johnsonm@redhat.com&gt;" date="906076800">- /etc/sysconfig/sendmail</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="904348800">- recompile statically linked binary for 5.2/sparc</changelog><changelog author="Prospector System &lt;bugs@redhat.com&gt;" date="894412800">- translations modified for de, fr, tr</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="894153600">- enhanced initscripts</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="894067200">- added a rmail patch</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="878169600">- argh!  Fixed some of the db1 handling that had to be added for glibc 2.1</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="877737600">- added support for db1 on SPARC</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="877046400">- added chkconfig support
- various spec file cleanups
- changed group to Networking/Daemons (from Daemons).  Sure, it runs on
  non networked systems, but who really *needs* it then?</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="876355200">- made /etc/mail/deny.db a ghost
- removed preun that used to remove deny.db (ghost handles that now)
- NOTE: upgrading from the sendmail packages in 4.8, 4.8.1, and possibly
  4.9 (all Red Hat betas between 4.2 and 5.0) could cause problems.  You
  may need to do a makemap in /etc/mail and a newaliases after upgrading
  from those packages.  Upgrading from 4.2 or prior should be fine.</changelog><changelog author="Erik Troan &lt;ewt@redhat.com&gt;" date="876182400">- made aliases.db a ghost</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="875059200">- fixed preuninstall script to handle aliases.db on upgrades properly</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="874368000">- fixed post-install output and changed /var/spool/mqueue to 755</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="874022400">- fixed /usr/lib/sendmail-cf paths</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="873849600">- updated to 8.8.7
- added some spam filtration
- combined some makefile patches
- added BuildRoot support</changelog><changelog author="Erik Troan &lt;ewt@redhat.com&gt;" date="873331200">- marked initscript symlinks as missingok
- run newalises after creating /var/spool/mqueue</changelog><changelog author="Erik Troan &lt;ewt@redhat.com&gt;" date="866160000">- built against glibc, udated release to -6 (skipped -5!)</changelog><changelog author="Erik Troan &lt;ewt@redhat.com&gt;" date="859939200">- Added -nsl on the Alpha (for glibc to provide NIS functions).</changelog><changelog author="Erik Troan &lt;ewt@redhat.com&gt;" date="857433600">- Added nis support.</changelog></package>
<package pkgid="062ad3d9004d79a44d86b72d2217b5c0c9737d3e" name="sendmail-debuginfo" arch="x86_64"><version epoch="0" ver="8.12.11" rel="4.SLF3.6"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 8.12.11-4.SLF3.6" date="1165449600">- Put in MASQUERADE_AS(`fnal.gov') into the sendmail-redhat.mc
- Put in define(`confQUEUE_LA', `30')dnl into the sendmail-redhat.mc
- Put in define(`confREFUSE_LA', `50')dnlinto the sendmail-redhat.mc</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.6" date="1149897600">- second incarnation of patch for CVE-2006-1173 (VU#146718)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.5" date="1148428800">- fixed CVE-2006-1173 (VU#146718): possible denial of service issue caused by
  malformed multipart messages (#191203)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.4" date="1142899200">- fixed another time_t timeout problem in the VU patch in usersmtp.c</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.3" date="1142726400">- fixed adaption failure in VU#834865</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.2" date="1142035200">- fixed VU#834865 (#184465)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.1.1" date="1116028800">- enabled _FFR_DEAL_WITH_ERROR_SSL to stop read error messages on saturated
  networks (#146635), thanks to Kevin Krafthefer for the hint</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.1" date="1088640000">- fixed init script to not complain missing sendmail-cf package (#126975)
- better message in /etc/mail/Makefile for missing sendmail-cf package.</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3" date="1088035200">- made /etc/mail/Makefile complain missing sendmail-cf package (#123348)
- moved back to /usr/share/ssl/certs as certificate directory (commented out)
  (#125795)
- fixed ownership of %{_includedir}/libmilter (#73977)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-3.3" date="1084492800">- added trigger to reenable sendmail after update from 8.12.10</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-3" date="1077235200">- RH3.0E version: sasl1, no pie, old_setup (provide /etc/aliases)
- new switches for pie and old_setup</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-2.1" date="1076025600">- new Sendmail.conf for sasl1 (#114726)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-2" date="1075334400">- added information for saslauthd and AUTH (#113463)
- fixed STATUS_FILE in sendmail-redhat.mc (#114302)
- reset mta after update if mta was sendmail (#114257)
- enabled pie for ia64 again</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-1.3" date="1075161600">- removed /etc/aliases (now in setup)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-1.2" date="1074816000">- /usr/lib/sendmail is in alternatives, now
- removed trailing / from stdir
- fixed define for STATUS_FILE</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-1.1" date="1074729600">- disabled pie for ia64</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-1" date="1074643200">- new version 8.12.11
- pie</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.10-7" date="1073952000">- fc2 version (with sasl2)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.10-6" date="1073952000">- reverted to sasl1 for 3.0E: added with_sasl1
- spec file cleanup
- new location for statistics file (/var/log/)</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1071446400">- Fix download url.</changelog><changelog author="Jeff Johnson &lt;jbj@jbj.org&gt; 8.12.10-5" date="1071360000">- rebuild against db-4.2.52.</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1071187200">- fix pam alternatives handling
- add patch from Jakub Jelinek for PIE</changelog><changelog author="Karsten Hopp &lt;karsten@redhat.de&gt; 8.12.10-3" date="1070668800">- fix usage of RPM_OPT_FLAGS variable in spec file
- add makecert.sh script to -doc subpackage
- add cert paths to sendmail.mc</changelog><changelog author="Karsten Hopp &lt;karsten@redhat.de&gt; " date="1069891200">- fix alternatives (#109313)
- enable TLS</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1067299200">- add some more system account entries into /etc/aliases
- add example for a mixed IPv6/IPv4 setup</changelog><changelog author="Harald Hoyer &lt;harald@redhat.de&gt; 8.12.10-2" date="1067040000">- added with_ options</changelog><changelog author="Jeff Johnson &lt;jbj@jbj.org&gt; 8.12.10-1.2" date="1064534400">- rebuild against db-4.2.42.</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1063929600">- update to 8.12.10</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1063843200">- add security patches for CAN-2003-0694 and CAN-2003-0681</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1062460800">- move debug information from sendmail into debuginfo rpm
- on %post make sure /etc/aliases.db and /etc/mail/*.db is correctly
  owned by root
- do not set confTRUSTED_USER to smmsp in sendmail-redhat.mc</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1060387200">- run "make -C /etc/mail" (maybe generating new sendmail.cf, then newaliases
- added $SENDMAIL_OPTARG that could be set by /etc/sysconfig/sendmail #99224</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1059609600">- adjust rpm license tag to say "Sendmail"</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1057363200">- enable pie only for a few archs
- enable full optims for s390 again, compiler seems to be fixed</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1057017600">- apply patch from Ulrich Drepper to support -pie</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1054425600">- make init script more robust #91879</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1052697600">- sendmail-cf requires m4, #90513</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 8.12.9-6" date="1052524800">- move Sendmail.conf from /usr/lib/sasl to /usr/lib/sasl2 and change the
  default pwcheck method to "saslauthd"</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 8.12.9-5" date="1052179200">- configure to use libsasl2 instead of libsasl to avoid linking with both
  (we also link to libldap, which now uses libsasl2)
- link with -ldb instead of -ldb-4.0 on all releases after RHL 7.3 instead
  of just 7.3 (all versions of db4-devel thereafter are expected to provide
  the right linking setup)</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1050451200">- add a "umask 022" before building the *.cf files in /etc/mail/Makefile</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1049500800">- mark /etc/mail/Makefile as config(noreplace) #87688
- mark /etc/pam.d/smtp as config(noreplace) #87731</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1049068800">- update to 8.12.9</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048723200">- call make with the target "all" #86005
- add start/stop/restart as Makefile targets
- add another security patch</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1046908800">- add correct db4-devel requirements for newer releases
- completely re-do many ifdef code in the spec-file
- fix some issues building for older RHL releases</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1046131200">- rebuilt</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1046131200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1046131200">- update to 8.12.8</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1045008000">- rebuilt</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1043280000">- add a confTRUSTED_USER line into sendmail.mc, submit.mc is already ok
- add patch from sendmail.org for cf/m4/proto.m4</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1042502400">- do not reject all numeric login names if hesiod support is
  compiled in.   #80060
- remove reference to non-existing man-pages #74552</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1042416000">- sendmail-8.12.7-etrn.patch from Jos Vos &lt;jos@xos.nl&gt;
- submit.mc: enable "use_ct_file" by default  #80519
- add _FFR_MILTER_ROOT_UNSAFE  #78223</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1042329600">- update to 8.12.7
- hack to make lib64 version work
- downgrade s390 optims to make it compile</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1041897600">- add openssl-devel as a build-time requirement
- preprocess the config file to add the right version of %{_lib}
- add kerberos -I and -L flags to build configuration, needed for newer
  versions of libssl</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1039651200">- always have a queue run interval for sm-msp-queue   #81424
- Jos Vos suggests adding another variable for sm-client queue-run</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1038873600">- add the following changes from Adrian Havill &lt;havill@redhat.com&gt;
  to our default sendmail.mc file:
	- added commented-out-by-default common AUTH/SSL examples
	- updated m4 example and rpm reference
	- added more comment documentation
	- add commented out confAUTO_REBUILD example
	- improve description about MASQUERADE_AS</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1037664000">- add to submit.mc: define(`_MTA_HOST_', `[127.0.0.1]')
  to deliver directly to localhost IP instead of going through DNS
- submit.mc: exchange msp and use_ct_file to better enable it
- do not undefine UUCP_RELAY and BITNET_RELAY
- sendmail.mc: use LOCAL_DOMAIN instead of "Cw" directly
- sendmail.mc: add commented out MASQUERADE_AS example
- re-enable DAEMON variable for now</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1037145600">- remove absolute path names from the PAM configuration, allowing it to be
  used by any arch on a multilib system</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1036368000">- fix mailman alias  #75129</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1036281600">- update to 8.12.6</changelog><changelog author="Phil Knirsch &lt;pknirsch@redhat.com&gt; 8.12.5-7.2" date="1033776000">- Drop optflags to default to build correctly on s390(x).</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 8.12.5-7.1" date="1031875200">- Added fix to build on x86_64</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1030665600">- clean up some specfile cruft
- add more pseudo accounts to /etc/aliases</changelog><changelog author="Phil Knirsch &lt;pknirsch@redhat.com&gt;" date="1027641600">- Only generate new cf files if the /usr/share/sendmail-cf/m4/cf.m4 exists.</changelog><changelog author="Phil Knirsch &lt;pknirsch@redhat.com&gt;" date="1027555200">- Changed the behaviour in /etc/mail/Makefile to generate the sendmail.cf and
  submit.cf from the mc files if they changed.
- Added a small README.redhat that descibed the new mc file behaviour and the
  split into sendmail.cf and submit.cf.</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1027555200">- suggestions form Stephane Lentz:
	- add correct include statement into submit.mc (like sendmail.mc)
	- add commented out further suggestions into submit.mc
	- disable ident lookups</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1026432000">- fix initscript for the second daemon and pidfile location #67910</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1025568000">- update to 8.12.5</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1025222400">- add further queue runs, slight spec-file cleanups</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1023840000">- update to 8.12.4, adjust smrsh patch</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1022198400">- automated rebuild</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1018742400">- update to 8.12.3</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1017187200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1017100800">- fix alternatives --remove  #61737
- add sendmail/SECURITY as docu #61870, #61545</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1016668800">- add libsm.a    #61270
- change from /etc/sendmail.cf to /etc/mail/sendmail.cf
- add milter patch</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="1016064000">- ignore DAEMON=no; that configuration no longer functions</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1016064000">- make sure more version information is in the cf file #54418
- do not use "-b" flag when patching in spec file
- require newer chkconfig version #61035
- fix preun script #60880
- add TMPF to access file creation #60956</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1015718400">- mv include files to /usr/include/libmilter/ #60795
- do not use "-f" option to virtusertable #60196
- ad an example smarthost entry to config file #58298</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 8.12.2-5" date="1015632000">- use alternatives --initscript support
- run chkconfig --add before alternatives</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 8.12.2-3" date="1014940800">- run alternatives --remove in %preun
- add some prereqs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 8.12.2-2" date="1014681600">- fix smmsp useradd invocation in %pre
- switch back to db3 for storing db files</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 8.12.2-1" date="1014249600">- update to 8.12.2 (adds STARTTLS support without need for sfio)
- don't forcibly strip binaries; let the build root handle it
- add creation of the smmsp account (51/51) in %pre
- enable hesiod map support
- modify default config to use an MSP
- comment out 'O AutoRebuildAliases' in %post, otherwise sendmail will
  fail to restart on upgrades</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1014249600">- add proper ifdefs around new alternative stuff to also be able
  to build this for older releases</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 8.11.6-12" date="1012608000">- %triggerpostun on older versions to make sure alternatives work on
  upgrades</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 8.11.6-11" date="1012521600">- clean up alternatives somewhat, provide /usr/sbin/sendmail &amp; friends</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 8.11.6-10" date="1012521600">- Use alternatives</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1011744000">- fix quotation in spec-file</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1010707200">- integrate ugly logic to compile this src.rpm also on older Red Hat
  Linux releases
- clean up spec file and patches a bit
- add db4 support</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1010620800">- fix another path to correct docu
- include sendmail/README in the docu
- compile with -D_FFR_WORKAROUND_BROKEN_NAMESERVERS, but do not
  enable this at runtime
- devel subpackage files owned by root now</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1007769600">- change "-q" to "-s" as option to make #57216
- move milter lib into separate "devel" sub-package
- add include files to devel sub-package #56064
- fix pointer in access file to docu #54351</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1000166400">- add libmilter docu
- add support for userdb to /etc/mail/Makefile
- use "btree" database files if a userdb is used
- buildrequires tcp_wrappers</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="999302400">- fix libmilter support
- fix init script to use /etc/mail/Makefile #52932</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="998784000">- add libmilter library</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="998611200">- update to 8.11.6
- correctly use /etc/mail/statistics</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="997401600">- change init script back to older conventions #51297
- remove DoS patch, not needed anymore #51247</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="997142400">- add option '-t' to procmail for local mail delivery</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="996019200">- point to the map files in sendmail.cf as pointed out by
  David Beveridge &lt;David@beveridge.com&gt;</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="995932800">- add build requires #49695
- do not call "userdel"</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="994809600">- change sendmail.cf to "noreplace"</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="991958400">- update to 8.11.4</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="989452800">- update to 8.11.3
- add "localhost.localdomain" to the list of hostnames accepted
  for local delivery "Cw" in /etc/mail/sendmail.mc
- add patches from Pekka Savola &lt;pekkas@netcore.fi&gt;
	- Enable IPv6 at compile time, patch for glibc 2.2 from PLD
	- Add a commented-out IPv6 daemon .mc line to sendmail.mc
	- buildrequire: openldap-devel, cyrus-sasl-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="983318400">- add noreplace for /etc/sysconfig/sendmail and /etc/mail/sendmail.mc</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="982800000">- add changes from Christopher McCrory &lt;chrismcc@pricegrabber.com&gt;:
	- prepare /etc/mail/Makefile for more maps not shipped with this rpm
	- changed sendmail.mc to include some more commented out options,
	  so that people are directly pointed at important options
	- add /etc/pam.d/smtp for AUTH
	- add FEATURE(use_ct_file) and /etc/mail/trusted-users</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="982368000">- don't obsolete postfix and exim, only conflict (for RHN purposes)</changelog><changelog author="Trond Eivind Glomsr&#xF8;d &lt;teg@redhat.com&gt;" date="982281600">- obsolete and conflict with exim and postfix</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="982195200">- fix devision by zero bug in #20395
- mv /usr/lib/sendmail-cf /usr/share/sendmail-cf</changelog><changelog author="Trond Eivind Glomsr&#xF8;d &lt;teg@redhat.com&gt;" date="981590400">- i18n tweaks to initscript</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="981590400">- aliases.db should be owned by group root</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="980380800">- prepare for startup-script translation</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="980294400">- enable daemon mode again, but only listen to the loopback device
  instead of all devices.
- do not include check.tar with old anti-spam rules</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="979344000">- fix configuration of /etc/aliases</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="978998400">- fix interoperation problems with communigate pro
- disable msa</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="978652800">- update to (security release) 8.11.2
- build also on RHL 6.x #16061
- include smrsh man-page #17901
- use the "-f" flag for makemap to preserve case for virtusertable
  and userdb in /etc/mail/Makefile - suggested by Harald Hoyer
- fix /usr/doc -&gt; usr/share/doc in docu #20611
- wrong path in sendmail.mc #20691
- tcp-wrapper support wasn't enabled correctly #21642
- do not expose user "root" when masquerading like in older releases #21643
- disable the VRFY and EXPN smtp commands #21801
- disable queue-runs for normal users (restrictqrun privacy flag)
- fix typo in sendmail.mc #21880, #22682
- disable daemon mode to see what needs fixing</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="970531200">- update to 8.11.1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968457600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="966988800">- apply fixes for LDAP maps being closed too soon</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="966297600">- provide /usr/lib/sasl/Sendmail.conf so that people know we can use it (#16064)</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="965692800">- enable listening on the smtp port again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="965433600">- fix "missing find_m4.sh" problem by defining M4=/usr/bin/m4 (#14767)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="965088000">- okay, enable LDAP support again
- enable SMTP auth support via Cyrus SASL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="964569600">- disable the LDAP support until we can remove the sendmail-&gt;OpenLDAP-&gt;perl dep
- fix prereq</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="964569600">- update to sendmail 8.11.0
- add LDAP support</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="964137600">- move initscript back</changelog><changelog author="Prospector &lt;bugzilla@redhat.com&gt;" date="963446400">- automatic rebuild</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="963187200">- require procmail
- add further aliases</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="963100800">- prereq init.d
- fix typo</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="962755200">- ignore error from useradd</changelog><changelog author="Than Ngo &lt;than@redhat.de&gt;" date="962409600">- FHS fixes
- /etc/rc.d/init.d -&gt; /etc/init.d
- fix initscript</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="961804800">- change to /usr/share/man</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="961632000">- turn off daemon behaviour by default</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="961372800">- rebuild, fix dependencies</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="960681600">- prereq /usr/sbin/useradd</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="958780800">- enable MAP_REGEX
- enable tcp_wrapper support</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="958694400">- fix etc/mail/aliases -&gt; /etc/aliases in sendmail-redhat.mc</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="957398400">- update to 8.10.1
- fix build without sendmail installed
- add 'mailnull' user</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="953164800">- update to 8.10.0
- remove compatiblity chkconfig links
- add a mailnull user for sendmail to use</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="950832000">- break the hard link for makemap and create it as a symlnk (#8223)</changelog><changelog author="Bernhard Rosenkr&#xE4;nzer &lt;bero@redhat.com&gt;" date="950832000">- Fix location of mailertable (Bug #6035)</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="949795200">- fixes for non-root builds (#8178)</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="949536000">- change perms on /etc/sysconfig/sendmail from 0755 to 0644
- allow compressed man-pages</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="944179200">- add patch to prevent the DoS when rebuilding aliases</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="936230400">- install man pages, not groff output (#3746).
- use dnl not '#' in m4 comment (#3749).
- add FEATURE(mailtertable) to the config -- example file needs this (#4649).
- use db2 not db1.</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="936144000">- add 127.0.0.1 to /etc/mail/access to avoid IDENT: relay problem (#3178).</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="936144000">- chkconfig --del in preun, not postun (#3982)</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="934848000">- initscript munging</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="930960000">- fixed typo bug in comment in the default .mc file (#2812)</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="924566400">- fox the awk scripts in the postinstall
- enable FEATURE(accept_unresolvable_domains) by default to make laptop
  users happy.</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="924480000">- make the redhat.mc be a separate source files. Sanitize patches that used
  to touch it.
- install redhat.mc as /etc/sendmail.mc so that people can easily modify
  their sendmail.cf configurations.</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="923356800">- fixed virtusertable patch
- make smrsh look into /etc/smrsh</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="922752000">- remove noreplace attr from sednmail.cf.</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="922406400">- provide a more sane /etc/mail/access default config file
- use makemap to initializa the empty databases, not touch
- added a small, but helpful /etc/mail/Makefile</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="922147200">- correxct dangling symlinks.
- check for map file existence in %post.</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt; " date="922060800">- auto rebuild in the new build environment (release 3)</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="921888000">- improved 8.9.3 config from Mike McHenry &lt;mmchen@minn.net&gt;</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="921628800">- version 8.9.3</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="914976000">- build for 6.0
- use the libdb1 stuff correctly</changelog><changelog author="Michael K. Johnson &lt;johnsonm@redhat.com&gt;" date="906422400">- Allow empty QUEUE in /etc/sysconfig/sendmail for those who
  want to run sendmail in daemon mode without processing the
  queue regularly.</changelog><changelog author="Michael K. Johnson &lt;johnsonm@redhat.com&gt;" date="906076800">- /etc/sysconfig/sendmail</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="904348800">- recompile statically linked binary for 5.2/sparc</changelog><changelog author="Prospector System &lt;bugs@redhat.com&gt;" date="894412800">- translations modified for de, fr, tr</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="894153600">- enhanced initscripts</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="894067200">- added a rmail patch</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="878169600">- argh!  Fixed some of the db1 handling that had to be added for glibc 2.1</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="877737600">- added support for db1 on SPARC</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="877046400">- added chkconfig support
- various spec file cleanups
- changed group to Networking/Daemons (from Daemons).  Sure, it runs on
  non networked systems, but who really *needs* it then?</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="876355200">- made /etc/mail/deny.db a ghost
- removed preun that used to remove deny.db (ghost handles that now)
- NOTE: upgrading from the sendmail packages in 4.8, 4.8.1, and possibly
  4.9 (all Red Hat betas between 4.2 and 5.0) could cause problems.  You
  may need to do a makemap in /etc/mail and a newaliases after upgrading
  from those packages.  Upgrading from 4.2 or prior should be fine.</changelog><changelog author="Erik Troan &lt;ewt@redhat.com&gt;" date="876182400">- made aliases.db a ghost</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="875059200">- fixed preuninstall script to handle aliases.db on upgrades properly</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="874368000">- fixed post-install output and changed /var/spool/mqueue to 755</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="874022400">- fixed /usr/lib/sendmail-cf paths</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="873849600">- updated to 8.8.7
- added some spam filtration
- combined some makefile patches
- added BuildRoot support</changelog><changelog author="Erik Troan &lt;ewt@redhat.com&gt;" date="873331200">- marked initscript symlinks as missingok
- run newalises after creating /var/spool/mqueue</changelog><changelog author="Erik Troan &lt;ewt@redhat.com&gt;" date="866160000">- built against glibc, udated release to -6 (skipped -5!)</changelog><changelog author="Erik Troan &lt;ewt@redhat.com&gt;" date="859939200">- Added -nsl on the Alpha (for glibc to provide NIS functions).</changelog><changelog author="Erik Troan &lt;ewt@redhat.com&gt;" date="857433600">- Added nis support.</changelog></package>
<package pkgid="27e35fe0f5e2c73a6b9db837dc0e810345d3079e" name="sendmail-devel" arch="x86_64"><version epoch="0" ver="8.12.11" rel="4.SLF3.6"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 8.12.11-4.SLF3.6" date="1165449600">- Put in MASQUERADE_AS(`fnal.gov') into the sendmail-redhat.mc
- Put in define(`confQUEUE_LA', `30')dnl into the sendmail-redhat.mc
- Put in define(`confREFUSE_LA', `50')dnlinto the sendmail-redhat.mc</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.6" date="1149897600">- second incarnation of patch for CVE-2006-1173 (VU#146718)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.5" date="1148428800">- fixed CVE-2006-1173 (VU#146718): possible denial of service issue caused by
  malformed multipart messages (#191203)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.4" date="1142899200">- fixed another time_t timeout problem in the VU patch in usersmtp.c</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.3" date="1142726400">- fixed adaption failure in VU#834865</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.2" date="1142035200">- fixed VU#834865 (#184465)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.1.1" date="1116028800">- enabled _FFR_DEAL_WITH_ERROR_SSL to stop read error messages on saturated
  networks (#146635), thanks to Kevin Krafthefer for the hint</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.1" date="1088640000">- fixed init script to not complain missing sendmail-cf package (#126975)
- better message in /etc/mail/Makefile for missing sendmail-cf package.</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3" date="1088035200">- made /etc/mail/Makefile complain missing sendmail-cf package (#123348)
- moved back to /usr/share/ssl/certs as certificate directory (commented out)
  (#125795)
- fixed ownership of %{_includedir}/libmilter (#73977)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-3.3" date="1084492800">- added trigger to reenable sendmail after update from 8.12.10</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-3" date="1077235200">- RH3.0E version: sasl1, no pie, old_setup (provide /etc/aliases)
- new switches for pie and old_setup</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-2.1" date="1076025600">- new Sendmail.conf for sasl1 (#114726)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-2" date="1075334400">- added information for saslauthd and AUTH (#113463)
- fixed STATUS_FILE in sendmail-redhat.mc (#114302)
- reset mta after update if mta was sendmail (#114257)
- enabled pie for ia64 again</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-1.3" date="1075161600">- removed /etc/aliases (now in setup)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-1.2" date="1074816000">- /usr/lib/sendmail is in alternatives, now
- removed trailing / from stdir
- fixed define for STATUS_FILE</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-1.1" date="1074729600">- disabled pie for ia64</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-1" date="1074643200">- new version 8.12.11
- pie</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.10-7" date="1073952000">- fc2 version (with sasl2)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.10-6" date="1073952000">- reverted to sasl1 for 3.0E: added with_sasl1
- spec file cleanup
- new location for statistics file (/var/log/)</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1071446400">- Fix download url.</changelog><changelog author="Jeff Johnson &lt;jbj@jbj.org&gt; 8.12.10-5" date="1071360000">- rebuild against db-4.2.52.</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1071187200">- fix pam alternatives handling
- add patch from Jakub Jelinek for PIE</changelog><changelog author="Karsten Hopp &lt;karsten@redhat.de&gt; 8.12.10-3" date="1070668800">- fix usage of RPM_OPT_FLAGS variable in spec file
- add makecert.sh script to -doc subpackage
- add cert paths to sendmail.mc</changelog><changelog author="Karsten Hopp &lt;karsten@redhat.de&gt; " date="1069891200">- fix alternatives (#109313)
- enable TLS</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1067299200">- add some more system account entries into /etc/aliases
- add example for a mixed IPv6/IPv4 setup</changelog><changelog author="Harald Hoyer &lt;harald@redhat.de&gt; 8.12.10-2" date="1067040000">- added with_ options</changelog><changelog author="Jeff Johnson &lt;jbj@jbj.org&gt; 8.12.10-1.2" date="1064534400">- rebuild against db-4.2.42.</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1063929600">- update to 8.12.10</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1063843200">- add security patches for CAN-2003-0694 and CAN-2003-0681</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1062460800">- move debug information from sendmail into debuginfo rpm
- on %post make sure /etc/aliases.db and /etc/mail/*.db is correctly
  owned by root
- do not set confTRUSTED_USER to smmsp in sendmail-redhat.mc</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1060387200">- run "make -C /etc/mail" (maybe generating new sendmail.cf, then newaliases
- added $SENDMAIL_OPTARG that could be set by /etc/sysconfig/sendmail #99224</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1059609600">- adjust rpm license tag to say "Sendmail"</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1057363200">- enable pie only for a few archs
- enable full optims for s390 again, compiler seems to be fixed</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1057017600">- apply patch from Ulrich Drepper to support -pie</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1054425600">- make init script more robust #91879</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1052697600">- sendmail-cf requires m4, #90513</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 8.12.9-6" date="1052524800">- move Sendmail.conf from /usr/lib/sasl to /usr/lib/sasl2 and change the
  default pwcheck method to "saslauthd"</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 8.12.9-5" date="1052179200">- configure to use libsasl2 instead of libsasl to avoid linking with both
  (we also link to libldap, which now uses libsasl2)
- link with -ldb instead of -ldb-4.0 on all releases after RHL 7.3 instead
  of just 7.3 (all versions of db4-devel thereafter are expected to provide
  the right linking setup)</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1050451200">- add a "umask 022" before building the *.cf files in /etc/mail/Makefile</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1049500800">- mark /etc/mail/Makefile as config(noreplace) #87688
- mark /etc/pam.d/smtp as config(noreplace) #87731</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1049068800">- update to 8.12.9</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048723200">- call make with the target "all" #86005
- add start/stop/restart as Makefile targets
- add another security patch</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1046908800">- add correct db4-devel requirements for newer releases
- completely re-do many ifdef code in the spec-file
- fix some issues building for older RHL releases</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1046131200">- rebuilt</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1046131200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1046131200">- update to 8.12.8</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1045008000">- rebuilt</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1043280000">- add a confTRUSTED_USER line into sendmail.mc, submit.mc is already ok
- add patch from sendmail.org for cf/m4/proto.m4</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1042502400">- do not reject all numeric login names if hesiod support is
  compiled in.   #80060
- remove reference to non-existing man-pages #74552</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1042416000">- sendmail-8.12.7-etrn.patch from Jos Vos &lt;jos@xos.nl&gt;
- submit.mc: enable "use_ct_file" by default  #80519
- add _FFR_MILTER_ROOT_UNSAFE  #78223</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1042329600">- update to 8.12.7
- hack to make lib64 version work
- downgrade s390 optims to make it compile</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1041897600">- add openssl-devel as a build-time requirement
- preprocess the config file to add the right version of %{_lib}
- add kerberos -I and -L flags to build configuration, needed for newer
  versions of libssl</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1039651200">- always have a queue run interval for sm-msp-queue   #81424
- Jos Vos suggests adding another variable for sm-client queue-run</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1038873600">- add the following changes from Adrian Havill &lt;havill@redhat.com&gt;
  to our default sendmail.mc file:
	- added commented-out-by-default common AUTH/SSL examples
	- updated m4 example and rpm reference
	- added more comment documentation
	- add commented out confAUTO_REBUILD example
	- improve description about MASQUERADE_AS</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1037664000">- add to submit.mc: define(`_MTA_HOST_', `[127.0.0.1]')
  to deliver directly to localhost IP instead of going through DNS
- submit.mc: exchange msp and use_ct_file to better enable it
- do not undefine UUCP_RELAY and BITNET_RELAY
- sendmail.mc: use LOCAL_DOMAIN instead of "Cw" directly
- sendmail.mc: add commented out MASQUERADE_AS example
- re-enable DAEMON variable for now</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1037145600">- remove absolute path names from the PAM configuration, allowing it to be
  used by any arch on a multilib system</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1036368000">- fix mailman alias  #75129</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1036281600">- update to 8.12.6</changelog><changelog author="Phil Knirsch &lt;pknirsch@redhat.com&gt; 8.12.5-7.2" date="1033776000">- Drop optflags to default to build correctly on s390(x).</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 8.12.5-7.1" date="1031875200">- Added fix to build on x86_64</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1030665600">- clean up some specfile cruft
- add more pseudo accounts to /etc/aliases</changelog><changelog author="Phil Knirsch &lt;pknirsch@redhat.com&gt;" date="1027641600">- Only generate new cf files if the /usr/share/sendmail-cf/m4/cf.m4 exists.</changelog><changelog author="Phil Knirsch &lt;pknirsch@redhat.com&gt;" date="1027555200">- Changed the behaviour in /etc/mail/Makefile to generate the sendmail.cf and
  submit.cf from the mc files if they changed.
- Added a small README.redhat that descibed the new mc file behaviour and the
  split into sendmail.cf and submit.cf.</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1027555200">- suggestions form Stephane Lentz:
	- add correct include statement into submit.mc (like sendmail.mc)
	- add commented out further suggestions into submit.mc
	- disable ident lookups</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1026432000">- fix initscript for the second daemon and pidfile location #67910</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1025568000">- update to 8.12.5</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1025222400">- add further queue runs, slight spec-file cleanups</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1023840000">- update to 8.12.4, adjust smrsh patch</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1022198400">- automated rebuild</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1018742400">- update to 8.12.3</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1017187200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1017100800">- fix alternatives --remove  #61737
- add sendmail/SECURITY as docu #61870, #61545</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1016668800">- add libsm.a    #61270
- change from /etc/sendmail.cf to /etc/mail/sendmail.cf
- add milter patch</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="1016064000">- ignore DAEMON=no; that configuration no longer functions</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1016064000">- make sure more version information is in the cf file #54418
- do not use "-b" flag when patching in spec file
- require newer chkconfig version #61035
- fix preun script #60880
- add TMPF to access file creation #60956</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1015718400">- mv include files to /usr/include/libmilter/ #60795
- do not use "-f" option to virtusertable #60196
- ad an example smarthost entry to config file #58298</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 8.12.2-5" date="1015632000">- use alternatives --initscript support
- run chkconfig --add before alternatives</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 8.12.2-3" date="1014940800">- run alternatives --remove in %preun
- add some prereqs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 8.12.2-2" date="1014681600">- fix smmsp useradd invocation in %pre
- switch back to db3 for storing db files</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 8.12.2-1" date="1014249600">- update to 8.12.2 (adds STARTTLS support without need for sfio)
- don't forcibly strip binaries; let the build root handle it
- add creation of the smmsp account (51/51) in %pre
- enable hesiod map support
- modify default config to use an MSP
- comment out 'O AutoRebuildAliases' in %post, otherwise sendmail will
  fail to restart on upgrades</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1014249600">- add proper ifdefs around new alternative stuff to also be able
  to build this for older releases</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 8.11.6-12" date="1012608000">- %triggerpostun on older versions to make sure alternatives work on
  upgrades</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 8.11.6-11" date="1012521600">- clean up alternatives somewhat, provide /usr/sbin/sendmail &amp; friends</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 8.11.6-10" date="1012521600">- Use alternatives</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1011744000">- fix quotation in spec-file</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1010707200">- integrate ugly logic to compile this src.rpm also on older Red Hat
  Linux releases
- clean up spec file and patches a bit
- add db4 support</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1010620800">- fix another path to correct docu
- include sendmail/README in the docu
- compile with -D_FFR_WORKAROUND_BROKEN_NAMESERVERS, but do not
  enable this at runtime
- devel subpackage files owned by root now</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1007769600">- change "-q" to "-s" as option to make #57216
- move milter lib into separate "devel" sub-package
- add include files to devel sub-package #56064
- fix pointer in access file to docu #54351</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1000166400">- add libmilter docu
- add support for userdb to /etc/mail/Makefile
- use "btree" database files if a userdb is used
- buildrequires tcp_wrappers</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="999302400">- fix libmilter support
- fix init script to use /etc/mail/Makefile #52932</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="998784000">- add libmilter library</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="998611200">- update to 8.11.6
- correctly use /etc/mail/statistics</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="997401600">- change init script back to older conventions #51297
- remove DoS patch, not needed anymore #51247</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="997142400">- add option '-t' to procmail for local mail delivery</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="996019200">- point to the map files in sendmail.cf as pointed out by
  David Beveridge &lt;David@beveridge.com&gt;</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="995932800">- add build requires #49695
- do not call "userdel"</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="994809600">- change sendmail.cf to "noreplace"</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="991958400">- update to 8.11.4</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="989452800">- update to 8.11.3
- add "localhost.localdomain" to the list of hostnames accepted
  for local delivery "Cw" in /etc/mail/sendmail.mc
- add patches from Pekka Savola &lt;pekkas@netcore.fi&gt;
	- Enable IPv6 at compile time, patch for glibc 2.2 from PLD
	- Add a commented-out IPv6 daemon .mc line to sendmail.mc
	- buildrequire: openldap-devel, cyrus-sasl-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="983318400">- add noreplace for /etc/sysconfig/sendmail and /etc/mail/sendmail.mc</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="982800000">- add changes from Christopher McCrory &lt;chrismcc@pricegrabber.com&gt;:
	- prepare /etc/mail/Makefile for more maps not shipped with this rpm
	- changed sendmail.mc to include some more commented out options,
	  so that people are directly pointed at important options
	- add /etc/pam.d/smtp for AUTH
	- add FEATURE(use_ct_file) and /etc/mail/trusted-users</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="982368000">- don't obsolete postfix and exim, only conflict (for RHN purposes)</changelog><changelog author="Trond Eivind Glomsr&#xF8;d &lt;teg@redhat.com&gt;" date="982281600">- obsolete and conflict with exim and postfix</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="982195200">- fix devision by zero bug in #20395
- mv /usr/lib/sendmail-cf /usr/share/sendmail-cf</changelog><changelog author="Trond Eivind Glomsr&#xF8;d &lt;teg@redhat.com&gt;" date="981590400">- i18n tweaks to initscript</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="981590400">- aliases.db should be owned by group root</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="980380800">- prepare for startup-script translation</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="980294400">- enable daemon mode again, but only listen to the loopback device
  instead of all devices.
- do not include check.tar with old anti-spam rules</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="979344000">- fix configuration of /etc/aliases</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="978998400">- fix interoperation problems with communigate pro
- disable msa</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="978652800">- update to (security release) 8.11.2
- build also on RHL 6.x #16061
- include smrsh man-page #17901
- use the "-f" flag for makemap to preserve case for virtusertable
  and userdb in /etc/mail/Makefile - suggested by Harald Hoyer
- fix /usr/doc -&gt; usr/share/doc in docu #20611
- wrong path in sendmail.mc #20691
- tcp-wrapper support wasn't enabled correctly #21642
- do not expose user "root" when masquerading like in older releases #21643
- disable the VRFY and EXPN smtp commands #21801
- disable queue-runs for normal users (restrictqrun privacy flag)
- fix typo in sendmail.mc #21880, #22682
- disable daemon mode to see what needs fixing</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="970531200">- update to 8.11.1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968457600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="966988800">- apply fixes for LDAP maps being closed too soon</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="966297600">- provide /usr/lib/sasl/Sendmail.conf so that people know we can use it (#16064)</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="965692800">- enable listening on the smtp port again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="965433600">- fix "missing find_m4.sh" problem by defining M4=/usr/bin/m4 (#14767)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="965088000">- okay, enable LDAP support again
- enable SMTP auth support via Cyrus SASL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="964569600">- disable the LDAP support until we can remove the sendmail-&gt;OpenLDAP-&gt;perl dep
- fix prereq</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="964569600">- update to sendmail 8.11.0
- add LDAP support</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="964137600">- move initscript back</changelog><changelog author="Prospector &lt;bugzilla@redhat.com&gt;" date="963446400">- automatic rebuild</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="963187200">- require procmail
- add further aliases</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="963100800">- prereq init.d
- fix typo</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="962755200">- ignore error from useradd</changelog><changelog author="Than Ngo &lt;than@redhat.de&gt;" date="962409600">- FHS fixes
- /etc/rc.d/init.d -&gt; /etc/init.d
- fix initscript</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="961804800">- change to /usr/share/man</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="961632000">- turn off daemon behaviour by default</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="961372800">- rebuild, fix dependencies</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="960681600">- prereq /usr/sbin/useradd</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="958780800">- enable MAP_REGEX
- enable tcp_wrapper support</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="958694400">- fix etc/mail/aliases -&gt; /etc/aliases in sendmail-redhat.mc</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="957398400">- update to 8.10.1
- fix build without sendmail installed
- add 'mailnull' user</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="953164800">- update to 8.10.0
- remove compatiblity chkconfig links
- add a mailnull user for sendmail to use</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="950832000">- break the hard link for makemap and create it as a symlnk (#8223)</changelog><changelog author="Bernhard Rosenkr&#xE4;nzer &lt;bero@redhat.com&gt;" date="950832000">- Fix location of mailertable (Bug #6035)</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="949795200">- fixes for non-root builds (#8178)</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="949536000">- change perms on /etc/sysconfig/sendmail from 0755 to 0644
- allow compressed man-pages</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="944179200">- add patch to prevent the DoS when rebuilding aliases</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="936230400">- install man pages, not groff output (#3746).
- use dnl not '#' in m4 comment (#3749).
- add FEATURE(mailtertable) to the config -- example file needs this (#4649).
- use db2 not db1.</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="936144000">- add 127.0.0.1 to /etc/mail/access to avoid IDENT: relay problem (#3178).</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="936144000">- chkconfig --del in preun, not postun (#3982)</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="934848000">- initscript munging</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="930960000">- fixed typo bug in comment in the default .mc file (#2812)</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="924566400">- fox the awk scripts in the postinstall
- enable FEATURE(accept_unresolvable_domains) by default to make laptop
  users happy.</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="924480000">- make the redhat.mc be a separate source files. Sanitize patches that used
  to touch it.
- install redhat.mc as /etc/sendmail.mc so that people can easily modify
  their sendmail.cf configurations.</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="923356800">- fixed virtusertable patch
- make smrsh look into /etc/smrsh</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="922752000">- remove noreplace attr from sednmail.cf.</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="922406400">- provide a more sane /etc/mail/access default config file
- use makemap to initializa the empty databases, not touch
- added a small, but helpful /etc/mail/Makefile</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="922147200">- correxct dangling symlinks.
- check for map file existence in %post.</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt; " date="922060800">- auto rebuild in the new build environment (release 3)</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="921888000">- improved 8.9.3 config from Mike McHenry &lt;mmchen@minn.net&gt;</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="921628800">- version 8.9.3</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="914976000">- build for 6.0
- use the libdb1 stuff correctly</changelog><changelog author="Michael K. Johnson &lt;johnsonm@redhat.com&gt;" date="906422400">- Allow empty QUEUE in /etc/sysconfig/sendmail for those who
  want to run sendmail in daemon mode without processing the
  queue regularly.</changelog><changelog author="Michael K. Johnson &lt;johnsonm@redhat.com&gt;" date="906076800">- /etc/sysconfig/sendmail</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="904348800">- recompile statically linked binary for 5.2/sparc</changelog><changelog author="Prospector System &lt;bugs@redhat.com&gt;" date="894412800">- translations modified for de, fr, tr</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="894153600">- enhanced initscripts</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="894067200">- added a rmail patch</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="878169600">- argh!  Fixed some of the db1 handling that had to be added for glibc 2.1</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="877737600">- added support for db1 on SPARC</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="877046400">- added chkconfig support
- various spec file cleanups
- changed group to Networking/Daemons (from Daemons).  Sure, it runs on
  non networked systems, but who really *needs* it then?</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="876355200">- made /etc/mail/deny.db a ghost
- removed preun that used to remove deny.db (ghost handles that now)
- NOTE: upgrading from the sendmail packages in 4.8, 4.8.1, and possibly
  4.9 (all Red Hat betas between 4.2 and 5.0) could cause problems.  You
  may need to do a makemap in /etc/mail and a newaliases after upgrading
  from those packages.  Upgrading from 4.2 or prior should be fine.</changelog><changelog author="Erik Troan &lt;ewt@redhat.com&gt;" date="876182400">- made aliases.db a ghost</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="875059200">- fixed preuninstall script to handle aliases.db on upgrades properly</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="874368000">- fixed post-install output and changed /var/spool/mqueue to 755</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="874022400">- fixed /usr/lib/sendmail-cf paths</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="873849600">- updated to 8.8.7
- added some spam filtration
- combined some makefile patches
- added BuildRoot support</changelog><changelog author="Erik Troan &lt;ewt@redhat.com&gt;" date="873331200">- marked initscript symlinks as missingok
- run newalises after creating /var/spool/mqueue</changelog><changelog author="Erik Troan &lt;ewt@redhat.com&gt;" date="866160000">- built against glibc, udated release to -6 (skipped -5!)</changelog><changelog author="Erik Troan &lt;ewt@redhat.com&gt;" date="859939200">- Added -nsl on the Alpha (for glibc to provide NIS functions).</changelog><changelog author="Erik Troan &lt;ewt@redhat.com&gt;" date="857433600">- Added nis support.</changelog></package>
<package pkgid="28c622456fa4230dbe8001e4d68598e3f48be225" name="sendmail-doc" arch="x86_64"><version epoch="0" ver="8.12.11" rel="4.SLF3.6"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 8.12.11-4.SLF3.6" date="1165449600">- Put in MASQUERADE_AS(`fnal.gov') into the sendmail-redhat.mc
- Put in define(`confQUEUE_LA', `30')dnl into the sendmail-redhat.mc
- Put in define(`confREFUSE_LA', `50')dnlinto the sendmail-redhat.mc</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.6" date="1149897600">- second incarnation of patch for CVE-2006-1173 (VU#146718)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.5" date="1148428800">- fixed CVE-2006-1173 (VU#146718): possible denial of service issue caused by
  malformed multipart messages (#191203)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.4" date="1142899200">- fixed another time_t timeout problem in the VU patch in usersmtp.c</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.3" date="1142726400">- fixed adaption failure in VU#834865</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.2" date="1142035200">- fixed VU#834865 (#184465)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.1.1" date="1116028800">- enabled _FFR_DEAL_WITH_ERROR_SSL to stop read error messages on saturated
  networks (#146635), thanks to Kevin Krafthefer for the hint</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.1" date="1088640000">- fixed init script to not complain missing sendmail-cf package (#126975)
- better message in /etc/mail/Makefile for missing sendmail-cf package.</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3" date="1088035200">- made /etc/mail/Makefile complain missing sendmail-cf package (#123348)
- moved back to /usr/share/ssl/certs as certificate directory (commented out)
  (#125795)
- fixed ownership of %{_includedir}/libmilter (#73977)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-3.3" date="1084492800">- added trigger to reenable sendmail after update from 8.12.10</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-3" date="1077235200">- RH3.0E version: sasl1, no pie, old_setup (provide /etc/aliases)
- new switches for pie and old_setup</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-2.1" date="1076025600">- new Sendmail.conf for sasl1 (#114726)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-2" date="1075334400">- added information for saslauthd and AUTH (#113463)
- fixed STATUS_FILE in sendmail-redhat.mc (#114302)
- reset mta after update if mta was sendmail (#114257)
- enabled pie for ia64 again</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-1.3" date="1075161600">- removed /etc/aliases (now in setup)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-1.2" date="1074816000">- /usr/lib/sendmail is in alternatives, now
- removed trailing / from stdir
- fixed define for STATUS_FILE</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-1.1" date="1074729600">- disabled pie for ia64</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-1" date="1074643200">- new version 8.12.11
- pie</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.10-7" date="1073952000">- fc2 version (with sasl2)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.10-6" date="1073952000">- reverted to sasl1 for 3.0E: added with_sasl1
- spec file cleanup
- new location for statistics file (/var/log/)</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1071446400">- Fix download url.</changelog><changelog author="Jeff Johnson &lt;jbj@jbj.org&gt; 8.12.10-5" date="1071360000">- rebuild against db-4.2.52.</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1071187200">- fix pam alternatives handling
- add patch from Jakub Jelinek for PIE</changelog><changelog author="Karsten Hopp &lt;karsten@redhat.de&gt; 8.12.10-3" date="1070668800">- fix usage of RPM_OPT_FLAGS variable in spec file
- add makecert.sh script to -doc subpackage
- add cert paths to sendmail.mc</changelog><changelog author="Karsten Hopp &lt;karsten@redhat.de&gt; " date="1069891200">- fix alternatives (#109313)
- enable TLS</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1067299200">- add some more system account entries into /etc/aliases
- add example for a mixed IPv6/IPv4 setup</changelog><changelog author="Harald Hoyer &lt;harald@redhat.de&gt; 8.12.10-2" date="1067040000">- added with_ options</changelog><changelog author="Jeff Johnson &lt;jbj@jbj.org&gt; 8.12.10-1.2" date="1064534400">- rebuild against db-4.2.42.</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1063929600">- update to 8.12.10</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1063843200">- add security patches for CAN-2003-0694 and CAN-2003-0681</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1062460800">- move debug information from sendmail into debuginfo rpm
- on %post make sure /etc/aliases.db and /etc/mail/*.db is correctly
  owned by root
- do not set confTRUSTED_USER to smmsp in sendmail-redhat.mc</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1060387200">- run "make -C /etc/mail" (maybe generating new sendmail.cf, then newaliases
- added $SENDMAIL_OPTARG that could be set by /etc/sysconfig/sendmail #99224</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1059609600">- adjust rpm license tag to say "Sendmail"</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1057363200">- enable pie only for a few archs
- enable full optims for s390 again, compiler seems to be fixed</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1057017600">- apply patch from Ulrich Drepper to support -pie</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1054425600">- make init script more robust #91879</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1052697600">- sendmail-cf requires m4, #90513</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 8.12.9-6" date="1052524800">- move Sendmail.conf from /usr/lib/sasl to /usr/lib/sasl2 and change the
  default pwcheck method to "saslauthd"</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 8.12.9-5" date="1052179200">- configure to use libsasl2 instead of libsasl to avoid linking with both
  (we also link to libldap, which now uses libsasl2)
- link with -ldb instead of -ldb-4.0 on all releases after RHL 7.3 instead
  of just 7.3 (all versions of db4-devel thereafter are expected to provide
  the right linking setup)</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1050451200">- add a "umask 022" before building the *.cf files in /etc/mail/Makefile</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1049500800">- mark /etc/mail/Makefile as config(noreplace) #87688
- mark /etc/pam.d/smtp as config(noreplace) #87731</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1049068800">- update to 8.12.9</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048723200">- call make with the target "all" #86005
- add start/stop/restart as Makefile targets
- add another security patch</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1046908800">- add correct db4-devel requirements for newer releases
- completely re-do many ifdef code in the spec-file
- fix some issues building for older RHL releases</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1046131200">- rebuilt</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1046131200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1046131200">- update to 8.12.8</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1045008000">- rebuilt</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1043280000">- add a confTRUSTED_USER line into sendmail.mc, submit.mc is already ok
- add patch from sendmail.org for cf/m4/proto.m4</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1042502400">- do not reject all numeric login names if hesiod support is
  compiled in.   #80060
- remove reference to non-existing man-pages #74552</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1042416000">- sendmail-8.12.7-etrn.patch from Jos Vos &lt;jos@xos.nl&gt;
- submit.mc: enable "use_ct_file" by default  #80519
- add _FFR_MILTER_ROOT_UNSAFE  #78223</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1042329600">- update to 8.12.7
- hack to make lib64 version work
- downgrade s390 optims to make it compile</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1041897600">- add openssl-devel as a build-time requirement
- preprocess the config file to add the right version of %{_lib}
- add kerberos -I and -L flags to build configuration, needed for newer
  versions of libssl</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1039651200">- always have a queue run interval for sm-msp-queue   #81424
- Jos Vos suggests adding another variable for sm-client queue-run</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1038873600">- add the following changes from Adrian Havill &lt;havill@redhat.com&gt;
  to our default sendmail.mc file:
	- added commented-out-by-default common AUTH/SSL examples
	- updated m4 example and rpm reference
	- added more comment documentation
	- add commented out confAUTO_REBUILD example
	- improve description about MASQUERADE_AS</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1037664000">- add to submit.mc: define(`_MTA_HOST_', `[127.0.0.1]')
  to deliver directly to localhost IP instead of going through DNS
- submit.mc: exchange msp and use_ct_file to better enable it
- do not undefine UUCP_RELAY and BITNET_RELAY
- sendmail.mc: use LOCAL_DOMAIN instead of "Cw" directly
- sendmail.mc: add commented out MASQUERADE_AS example
- re-enable DAEMON variable for now</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1037145600">- remove absolute path names from the PAM configuration, allowing it to be
  used by any arch on a multilib system</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1036368000">- fix mailman alias  #75129</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1036281600">- update to 8.12.6</changelog><changelog author="Phil Knirsch &lt;pknirsch@redhat.com&gt; 8.12.5-7.2" date="1033776000">- Drop optflags to default to build correctly on s390(x).</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 8.12.5-7.1" date="1031875200">- Added fix to build on x86_64</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1030665600">- clean up some specfile cruft
- add more pseudo accounts to /etc/aliases</changelog><changelog author="Phil Knirsch &lt;pknirsch@redhat.com&gt;" date="1027641600">- Only generate new cf files if the /usr/share/sendmail-cf/m4/cf.m4 exists.</changelog><changelog author="Phil Knirsch &lt;pknirsch@redhat.com&gt;" date="1027555200">- Changed the behaviour in /etc/mail/Makefile to generate the sendmail.cf and
  submit.cf from the mc files if they changed.
- Added a small README.redhat that descibed the new mc file behaviour and the
  split into sendmail.cf and submit.cf.</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1027555200">- suggestions form Stephane Lentz:
	- add correct include statement into submit.mc (like sendmail.mc)
	- add commented out further suggestions into submit.mc
	- disable ident lookups</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1026432000">- fix initscript for the second daemon and pidfile location #67910</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1025568000">- update to 8.12.5</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1025222400">- add further queue runs, slight spec-file cleanups</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1023840000">- update to 8.12.4, adjust smrsh patch</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1022198400">- automated rebuild</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1018742400">- update to 8.12.3</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1017187200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1017100800">- fix alternatives --remove  #61737
- add sendmail/SECURITY as docu #61870, #61545</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1016668800">- add libsm.a    #61270
- change from /etc/sendmail.cf to /etc/mail/sendmail.cf
- add milter patch</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="1016064000">- ignore DAEMON=no; that configuration no longer functions</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1016064000">- make sure more version information is in the cf file #54418
- do not use "-b" flag when patching in spec file
- require newer chkconfig version #61035
- fix preun script #60880
- add TMPF to access file creation #60956</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1015718400">- mv include files to /usr/include/libmilter/ #60795
- do not use "-f" option to virtusertable #60196
- ad an example smarthost entry to config file #58298</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 8.12.2-5" date="1015632000">- use alternatives --initscript support
- run chkconfig --add before alternatives</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 8.12.2-3" date="1014940800">- run alternatives --remove in %preun
- add some prereqs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 8.12.2-2" date="1014681600">- fix smmsp useradd invocation in %pre
- switch back to db3 for storing db files</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 8.12.2-1" date="1014249600">- update to 8.12.2 (adds STARTTLS support without need for sfio)
- don't forcibly strip binaries; let the build root handle it
- add creation of the smmsp account (51/51) in %pre
- enable hesiod map support
- modify default config to use an MSP
- comment out 'O AutoRebuildAliases' in %post, otherwise sendmail will
  fail to restart on upgrades</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1014249600">- add proper ifdefs around new alternative stuff to also be able
  to build this for older releases</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 8.11.6-12" date="1012608000">- %triggerpostun on older versions to make sure alternatives work on
  upgrades</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 8.11.6-11" date="1012521600">- clean up alternatives somewhat, provide /usr/sbin/sendmail &amp; friends</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 8.11.6-10" date="1012521600">- Use alternatives</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1011744000">- fix quotation in spec-file</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1010707200">- integrate ugly logic to compile this src.rpm also on older Red Hat
  Linux releases
- clean up spec file and patches a bit
- add db4 support</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1010620800">- fix another path to correct docu
- include sendmail/README in the docu
- compile with -D_FFR_WORKAROUND_BROKEN_NAMESERVERS, but do not
  enable this at runtime
- devel subpackage files owned by root now</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1007769600">- change "-q" to "-s" as option to make #57216
- move milter lib into separate "devel" sub-package
- add include files to devel sub-package #56064
- fix pointer in access file to docu #54351</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1000166400">- add libmilter docu
- add support for userdb to /etc/mail/Makefile
- use "btree" database files if a userdb is used
- buildrequires tcp_wrappers</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="999302400">- fix libmilter support
- fix init script to use /etc/mail/Makefile #52932</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="998784000">- add libmilter library</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="998611200">- update to 8.11.6
- correctly use /etc/mail/statistics</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="997401600">- change init script back to older conventions #51297
- remove DoS patch, not needed anymore #51247</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="997142400">- add option '-t' to procmail for local mail delivery</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="996019200">- point to the map files in sendmail.cf as pointed out by
  David Beveridge &lt;David@beveridge.com&gt;</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="995932800">- add build requires #49695
- do not call "userdel"</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="994809600">- change sendmail.cf to "noreplace"</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="991958400">- update to 8.11.4</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="989452800">- update to 8.11.3
- add "localhost.localdomain" to the list of hostnames accepted
  for local delivery "Cw" in /etc/mail/sendmail.mc
- add patches from Pekka Savola &lt;pekkas@netcore.fi&gt;
	- Enable IPv6 at compile time, patch for glibc 2.2 from PLD
	- Add a commented-out IPv6 daemon .mc line to sendmail.mc
	- buildrequire: openldap-devel, cyrus-sasl-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="983318400">- add noreplace for /etc/sysconfig/sendmail and /etc/mail/sendmail.mc</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="982800000">- add changes from Christopher McCrory &lt;chrismcc@pricegrabber.com&gt;:
	- prepare /etc/mail/Makefile for more maps not shipped with this rpm
	- changed sendmail.mc to include some more commented out options,
	  so that people are directly pointed at important options
	- add /etc/pam.d/smtp for AUTH
	- add FEATURE(use_ct_file) and /etc/mail/trusted-users</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="982368000">- don't obsolete postfix and exim, only conflict (for RHN purposes)</changelog><changelog author="Trond Eivind Glomsr&#xF8;d &lt;teg@redhat.com&gt;" date="982281600">- obsolete and conflict with exim and postfix</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="982195200">- fix devision by zero bug in #20395
- mv /usr/lib/sendmail-cf /usr/share/sendmail-cf</changelog><changelog author="Trond Eivind Glomsr&#xF8;d &lt;teg@redhat.com&gt;" date="981590400">- i18n tweaks to initscript</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="981590400">- aliases.db should be owned by group root</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="980380800">- prepare for startup-script translation</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="980294400">- enable daemon mode again, but only listen to the loopback device
  instead of all devices.
- do not include check.tar with old anti-spam rules</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="979344000">- fix configuration of /etc/aliases</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="978998400">- fix interoperation problems with communigate pro
- disable msa</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="978652800">- update to (security release) 8.11.2
- build also on RHL 6.x #16061
- include smrsh man-page #17901
- use the "-f" flag for makemap to preserve case for virtusertable
  and userdb in /etc/mail/Makefile - suggested by Harald Hoyer
- fix /usr/doc -&gt; usr/share/doc in docu #20611
- wrong path in sendmail.mc #20691
- tcp-wrapper support wasn't enabled correctly #21642
- do not expose user "root" when masquerading like in older releases #21643
- disable the VRFY and EXPN smtp commands #21801
- disable queue-runs for normal users (restrictqrun privacy flag)
- fix typo in sendmail.mc #21880, #22682
- disable daemon mode to see what needs fixing</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="970531200">- update to 8.11.1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968457600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="966988800">- apply fixes for LDAP maps being closed too soon</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="966297600">- provide /usr/lib/sasl/Sendmail.conf so that people know we can use it (#16064)</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="965692800">- enable listening on the smtp port again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="965433600">- fix "missing find_m4.sh" problem by defining M4=/usr/bin/m4 (#14767)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="965088000">- okay, enable LDAP support again
- enable SMTP auth support via Cyrus SASL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="964569600">- disable the LDAP support until we can remove the sendmail-&gt;OpenLDAP-&gt;perl dep
- fix prereq</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="964569600">- update to sendmail 8.11.0
- add LDAP support</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="964137600">- move initscript back</changelog><changelog author="Prospector &lt;bugzilla@redhat.com&gt;" date="963446400">- automatic rebuild</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="963187200">- require procmail
- add further aliases</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="963100800">- prereq init.d
- fix typo</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="962755200">- ignore error from useradd</changelog><changelog author="Than Ngo &lt;than@redhat.de&gt;" date="962409600">- FHS fixes
- /etc/rc.d/init.d -&gt; /etc/init.d
- fix initscript</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="961804800">- change to /usr/share/man</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="961632000">- turn off daemon behaviour by default</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="961372800">- rebuild, fix dependencies</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="960681600">- prereq /usr/sbin/useradd</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="958780800">- enable MAP_REGEX
- enable tcp_wrapper support</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="958694400">- fix etc/mail/aliases -&gt; /etc/aliases in sendmail-redhat.mc</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="957398400">- update to 8.10.1
- fix build without sendmail installed
- add 'mailnull' user</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="953164800">- update to 8.10.0
- remove compatiblity chkconfig links
- add a mailnull user for sendmail to use</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="950832000">- break the hard link for makemap and create it as a symlnk (#8223)</changelog><changelog author="Bernhard Rosenkr&#xE4;nzer &lt;bero@redhat.com&gt;" date="950832000">- Fix location of mailertable (Bug #6035)</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="949795200">- fixes for non-root builds (#8178)</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="949536000">- change perms on /etc/sysconfig/sendmail from 0755 to 0644
- allow compressed man-pages</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="944179200">- add patch to prevent the DoS when rebuilding aliases</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="936230400">- install man pages, not groff output (#3746).
- use dnl not '#' in m4 comment (#3749).
- add FEATURE(mailtertable) to the config -- example file needs this (#4649).
- use db2 not db1.</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="936144000">- add 127.0.0.1 to /etc/mail/access to avoid IDENT: relay problem (#3178).</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="936144000">- chkconfig --del in preun, not postun (#3982)</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="934848000">- initscript munging</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="930960000">- fixed typo bug in comment in the default .mc file (#2812)</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="924566400">- fox the awk scripts in the postinstall
- enable FEATURE(accept_unresolvable_domains) by default to make laptop
  users happy.</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="924480000">- make the redhat.mc be a separate source files. Sanitize patches that used
  to touch it.
- install redhat.mc as /etc/sendmail.mc so that people can easily modify
  their sendmail.cf configurations.</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="923356800">- fixed virtusertable patch
- make smrsh look into /etc/smrsh</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="922752000">- remove noreplace attr from sednmail.cf.</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="922406400">- provide a more sane /etc/mail/access default config file
- use makemap to initializa the empty databases, not touch
- added a small, but helpful /etc/mail/Makefile</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="922147200">- correxct dangling symlinks.
- check for map file existence in %post.</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt; " date="922060800">- auto rebuild in the new build environment (release 3)</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="921888000">- improved 8.9.3 config from Mike McHenry &lt;mmchen@minn.net&gt;</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="921628800">- version 8.9.3</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="914976000">- build for 6.0
- use the libdb1 stuff correctly</changelog><changelog author="Michael K. Johnson &lt;johnsonm@redhat.com&gt;" date="906422400">- Allow empty QUEUE in /etc/sysconfig/sendmail for those who
  want to run sendmail in daemon mode without processing the
  queue regularly.</changelog><changelog author="Michael K. Johnson &lt;johnsonm@redhat.com&gt;" date="906076800">- /etc/sysconfig/sendmail</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="904348800">- recompile statically linked binary for 5.2/sparc</changelog><changelog author="Prospector System &lt;bugs@redhat.com&gt;" date="894412800">- translations modified for de, fr, tr</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="894153600">- enhanced initscripts</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="894067200">- added a rmail patch</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="878169600">- argh!  Fixed some of the db1 handling that had to be added for glibc 2.1</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="877737600">- added support for db1 on SPARC</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="877046400">- added chkconfig support
- various spec file cleanups
- changed group to Networking/Daemons (from Daemons).  Sure, it runs on
  non networked systems, but who really *needs* it then?</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="876355200">- made /etc/mail/deny.db a ghost
- removed preun that used to remove deny.db (ghost handles that now)
- NOTE: upgrading from the sendmail packages in 4.8, 4.8.1, and possibly
  4.9 (all Red Hat betas between 4.2 and 5.0) could cause problems.  You
  may need to do a makemap in /etc/mail and a newaliases after upgrading
  from those packages.  Upgrading from 4.2 or prior should be fine.</changelog><changelog author="Erik Troan &lt;ewt@redhat.com&gt;" date="876182400">- made aliases.db a ghost</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="875059200">- fixed preuninstall script to handle aliases.db on upgrades properly</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="874368000">- fixed post-install output and changed /var/spool/mqueue to 755</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="874022400">- fixed /usr/lib/sendmail-cf paths</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="873849600">- updated to 8.8.7
- added some spam filtration
- combined some makefile patches
- added BuildRoot support</changelog><changelog author="Erik Troan &lt;ewt@redhat.com&gt;" date="873331200">- marked initscript symlinks as missingok
- run newalises after creating /var/spool/mqueue</changelog><changelog author="Erik Troan &lt;ewt@redhat.com&gt;" date="866160000">- built against glibc, udated release to -6 (skipped -5!)</changelog><changelog author="Erik Troan &lt;ewt@redhat.com&gt;" date="859939200">- Added -nsl on the Alpha (for glibc to provide NIS functions).</changelog><changelog author="Erik Troan &lt;ewt@redhat.com&gt;" date="857433600">- Added nis support.</changelog></package>
<package pkgid="fef719eedccf175f11de09b668f18d3b21aa10d4" name="openssh" arch="x86_64"><version epoch="0" ver="3.9p1" rel="8.SLF.3.21"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.21" date="1179273600">- Rebuilt from the latest errata 3.9p1-8.RHEL4.20</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.SLF.3.20" date="1163203200">- CVE-2006-5794 properly detect failed key verify in monitor (#21640)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.19" date="1160524800">- add support for hashed known_hosts file (#162681)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.18" date="1160092800">- fixed client behaviour when remote program generates large output (#184357)
- don't report duplicate syslog messages, use correct local time (#203671)
- don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)
- fix audit patch to include loginrec.h in auth.c (#193710)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.18" date="1159833600">- Built to do aklog with the --with-afs-krb5 config option
- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/
- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have pam.d/sshd use the cryptocard pam (fermi only)
- Added patches to have sshd_config be kerberos only (fermi only)
- Took out "KerberosGetAFSToken no" from sshd_config (fermi only)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.17" date="1159488000">- CVE-2006-5051 don't call cleanups from signal handler (#208347)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.16" date="1159401600">- CVE-2006-4924 prevent DoS on deattack detector code (#207955)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.15" date="1146528000">- fixed the scp-no-system patch to return zero from scp when copy
  succeeded (#190147)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.14" date="1141344000">- changed the audit patch so it tolerates kernels without auditing
  support</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.13" date="1140652800">- don't overwrite last argument of scp if multiple files are copied
  and it isn't a directory (patch by Bjorn Augustsson #178923)
- send final nonquery messages from pam_authenticate to client
  when kbd_int is used (#174995)
- removed another syslog call from signal handler (#180607)
- enable syslog in chroot by opening syslog fd permanently (#182281)
- fixed audit patch so it prevents login when auditing fails (#182930)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="ba119cb453bde19c2524b3f7132584fb6f9a248d" name="openssh-askpass" arch="x86_64"><version epoch="0" ver="3.9p1" rel="8.SLF.3.21"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.21" date="1179273600">- Rebuilt from the latest errata 3.9p1-8.RHEL4.20</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.SLF.3.20" date="1163203200">- CVE-2006-5794 properly detect failed key verify in monitor (#21640)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.19" date="1160524800">- add support for hashed known_hosts file (#162681)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.18" date="1160092800">- fixed client behaviour when remote program generates large output (#184357)
- don't report duplicate syslog messages, use correct local time (#203671)
- don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)
- fix audit patch to include loginrec.h in auth.c (#193710)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.18" date="1159833600">- Built to do aklog with the --with-afs-krb5 config option
- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/
- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have pam.d/sshd use the cryptocard pam (fermi only)
- Added patches to have sshd_config be kerberos only (fermi only)
- Took out "KerberosGetAFSToken no" from sshd_config (fermi only)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.17" date="1159488000">- CVE-2006-5051 don't call cleanups from signal handler (#208347)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.16" date="1159401600">- CVE-2006-4924 prevent DoS on deattack detector code (#207955)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.15" date="1146528000">- fixed the scp-no-system patch to return zero from scp when copy
  succeeded (#190147)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.14" date="1141344000">- changed the audit patch so it tolerates kernels without auditing
  support</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.13" date="1140652800">- don't overwrite last argument of scp if multiple files are copied
  and it isn't a directory (patch by Bjorn Augustsson #178923)
- send final nonquery messages from pam_authenticate to client
  when kbd_int is used (#174995)
- removed another syslog call from signal handler (#180607)
- enable syslog in chroot by opening syslog fd permanently (#182281)
- fixed audit patch so it prevents login when auditing fails (#182930)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="18a87301c1690c2c0354c95554d3cd1d0df1f5a8" name="openssh-askpass-gnome" arch="x86_64"><version epoch="0" ver="3.9p1" rel="8.SLF.3.21"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.21" date="1179273600">- Rebuilt from the latest errata 3.9p1-8.RHEL4.20</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.SLF.3.20" date="1163203200">- CVE-2006-5794 properly detect failed key verify in monitor (#21640)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.19" date="1160524800">- add support for hashed known_hosts file (#162681)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.18" date="1160092800">- fixed client behaviour when remote program generates large output (#184357)
- don't report duplicate syslog messages, use correct local time (#203671)
- don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)
- fix audit patch to include loginrec.h in auth.c (#193710)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.18" date="1159833600">- Built to do aklog with the --with-afs-krb5 config option
- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/
- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have pam.d/sshd use the cryptocard pam (fermi only)
- Added patches to have sshd_config be kerberos only (fermi only)
- Took out "KerberosGetAFSToken no" from sshd_config (fermi only)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.17" date="1159488000">- CVE-2006-5051 don't call cleanups from signal handler (#208347)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.16" date="1159401600">- CVE-2006-4924 prevent DoS on deattack detector code (#207955)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.15" date="1146528000">- fixed the scp-no-system patch to return zero from scp when copy
  succeeded (#190147)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.14" date="1141344000">- changed the audit patch so it tolerates kernels without auditing
  support</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.13" date="1140652800">- don't overwrite last argument of scp if multiple files are copied
  and it isn't a directory (patch by Bjorn Augustsson #178923)
- send final nonquery messages from pam_authenticate to client
  when kbd_int is used (#174995)
- removed another syslog call from signal handler (#180607)
- enable syslog in chroot by opening syslog fd permanently (#182281)
- fixed audit patch so it prevents login when auditing fails (#182930)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="e89bec3715d21c313d98b0e14772e549f95e28ed" name="openssh-clients" arch="x86_64"><version epoch="0" ver="3.9p1" rel="8.SLF.3.21"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.21" date="1179273600">- Rebuilt from the latest errata 3.9p1-8.RHEL4.20</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.SLF.3.20" date="1163203200">- CVE-2006-5794 properly detect failed key verify in monitor (#21640)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.19" date="1160524800">- add support for hashed known_hosts file (#162681)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.18" date="1160092800">- fixed client behaviour when remote program generates large output (#184357)
- don't report duplicate syslog messages, use correct local time (#203671)
- don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)
- fix audit patch to include loginrec.h in auth.c (#193710)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.18" date="1159833600">- Built to do aklog with the --with-afs-krb5 config option
- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/
- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have pam.d/sshd use the cryptocard pam (fermi only)
- Added patches to have sshd_config be kerberos only (fermi only)
- Took out "KerberosGetAFSToken no" from sshd_config (fermi only)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.17" date="1159488000">- CVE-2006-5051 don't call cleanups from signal handler (#208347)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.16" date="1159401600">- CVE-2006-4924 prevent DoS on deattack detector code (#207955)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.15" date="1146528000">- fixed the scp-no-system patch to return zero from scp when copy
  succeeded (#190147)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.14" date="1141344000">- changed the audit patch so it tolerates kernels without auditing
  support</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.13" date="1140652800">- don't overwrite last argument of scp if multiple files are copied
  and it isn't a directory (patch by Bjorn Augustsson #178923)
- send final nonquery messages from pam_authenticate to client
  when kbd_int is used (#174995)
- removed another syslog call from signal handler (#180607)
- enable syslog in chroot by opening syslog fd permanently (#182281)
- fixed audit patch so it prevents login when auditing fails (#182930)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="ad8bd50cb5589b5e44e0ca62cd478e3ec53ff355" name="openssh-server" arch="x86_64"><version epoch="0" ver="3.9p1" rel="8.SLF.3.21"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.21" date="1179273600">- Rebuilt from the latest errata 3.9p1-8.RHEL4.20</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.SLF.3.20" date="1163203200">- CVE-2006-5794 properly detect failed key verify in monitor (#21640)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.19" date="1160524800">- add support for hashed known_hosts file (#162681)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.18" date="1160092800">- fixed client behaviour when remote program generates large output (#184357)
- don't report duplicate syslog messages, use correct local time (#203671)
- don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)
- fix audit patch to include loginrec.h in auth.c (#193710)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.18" date="1159833600">- Built to do aklog with the --with-afs-krb5 config option
- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/
- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have pam.d/sshd use the cryptocard pam (fermi only)
- Added patches to have sshd_config be kerberos only (fermi only)
- Took out "KerberosGetAFSToken no" from sshd_config (fermi only)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.17" date="1159488000">- CVE-2006-5051 don't call cleanups from signal handler (#208347)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.16" date="1159401600">- CVE-2006-4924 prevent DoS on deattack detector code (#207955)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.15" date="1146528000">- fixed the scp-no-system patch to return zero from scp when copy
  succeeded (#190147)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.14" date="1141344000">- changed the audit patch so it tolerates kernels without auditing
  support</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.13" date="1140652800">- don't overwrite last argument of scp if multiple files are copied
  and it isn't a directory (patch by Bjorn Augustsson #178923)
- send final nonquery messages from pam_authenticate to client
  when kbd_int is used (#174995)
- removed another syslog call from signal handler (#180607)
- enable syslog in chroot by opening syslog fd permanently (#182281)
- fixed audit patch so it prevents login when auditing fails (#182930)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="edb022626bb9857778b304f3e14ea983c1242f61" name="openssh" arch="x86_64"><version epoch="0" ver="3.9p1" rel="8.SLF.3.22"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.22" date="1179273600">- Removed the hpn11 patch</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.21" date="1179273600">- Rebuilt from the latest errata 3.9p1-8.RHEL4.20</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.SLF.3.20" date="1163203200">- CVE-2006-5794 properly detect failed key verify in monitor (#21640)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.19" date="1160524800">- add support for hashed known_hosts file (#162681)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.18" date="1160092800">- fixed client behaviour when remote program generates large output (#184357)
- don't report duplicate syslog messages, use correct local time (#203671)
- don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)
- fix audit patch to include loginrec.h in auth.c (#193710)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.18" date="1159833600">- Built to do aklog with the --with-afs-krb5 config option
- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/
- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have pam.d/sshd use the cryptocard pam (fermi only)
- Added patches to have sshd_config be kerberos only (fermi only)
- Took out "KerberosGetAFSToken no" from sshd_config (fermi only)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.17" date="1159488000">- CVE-2006-5051 don't call cleanups from signal handler (#208347)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.16" date="1159401600">- CVE-2006-4924 prevent DoS on deattack detector code (#207955)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.15" date="1146528000">- fixed the scp-no-system patch to return zero from scp when copy
  succeeded (#190147)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.14" date="1141344000">- changed the audit patch so it tolerates kernels without auditing
  support</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.13" date="1140652800">- don't overwrite last argument of scp if multiple files are copied
  and it isn't a directory (patch by Bjorn Augustsson #178923)
- send final nonquery messages from pam_authenticate to client
  when kbd_int is used (#174995)
- removed another syslog call from signal handler (#180607)
- enable syslog in chroot by opening syslog fd permanently (#182281)
- fixed audit patch so it prevents login when auditing fails (#182930)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="0ae0864bd03c2c3e3e0dd93c6c08675bbcaf9712" name="openssh-askpass" arch="x86_64"><version epoch="0" ver="3.9p1" rel="8.SLF.3.22"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.22" date="1179273600">- Removed the hpn11 patch</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.21" date="1179273600">- Rebuilt from the latest errata 3.9p1-8.RHEL4.20</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.SLF.3.20" date="1163203200">- CVE-2006-5794 properly detect failed key verify in monitor (#21640)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.19" date="1160524800">- add support for hashed known_hosts file (#162681)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.18" date="1160092800">- fixed client behaviour when remote program generates large output (#184357)
- don't report duplicate syslog messages, use correct local time (#203671)
- don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)
- fix audit patch to include loginrec.h in auth.c (#193710)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.18" date="1159833600">- Built to do aklog with the --with-afs-krb5 config option
- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/
- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have pam.d/sshd use the cryptocard pam (fermi only)
- Added patches to have sshd_config be kerberos only (fermi only)
- Took out "KerberosGetAFSToken no" from sshd_config (fermi only)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.17" date="1159488000">- CVE-2006-5051 don't call cleanups from signal handler (#208347)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.16" date="1159401600">- CVE-2006-4924 prevent DoS on deattack detector code (#207955)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.15" date="1146528000">- fixed the scp-no-system patch to return zero from scp when copy
  succeeded (#190147)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.14" date="1141344000">- changed the audit patch so it tolerates kernels without auditing
  support</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.13" date="1140652800">- don't overwrite last argument of scp if multiple files are copied
  and it isn't a directory (patch by Bjorn Augustsson #178923)
- send final nonquery messages from pam_authenticate to client
  when kbd_int is used (#174995)
- removed another syslog call from signal handler (#180607)
- enable syslog in chroot by opening syslog fd permanently (#182281)
- fixed audit patch so it prevents login when auditing fails (#182930)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="6ac1798512137d294a71395d34fec6b548ea3d53" name="openssh-askpass-gnome" arch="x86_64"><version epoch="0" ver="3.9p1" rel="8.SLF.3.22"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.22" date="1179273600">- Removed the hpn11 patch</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.21" date="1179273600">- Rebuilt from the latest errata 3.9p1-8.RHEL4.20</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.SLF.3.20" date="1163203200">- CVE-2006-5794 properly detect failed key verify in monitor (#21640)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.19" date="1160524800">- add support for hashed known_hosts file (#162681)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.18" date="1160092800">- fixed client behaviour when remote program generates large output (#184357)
- don't report duplicate syslog messages, use correct local time (#203671)
- don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)
- fix audit patch to include loginrec.h in auth.c (#193710)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.18" date="1159833600">- Built to do aklog with the --with-afs-krb5 config option
- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/
- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have pam.d/sshd use the cryptocard pam (fermi only)
- Added patches to have sshd_config be kerberos only (fermi only)
- Took out "KerberosGetAFSToken no" from sshd_config (fermi only)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.17" date="1159488000">- CVE-2006-5051 don't call cleanups from signal handler (#208347)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.16" date="1159401600">- CVE-2006-4924 prevent DoS on deattack detector code (#207955)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.15" date="1146528000">- fixed the scp-no-system patch to return zero from scp when copy
  succeeded (#190147)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.14" date="1141344000">- changed the audit patch so it tolerates kernels without auditing
  support</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.13" date="1140652800">- don't overwrite last argument of scp if multiple files are copied
  and it isn't a directory (patch by Bjorn Augustsson #178923)
- send final nonquery messages from pam_authenticate to client
  when kbd_int is used (#174995)
- removed another syslog call from signal handler (#180607)
- enable syslog in chroot by opening syslog fd permanently (#182281)
- fixed audit patch so it prevents login when auditing fails (#182930)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="b0f0fafbe5f06eac24de35f279e96aa59142586c" name="openssh-clients" arch="x86_64"><version epoch="0" ver="3.9p1" rel="8.SLF.3.22"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.22" date="1179273600">- Removed the hpn11 patch</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.21" date="1179273600">- Rebuilt from the latest errata 3.9p1-8.RHEL4.20</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.SLF.3.20" date="1163203200">- CVE-2006-5794 properly detect failed key verify in monitor (#21640)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.19" date="1160524800">- add support for hashed known_hosts file (#162681)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.18" date="1160092800">- fixed client behaviour when remote program generates large output (#184357)
- don't report duplicate syslog messages, use correct local time (#203671)
- don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)
- fix audit patch to include loginrec.h in auth.c (#193710)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.18" date="1159833600">- Built to do aklog with the --with-afs-krb5 config option
- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/
- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have pam.d/sshd use the cryptocard pam (fermi only)
- Added patches to have sshd_config be kerberos only (fermi only)
- Took out "KerberosGetAFSToken no" from sshd_config (fermi only)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.17" date="1159488000">- CVE-2006-5051 don't call cleanups from signal handler (#208347)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.16" date="1159401600">- CVE-2006-4924 prevent DoS on deattack detector code (#207955)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.15" date="1146528000">- fixed the scp-no-system patch to return zero from scp when copy
  succeeded (#190147)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.14" date="1141344000">- changed the audit patch so it tolerates kernels without auditing
  support</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.13" date="1140652800">- don't overwrite last argument of scp if multiple files are copied
  and it isn't a directory (patch by Bjorn Augustsson #178923)
- send final nonquery messages from pam_authenticate to client
  when kbd_int is used (#174995)
- removed another syslog call from signal handler (#180607)
- enable syslog in chroot by opening syslog fd permanently (#182281)
- fixed audit patch so it prevents login when auditing fails (#182930)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="958c387f00eafabb43cf555486ad3c85c0109c90" name="openssh-server" arch="x86_64"><version epoch="0" ver="3.9p1" rel="8.SLF.3.22"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.22" date="1179273600">- Removed the hpn11 patch</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.21" date="1179273600">- Rebuilt from the latest errata 3.9p1-8.RHEL4.20</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.SLF.3.20" date="1163203200">- CVE-2006-5794 properly detect failed key verify in monitor (#21640)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.19" date="1160524800">- add support for hashed known_hosts file (#162681)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.18" date="1160092800">- fixed client behaviour when remote program generates large output (#184357)
- don't report duplicate syslog messages, use correct local time (#203671)
- don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)
- fix audit patch to include loginrec.h in auth.c (#193710)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.18" date="1159833600">- Built to do aklog with the --with-afs-krb5 config option
- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/
- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have pam.d/sshd use the cryptocard pam (fermi only)
- Added patches to have sshd_config be kerberos only (fermi only)
- Took out "KerberosGetAFSToken no" from sshd_config (fermi only)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.17" date="1159488000">- CVE-2006-5051 don't call cleanups from signal handler (#208347)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.16" date="1159401600">- CVE-2006-4924 prevent DoS on deattack detector code (#207955)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.15" date="1146528000">- fixed the scp-no-system patch to return zero from scp when copy
  succeeded (#190147)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.14" date="1141344000">- changed the audit patch so it tolerates kernels without auditing
  support</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.13" date="1140652800">- don't overwrite last argument of scp if multiple files are copied
  and it isn't a directory (patch by Bjorn Augustsson #178923)
- send final nonquery messages from pam_authenticate to client
  when kbd_int is used (#174995)
- removed another syslog call from signal handler (#180607)
- enable syslog in chroot by opening syslog fd permanently (#182281)
- fixed audit patch so it prevents login when auditing fails (#182930)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="02f6b54c594d0fb2b3c57d2abd42eab340bd1a12" name="SL_enable_serialconsole" arch="src"><version epoch="0" ver="3.1" rel="4"/></package>
<package pkgid="10f59111008c6ed9e59eb70ab60b252396bf0fef" name="dropit" arch="src"><version epoch="0" ver="1.2" rel="1"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.2-1" date="1143590400">- Initial spec file</changelog></package>
<package pkgid="7b4dbad0f7debf600d856cf49db00f20063422a9" name="tidy" arch="src"><version epoch="0" ver="2005.9.1" rel="1"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.1.5-1" date="1141430400">- Initial spec file</changelog></package>
<package pkgid="59f71dc1122faf81bbe719bc5bd1427bdbd8891a" name="acl" arch="src"><version epoch="0" ver="2.2.23" rel="1"/></package>
<package pkgid="ad126f877f85b861e8524869a342b1cab9e2c762" name="attr" arch="src"><version epoch="0" ver="2.4.16" rel="1"/></package>
<package pkgid="e08f471ec1a226c5706c42d4a89e4f97b8fcb888" name="dmapi" arch="src"><version epoch="0" ver="2.2.0" rel="1"/></package>
<package pkgid="febab98ffb0995dfec02370b79beaf9f2dbb7735" name="kernel" arch="src"><version epoch="0" ver="2.4.21" rel="32.0.1.EL.XFS"/><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1117101600">- added SGI XFS patch set</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.0.1.EL" date="1116237600">- prevent shared memory lock/unlock w/o permissions (Dave Anderson)
- prevent mlock() resource limit bypass w/shm locking (Ernie Petrides)
- fix data corruption from pte_clear() races on &gt;4GB x86's (Larry Woodman)
- fix arg/env access in ELF core dumping and /proc reads (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.EL" date="1113559200">- fix data corruption w/ext3 xattr on 64-bit arches (Jason Baron)
- validate LCP frame lengths in PPP async handling (Dave Miller)
- enable forcedeth net driver builds in x86 configs (Jim Paradis)
- isolate IP fragment queues among various callers (Dave Miller)
- prevent busy inodes for symlinks after unmounts (Don Howard)
- revise PCI device ids extending ICH7 support (John Linville)
- work around broken xw4300 BIOS AHCI BAR setup (John Linville)
- add protocol validation in net bluetooth driver (John Linville)
- enable software watchdog timer in s390,x configs (Jan Glauber)
- fix data corruption w/uselib() on bad ELF libs (Ernie Petrides)
- add USB tablet init delay in wacom_probe() (Kristian Høgsberg)
- prevent core dumps with non-readable ELF interps (Dave Anderson)
- add maxevents validation in epoll_wait() handling (Ernie Petrides)
- add len validation in /dev/random poolsize sysctl (Ernie Petrides)
- correct size of ia64 syscall table initialization (Jason Baron)
- correct x86_64 user-mode i/o port validation (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-31.EL" date="1110448800">- fix missing ppc64 netdump/diskdump symbols (Nobuhiro Tachino)
- prevent ia64 unwind from traversing off stack (Jason Baron)
- disable 3w-9xxx driver builds on ppc64 (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-30.EL" date="1110362400">- fix obscure oops in tty init_dev() handling (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-29.EL" date="1109844000">- incorporate urgent late-breaking SATA fixes (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-28.EL" date="1109152800">- add more USB device support to visor driver (Pete Zaitcev)
- implement clustered APIC support for x86_64 (Larry Woodman)
- constrain x86 MSR writes based on cpu model (Jason Baron)
- increase max superbh size for performance (Stephen Tweedie)
- add locking to prevent oops in md_seq_show() (Doug Ledford)
- restore missing ia64 panic_on_oops handling (Tatsuo Uchida)
- implement Ethernet PCI quirk for HP xw9300 (Jim Paradis)
- revert NFS flock() avoidance to -27.7.EL (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.17.EL" date="1108980000">- rework NFS flock() avoidance w/FS_WANT_FLOCK for GFS (Ken Preslan)
- prevent inode corruption from delete/lookup races (Wendy Cheng)
- preserve registers for ia64 16-byte atomic ops (Geoff Gustafson)
- update SCSI whitelist for LSI/HP/STK/EMC devices (Tom Coughlan)
- disable vary_io in ips driver to avoid ctlr hangs (Tom Coughlan)
- correct handling of 2-TB device partitions (Peter Martuccelli)
- update support for ia64 perfmon facility (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.16.EL" date="1108720800">- implement diskdump support for SATA piix/promise (Nobuhiro Tachino)
- correct /proc/mtrr size values on EM64T platforms (Larry Woodman)
- restore page permissions after writes from ptrace() (Don Howard)
- fix /proc parent pids from multi-threaded forks (Ernie Petrides)
- enable software watchdog timer support on s390,x (Jan Glauber)
- update tg3 network driver to version 3.22RH (John Linville)
- incorporate 3w-9xxx driver version 2.24.00.011fw (Adam Manthei)
- correct ending boundary check in filemap_sync() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.15.EL" date="1108548000">- add e100 driver PCI device ids for ICH7 support (John Linville)
- restore obsolete but ignored e100 module params (John Linville)
- implement user-mode (gdb) access to ia64 gate page (Jason Baron)
- fix x86_64 FPU IP and DP values in SIGFPE context (Larry Woodman)
- add qla2200 module parameter to use NVRAM RIO val (Tom Coughlan)
- update 3w-xxxx driver to 1.02.00.037 w/.033 backup (Adam Manthei)
- fix crashes in video Firewire (ieee1394) driver (Bastien Nocera)
- prevent info leaks into ext3 journal disk blocks (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.14.EL" date="1108461600">- enhance AIO performance over NFS w/FS_AIO_SYNC hook (Steve Dickson)
- defer e100_tx_timeout() work from interrupt context (John Linville)
- correct IPV6 DST entry release to prevent route leak (Dave Miller)
- ignore MTU updates from invalid IPV6 ndisc packets (Dave Miller)
- add relevant PCI device ids to extend ICH7 support (John Linville)
- reduce system pauses during heavy page laundering (Larry Woodman)
- fix audit logging of paths w/predicate filter usage (Neil Horman)
- enable building of unsupported fusion isense module (Adam Manthei)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.13.EL" date="1108375200">- increase dxfer size limit for ppc64 SG_IO ioctl32 (David Howells)
- eliminate tty line discipline usage/switching races (Jason Baron)
- fix autofs recognition of ghosted direct map updates (Jeff Moyer)
- fix sg driver race between cmd completion and close (Tom Coughlan)
- prevent e100 data corruption from v.3.0.27-k2 update (John Linville)
- upgrade SATA support (core, libata, new/old drivers) (John Linville)
- implement diskdump support for sym53c8xx adapter (Yuichi Nagahama)
- add USB support for Wacom Cintiq/Intuos3 tablets (Kristian Høgsberg)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.12.EL" date="1107943200">- update e100 network driver to version 3.3.6-k2 (John Linville)
- correct cpu id macro for dual-core Opteron support (Jim Paradis)
- add "numa=off" message on x86_64 OOM kills w/NUMA (Larry Woodman)
- improve user/system timer tick accounting on s390,x (Pete Zaitcev)
- prevent EAGAIN errs from interrupted TCP recv() calls (Dave Miller)
- update cciss disk driver to version v2.4.54.RH1 (Adam Manthei)
- eliminate diskdump cpu id from frozen list (Nobuhiro Tachino)
- fix user-space access bug in USB vicam ioctl (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.11.EL" date="1107424800">- incorporate Emulex driver ioctl module version 1.0.13 (Tom Coughlan)
- eliminate potential call_lock deadlock with diskdump (Tatsuo Uchida)
- fix potential kiobuf_lock deadlock in free_kiovec() (Larry Woodman)
- add L2 cache descriptor for EM64T Irwindale processor (Neil Horman)
- prevent mmap() syscalls from choosing NULL mappings (Rik van Riel)
- include bounce buffer pages in show_mem() output (Larry Woodman)
- add I2C driver support for ICH5 in i2c-i801.c (John Linville)
- correct parport_pc errors on insmod failures (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.10.EL" date="1106906400">- fix futex_wait() race condition that allowed app hang (Ingo Molnar)
- add/correct write barrier placement in timer routines (David Howells)
- add x86_64 NMI switch support to debug kernel hangs (Yuichi Nagahama)
- restore CIV/LVI offset operation in i810_audio driver (John Linville)
- update e1000 network driver to version 5.6.10.1-k2 (John Linville)
- prevent bogus BUG_ON during multi-threaded core dump (Roland McGrath)
- fix x86_64 crash in huge_page_release() w/SHM_HUGETLB (Larry Woodman)
- fix possible mem corruption from /proc/kcore access (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.9.EL" date="1106647200">- fix core dumping over NFS mounts with "intr" option (Roland McGrath)
- prevent multi-threaded app hang from sys_wait4() race (Ingo Molnar)
- restore e1000 support for Intel PCI device id 1014 (John Linville)
- add ac97 quirk entries for HP xw6000/xw6200/xw8000 (John Linville)
- update b44 network driver to upstream version 0.95 (John Linville)
- revert NFS silly-delete and rpciod-hang patches (Steve Dickson)
- fix panics while backing up LVM snapshots (Heinz Mauelshagen)
- fix oops in redirect_target() on DHCP refresh (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.8.EL" date="1105696800">- rework ia64 INIT switch stacks for clean tracebacks (Tatsuo Uchida)
- fix USB raced timeout errors and ohci_complete_add() (Pete Zaitcev)
- add O_DIRECT handling in LVM driver handling (Heinz Mauelshagen)
- downgrade wait4() SIGCHLD/SIG_IGN warning message (Ingo Molnar)
- eliminate potential VMA list races with do_brk() (Dave Anderson)
- ignore ICMP Source Quench messages in tcp_v4_err() (Dave Miller)
- prevent VMA overlap crashes in insert_vm_struct() (Jason Baron)
- move flock() avoidance from NFS up to F/S layer (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.7.EL" date="1105437600">- fix 32-compat alt-stack signal handling on x86_64 (Geoff Gustafson)
- add initialization of ppc64 EEH error buffer size (David Howells)
- make ppc64 xmon work properly with Power5 console (David Howells)
- prevent infinite sync loop from NFS ESTALE writes (Steve Dickson)
- update 8139too network driver w/recent 2.4 fixes (John Linville)
- avoid netfilter oops when ip_conntrack is unloaded (Dave Miller)
- fix potential rpciod hangs during NFS sillydelete (Steve Dickson)
- avoid "No locks available" errors w/flock() on NFS (Ken Preslan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.6.EL" date="1104919200">- fix x86 phys proc ids for non-clustered APIC systems (Geoff Gustafson)
- return EINVAL on e100/e1000 rx-mini/rx-jumbo settings (John Linville)
- fix i810_audio regression from modified ICH6 PCI ids (John Linville)
- prevent race conditions in add_wait_queue_cond() macros (Jeff Moyer)
- fix FAT32 file system corruption w/writing 8M files (Alexander Viro)
- fix derivation/presentation of PHB unit ids on ppc64 (David Howells)
- close OpenFirmware stdin device at boot on ppc64 (David Woodhouse)
- fix 32-bit-compat regression in CMSG validations (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.5.EL" date="1103796000">- add "CommitLimit" data to /proc/meminfo output (Frank Hirtz)
- allow autofs to expire mounts on ppc64 arch (Jeff Moyer)
- add 3c59x EEPROM_RESET for 3c900 Boomerang (John Linville)
- ignore PTE mapping status in page_anon() (Larry Woodman)
- fix SIOCGIFHWADDR handling for zero addr_len (Dave Miller)
- add netdump support for x86_64, ia64, ppc64 (Dave Anderson)
- correct overcommit accounting on fork failure (Frank Hirtz)
- raise default ia64/ia32e swiotlb size to 64M (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.4.EL" date="1103709600">- add network CMSG validation checks (Dave Miller)
- fix data struct leak in ip_options_get() (Dave Miller)
- fix IGMP vulnerabilities in ip[6]_mc_source() (Dave Miller)
- fix e_phnum binfmt_elf loader vulnerability (Dave Anderson)
- clean x86_64 32-bit-compat syscall numbers (Jim Paradis)
- prevent ia64 floating point reg val leakage (Jason Baron)
- add USB io_edgeport driver size check (Peter Martuccelli)
- enable softirq deferral for x86_64 arch (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.3.EL" date="1102586400">- add data/param length sanity checks in smbfs (Alexander Viro)
- prevent /proc/&lt;PID&gt;/cmdline env data disclosure (Dave Anderson)
- make tulip_stop_rxtx() wait for DMA termination (John Linville)
- fix mm_stat regression introduced in -20.13.EL (Rik van Riel)
- correct return value from vlan_dev_change_mtu() (John Linville)
- serialize datagram read w/appropriate semaphore (Dave Miller)
- fix keyboard regression introduced in -24.EL (Peter Martuccelli)
- enable mmap/mprotect PROT_EXEC for legacy apps (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-26.2.EL" date="1101722400">- fix USB problems with keyboards and ia64 oopses (Pete Zaitcev)
- add i810 PCI IDs for nforce3/CK804 audio devices (Jim Paradis)
- fix ppc64 viodasd driver dev naming/limit bugs (David Howells)
- prevent tg3 fiber link bounces w/auto-negotiation (Dave Miller)
- add ac97 quirk handling for i810_audio driver (John Linville)
- prevent incorrect OOM killing with iscsi usage (Larry Woodman)
- create kiobuf cache to reduce lowmem contention (Larry Woodman)
- fix yet another binfmt_elf loader vulnerability (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.1.EL" date="1100512800">- (this is the first build for RHEL 3 Update 5)
- implement open() recovery from NFS ESTALE errors (Neil Horman)
- clean up warnings from lpfc and lpfc_703 Makefiles (Tom Coughlan)
- fix nessus-induced kernel panic with auditing (Peter Martuccelli)
- update 3c59x driver to LK1.1.18 and fix reset bug (John Linville)
- fix ext3 O_DIRECT bug in orphan list handling (Stephen Tweedie)
- flush cached dirty pages on NFS reads w/O_DIRECT (Steve Dickson)
- allow ia64 kernel unaligned access msg suppression (Neil Horman)
- correct test for performing buffer-head reclaim (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.EL" date="1100253600">- fix binfmt_elf loader vulnerabilities (Jim Paradis, Dave Anderson)
- limit kernel data struct slabs to single-page allocs (Larry Woodman)
- update Emulex driver to 7.1.14 (backup still 7.0.3) (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-24.EL" date="1100080800">- fix several ppc64 problems with signal catching (David Woodhouse)
- fix several bugs in /proc/ppc64/lparcfg driver (David Howells)
- fix possible diskdump hangs w/megaraid2 driver (Tatsuo Uchida)
- add support for IBM EM64T-based Groucho blade (Peter Martuccelli)
- fix regression in USB BIOS-&gt;kernel hand-off support (Pete Zaitcev)
- fix regression in ia64 kernel stack unwind handling (Don Howard)
- fix regression w/agpgart support of i8xx chipsets (Larry Woodman)
- add support for BLKSSZGET ioctl in cciss driver (Tom Coughlan)
- disable iSCSI builds in ppc64 and s390* configs (Tom Coughlan)
- update Emulex driver to 7.1.13 (backup still 7.0.3) (Tom Coughlan)
- correct SCSI whitelist for Chaparral FR1422 devices (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-23.EL" date="1098957600">- prevent kswapd from getting stuck in prune_icache() (Larry Woodman)
- fix ppc64 single-stepping into signal handlers (David Woodhouse)
- fix corruption from user stack expansion races (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-22.EL" date="1098093600">- prevent add/removal races in SCSI open handling (Doug Ledford)
- fix U3 agpgart regression with Intel i8xx chipsets (Dave Jones)
- update SCSI whitelist for IBM 1722/1724 devices (Tom Coughlan)
- correct TSS descriptor limit checking for x86_64 (Jim Paradis)
- add nforce3/CK804 device support and fix ACPI bug (Jim Paradis)
- add support for "forcedeth" net driver version 0.28 (Jim Paradis)
- enable diskdump support in amd64/ia32e configs (Nobuhiro Tachino)
- restore/improve linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- add missing page_cache_release() in launder_page() (Larry Woodman)
- update Emulex driver to 7.1.11 (backup still 7.0.3) (Tom Coughlan)
- add new USB ids to support latest Wacom tablets (Kristian Høgsberg)
- remove drivers/net/tun.o from unsupported list (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-21.EL" date="1096538400">- fix potential PTE race in do_anonymous_page() (Rik van Riel)
- add "Committed_AS" data to /proc/meminfo output (Frank Hirtz)
- revise DMA zone paging thresholds for x86_64 (Larry Woodman)
- prevent /proc/scsi/scsi oops during probes (David Woodhouse)
- avoid kswapd hangs via free_more_memory() hooks (Rik van Riel)
- update megaraid2 driver to 2.10.8.2 w/2.10.6 backup (Adam Manthei)
- fix do_notify_parent() panic from ptrace death race (Roland McGrath)
- fix large core file support on 64-bit architectures (Dave Anderson)
- enable tux on ia64 and increase max tux threads to 16 (Ingo Molnar)
- fix ia64/s390,x single-stepping w/signal handlers (David Woodhouse)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.14.EL" date="1096452000">- fix hang in SCSI starvation management code (David Howells)
- update SCSI whitelist for NETAPP LUN devices (Wendy Cheng)
- fix s390 cio handling during ESS fail-overs (Pete Zaitcev)
- update Emulex driver to 7.1.8 w/7.0.3 backup (Tom Coughlan)
- update Qlogic driver to 7.01.01 w/7.00.03 backup (Tom Coughlan)
- correct unlock/free order in proc_lookupfd() (Ernie Petrides)
- use ACPI for PCI interrupt routing on ia32e (Jim Paradis)
- allow cpus to boot w/APIC IDs &gt; 8 on ia32e (Jim Paradis)
- fix pid allocation when pid_max &gt; 32768 (Ernie Petrides)
- fix regs in multi-threaded ia64 core dumps (Keiichi Mori)
- enable sym53c8xx driver for ppc64 iSeries (David Howells)
- fix ac97 depmod errors w/hugemem configs (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.13.EL" date="1096365600">- fix aic79xx_osm.h/3c59x.c changes in prior rev (Tachino/Linville)
- allow for larger nfsd block sizes on some archs (Steve Dickson)
- fix possible aacraid driver panic in aac_info() (Tom Coughlan)
- fix xdr argsize check to handle writes &gt;= 2^31 (Steve Dickson)
- update e1000 network driver to version 5.3.19-k2 (John Linville)
- apply several cciss driver fixes (to 2.4.52.RH2) (Adam Manthei)
- fix x86_64 versions of cpu capability test macros (Jim Paradis)
- fix ppc64 HPTE memory corruption race condition (Rik van Riel)
- add sys_epoll support on s390,x (Stephen Tweedie, Pete Zaitcev)
- prevent keyboard.c warnings from mouse clicks (Norm Murray)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.12.EL" date="1096279200">- improve slab cache page reaping heuristics (Larry Woodman)
- implement diskdump support for x86_64 arch (Nobuhiro Tachino)
- add ia64 INIT trigger switch support for debugging (Tatsuo Uchida)
- fix several problems in handling of AIO on pipes (Jeff Moyer)
- update fixes for LTP read02 test hangs with tmpfs (Alexander Viro)
- fix x86_64 single-stepping out of signal handlers (Jim Paradis)
- increase size of ppc64 RTAS error log buffer (David Howells)
- increase max possible kNFSD lockd cookie size (Steve Dickson)
- backport 3c59x fixes for mii-tool problems w/10Mb (John Linville)
- incorporate Cisco's iscsi_sfnet initiator driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.11.EL" date="1095933600">- implement diskdump support for megaraid2 adapter (Tatsuo Uchida)
- update ips driver to version 7.10.18 w/7.00.15 backup (Tom Coughlan)
- correct max page aging interval boundary in kscand() (Larry Woodman)
- add ppc64 support for ptrace() with PT_SINGLESTEP (David Woodhouse)
- update e100 network driver to version 3.0.27-k2 (John Linville)
- fix LTP read02 test hangs when tmpfs is in use (Alexander Viro)
- get proc_dir_entry reference in proc_lookup() (Alexander Viro)
- add exports of several AIO-related interfaces (Larry Woodman)
- reduce swapping during excessive pagecache use (Larry Woodman)
- implement statfs64() syscall on x86 for NFS use (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.10.EL" date="1095847200">- implement early USB hand-off (BIOS-&gt;kernel) support (Pete Zaitcev)
- fix stack pointer calculation in x86 show() handling (Jeff Moyer)
- prevent interference between flock/POSIX lock types (Frank Hirtz)
- update pcnet32 network driver to version 1.30c (John Linville)
- add export of block_commit_write() f/s interface (Larry Woodman)
- implement diskdump support for dpt_i2o adapter (Tatsuo Uchida)
- update mptfusion driver to version 2.05.16.02 (Adam Manthei)
- move disk_dump_notifier_list to diskdumplib.c (Nobuhiro Tachino)
- update s390 zfcp driver to revision 5.31.2.11+ (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.9.EL" date="1095674400">- fix occasional ibmvscsic driver insmod crash (David Howells)
- disable linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- prevent double slashes in symlink auditing (Peter Martuccelli)
- fix overzealous compat32 setsockopt conversions (David Woodhouse)
- backport tulip driver fixes from upstream 2.4.28 (John Linville)
- update tg3 network driver to version 3.10RH (John Linville)
- implement sysctl to force igmp protocol versions (Neil Horman)
- add diskdump performance improvement info (Nobuhiro Tachino)
- fix s390 iucv lost connections and ping hangs (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.8.EL" date="1095588000">- prevent diskdump deadlock in case of die() recursion (Tatsuo Uchida)
- add x86/x86_64 support for ptrace() w/PT_SINGLESTEP (Roland McGrath)
- fix x86/x86_64 single-stepping into signal handlers (Roland McGrath)
- increase x86 value for MAX_MP_BUSSES definition to 260 (Ingo Molnar)
- eliminate ia64 potential for scheduler runq deadlock (Larry Woodman)
- add support for /proc/sys/kernel/mem_nmi_panic sysctl (Dave Anderson)
- prevent keyboard-initiated sysrq hangs in handle_sysrq() (Jeff Moyer)
- fix intermittent netdump hangs from cpu-frozen messages (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.7.EL" date="1095415200">- fix premature OOM killing change added in prior rev (Larry Woodman)
- backport vlan driver fixes from upstream 2.4.28-rc1 (John Linville)
- add _sb_findmap symbol export in s390/s390x kernels (Pete Zaitcev)
- add ppc64 support for 32-bit sendfile64() syscall (David Howells)
- fix 32-bit IPC_INFO shmctl() syscalls for ppc64 (David Howells)
- upgrade libata/SATA support to current 2.4 bits (John Linville)
- avoid USB device resets of shared/busy interfaces (Pete Zaitcev)
- fix miscellaneous problems in ppc64 icom driver (David Howells)
- fix ip_queue_maxlen sysctl for ip[6]_queue modules (Neil Horman)
- add module parm for max entries in NFS_ACL replies (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.6.EL" date="1095156000">- prevent OOM killer from kicking in prematurely (Larry Woodman)
- avoid NMI watchdog crashes during sysrq-m usage (Wendy Cheng)
- add auditing support for ia64 clone2 syscall (Peter Martuccelli)
- correct sign of auditing error codes for ia64 (Peter Martuccelli)
- implement ia64 auditing 32-bit-disable sysctl (Peter Martuccelli)
- fix ia64 faults w/stale VHPT-generated TLB entries (Dave Anderson)
- fix invalid x86_64 checksums for multicast packets (Mike Gahagan)
- fix incorrect blocking bug inside wakeup_kswapd() (Larry Woodman)
- validate appropriate media type in DVD drives (Doug Ledford)
- reduce s390 stack usage in qeth/qdio drivers (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.5.EL" date="1094810400">- prevent scenarios that lead to hang of kswapd (Larry Woodman)
- add locking for access to /proc/bus/usb/devices (Pete Zaitcev)
- correct x86 rescheduling to handle apm=power-off (Ingo Molnar)
- fix OOM killer locking and mm referencing holes (Larry Woodman)
- pin ia64 mapping for idle proc stack during boot (Larry Woodman)
- fix warning throttle for amd64 stack overflow check (Neil Horman)
- fix content lengths when using tux gzip compression (Ingo Molnar)
- add auditing support for pread/pwrite syscalls (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.4.EL" date="1094724000">- prevent bogus data in /proc/scsi/ibmvscsi/* (David Howells)
- update tg3 network driver to version 3.9RH (John Linville)
- improve ramfs memory alloc w/scarce highmem (Larry Woodman)
- correct several values in /proc/ppc64/lparcfg (David Howells)
- allow dirty page rebalancing under mem pressure (Rik van Riel)
- prevent memory leak in scsi_build_commandblocks() (Doug Ledford)
- fix potential kswapd deadlock w/disk quota usage (Larry Woodman)
- increase MAX_IO_APICS from 8 to 32 for x86_64 arch (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.3.EL" date="1094205600">- fix various error path bugs in bcm5820 driver (John Linville)
- validate addresses used with /dev/kmem accesses (Neil Horman)
- eliminate IPSEC tunnel leaks when using IPComp (Dave Miller)
- add auditing support for utimes() syscalls (Peter Martuccelli)
- prevent netconsole freeze w/cable dis-/re-connect (Jeff Moyer)
- correct reboot_cpu validation for "reboot=s&lt;n&gt;" (Doug Ledford)
- fix mem/irq clean-up in olympic tokenring driver (Neil Horman)
- update network bonding driver to version 2.6.0 (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.2.EL" date="1094032800">- add maps/rlimits output with print-fatal-signals=2 (Ingo Molnar)
- backport ac97 sound support from upstream 2.4.27 (John Linville)
- eliminate kernel stack data leaks from USB drivers (Mark Cox)
- fix interrupt status mask in AMD PCnet32 driver (David Howells)
- fix module loading problems in ibmvscsic driver (David Howells)
- fix x86 shared runq mapping when ACPI data is bad (Bernd Schmidt)
- disable enhanced error handling on PCI-ISA bridges (David Howells)
- add memory-mapped i/o support to i810_audio driver (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.1.EL" date="1093860000">- (this is the first build for RHEL 3 Update 4)
- backport r8169 network driver changes from 2.4 (John Linville)
- update i810_audio sound driver to version 1.01 (John Linville)
- convert USB UHCI driver warning to debug message (Pete Zaitcev)
- backport 2.6 PROT_GROWSDOWN/UP mprotect() support (Jakub Jelinek)
- lower ppc64 console logging level of RTAS messages (David Howells)
- fix ppc64 handling of "smt-emabled=off" boot option (David Howells)
- correct socket sndbuf accounting w/IP_MULTICAST_LOOP (Neil Horman)
- reduce x86_64 user stack start randomization to 16K (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.EL" date="1092823200">- change TARGET_CPUS on x86_64 to include all on-line cpus (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-19.EL" date="1092304800">- fix possible races/overflows in file offset handling (Alexander Viro)
- correct logging of boot progress messages on Power5 (David Howells)
- extend ppc64 EEH support for other types of devices (David Howells)
- fix ibmveth driver to properly shut down and restart (David Howells)
- fix several races and overflows in ppc64 RTAS driver (David Howells)
- backport "acpi=noirq" support to work around Nocona hangs (Don Howard)
- conditionalize pbn_hp_diva to fix serial driver oops (Matthew Galgoci)
- add amd64 GART entry guard mappings for PCI mis-prefetch (Jim Paradis)
- upgrade SATA support again to resolve several problems (Jeff Garzik)
- qualify ia32e IRQ affinity disable with BIOS flag check (Jim Paradis)
- fix eeh_check_failure() on ppc64 to be interrupt safe (David Howells)
- correct ppc64 EEH macros to use appropriate data size (David Howells)
- fix x86/ia64 no-wait handling in smp_call_function() (Larry Woodman)
- fix "Filter target 0x203 not known ..." audit msgs (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-18.EL" date="1090404000">- prevent s390 mlock hangs with follow_page() rework (Ernie Petrides)
- fix Power5 initialization and handling of RAS IRQs (David Howells)
- fix ppc64 viocons driver deadlocks with printk() (David Howells)
- apply eh_timeout, netdump, cli fixes in diskdump (Tatsuo Uchida)
- add skip_mapped_pages tuning for page eviction (Stephen Tweedie)
- fix initrd's effect on ppc64 mem_end calculation (David Howells)
- allow HT support on ppc64 systems with single cpu (David Howells)
- backport v2.0.8 aic7xxx driver h/w support for Dell (Tom Coughlan)
- correct ppc64 device node searching in hvsi driver (David Howells)
- fix KMI compat problem w/pgprot_t in x86 NX support (Jim Paradis)
- resurrect mptfusion driver backup version 2.05.05 (Tom Coughlan)
- disable IRQ affinity setting on some ia32e systems (Jim Paradis)
- update SCSI whitelist for Dot Hill SANnet/StorEdge (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-17.EL" date="1089280800">- account for zone holes in big hash table allocator (Stephen Tweedie)
- prevent reserved stack space overflow of mmap_top (Ernie Petrides)
- fix USB crash in scan_async() with EHCI hardware (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-16.EL" date="1088848800">- enable exec-shield and add x86 NX support (Ingo Molnar, Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.19.EL" date="1088762400">- add owner check in inode_change_ok() for gid changes (Ernie Petrides)
- fix race in finish_task_switch() between wakeup/exit (Ernie Petrides)
- remove Samsung CD-ROM SN-124 from IDE DMA blacklist (Tom Coughlan)
- update e1000 network driver to version 5.2.52-k3 (John Linville)
- add auditing support for semtimedop syscalls (Peter Martuccelli)
- fix tasklet and locking bugs in Power5 hvsi driver (David Howells)
- fix megaraid2 handling of TUR cmds with SCSI CD-ROM (Adam Manthei)
- update SCSI whitelist for HP NS E1200-160 router (Tom Coughlan)
- prevent x86 read_ldt() from reading beyond kmap (Ernie Petrides)
- force single loadable segment in ia64 kernels (Jakub Jelinek)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.18.EL" date="1088157600">- implement ia64 work-around for TLB fetch timeout MCA (Larry Woodman)
- fix Power3 interrupt initialization in ppc64 setup (David Howells)
- correct info msg, prevent double panic in diskdump (Tatsuo Uchida)
- defend against NULL "mm" ptrs in page_referenced() (Rik van Riel)
- fix miscellaneous audit subsystem problems (Peter Martuccelli)
- prevent crash with tux CGI execution on x86_64 (Ingo Molnar)
- add installer info to SATA sx8 block driver (Jeff Garzik)
- turn on vary_io flag in SCSI ips driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.17.EL" date="1087984800">- allocate big system hash tables w/bootmem allocator (David Howells)
- prevent loading aic7xxx_old when aic7xxx is in use (Doug Ledford)
- implement stat() recovery from NFS ESTALE errors (Steve Dickson)
- fix raw/O_DIRECT i/o bug with unmapped pages (Stephen Tweedie)
- correct another locking hole in RAID1 handling (Doug Ledford)
- fix __x86_64__ conditional in megaraid2.c driver (Adam Manthei)
- fix unresolved symbols on ia64 in cciss driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.16.EL" date="1087898400">- make NFS sillydelete wait for unlink completion (Steve Dickson)
- prevent EIO w/concurrent O_DIRECT+buffered i/o (Stephen Tweedie)
- upgrade SATA support (core, libata, and drivers) (Jeff Garzik)
- implement futex() FUTEX_CMP_REQUEUE op (Al Viro, Pete Zaitcev)
- update b44 network driver to version 0.93 (John Linville)
- avoid unix_stream_sendmsg() ENOBUFS errors (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.15.EL" date="1087812000">- improve SCSI mid-layer error handling w/sdev_retry_q (Doug Ledford)
- eliminate rw-semaphore races between waiter/wakeup (David Howells)
- add locking and fix accounting bug in RAID1 handling (Doug Ledford)
- backport Carmel sx8.c driver from upstream 2.4 base (John Linville)
- rename ppc64-squadrons-* patches to ppc64-power5-* (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.14.EL" date="1087639200">- introduce support for IBM Squadrons/Power5 systems (David Howells)
- update aacraid driver to 1.1.5-2339 w/1.1.2 backup (Adam Manthei)
- allow sys_remap_file_pages() on unlocked ramfs VMAs (Larry Woodman)
- fix diskdump hangs during resets with aic79xx driver (Tatsuo Uchida)
- fix possible data corruption when using SHM_HUGETLB (Larry Woodman)
- set QLogic HbaApiNode proc file permissions to 0600 (Tom Coughlan)
- add IRQ blocking/restoring in add_gendisk/del_gendisk (Jeff Needle)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.13.EL" date="1087466400">- fix problem causing PCI bus 255 to be missing on ia64 (Ben Woodard)
- make nfs_statfs() recognize/handle fs size overflows (Steve Dickson)
- update QLogic driver to 7.00.03-RH1 w/6.07.02 backup (Tom Coughlan)
- allow procfs to utilize more dynamic inode numbers (David Howells)
- prevent inappropriate "unexpected IO-APIC" messages (Ernie Petrides)
- avoid lost dirty page bits in s390/s390x VM handling (Pete Zaitcev)
- fix ACPI SCI interrupt defaults and add kernel params (Jim Paradis)
- fix user-space access bugs in acpi/airo/decnet/sound (Alexander Viro)
- remove drivers/net/starfire.o from unsupported list (Ernie Petrides)
- fix mm_struct mem leak in copy_process() error path (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.12.EL" date="1087293600">- correct s390/s390x tests for PT_AUDITED flag (Peter Martuccelli)
- update e100 network driver to version 2.3.43-k1 (John Linville)
- update megaraid2 driver to 2.10.6 w/2.10.1.1 backup (Adam Manthei)
- add x86_64 auditing support for 32-bit-compat (Peter Martuccelli)
- fix ia64 unwind handling for UNW_INSN_SETNAT_MEMSTK (Jason Baron)
- update cciss driver to v2.4.52 for several fixes (Tom Coughlan)
- fix variable block mode tape handling in st driver (Tom Coughlan)
- incorporate latest Emulex fibre channel driver (Tom Coughlan)
- fix USB EHCI problem with BIOS-to-host handoff (Pete Zaitcev)
- update SCSI whitelist for DDN/Xyratex/SanDisk/CBOX3 (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.11.EL" date="1087207200">- upgrade to latest autofs4, remove from unsupported list (Jeff Moyer)
- fix memory corruption bug in audit driver code (Peter Martuccelli)
- store adjusted KSP value in ia64 diskdump support (Tatsuo Uchida)
- update e1000 network driver to version 5.2.52-k1 (John Linville)
- update ips driver to version 7.00.15 w/6.11.07 backup (Adam Manthei)
- implement USB device interlock between ioctls/SCSI-ops (Pete Zaitcev)
- update tg3 driver to version 3.6RH for upcoming chipsets (Dave Miller)
- downgrade several PCI cache line size debugging messages (Jim Paradis)
- correct x86_64 32-bit-compat support for AIO syscalls (Jeff Moyer)
- prevent FPU exception handling hangs on x86/x86_64 (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.10.EL" date="1086948000">- give wait.func highest priority in wake_up_filtered() (Larry Woodman)
- reduce system time when using sys_remap_file_pages() (Larry Woodman)
- enable CONFIG_SOFT_WATCHDOG module for ppc64 configs (David Howells)
- improve page allocation to avoid unnecessary swapping (Rik van Riel)
- implement diskdump support for ia64 with mptfusion (Tatsuo Uchida)
- disable native ia32 support for ia64 Montecito cpus (Jason Baron)
- save/restore P4/ia32e perf registers for oprofile (Will Cohen)
- fix oprofile ESCR_SET_EVENT_SELECT() event mask (Will Cohen)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.9.EL" date="1086775200">- update s390 zcrypt driver to version 1.2.1 (Pete Zaitcev)
- update network tg3 driver to version 3.5RH (Dave Miller)
- eliminate separate ia32e oprofile processor id (Will Cohen)
- update SCSI whitelist for IBM 2105/2145 devs (Doug Ledford)
- avoid EAGAIN errors on blocking UDP sockets (Steve Dickson)
- avoid putting locked inodes on dirty list (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.8.EL" date="1086688800">- decouple NFS O_DIRECT handling for performance gain (Steve Dickson)
- export page_is_ram() interface for amd64/ia32e arch (Jim Paradis)
- enable CONFIG_SCSI_SATA_* options in x86_64 configs (Jim Paradis)
- update mptfusion driver to 2.05.16 w/2.05.11.03 backup (Adam Manthei)
- fix nopage_sequential_readahead() and filemap_sync() (Larry Woodman)
- fix USB EHCI driver to avoid Squadrons install oops (Pete Zaitcev)
- add x86 NMI trigger switch support for debugging (Yuichi Nagahama)
- add dmi_blacklist[] entry for "Intel NA440BX DP" (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.7.EL" date="1086602400">- apply some minor scsi_dump_status() format tweaks (Doug Ledford)
- implement SCSI support for dynamic add (hot plug) (Doug Ledford)
- upgrade lvm driver logic to version 1.0.8-2 (Heinz Mauelshagen)
- fix x86_64 definition for inlined ffs() function (Jim Paradis)
- preserve VM_MAYEXEC for executable stack support (Jim Paradis)
- add extra SLBIEs for ppc64 Power5 DD2.0 errata (David Howells)
- add ppc64 32-bit compat for TIOCGICOUNT/MIWAIT (David Howells)
- hold file struct ref when removing POSIX locks (Steve Dickson)
- fix window scaling bug in tcp_ack_update_window() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.6.EL" date="1086343200">- make fsync() flush all pending NFS updates to disk (Steve Dickson)
- complete ia64 support for multiple I/O port spaces (Larry Woodman)
- fix sending of IP broadcast frames with TTL of zero (Neil Horman)
- prevent context switch storms under high VM loads (Larry Woodman)
- fix sigaltstack() errors w/JVM on hugemem kernels (Roland McGrath)
- add locking and improve output in scsi_dump_status() (Doug Ledford)
- add size boundary checking in scsi_resize_dma_pool() (Doug Ledford)
- fix SCSI request struct leak on command init failures (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.5.EL" date="1084528800">- overhaul ia64 SAL/MCA subsystem (Ben Woodard)
- enable x86_64 32-bit UID support (Jim Paradis)
- add initial diskdump support (Nobuhiro Tachino)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.4.EL" date="1084356000">- reduce chance of "VFS: Busy inodes after unmount." errs (Steve Dickson)
- convert "uaddr2" arg ptr in s390x futex() compat syscall (Pete Zaitcev)
- add ppc64 32-bit compat handler for PE_LOCKED_COPY ioctl (David Howells)
- update s390 dasd driver with several recent bug fixes (Pete Zaitcev)
- fix amd64 NUMA node scanning for Northbridge systems (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.3.EL" date="1084183200">- prevent exp_stopfodrop() oops during cluster failover (Steve Dickson)
- make nfs_file_commit() always flush the entire file (Steve Dickson)
- fix pcnet32 driver's MAC address selection on ppc64 (Julie DeWandel)
- backport /dev/random driver fixes for missed wakeups (Mark DeWandel)
- fix hang w/SoundBlaster 16-bit sampling w/odd count (Ernie Petrides)
- make s390 tape driver specify GPL module license type (Pete Zaitcev)
- correct buffer len value in ppc64 pSeries ipr driver (David Howells)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.2.EL" date="1083664800">- enable booting on 8-way Opteron systems (Jim Paradis)
- fix 32-bit-compat truncate64() on x86_64 (Jim Paradis)
- correct promiscuous mode counter handling (Dave Miller)
- support 128-GB ia64 systems w/HP zx1 chipset (Larry Woodman)
- add export of sys_ioctl() global symbol on s390x (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.1.EL" date="1083578400">- (this is the first build for RHEL 3 Update 3)
- reenable/fix linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- clean up file locks when NFS clients receive signals (Steve Dickson)
- complete ia64-specific LAuS syscall auditing support (Mark DeWandel)
- prevent NULL pointer dereference in page_referenced() (Rik van Riel)
- fix max sectors argument in lvm_snapshot_alloc() (Heinz Mauelshagen)
- allow AGP bus scanning to execute for all architectures (John Dennis)
- fix page_referenced() rss limit checks w/unmapped pages (Rik van Riel)
- correct locking and cr/lf problems in usbserial driver (Pete Zaitcev)
- add /proc/cpuinfo support for new ppc64 processors (Julie DeWandel)
- fix sense data handling on certain SCSI cmd retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.EL" date="1082541600">- fix clobbering of /proc/cpuinfo vendor_id on x86_64 (Jim Paradis)
- correct MCAST_MSFILTER/IP_MSFILTER size checking (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-14.EL" date="1081936800">- disable linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- prevent symlink buffer overflow in ISO-9660 fs (Ernie Petrides)
- check for skb overrun in IPV4/IPV6 IGMP handling (Dave Miller)
- fix possible hang in rebalance_laundry_zone() (Larry Woodman)
- correct zone_wired[] initialization for NUMA (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-13.EL" date="1081332000">- fix several critical libata bugs (Jeff Garzik)
- correct IPSEC XFRM policy ref counting (Dave Miller)
- add amd64/ia32e parsing for "acpi=off" arg (Jim Paradis)
- update tg3 driver to v3.1 for several fixes (Dave Miller)
- fix SCSI whitelist for Hitachi/HP DFx00, Apple Xserve (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-12.EL" date="1080295200">- add USB support for Handspring Treo 600 PDA syncing (Matthew Galgoci)
- clear state for CPEs during ia64 MCA SAL error logging (Ben Woodard)
- prevent DMA resource leak in QLogic driver error path (Tom Coughlan)
- change default QLogic driver device queue depth to 64 (Tom Coughlan)
- replace fabricated cciss drive geometry w/ENXIO error (Tom Coughlan)
- update SCSI whitelist for HP SureStore/StorageWorks (Tom Coughlan)
- disable CONFIG_ACPI_DEBUG in amd64/ia32e configs (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-11.EL" date="1078740000">- add yet another Intel ICH6 SATA PCI id (Jeff Garzik)
- fix ref counting in copy_process() error path (Larry Woodman)
- remove ia64 support for /proc/bus/mckinley/bitmap (Jason Baron)
- correct depmod versioning for unsupported modules (Ernie Petrides)
- prevent data corruption in ia32e phys_proc_id[] info (Larry Woodman)
- change default value for inactive_clean_percent to 30 (Larry Woodman)
- enable improved version of s390 on-demand timer patch (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-10.EL" date="1078221600">- incorporate late-breaking libata fixes (Jeff Garzik)
- enable amd64 syscall for tux support (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.17.EL" date="1078135200">- reduce s390 idle overhead with on-demand timer patch (Pete Zaitcev)
- complete ia64 NPTL support for 32-bit-EL executables (Jason Baron)
- add several ia64 syscall table entries for 32-bit-EL (Jason Baron)
- upgrade libata/SATA support, delete ich5-sata.patch (Jeff Garzik)
- check for mremap/vmtruncate race in move_one_page() (Jason Baron)
- prevent ia64 NaT-bit corruption during sig catching (Jason Baron)
- fix amd64 get_mtrr() parsing error with &gt;4GB memory (Jim Paradis)
- change amd64 default behavior to avoid TSC timer use (Jim Paradis)
- force s390utils upgrade to prevent zipl seg fault (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.16.EL" date="1078048800">- restore varyio capability in mptfusion driver update (Adam Manthei)
- enhance SCSI mid-layer queuing for indefinite retries (Doug Ledford)
- add ia64 reg reloads for 32-bit-EL strace -f support (Jason Baron)
- fix ia64 core dump support for 32-bit-EL executables (Jason Baron)
- add SCSI whitelist devs with BLIST_RETRY_ABORTED_CMD (Doug Ledford)
- remove stack-in-interpreter check in binfmt_elf.c (Julie DeWandel)
- clear all flags in exec_usermodehelper() for kmod (Alexander Viro)
- fix aacraid command completion (rq corruption) bugs (Tom Coughlan)
- correct cciss_proc_tape_report() type in flags decl (Tom Coughlan)
- enable USB-2.0-hub-based mice/keyboards to function (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.15.EL" date="1077962400">- fix amd64 oprofile linkage problem in ia32e support (Ernie Petrides)
- update ips driver to version 6.11.07 w/6.10.52 backup (Tom Coughlan)
- add size checks to DRM ATI r128 driver ioctl handling (John Dennis)
- avoid megaraid2 irq_disable calls for mem-mapped ctlrs (Tom Coughlan)
- upgrade firmware imbedded in QLogic driver to 3.02.24 (Tom Coughlan)
- correct ia64 memory accounting in overcommit mode 2 (Larry Woodman)
- implement softirq deferral to limit kernel stack depth (Ingo Molnar)
- reduce kernel stack usage in a couple of tux functions (Ingo Molnar)
- fix shared extended attribute ref counting in ext3 (Stephen Tweedie)
- clear SCSI sense data buffer between eh retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.14.EL" date="1077789600">- add .RH1 suffix to cciss driver version v2.4.50 (Tom Coughlan)
- implement initial LAuS syscall auditing support (Mark DeWandel)
- introduce GFS enablers for locking and sendfile ops (Ken Preslan)
- update QLogic driver to 6.07.01 w/6.06.00b11 backup (Tom Coughlan)
- improve netdump reliability w/asynchronous IPI param (Jeff Moyer)
- add ICH6 DSP audio support to i810_audio driver (Jeff Garzik)
- apply SCSI whitelist updates for several devices (Tom Coughlan)
- fix odd byte tape i/o handling in sym53c8xx driver (Tom Coughlan)
- correct minimum nfsd version that supports acls (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.13.EL" date="1077703200">- allow concurrent NFS direct i/o to same file if !append (Steve Dickson)
- introduce support for new Intel 64-bit ia32e processor (Larry Woodman)
- update mptfusion driver to 2.05.11.03 w/2.05.05 backup (Adam Manthei)
- remove fs/binfmt_misc.o from linux-modules-unsupported (Jason Baron)
- fix ia64 predicate register use in sig trampoline code (Jason Baron)
- add oprofile cpu type recognition for ia32e processor (Will Cohen)
- update e1000 network driver to version 5.2.30.1-k1 (Jeff Garzik)
- add more Intel PCI ids to match upstream 2.4 (Jeff Garzik)
- add ICH6 PATA support, PCI ids, irq routing (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.12.EL" date="1077530400">- add deferred page freeing for intr-context unmap_kvec() (Jeff Moyer)
- update megaraid2 driver to v2.10.1.1 w/v2.00.9 backup (Tom Coughlan)
- fix ppc64 pte hash table locking to avoid deadlocks (Julie DeWandel)
- fix ia64 data TLB init to prevent random boot-up hangs (Jason Baron)
- fix ia64 RNat register corruption with alt sig stacks (Jason Baron)
- allow smaller ia64 sig stacks in ia32 emulation layer (Jason Baron)
- backport ncpfs fixes to eliminate var-length arrays (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.11.EL" date="1077271200">- backport cisco aironet driver from 2.6.3-rc4 (Matthew Galgoci)
- update tg3 driver to v2.7 to fix status reg handling (Dave Miller)
- correct lost jiffies logic for x440/5 cyclone timer (Bernd Schmidt)
- fix open() error clean-up for unsupported O_DIRECT (Stephen Tweedie)
- prevent ia64 crashes when unmapping hugetlb pages (Jason Baron)
- add ppc64 processor support for future PPC970+ (Julie DeWandel)
- rework ppc64 32-bit-compat iptables support (Julie DeWandel)
- fix func ptr test in ethtool_set_ringparam() (Jeff Garzik)
- disable linux-2.4.21-scsi-affine-queue.patch (Doug Ledford)
- improve scsi_allow_ghost_devices description (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.10.EL" date="1077098400">- fix amd64 iommu bug causing data corruption on &gt;4GB systems (Jim Paradis)
- return EINVAL for unsupported ioctl32 syscalls on ppc64 (Julie DeWandel)
- remove incorrect BUG() call in __remove_inode_page() (Stephen Tweedie)
- fix s390 ctc driver problem causing build system hangs (Pete Zaitcev)
- fix s390 qeth driver error path to reset write_busy (Pete Zaitcev)
- update s390 zfcp driver to fix miscellaneous bugs (Pete Zaitcev)
- apply upstream nfs fixes for acl error handling (Steve Dickson)
- prevent kernel stack data leak via /dev/rtc (Ernie Petrides)
- allow AIO operations on sockets for non-inet (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.9.EL" date="1076925600">- restore genksyms_smp_prefix setting for non-x86 builds (Ernie Petrides)
- display/log memory stats whenever there's an OOM kill (Larry Woodman)
- update tg3 driver to v2.6, the latest upstream version (Jeff Garzik)
- update net bonding driver to v2.4.1, latest upstream (Jeff Garzik)
- fix irq, mem, printk, strtol bugs in cciss driver (Tom Coughlan)
- wait for board ready after hot add, cciss driver (Tom Coughlan)
- enable cciss adapter prefetch for x86 platforms (Tom Coughlan)
- add preserve_arg0 handling for ia32 emulation (Larry Woodman)
- fix ppc64 compat support for quota syscall (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.8.EL" date="1076580000">- remove Power-Blade-specific def for USB TEAC floppy (Julie DeWandel)
- fix s390 crash in iucv driver on connection shutdown (Pete Zaitcev)
- fix ia64 ACPI parsing for multinode IDE devs on x455 (Jim Paradis)
- fix amd64 core dumping of multithreaded 32-bit apps (Jim Paradis)
- fix s390 oprofile conditional and zero top addr bits (Will Cohen)
- add ipr driver v1.0.3 for IBM's PPC RAID adapters (Tom Coughlan)
- add {alloc,free}_netdev(), list macro, tg3 PCI ids (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.7.EL" date="1076407200">- restrict /proc/tty/driver directory access to root (Jeff Moyer)
- allow non-standard usr/sys VM splits at 2G/2G, 1G/3G (Ingo Molnar)
- extend existing ppc64 RTAS firmware flash interface (Mark DeWandel)
- fix ppc64 version of strncpy() to zero-pad buffers (Julie DeWandel)
- fix s390/x version of strncpy() to zero-pad buffers (Pete Zaitcev)
- fix generic version of strncpy() to zero-pad buffers (Jim Paradis)
- improve ppc64 segment table entry replacement logic (Julie DeWandel)
- correct type/cast of "len" in ppc64/kernel/nvram.c (Julie DeWandel)
- implement new ppc64 RTAS system call interface (Julie DeWandel)
- increase x86 RSDT table limit in ACPI parsing (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.6.EL" date="1076320800">- fix more usb-storage bugs for Power Blade support (Julie DeWandel)
- remove extra inactive_clean_pages-- in reclaim_page() (Larry Woodman)
- return proper error codes for do_munmap() failure in mremap (Dave Jones)
- fix binfmt_elf.c problems for apps with huge bss regions (Julie DeWandel)
- update cciss driver to v2.4.50 for Smart Array 6i support (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.5.EL" date="1075975200">- prevent netdump progress output from filling up log_buf (Jeff Moyer)
- add ppc64 RAS hook at end of panic() processing (Julie DeWandel)
- correct source IP address in ICMP error message (Dave Miller)
- fix smp deadlock with pdeath_signal posting (Roland McGrath)
- add ppc64 support for /proc/ppc64/lparcfg (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.4.EL" date="1075888800">- update nfsd mode-with-acls fix for upstream conformance (Steve Dickson)
- rework usb-storage locking to avoid hangs on disconnect (Pete Zaitcev)
- fix mmio alignment error in olympic token ring driver (Julie DeWandel)
- prevent tux logger-thread shutdown problems on ppc64 (Ingo Molnar)
- add ppc64 AltiVec chip support for Power Blades (Julie DeWandel)
- eliminate multi-threaded coredump hang potential (Ingo Molnar)
- fix ppc64 segfaults with tasks &gt; 2GB in size (Julie DeWandel)
- fix usb-storage memory-allocation/iowait deadlock (Alan Cox)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.3.EL" date="1075716000">- add amd64 support for PT_GNU_STACK with exec shield (Jim Paradis)
- fix s390 raid1 sync problem w/writes at end of dev (Pete Zaitcev)
- update s390 zcrypt driver to version 1.1.4 (Pete Zaitcev)
- fix output of large /proc/pid/statm values (Mark DeWandel)
- fix output of large /proc/partitions values (Mark DeWandel)
- enable ppc64 support for JS20 Power Blades (Julie DeWandel)
- fix kernel stack memory leak on fork failures (Dave Anderson)
- fix ipv6 packet quoting problem in icmpv6_send() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.2.EL" date="1075370400">- apply Intel's x86 microcode loader update (Jim Paradis)
- enhance PCI multifunction support for ppc64 (Julie DeWandel)
- fix nfsd returning bad mode bits when acls set (Steve Dickson)
- prevent unkillable zombies from detached NPTL threads (Ingo Molnar)
- avoid missing scsi disks in /proc/partitions on detach (Jason Baron)
- correct pte calculation inside zeromap_pte_range() loop (Ben Woodard)
- add inline function PDE() to help driver backporting (Matthew Galgoci)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.1.EL" date="1074679200">- (this is the first build for RHEL 3 Update 2)
- relocate various pieces of the "undo" patch (Patch Review Committee)
- rename s390 zcrypt and zfcp driver patches (Pete Zaitcev)
- add LKML discussion to COPYING.modules (Arjan van de Ven)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.EL" date="1073556000">- fix race condition between thread creation and signals (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-8.EL" date="1073469600">- fix amd64 eflags masking in 32-bit emulation of ptrace (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-7.EL" date="1073383200">- fix numerous ppc64 problems with /proc access (Julie DeWandel)
- allow user core files larger than 2GB in size (Dave Anderson)
- add ia64 support for Crestone Peak AGP bridges (John Dennis)
- fix unaligned kernel accesses in nfs_readdir() (Steve Dickson)
- add new_len/new_addr checks in do_mremap() (Ernie Petrides)
- fix nfs O_DIRECT corruption with &gt;4GB files (Steve Dickson)
- enable bus scan for AGP ctlrs on amd64 systems (John Dennis)
- limit PCI-alloc'ed physaddrs to 4GB on HP ia64 (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-6.EL" date="1070877600">- fix ppc64 firmware updates (Julie DeWandel)
- fix sync wakeup problem (Ingo Molnar)
- add ia64 cyclone support (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-5.EL" date="1070272800">- undo rejected patches (Stephen Tweedie, Arjan van de Ven, Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.20.EL" date="1069840800">- enable NUMA support in amd64 smp configs (Jim Paradis)
- prevent oopses with tux in OOM scenarios (Ingo Molnar)
- apply several ipv6 multicast bug fixes (Dave Miller)
- assign retval in copy_process() error path (Ingo Molnar)
- add lseek-in-/proc support for s390x "ps" (Pete Zaitcev)
- redefine zone_is_highmem() for Celestica (Dave Anderson)
- fix unresolved symbols in amd64 modules (Bill Nottingham)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.19.EL" date="1069754400">- fix tg3 rx_pending limit for BCM5705/BCM5782 chips (Jeff Garzik)
- reset page error flag prior to read of new contents (Jeff Moyer)
- enable CONFIG_HOTPLUG_PCI option for ia64 configs (Doug Ledford)
- fix inactive laundry list race in ramfs_writepage() (Dave Anderson)
- avoid out_of_memory() for wired pages when there's lomem (Dave Anderson)
- conditionalize ppc64 machdep_calls change for KMI compat (Ernie Petrides)
- limit anon/cache pages scanned in refill_inactive_zone() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.18.EL" date="1069668000">- create old version (rev. 5.64) of cmpci sound driver (Tom Coughlan)
- remove ac97.o, ad1848.o, cs4232.o from unsupported (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.17.EL" date="1069063200">- fix missing use of __GFP_HIGHMEM flag in pte_alloc_one() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.16.EL" date="1068890400">- rework scsi mid-layer queuing logic to fix error handling (Doug Ledford)
- fix pci_dma_sync_sg() scatterlist arg in megaraid2 driver (Tom Coughlan)
- move more-ptes-in-rmap-pte-chain logic to its own patch (Ernie Petrides)
- tag uses of __GENKSYMS__ with KMI/ABI compat comment (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.15.EL" date="1068804000">- fix MD multipath bugs causing crashes during fail-overs (Doug Ledford)
- add chain_ptep_t and revert pte_addr_t for KMI compat (Ernie Petrides)
- restore sub-timer-tick time-of-day granularity for ia64 (Jason Baron)
- modify agpgart and drm drivers for ia64 HP ZX1 support (John Dennis)
- fix ia64 32-bit emulation for several stat-related calls (Jason Baron)
- enable amd64 use of new ips driver w/config separation (Tom Coughlan)
- update e100 network driver to version 2.3.30-k1 (Jeff Garzik)
- update e1000 network driver to version 5.2.20-k1 (Jeff Garzik)
- apply scsi whitelist updates for IBM/CNSi/NEC devices (Tom Coughlan)
- reenable varyio for aic7xxx driver (hangs were unrelated) (Jeff Moyer)
- conditionalize NVIDIA_NFORCE3 to restore KMI compat (Ernie Petrides)
- prevent two ext3 panics on corrupted filesystems (Stephen Tweedie)
- apply two minor fixes to ppc64 RAS nvram reading (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.14.EL" date="1068717600">- update ServeRAID (ips) driver to version 6.10.52 (Tom Coughlan)
- configure xmon on by default in ppc64 configs (Julie DeWandel)
- create initial s390 zcrypt driver, version 1.1.2 (Pete Zaitcev)
- remove zfcp driver from linux-modules-unsupported (Pete Zaitcev)
- revise ppc64 reliability/serviceability support (Julie DeWandel)
- reduce kernel stack usage inside nfs_readdir() (Steve Dickson)
- add gameport dependency to cmpci driver config (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.13.EL" date="1068631200">- reduce UDP retransmissions and fix slow reads for NFS (Steve Dickson)
- implement wired page lists for better ramfs handling (Larry Woodman)
- fix vfork deadlock when child process causes core dump (Ingo Molnar)
- enhance AltSysRq-M output and fix deadlock potential (Larry Woodman)
- update cmpci sound driver for some HP IPF workstations (Tom Coughlan)
- correct tq_struct struct initialization in tg3 driver (Jeff Garzik)
- fix NFS file attribute inconsistency after rename (Steve Dickson)
- prevent ia64 machine checks w/sysreport on Olympia (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.12.EL" date="1068544800">- redesign refill_inactive_zone() for smarter deactivation (Larry Woodman)
- improve page deactivation scalability w/delayed laundering (Larry Woodman)
- rework locking and timer usage in s390 ctc network driver (Pete Zaitcev)
- allow xmon to be enabled at boot-time for ppc64 debugging (Julie DeWandel)
- reverse kscand's order of anon/cache active list traversal (Larry Woodman)
- force in-lining of br_read/write_lock/unlock routines (Julie DeWandel)
- fix mistaken fall-through cases in s390 chandev driver (Pete Zaitcev)
- make a few exported symbols available to OpenGFS (Stephen Tweedie)
- fix ld/st ordering bug causing lost signal wakeups (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.11.EL" date="1068112800">- make profile=X imply nmi_watchdog=1 and fix NMI w/d bugs (Ernie Petrides)
- add lock init in scsi_get_host_dev() to fix shutdown hang (Doug Ledford)
- enable distributed interrupts by default on ppc64 iSeries (Julie DeWandel)
- improve amd64 reporting of machine check errors (Jim Paradis)
- fix disabling of autonegotiation in tg3 driver (Dave Miller)
- add image name to s390 ioctl32 debug message (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.10.EL" date="1068026400">- fix file lock ownership by NPTL threads to be process-wide (Ernie Petrides)
- upgrade megaraid driver to version 1.18k and fix isr/fw sync (Tom Coughlan)
- upgrade megaraid2 driver to version 2.00.9 and enable varyio (Tom Coughlan)
- improve scsi mlqueue handling to enable BUSY/QUEUE_FULL fix (Doug Ledford)
- correct reporting of i/o errors in ppc64 viodasd driver (Julie DeWandel)
- update acenic driver to handle enabling of jumbo frame mode (Jeff Moyer)
- fix i386 PAGE_NONE bits to prevent get_user_page() hang (Roland McGrath)
- fix ia64 show_mem() handler to use efi_memmap_walk() call (Dave Anderson)
- replace spaces in slabinfo entry name for async poll table (Matt Wilson)
- fix race condition in buffer-head memory footprint patch (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.9.EL" date="1067940000">- improve spec file robustness in %post/%preun stanzas (Florian La Roche)
- add s390x iovec length checking for 32-bit reads/writes (Matt Wilson)
- use highmem for pte/ramfs page allocation w/__GFP_WIRED (Larry Woodman)
- upgrade oprofile support with bug fixes and enhancements (Will Cohen)
- fix infinite recursion in SCSI mid-layer post-processing (Jeff Moyer)
- introduce no-auto-start-on-add handling for SCSI blacklist (Jeff Moyer)
- enable s390 support for blk stats handling for iostat -x (Pete Zaitcev)
- fix LVS timer-related hang from ip_vs_conn_expire() bug (Ernie Petrides)
- correct module init in cpqarray driver to fix insmod crash (Tom Coughlan)
- incorporate ESB PATA support and fix a pirq_routers PCI id (Jeff Garzik)
- fix nfs async write deadlock potential w/nfs_writepage() (Steve Dickson)
- fix SCSI error handling for BUSY queue status messages (Doug Ledford)
- improve ppc64 32-bit ioctl support for use by ethtool (Julie DeWandel)
- add missing unlock in ip_mc_del_src() to fix IGMP deadlock (Dave Miller)
- change ppc64 reporting of floppy capacity to be 1.44 MB (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.8.EL" date="1067421600">- fix up various problems on Nforce3-based amd64 systems (Jim Paradis)
- double number of pte addrs in rmap pte_chain structs (Larry Woodman)
- restrict slab size for kernel data structs to 2 pages (Larry Woodman)
- clean up obsolete quicklist usage for ppc64 pte pages [rejected]
- prevent readdirplus from returning hidden mount points (Steve Dickson)
- prevent lockd deadlocks caused by export table locking (Steve Dickson)
- eliminate use of parallel task_struct init macro on ia64 [rejected]
- fix broken s390x overflow checks with 32-bit F_GETLK use (Matt Wilson)
- fix SCSI errors with "mt stoptions" and IDE tape drives (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.7.EL" date="1067162400">- fix bad checksumming interaction between e100 and bridge (Jeff Garzik)
- prevent system hang by OOM killing when overcommitted (Larry Woodman)
- un-inline ext3 error function to reduce stack usage (Stephen Tweedie)
- fix several ppc64 problems with interrupt handling (Julie DeWandel)
- correct amd64 identification in /dev/oprofile/cpu_type (Jim Paradis)
- move fput() call in do_tty_hangup() to avoid oops w/kon (Alexander Viro)
- eliminate creation of never-used task_struct slab cache (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.6.EL" date="1066903200">- reduce buffer-head memory footprint from read-only files (Ingo Molnar)
- update qeth driver for reduced stack usage and bug fixes (Pete Zaitcev)
- fix s390 qeth driver again to allow tcpdump to function (Pete Zaitcev)
- add exec_mmap() locking to prevent vma lookup races (Ernie Petrides)
- rework RPC slot allocation for further NFS improvements (Steve Dickson)
- reduce frequency of RPC retransmits during NFS writes (Steve Dickson)
- make generic/ext3 file system write handling 64-bit clean (Jeff Moyer)
- allow SMP scheduling rebalancing to occur every 200 msecs (Ingo Molnar)
- prevent races during IPC semaphore set and msg queue removal (Ingo Molnar)
- fix ACPI handling to identify trigger/polarity of PCI IRQs (Jim Paradis)
- correct amd64/ia64 acpi_disabled decls for post-boot access (Jeff Moyer)
- update ppc64 viocons driver with several bug fixes (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.5.EL" date="1066298400">- move fix for PPR use in sym53c8xx driver to its own patch (Ernie Petrides)
- correct pids exported by msgctl/semctl/shmctl/fcntl calls (Ulrich Drepper)
- apply s390 lcs driver wait queue init and locking updates (Pete Zaitcev)
- enable dummy network driver use in generic s390 config file (Pete Zaitcev)
- add missing ptrace hooks for exec and vfork-done events (Bill Nottingham)
- fix SMP timer race that triggered BUG_ON() in add_timer() (Ingo Molnar)
- fix several bogus ipvs boundary checks in ftp module [rejected]
- fix vfsmount queuing in attach_mnt() for CLONE_NEWNS [rejected]
- add net_device check to prevent oops in pppoe driver [rejected]
- fix memory leak in symlink error path of /proc driver [rejected]
- fix overflow in v1_disk2mem_dqblk() quota calculation [rejected]
- increase ppc64 ramdisk size to 8192k in p/iSeries configs (Jeremy Katz)
- lower amd64 TASK_UNMAPPED_32 to increase avail address space (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.4.EL" date="1066039200">- fix ppc64 stack pointer alignment in user signal handlers (Jakub Jelinek)
- increase amd64 exception stack size to 4k to avoid overflow (Jim Paradis)
- fix ppc64 interrupt rate accounting for vmstat and /proc (Julie DeWandel)
- extend amd64 NMI watchdog timeouts to tolerate bad 2nd cpu (Jim Paradis)
- allow s390 dasd driver to use noop elevator module (Pete Zaitcev)
- add free_irq() in error path of olympic token ring driver (Matt Wilson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.3.EL" date="1065866400">- make pid fields in ucred structures hold tgid values (Ulrich Drepper)
- prevent ppc64 iSeries virtual console writes &gt; 4k (Julie DeWandel)
- control ia64 unaligned access messages with new sysctl (Jeff Moyer)
- correct SCSI data direction on cmd to spin up disks (Pete Zaitcev)
- add do_brk() TASK_SIZE and address space wrap checks (Arjan van de Ven)
- limit PPR use in sym53c8xx driver for ppc64 Zapata drives (Doug Ledford)
- list ac97.o, ad1848.o, and cs4232.o modules as unsupported (Jeff Moyer)
- clean up conditional compilation in s390 zfcp driver (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.2.EL" date="1065693600">- identify whether i686 or athlon config in oops output (Arjan van de Ven)
- remove warning in reclaim_page() unmapped page path (Ernie Petrides)
- fix several lvm error handling paths causing memory leaks [rejected]
- correct i386 smp shutdown logic when netdump is enabled (Jeff Moyer)
- fix amd64 potential data leaks on FPU save/restore errors (Jim Paradis)
- prevent aic7xxx chip resets leading to PCI parity errors (Tom Coughlan)
- remove ia64 user tty warning on unaligned accesses (Arjan van de Ven)
- fix ppc64 /proc file buf overruns in viodasd driver (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.1.EL" date="1065607200">- (this is the first build for RHEL 3 Update 1)
- avoid m/ctime update for pipe writes on r/o file systems (Stephen Tweedie)
- prevent theoretical ext3 fs corruption in ext3_read_inode (Stephen Tweedie)
- enable AGRESSIVE_IDLE_STEAL to improve scheduler balancing (Ingo Molnar)
- fix potential ppc64 lock-up on ioctl32 un/reregistering (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.EL" date="1065175200">- extend ppc64 scsi timeout values for Zapata DVD-ROM drives (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-3.EL" date="1063965600">- make sure to release viotape op structure after use (Julie DeWandel)
- disable pgd/pmd quicklists on ppc64 (Mark DeWandel)
- temporarily disable aio on sockets (Jeff Moyer)
- correctly refile inodes to make them reclaimable (Harald Hoyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-2.EL" date="1063792800">- S390: update zfcp and cio drivers (Pete Zaitcev)
- IA64: add extra check to virtual mem_map (Larry Woodman, Dave Anderson)
- initialise local variables in ide-tape &amp; ide-scsi
- cap qla2200 tcq depth to 255
- switch version number scheme to kernel-2.4.21-N.EL</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063706400">- PPC64: invalidate evicted sbl entries in the erat (Julie DeWandel)
- increase ethernet tx_queue_len to 1000 (David Miller)
- in udp_{v6_}flush_pending_frames, reset up-&gt;len too (David Miller)
- S390: CMS reserved minidisk detection (Pete Zaitcev)
- call recount_segments() on a different occasion (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063620000">- really disable exec-shield (Roland McGrath)
- reduce stack randomisation, disable brk randomisation (Ingo Molnar)
- make e1000 driver 64 bit clean (Julie DeWandel)
- minor aio corner case error condition fix (Jeff Moyer)
- AMD64: more lenient check for call workaround (Ernie Petrides)
- PPC64: disable CONFIG_XMON (Mark DeWandel)
- S390: fix CCW slab selection (Pete Zaitcev)
- fix two-disk combined mode sata (Jeff Garzik)
- move buslogic scsi driver to supported, for vmware only (Tom Coughlan)
- change viocons message from KERN_WARNING to KERN_INFO (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063360800">- VM: handle race condition in reclaim_page (Stephen Tweedie, Larry Woodman)
- PPC64: fix "log_buffer broken" xmon issue (Julie DeWandel)
- fix compiler warnings in netdump (Jeff Moyer)
- AMD64: workaround for 32 bit compat mode page fault problem (Ernie Petrides)
- IA64: make perfmon root-only (Jason Baron)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063274400">- fix smp race in rebalance_laundry_zone()</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063188000">- fix compiler warnings when hugetlbfs is disabled (Pete Zaitcev)
- fix tux performance bug (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063101600">- don't evict kernel stack seg translation on ppc64 (Julie DeWandel)
- fix callers of do_page_fault on ppc64 (Mark DeWandel)
- AMD64 munmap return value, fix lsb failure (Jeff Moyer)
- fix for PPC64 32-bit ioctl (Jim Paradis)
- bring IA64 value of MINSIGSTKSZ in line with upstream (Jakub Jelinek)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063015200">- fix potential datacorruptor in viodasd driver (Julie DeWandel)
- fix race condition in s390 dirty bit handling (Pete Zaitcev)
- limit per-cpu slab cache size
- correct 32-bit readv/writev border cases on ppc64 (Matt Wilson)
- AMD Golem IO-APIC fixup for i686 kernel on AMD64 (Jeremy Katz)
- NFS Solaris 8 acl fix (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062756000">- minor nfs permissions bugfix (Steve Dickson)
- change mprotect return value to SuS mandated value (Arjan van de Ven)
- kernel-unsupported now provides kernel-modules (Jeremy Katz)
- correct __hugemem__modules typos in rhkernel.h
- fix subtle pmd corruption error (Larry Woodman, Dave Anderson)
- fix cut'n'paste error in SATA io port reservation
- restore NFSEXP_CROSSMNT ABI compatibility (Steve Dickson)
- round up executable name field length in core file (Jakub Jelinek)
- switch off exception_trace on amd64 (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062496800">- patch to access odd last sector on ia64 (Jason Baron)
- misc fixes from upstream (Arjan van de Ven)
- fix audigy driver (Jeff Garzik)
- tunable dcache reclaim priority for tux (Ingo Molnar)
- tg3 driver update (Jeff Garzik)
- ipv6 and icmp network bugfixes (David Miller)
- fix ppc64 memory access security bug (Julie DeWandel)
- reduce memory allocated for skb (Ingo Molnar)
- small smp fix for scalable timers (Ingo Molnar)
- make s390 recognise MSDOS partitions (Pete Zaitcev)
- small smp fixes in tux (Ingo Molnar)
- make mptfusion drivers supported on 4/4 split kernel (Tom Coughlan)
- add entries to scsi whitelist (Tom Coughlan)
- minor sata/ata driver updates (Jeff Garzik)
- small fixes to viodasd driver (Julie DeWandel)
- nfs_get_root and nfs access bit patches (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062064800">- don't show interrupts in /proc/stat for ppc64 (Matt Wilson)
- make sure sync returns in a reasonable time
- PPC64: fix for boot cpu not being cpu 0 (Julie DeWandel)
- zero sized write no longer updates mtime (Matt Wilson)
- fix video bios read corruption on ia64 (Larry Woodman)
- network fixes to tg3, bonding (Jeff Garzik)
- properly reserve legacy IDE regions in sata driver (Jeff Garzik)
- fix ppc64 signal handling bugs (Mark DeWandel)
- tux fixes (Ingo Molnar)
- tgkill syscall for s390(x) (Pete Zaitcev)
- amd64 32 bit compatibility fixes (Jim Paradis)
- ppc64 32 bit compatibility fixes (Julie DeWandel)
- fix 4G/4G follow_page problem (Ingo Molnar)
- reduce memory used by VMAs and dentries (Arjan van de Ven)
- make LVM snapshotting of ext3 work reliably (Stephen Tweedie)
- make netdump play better with the nmi watchdog (Jeff Moyer)
- QLA2200: disable irq mitigation, fix off-by-one (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061805600">- seq_file /proc/interrupts for x86 too (Ingo Molnar)
- fix memory leak in ia64 exec of ia32 binaries
- check tgid not pid in scm_check_creds()  (David Miller)
- VM fixes: shm swap priority, zeromap_page_range
- workaround VFS limitations for VXFS NFS export</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061546400">- use personality for 3GB userspace on x86 -hugemem (Ingo Molnar)
- add sysctl interface for lockd (Steve Dickson)
- don't prod VGA space on HP Pinnacle systems (Larry Woodman)
- fix for 32 bit binaries on amd64 (Jim Paradis)
- add preemption point to write_some_buffers (Julie DeWandel)
- sort ACPI table to get correct device ordering on HP (Larry Woodman)
- fix refcounting bug with ipv6 addresses on netdevs (David Miller)
- add s390 syscalls for tux (Pete Zaitcev)
- md multipath enablers (Doug Ledford)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061460000">- fix process and nice time accounting (Doug Ledford)
- amd64: syscall table updates, timer robustness (Jim Paradis)
- amd64 3GB personality for 32-bit processes (Jim Paradis)
- use 256MB pagesize for hugetlbfs on ia64 (Larry Woodman)
- make sure e100 only claims ipv4 checksumming
- igmpv3/mldv2 OOPS'er fix (David Miller)
- hugetlbfs: make chown work and allow uid=X,gid=Y mount options
- make larger mmap windows work (Ernie Petrides, Ingo Molnar)
- ia64: improve ia32 compatibility (Larry Woodman)
- fix bug in rpc retry code (Steve Dickson)
- make acpi pci hotplug modulable (Jeff Moyer)
- update (trivial) to megaraid 1.18j (Tom Coughlan) 
- enable varyio on mptfusion (Tom Coughlan)
- panic on oops to prevent data corruption opportunities (Ernie Petrides)
- small iorl locking fix (Doug Ledford)
- fix ppc64 get_wchan() bad deref (Mark DeWandel)
- fix aio read into mmap()d PROT_WRITE (Jeff Moyer, Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061373600">- libata update (Jeff Garzik)
- amd64 syscalls for xattrs &amp; ACLs (Jim Paradis)
- tux fixes (Julie DeWandel, Ingo Molnar)
- via &amp; i810 audio fixes (Jeff Garzik)
- small 4G/4G split bugfixes (Ingo Molnar)
- fix sigsuspend race on x86, amd64, ia64 (Mark DeWandel)
- ia32 behavior for FP denormal exceptions on ia64 (Jason Baron)
- get the set/get of NAT bits for ia64 correct (Jason Baron)
- ipsec update, adds cast6 encryption (David Miller)
- VM update: OOM bugfix &amp; page-&gt;flags atomic updates (Rik van Riel)
- reenable serpent encryption on ppc64
- bladecenter usb-ohci support (Pete Zaitcev)
- iorl fixes (Doug Ledford)
- network bonding driver oops fix (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060768800">- DAC960 back to bigmem supported, ne2k-pci &amp; usb audio to bigmem unsupported
- netdump updates for tg3 and e1000 (Jeff Moyer)
- put a hole between stack and mmap area (Ernie Petrides)
- process time accounting updates (Doug Ledford)
- fix null characters in TUX header (Julie DeWandel, Ingo Molnar)
- display correct executable when running interpreted script
- zfcp zSeries fibrechannel driver (Pete Zaitcev)
- ipsec updates (David Miller)
- fix 4G/4G race conditions (Ingo Molnar)
- rename -bigmem kernel to -hugemem to reflect changed tradeoffs
- optionally show task states from hangcheck timer (Jason Baron)
- various small bugfixes from upstream</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060423200">- fix scalable timer race condition  (Julie DeWandel, Ingo Molnar)
- print warning on boot with &gt;16GB RAM on -smp kernel (Arjan van de Ven)
- fix for xapic issue with ServerWorks chipsets (Ernie Petrides)
- remove spurious ioctl printk on ppc64 (Mark DeWandel)
- ppc64 wchan improvement (Mark DeWandel)
- hint @pause changes for ia64
- longer scsi scan timeout on ppc64 (Julie DeWandel)
- readv/writev for raw IO (Stephen Tweedie)
- fix for easy stack/mmap collisions (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060164000">- various XAPIC related fixes (Ingo Molnar)
- correct context switch and iowait stats with HT shared runqueues
- ext3 obscure deadlock fixes (Stephen Tweedie)
- knfsd fixes: blocked lock, symlink error &amp; missing bkl  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060077600">- de_thread bugfix from 2.6 upstream  (Matt Wilson)
- viocons driver update (Julie DeWandel)
- fix VM non-overcommit mode (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059991200">- plug data leak in aio code (Jeff Moyer)
- initial list of 4G/4G unsupported modules (Tom Coughlan)
- nfs softirq race fix (Steve Dickson)
- updated IPSEC patch (David Miller)
- networking updates/fixes from 2.4.22-preX (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059904800">- drop orlov allocator for now (Arjan van de Ven)
- correct HT cpu pair detection (Arjan van de Ven)
- build zImage.partial for netbooting on pSeries (Matt Wilson)
- fix missing symbols</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059818400">- export two AIO symbols for OCFS
- disable CONFIG_DEBUG_SLAB so performance testing can start
- crosshost mmap hooks for distributed filesystems (Stephen Tweedie)
- include partially linked zImage for pSeries netboot (Matt Wilson)
- nfs highmem fix, unmap when xdr_kmap() fails (Steve Dickson)
- update megaraid2 locking to work with IORL (Com Coughlan)
- make sure to build the qla2100 driver (Tom Coughlan)
- fix cdrom ioctl 32 bit compatibility for ppc64, amd64 (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059645600">- run depmod on install of unsupported modules (Arjan van de Ven)
- fix register corruption in IA64 lazy fpu handling (Larry Woodman)
- add b44 network driver (Jeff Garzik)
- make ppc64 pci interface routines compatible (Julie DeWandel)
- allow 32 bit userland on AMD64 and PPC64 to use volumes &gt; 2GB (Jeff Moyer)
- nfsd: acl related mount and export flags (Steve Dickson)
- fix nfs exp_fodrop oops (Steve Dickson)
- fix missed signal wakeups on ppc64 (Mark DeWandel)
- smp scalable timer bugfixes (Ingo Molnar)
- workaround for a prefetch bug in some Athlon CPUs (Ernie Petrides)
- code to make more modules unsupported for 4/4 split (Arjan van de Ven)
- various spec file and config cleanups
- viopath driver fix (Julie DeWandel)
- add match for 440gx chipset bioses (Arjan van de Ven)
- move epic100 and ne2k-pci back to supported (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059472800">- updated finegrained process accounting patch (Doug Ledford)
- make iSeries compile without CONFIG_ICOM (Julie DeWandel)
- nfsd: only set -&gt;reuse for tcp sockets, not udp  (Steve Dickson)
- enable the 4G/4G split on the i686-bigmem kernel only
- sysrq support for viocons (Julie DeWandel)
- limit pci_bus size changes to ppc64 (Jeff Garzik)
- fix for signal delivery race (Ernie Petrides, Mark DeWandel)
- add ShdPnd to /proc (Ingo Molnar)
- fix de_thread() hang (Ingo Molnar)
- add kernel support for CLONE_STOPPED (Ernie Petrides)
- make sure to initialise HVC console (Julie DeWandel)
- fix _SEG abort hit in ACPI code (Larry Woodman)
- build addon drivers on amd64 and ppc64 too (Tom Coughlan)
- build IPS driver on all architectures (Tom Coughlan)
- fix a few ia32 emulation bugs for IA64 (Larry Woodman)
- enable correct/new __clear_bit macro for IA64 (Larry Woodman)
- flexible mmap allows mappings of huge executable segments (Larry Woodman)
- sysrq-w for s390 (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058436000">- have s390 cpu_relax() also include barrier  (Pete Zaitcev)
- convert ppc64 xmon traceback code to ksymoops (Matt Wilson)
- rename kstat_sum() variable with aliasing problems  (Ingo Molnar)
- fix AIO-on-hugetlbfs crash (Ingo Molnar)
- update support for IA64 Long's Peak ACPI serial ports  (Larry Woodman)
- turn on xmon for both iSeries and pSeries (Matt Wilson)
- bugfix to make CLI work correctly on iSeries (Julie DeWandel)
- SATA bugfixes (Jeff Garzik)
- enable 4G/4G split in -BOOT kernel, due to syslinux trouble</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058349600">- fix s390 compile (Pete Zaitcev)
- taint the kernel on sii6512 driver link, GPL but no source available
- handle debug registers with 4G/4G split (Ingo Molnar)
- tgkill syscall for ppc64 (Julie DeWandel)
- fix NFSD/ACL/ext3/jbd deadlock (Stephen Tweedie, Steve Dickson)
- fix maxcpus=1 installation panic fix for ppc64 (Julie DeWandel)
- IDE byteswapping io functions for ppc64 (Julie DeWandel)
- update sata driver (Jeff Garzik)
- raise the number of /proc entries (Julie DeWandel)
- sticky sysrq key with timeout (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058263200">- make SysRq-W useable on s390 (Pete Zaitcev)
- updated process accounting patch (Doug Ledford)
- siginfo_t fixes for s390x and amd64 (Jakub Jelinek)
- clustered NFS fail-over support (Steve Dickson)
- autofs4 updates and fixes
- ia64 patches to reduce cpu power/temp in idle loop (Larry Woodman)
- add irqsafe up() for LVM locking (Stephen Tweedie)
- O_DIRECT fallback to synchronous allocation in holes (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058176800">- ia64 HP iommu: add sx1000 detection
- possible bug in s390x 32-bit emulation  (Roland McGrath)
- updated ipsec patch, should fix all current ipv6 bugs  (David Miller)
- finegrained process accounting (Doug Ledford)
- ICH5 pci irq routing, and associated ids (Jeff Garzik)
- fix the machine_real_restart() reboot path on 4G/4G (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057917600">- fix amd64 agp-gart code to work around hugetlbfs debug code (Jim Paradis)
- fix ppc32 pthread_cancel (Jakub Jelinek) 
- Do not sent IGMP leave messages unless IFF_UP  (David Miller)
- software iommu for ia64 systems without hardware iommu (Jason Baron)
- fix ext3 oops fix during dio, LTP failure (Arjan van de Ven, Stephen Tweedie)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057831200">- Remove illegal calls to dst_link_failure</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057831200">- enable HT scheduler for bigmem kernel
- add tgkill syscall for x86 and ia64
- make -BOOT kernel smaller w/ modular md and CONFIG_SMALL
- rmap VM updates
- 4G/4G agpgart potential corruption fix (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057744800">- switch off exec shield everywhere
- eliminate hostfs for amd64 (Jim Paradis)
- megaraid update, mostly vendor ID (Tom Coughlan)
- shrink boot kernel by disabling some config options
- additions for the SCSI whitelist (Tom Coughlan)
- ia64 extable fix (Jason Baron)
- viocons driver upgrade (Julie DeWandel)
- another ia64 mmu context wraparound deadlock fix (Larry Woodman)
- iSeries icom debugger patch (Julie DeWandel)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057658400">- Drop io_request_lock in usb scsiglue.c:device_reset</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057658400">- fix cpu_relax for amd64 and ia64 to include a barrier (Ingo Molnar)
- restore o_direct api compatibility (Stephen Tweedie)
- fix possible ext3 deadlock in o_direct patches (Stephen Tweedie)
- ACLs for JFS (Stephen Tweedie)
- fix /proc/cpuinfo runqueue printing (Ingo Molnar)
- via audio fixes, smaller emu10k1 patch (Alan Cox, Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057572000">- fix process accounting, tux ftp passwords and si_pid (Ingo Molnar)
- 32bit compat statfs fix (Guy Streeter)
- don't serialise exit on BKL when accounting is off (Ingo Molnar)
- truncate timeouts to 32 bits on 64bit systems (Ingo Molnar)
- fix network channel bonding (Jeff Garzik)
- split netdump patch into core and net-drivers (Jeff Garzik)
- delayed tlb flushing for ia64 (Larry Woodman)
- emu10k1 driver fixes
- kksymoops for AMD64 (Jim Paradis)
- select bugfixes from 2.4 upstream (Jeff Garzik)
- OOM tweaks (Rik van Riel)
- use seq_file for /proc/interrupts on ppc64 (Mark DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057140000">- add qdio and qeth drivers for s390(x)  (Phil Knirsch)
- slab cache scale bugfix (Larry Woodman)
- S390: qdio &amp; qeth drivers (Phil Knirsch)
- hangcheck timer for ppc64 (Julie DeWandel)
- fix race conditions in ia64 ia32 compat layer (Larry Woodman)
- update megaraid, aic7xxx, cciss and cpqarray drivers (Tom Coughlan)
- nfs xdr_shift_buf, tcp client corruption and alignment (Steve Dickson)
- rhconfig.h stuff for ppc64, s390 and s390x (Matt Wilson)
- AIO on sockets</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057053600">- kiobuf optimisations (Stephen Tweedie, Larry Woodman)
- ipsec update (David Miller)
- ipvs update to deal with timer changes (David Miller)
- 4G/4G split patch optimisations (Ingo Molnar)
- hangcheck timer (Jason Baron)
- recent (AGP 3.0) agpgart support (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056967200">- semtimedop() support on s390/s390x  (Ernie Petrides)
- fix a 4G bug that triggers on systems with &gt;30 CPUs (Ingo Molnar)
- updated SCSI SMP affine queueing patch  (Arjan van de Ven)
- page hash prefetch in do_generic_file_read bugfix (Julie DeWandel)
- updates the qlogic driver to the latest (Arjan van de Ven)
- slab cache SMP scalability tweaks (Ingo Molnar)
- ACPI 2.0 for IPF and AMD64 (Jim Paradis, Larry Woodman)
- statm fixes for hugetlbfs and remap_file_pages (Jason Baron)
- acpi serial port detection (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056708000">- iseries driver updates (Julie DeWandel)
- aio scalability and 2.5 backports  (Ingo Molnar)
- SMP scalable timers (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056621600">- make qlogic driver use new scsi infrastructure (Arjan van de Ven)
- export aio kvec functions
- fix statm oops
- compile fixes 
- NFS ACL over the wire protocol extensions (Steve Dickson)
- rate limit slab pruning, to limit IPI load on SMP systems (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056448800">- scsi request lock scaling (Ingo Molnar)
- cpu affinity for scsi command processing (Ingo Molnar)
- use softirqs instead of bhs for the scsi layer (Doug Ledford)
- igmpv3 fixes and improvements (David Miller)
- oprofile for ppc64 (Will Cohen)
- Increase MAX_ADDR_LEN from 8 to 32 for Infiniband over IP (Tom Coughlan)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056362400">- per-cpu kstat arrays (Ingo Molnar)
- optimise 4G/4G tlb flushing (Ingo Molnar)
- kiobuf reclaim together with buffer reclaim (Arjan van de Ven)
- more scalable gendisk statistics (Ingo Molnar)
- nfs reconnect fixes (Steve Dickson)
- add 32-bit compatibility for ustat system call on ppc64 (Julie DeWandel)
- scalable gettimeofday (Ingo Molnar)
- hugetlbfs ppc64 &amp; s390 bits (Mark DeWandel, Pete Zaitcev)
- hugetlbfs for ia64 (Jason Baron)
- qlogic scsi driver update (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056189600">- nfs patches (Steve Dickson)
- xapic improvements, summit support (Ingo Molnar)
- fix core dump name for multithreaded programs (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056103200">- merge up to marcelo's latest</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056016800">- oom killer fixes (Larry Woodman, Rik van Riel)
- tunable VM overcommit (Rik van Riel)
- hugetlbfs for amd64 (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055930400">- updated iseries virtual drivers (Julie DeWandel)
- nfs lockd improvements (Steve Dickson)
- remap_file_pages improvements (Ingo Molnar)
- /proc/efi/symtab patch for ia64 (Larry Woodman)
- disable O_PROFILE on UP x86 machines
- allow NMI watchdog profiling frequencies up to 10kHz (Ingo Molnar)
- statm (Jason Baron)
- hugetlbfs (Ingo Molnar)
- have nfsd honour ACLs on a per-export basis (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055844000">- Enable O_PROFILE on non-SMP configs (Stephen Tweedie)
- more conservative AIC config options
- Fix BOOT kernel panic while mounting /dev/cdrom (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055757600">- merge to 2.4.21 + selected ac bits
- ipsec upgrade (David Miller)
- HT scheduler patch fix (correct sibling counting)
- make bdflush writeout smoother
- AMD64 gdb fix (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055412000">- don't include unsupported drivers in -BOOT kernel
- merge up to 2.4.21-rc8 + selected ac bits
- FIXME: sysrq for 3170, dasd, odirect &amp; odirect for nfs</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com" date="1055412000">- oprofile for s390</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055239200">- statm (Jason Baron / Julie DeWandel)
- AIO 32-bit compat for 64-bit machines (Julie DeWandel)
- only do bufferhead reclaim in extreme situations (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055152800">- Serial ATA support (Jeff Garzik)
- mtp fusion 2.05.05+ (Dave Maley)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054893600">- XATTR/ACL patches, except NFS over the wire (Stephen Tweedie)
- ipsec module autoloading (David Miller)
- remap_file_pages (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054807200">- upgrade to latest -rmap with Ernie's fixes
- sysrq+C shows the stack dump of all CPUs
- ext3 truncate fix (Stephen Tweedie)
- NFS fixes for HZ=1000 machines (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054720800">- 4G/4G split fix (Ingo Molnar)
- ppc64 fixes (Guy Streeter, Rik van Riel)
- enable oprofile on amd64
- ipsec updates (David Miller)
- fork returns pid instead of task_struct* (Julie DeWandel)
- ia64 ptrace bugfixes (Dave Anderson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054634400">- HP diva serial driver (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054548000">- NFS over TCP patches (Steve Dickson)
- switch to using ppc64pseries/ppc64iseries arches instead of
  kernel-pseries and kernel-iseries (Jeremy Katz)
- egenera scsi bus rescan patch (Jeff Garzik)
- oprofile (Graydon Hoare)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054288800">- futex requeue (Ingo Molnar)
- enable NAPI for E1000
- signal latency and scheduler improvements (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054202400">- kscand oops fix (Ingo Molnar, Rik van Riel)
- pcnet32 fixes (Julie Dewandel)
- raid autorun (Pete Zaitcev)
- turn off CONFIG_SUNDANCE_MMIO (Jeff Garzik)
- flexible mmap (Larry Woodman)
- ppc64 fixes (Matt Wilson, Guy Streeter)
- loop softirq 10 times before giving up (Ingo Molnar)
- O_DIRECT for NFS (Steve Dickson)
- prevent md from shutting down active arrays (Doug Ledford)
- rmap updates, inode reclaim &amp; higher order allocations (Rik van Riel)
- network channel bonding (Jeff Garzik)</changelog><changelog author="Jim Paradis &lt;jparadis@redhat.com&gt;" date="1054116000">- Re-enable x86_64 in build
- x86_64-specific updates for exec-shield
- Bring in improved "nonx" support for x86_64 from upstream</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1054116000">- Hush s390 printks upon user SIGSEGV by default. It can be enabled back with
  a sysctl kernel.userprocess_debug.
- Enable optional 3270 console mode on s390.</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053684000">- get rid of vsyscall page (Arjan van de Ven)
- fix missing symbol copy_str_fromuser_size</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053424800">- exec-shield updates to fix hang-on-boot on some systems (Ingo Molnar)
- temporarily disabled the architectures, which got broken by exec-shield updates
- fix for LTP sigprocmask02 failure (Matt Wilson)
- ppc64 updates (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053338400">- pagecache scalability patch (Ingo Molnar)
- IPC semaphore scalability patch (Ingo Molnar)
- ppc64 updates (Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052992800">- exec-shield (Ingo Molnar)
- AMD64 ACPI updates (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052906400">- reenable O_DIRECT, O_DIRECT fixes and superbh-aio (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052820000">- vma merging (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052733600">- nmi profiler
- VM updates: rmap, dma zone isolation
- tux (Ingo Molnar)
- ext3 stall fixes (Ingo Molnar)
- e1000 fixes (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052474400">- config files overhaul (Arjan van de Ven)
- fix bug in mlock patch
- IPVS (Dave Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052388000">- import IO elevator changes from gingin
- critical VM fix
- matrox framebuffer patch for pseries (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052301600">- hammer nptl fixes (Ulrich Drepper)
- 4G/4G split (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052215200">- upgrade to 2.4.21-rc1-ac4 (minus -ac acpi and xapic changes)
- drop nfs patches since those seem to be in -ac</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052128800">- larger message buffer size + boot option (Mark DeWandel)
- AMD64: tls handling, coredump fixes (Jim Paradis)
- SMP &amp; highmem VM fixes (Ben LaHaise)
- HT+NUMA scheduler (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051956000">- ext3 orphan cleanup fix (Ernie Petrides)
- s390 affinity fixes (Pete Zaitcev)
- i386 vsyscall DSO changes (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051869600">- bugfixes and config changes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051783200">- enable semtimedop for other architectures (Ernie Petrides)
- large pci bus numbers (Julie DeWandel)
- bugfixes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051610400">- igmpv3 (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051524000">- generic 32bit compat stuff + amd64/ppc64/ipf pieces (Matt Wilson)
- clustered apic (XAPIC) support (Ingo Molnar)
- ppc64 architecture updates (Matt Wilson, Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051264800">- ppc64 fixes</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051178400">- collapse ipsec into one patch (David Miller)
- ppc64 build fix (Matt Wilson)
- improve smp scheduler fairness (Ingo Molnar)
- allow mlock for normal users, up to ulimit (Ingo Molnar)
- AMD64 port (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051092000">- clean up mechanism to pass extra CFLAGS so we don't override what's
  already there
- merge ia64 build stuff (Larry Woodman)
- merge varyio + superbh (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051005600">- merge up to 2.4.21-rc1
- IA64: virtual mem_map, acpi updates, netdump update, pte-highmem &amp; fealnx
- IA64: architecture specific patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050919200">- import davem's ipsec patch pile
- ppc64 kallsyms and dump_fpu patches (Matt Wilson)
- rmap updates (x86_64 &amp; bufferhead reclaim)
- ppc64 ptrace patch (Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050660000">- open up patch namespace 2000-5000 for network protocol changes
- renumber existing patches in that range</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050573600">- make sure to actually apply the rmap-updates patch
- iowait statistics
- ppc64 code merge (Mark &amp; Julie DeWandel)
- ppc64 build scripts (Matt Wilson)
- raise symlink recursion level to 8 (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050487200">- merge up to marcelo's latest
- pte-highmem bits for x86-64 and ppc64</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050400800">- merge up to 2.4.21-pre7-ac1
- drop semtimedop patches (now in -ac)
- drop nfs xprt_fixes, fix_softirq, d_drop and nfs-readeof (merged in -pre7)
- add !CONFIG_QUOTA compile fix for 2.4.21-pre7-ac1</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1050314400">- add LCS driver (endemic to s390)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050314400">- add rmap VM
- add kunmap_atomic debugging patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050141600">- remove dir.c part of NFS kmap_atomic patch for now
- using strlen as local variable name in nfs code kills, literally</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050055200">- merge S390(x) back in  (Pete Zaitcev)
- fix NFS kmap_atomic patch
- sched.c patch to disable interrupts in wake_forked_task  (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049968800">- AIO infrastructure  (Ben LaHaise)
- update NFS kmap_atomic patch  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049882400">- semtimedop patches  (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049796000">- I know understand linux-2.4.20-nfs-readeof.patch, so I merged it
- netdump update (Dave Anderson)
- 64 bit pci &amp; elf loader fix (Mark &amp; Julie)
- nptl whitespace patches, folded into nptl patch (Arjan van de Ven)
- rediff linux-2.4.18-smallpatches.patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049709600">- merge NFS patches by Steve Dickson (blame me for NFS kmap_atomic patch)
- split x86 syscall stuff out into separate patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049536800">- fix nptl patch, now it boots</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049450400">- port linux-2.4.20-o1-nptl.patch from gingin
- rediff a few patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049277600">- update linux-modules-unsupported (with Arjan)
- fix up the list a second time to fix module dependencies</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049191200">- copy -head into new AS3 branch
- remove i586 build
- remove 7.x compatibility (linux-2.4.9-fstat.patch)
- architecture patches get more breathing room (100 - 500)
- reserve patch numbers 1000 - 2000 for VM
- patch numbers 2000 - 5000 for bugfixes, changes and updates to
  existing drivers and filesystems
- remove inode reclaim patch (will be merged later as part of rmap)
- remove io priority scheduler (still experimental)
- remove nfs patches (linux-2.4.20-nfs-cto.patch,
  linux-2.4.20-nfs-access.patch &amp; linux-2.4.20-nfs-rdplus.patch)
- remove linux-2.4.18-gericom.patch
- update netdump from RH9 branch</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1048240800">- Added three NFS performance patches</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048240800">- add a timer for aging requests up</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048154400">- fix the sorting in the io elevator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048068000">- remerge ext3 orlov allocator and enable
- more priority io elevator infrastructure work</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1047117600">- merge ext3 orlov allocator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046772000">- go to 2.4.21-pre5-ac1
- split the rpm into a primary fileset and secondary (rare modules) fileset</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046253600">- go to 2.4.21-pre4-ac6
- drop lots of patches
- trim changelog to not have 2000, 2001 and 2002 anymore</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045476000">- downgrade pwc webcam driver one notch to the last known working version
- work around vm livelock
- make the cciss driver not enable irq's in it's irq handler</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1045130400">- fix for shared statistic &lt; 0</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045130400">- Signal fixes for LSB testsuite
- merge patch to fix init=/bin/sh
- 2.4.21-pre4-ac4 bugfixes (mostly IDE crashes)</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044784800">- merge 2.4.21-pre4-ac3 bugfixes</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1044352800">- Add ext3 fix for truncating negative i_blocks</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1044266400">- add oopsmeharder for debugging hard hangs</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044266400">- merge rmap15d
- set the sbp2 command buffer to 64 elements instead of 8</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1043834400">- merge tcp stall fix from DaveM
- merge bugfixes from 2.4.21-pre4</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1042452000">- Merge in the ACL and XATTR patches from the UL and BestBits trees.</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1042279200">- Merge in the LVM pvmove fix to current tree</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1042020000">- add AMD Golem fixup</changelog></package>
<package pkgid="2131f20eeebaf3885556eb6c54693212bbc663ac" name="kernel" arch="src"><version epoch="0" ver="2.4.21" rel="37.EL.XFS"/><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1128420000">- added SGI XFS patch set</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-37.EL" date="1126087200">- fix latent sendmsg() cmsghdr32 bug exposed in -36.EL (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-36.EL" date="1125655200">- fix sync() hangs from NFS file create/delete races (Steve Dickson)
- add support for HP Smart Array E400i in cciss driver (Tom Coughlan)
- defend against cmsghdr32 changes in sendmsg() handling (Dave Miller)
- correct OpenIPMI module version strings (v35 -&gt; 35.4) (Brian Maly)
- fix intermittent build failures under lpfc subdir (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-35.EL" date="1124445600">- disable FAN processing in Emulex driver (7.3.2) (Tom Coughlan)
- update cciss disk driver to version 2.4.58.RH1 (Tom Coughlan)
- update SCSI whitelist for EMC Invista devices (Tom Coughlan)
- fix diskdump regression w/module CRC errors (Nobuhiro Tachino)
- update SCSI whitelist for IBM ULT3580 TapeLibrary (Wendy Cheng)
- fix f/w upgrade hang, dmi_table bug in IPMI (Peter Martuccelli)
- fix x86_64 machine check regression from -32.10.EL (Brian Maly)
- validate XFRM policy in IPSEC setsockopt() calls (John Linville)
- fix intr kiobuf_init() regression from -32.11.EL (Larry Woodman)
- fix pollcomplete error in cciss diskdump support (Tom Coughlan)
- enforce CAP_NET_ADMIN perms for policy creation (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-34.EL" date="1122544800">- fix O_SYNC EIO error propagation through ext3/jbd (Stephen Tweedie)
- add support for Enterprise Southbridge II (ESB2) (Geoff Gustafson)
- implement devname callback for block device drivers (Doug Ledford)
- upgrade SATA support (core, libata, and drivers) (Jeff Garzik)
- add ia64 export of (*pm_power_off)() for IPMI (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-33.EL" date="1121767200">- update 3w-9xxx driver to version 2.24.03.008RH (Tom Coughlan)
- revise reserved port avoidance added in -32.8.EL (Steve Dickson)
- update OpenIPMI driver/configs to version v35 (Peter Martuccelli)
- add handling for NEC vendor ID in megaraid2 driver (Tom Coughlan)
- update SCSI whitelist for 3PARdata/Dell/SGI devices (Tom Coughlan)
- add support for netdump over bonded interfaces (Jeff Moyer)
- implement diskdump support for cciss devices (Tom Coughlan)
- add x86_64 ACPI Power Management timer support (Jim Paradis)
- add dual-core support on x86 and x86_64 arches (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.12.EL" date="1121421600">- constrain x86_64 MSR writes based on cpu model (Larry Woodman)
- correct smbfs mounts to support 32-bit uids/guids (Peter Staubach)
- eliminate long system pauses when kscand is running (Larry Woodman)
- update Emulex driver to 7.3.1, ioctl module to 1.2.1 (Tom Coughlan)
- update QLogic driver to 7.05.00-RH1 (w/new firmware) (Tom Coughlan)
- prevent ext3 EA/ACL block sharing/deletion races (Stephen Tweedie)
- fix dpt_i2o insmod oops during adpt_info() lookup (Neil Horman)
- fix dpt_i2o timeouts during long tape commands (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.11.EL" date="1121248800">- downgrade blk_queue_bounce_limit() msg to KERN_INFO (Neil Horman)
- update cciss disk driver to version 2.4.56.RH1 (Adam Manthei)
- update mptfusion driver to version 2.06.16i.01 (Tom Coughlan)
- prevent expand_kiobuf() calls during interrupts (Larry Woodman)
- update iscsi_sfnet driver to version 3.6.2.1 (Mike Christie)
- account for system ticks in ITIMER_PROF sig delivery (Don Howard)
- correct superbh ptr arg to superbh_will_bounce() (Stephen Tweedie)
- fix ext3 symlink perms created w/i386-BOOT kernels (Stephen Tweedie)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.10.EL" date="1121076000">- prevent bogus GART errs from amd64 Northbridge handling (Brian Maly)
- get correct link status in b44 driver's open routine (John Linville)
- check for missing EM64T support for better panic msg (Ernie Petrides)
- fix ref counting bug in x86[_64] __change_page_attr() (Dave Anderson)
- fix memory leak in success path of sys_init_module() (John Linville)
- add ia64 ptrace/sigreturn RSC reg priv level validation (Jason Baron)
- prevent connection list corruption in ip_vs_conn_flush() (Neil Horman)
- limit arg/env ptrs for x86_64/ia64 32-bit-compat execs (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.9.EL" date="1119002400">- fix crashes from failed ACPI root bus additions (Jim Paradis)
- correct insufficient lock owner checks in DRM code (Don Howard)
- add missing sanity checks in Coda ioctl handling (Alexander Viro)
- fix autofs errors with ghosting and expire event races (Jeff Moyer)
- reset ppc64 signal handler correctly for SA_ONESHOT (David Howells)
- store prev user stack pointer in ppc64 signal frames (David Howells)
- fix kernel_lock deadlock between sd_open()/sd_ioctl() (Larry Woodman)
- add ht flag in /proc/cpuinfo for EM64Ts w/hyperthreading (Brian Maly)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.8.EL" date="1118743200">- update e100 network driver to version 3.4.8-k2 (John Linville)
- preserve x86_64 32-bit-compat ptrace reg changes (Roland McGrath)
- add missing x86_64 support for PTRACE_SETOPTIONS (Roland McGrath)
- avoid using reserved ports for portmapper connections (Steve Dickson)
- prevent non-canonical %rip in x86_64 ptrace reg mods (Jim Paradis)
- prevent invalid fs/gs_base in x86_64 ptrace reg mods (Ernie Petrides)
- improve ISO-9660 fs robustness against bad CD formats (Peter Staubach)
- correct __get_user_pages() ref counting w/PG_reserved (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.7.EL" date="1118224800">- fix IPV6 isRouter flag and default router list handling (John Linville)
- eliminate unexpected IO-APIC msg from x86 kernel on amd64 (Jim Paradis)
- switch to reg stack on user-mode x86_64 stk seg faults (Dave Anderson)
- fix two time-related problems in the netconsole module (Dave Anderson)
- remove microcode.o from x86 hugemem unsupported list (Ernie Petrides)
- fix x86_64 committed space accounting w/overcommit=2 (Larry Woodman)
- enforce page locking resource limit in expand_stack() (Jason Baron)
- fix SCSI command block leak w/off-line non-zero LUNs (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.6.EL" date="1117533600">- fix races between POSIX locking and file closes (Peter Staubach)
- update tg3 network driver to version 3.27RH (John Linville)
- add ia64 frame size validation in syscall handling (Jason Baron)
- prevent info leaks into JFS metadata disk blocks (Stephen Tweedie)
- fix ext2 fast-symlink/EA compatibility problem (Stephen Tweedie)
- add x86_64 32-bit-compat SO_{SND,RCV}TIMEO support (Guy Streeter)
- add piix driver PCI device ids for ICH4-L support (John Linville)
- validate "ndigis" value in addition of ROSE routes (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.5.EL" date="1117101600">- update e1000 network driver to version 6.0.54-k2 (John Linville)
- fix arp_ip_traget failover with bonding driver mode 1 (Eric Paris)
- prevent indefinite postponement under __alloc_pages() (Ernie Petrides)
- capture ia64 reg state on all cpus for OS_INIT dumps (Nobuhiro Tachino)
- add documentation listing which drivers support netconsole (Jeff Moyer)
- fail opens of removable media drives if media not present (Pete Zaitcev)
- fix x86_64 find_target() oops in 32-bit-compat ptrace() (Ernie Petrides)
- prevent info leaks into ext2 directory entry blocks (Stephen Tweedie)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.4.EL" date="1115978400">- limit concurrent OOM kills using /proc/sys/vm/oom-kill (Ernie Petrides)
- rework ppc64 wchan fix to avoid module install crashes (David Woodhouse)
- fix diskdump signature check failures w/block_order=8 (Nobuhiro Tachino)
- fix data corruption from pte_clear() races on &gt;4GB x86's (Larry Woodman)
- avoid s390,x kernel stack overflows in network ctc driver (Pete Zaitcev)
- add description of /proc/stat to file system documentation (Brian Maly)
- avoid inode races in __refile_inode() and clear_inode() (Larry Woodman)
- fix arg/env access in ELF core dumping and /proc reads (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.3.EL" date="1115200800">- remove extra chars from scsi_logging_level mod param (Ernie Petrides)
- use GFP_NOFS allocs to avoid kswapd/rpciod deadlocks (Steve Dickson)
- fix ia64 kernel thread creation to force 64-bit tasks (Jason Baron)
- fix data corruption from 4K overflow in /proc/devices (Neil Horman)
- prevent mlock() resource limit bypass w/shm locking (Ernie Petrides)
- restrict MOXA ctlr firmware updates to privileged users (Brian Maly)
- support EM64T systems with mix of cpus with/without NX (Jim Paradis)
- allow modules to use get/put_task_struct() macros (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.2.EL" date="1114164000">- fix IDE disk accounting bug from wrong ios_in_flight (Larry Woodman)
- limit IGMP traffic to active link in bond_alb_xmit() (John Linville)
- fix audit refs to permit /var unmounting on shutdown (Dave Anderson)
- prevent IP4/6 output memory leaks of dst_entry structs (Dave Miller)
- enhance support for ethtool in 3c59x network driver (John Linville)
- fix launder_page() locking to avoid kswapd deadlock (Larry Woodman)
- suppress ide-floppy I/O errors when media isn't present (Brian Maly)
- make netdump more reliable on NAPI-enabled controllers (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.1.EL" date="1113991200">- (this is the first build for RHEL 3 Update 6)
- fix oops when io_setup() is called w/unwritable addr (Jeff Moyer)
- prevent kswapd hangs under launder_page() w/no bufs (Larry Woodman)
- fix autofs memory leaks when events share wait queues (Jeff Moyer)
- change IBM veth driver to indicate link is always up (David Howells)
- fix error resets and TF reg reads in SATA AHCI driver (Jeff Garzik)
- avoid dropping &gt;200-byte frames in sk98lin driver (John Linville)
- prevent shared memory lock/unlock w/o permissions (Dave Anderson)
- remove duplicate USB ESSENTIAL_REALITY defines (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-32.EL" date="1113559200">- fix data corruption w/ext3 xattr on 64-bit arches (Jason Baron)
- validate LCP frame lengths in PPP async handling (Dave Miller)
- enable forcedeth net driver builds in x86 configs (Jim Paradis)
- isolate IP fragment queues among various callers (Dave Miller)
- prevent busy inodes for symlinks after unmounts (Don Howard)
- revise PCI device ids extending ICH7 support (John Linville)
- work around broken xw4300 BIOS AHCI BAR setup (John Linville)
- add protocol validation in net bluetooth driver (John Linville)
- enable software watchdog timer in s390,x configs (Jan Glauber)
- fix data corruption w/uselib() on bad ELF libs (Ernie Petrides)
- add USB tablet init delay in wacom_probe() (Kristian Høgsberg)
- prevent core dumps with non-readable ELF interps (Dave Anderson)
- add maxevents validation in epoll_wait() handling (Ernie Petrides)
- add len validation in /dev/random poolsize sysctl (Ernie Petrides)
- correct size of ia64 syscall table initialization (Jason Baron)
- correct x86_64 user-mode i/o port validation (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-31.EL" date="1110448800">- fix missing ppc64 netdump/diskdump symbols (Nobuhiro Tachino)
- prevent ia64 unwind from traversing off stack (Jason Baron)
- disable 3w-9xxx driver builds on ppc64 (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-30.EL" date="1110362400">- fix obscure oops in tty init_dev() handling (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-29.EL" date="1109844000">- incorporate urgent late-breaking SATA fixes (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-28.EL" date="1109152800">- add more USB device support to visor driver (Pete Zaitcev)
- implement clustered APIC support for x86_64 (Larry Woodman)
- constrain x86 MSR writes based on cpu model (Jason Baron)
- increase max superbh size for performance (Stephen Tweedie)
- add locking to prevent oops in md_seq_show() (Doug Ledford)
- restore missing ia64 panic_on_oops handling (Tatsuo Uchida)
- implement Ethernet PCI quirk for HP xw9300 (Jim Paradis)
- revert NFS flock() avoidance to -27.7.EL (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.17.EL" date="1108980000">- rework NFS flock() avoidance w/FS_WANT_FLOCK for GFS (Ken Preslan)
- prevent inode corruption from delete/lookup races (Wendy Cheng)
- preserve registers for ia64 16-byte atomic ops (Geoff Gustafson)
- update SCSI whitelist for LSI/HP/STK/EMC devices (Tom Coughlan)
- disable vary_io in ips driver to avoid ctlr hangs (Tom Coughlan)
- correct handling of 2-TB device partitions (Peter Martuccelli)
- update support for ia64 perfmon facility (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.16.EL" date="1108720800">- implement diskdump support for SATA piix/promise (Nobuhiro Tachino)
- correct /proc/mtrr size values on EM64T platforms (Larry Woodman)
- restore page permissions after writes from ptrace() (Don Howard)
- fix /proc parent pids from multi-threaded forks (Ernie Petrides)
- enable software watchdog timer support on s390,x (Jan Glauber)
- update tg3 network driver to version 3.22RH (John Linville)
- incorporate 3w-9xxx driver version 2.24.00.011fw (Adam Manthei)
- correct ending boundary check in filemap_sync() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.15.EL" date="1108548000">- add e100 driver PCI device ids for ICH7 support (John Linville)
- restore obsolete but ignored e100 module params (John Linville)
- implement user-mode (gdb) access to ia64 gate page (Jason Baron)
- fix x86_64 FPU IP and DP values in SIGFPE context (Larry Woodman)
- add qla2200 module parameter to use NVRAM RIO val (Tom Coughlan)
- update 3w-xxxx driver to 1.02.00.037 w/.033 backup (Adam Manthei)
- fix crashes in video Firewire (ieee1394) driver (Bastien Nocera)
- prevent info leaks into ext3 journal disk blocks (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.14.EL" date="1108461600">- enhance AIO performance over NFS w/FS_AIO_SYNC hook (Steve Dickson)
- defer e100_tx_timeout() work from interrupt context (John Linville)
- correct IPV6 DST entry release to prevent route leak (Dave Miller)
- ignore MTU updates from invalid IPV6 ndisc packets (Dave Miller)
- add relevant PCI device ids to extend ICH7 support (John Linville)
- reduce system pauses during heavy page laundering (Larry Woodman)
- fix audit logging of paths w/predicate filter usage (Neil Horman)
- enable building of unsupported fusion isense module (Adam Manthei)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.13.EL" date="1108375200">- increase dxfer size limit for ppc64 SG_IO ioctl32 (David Howells)
- eliminate tty line discipline usage/switching races (Jason Baron)
- fix autofs recognition of ghosted direct map updates (Jeff Moyer)
- fix sg driver race between cmd completion and close (Tom Coughlan)
- prevent e100 data corruption from v.3.0.27-k2 update (John Linville)
- upgrade SATA support (core, libata, new/old drivers) (John Linville)
- implement diskdump support for sym53c8xx adapter (Yuichi Nagahama)
- add USB support for Wacom Cintiq/Intuos3 tablets (Kristian Høgsberg)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.12.EL" date="1107943200">- update e100 network driver to version 3.3.6-k2 (John Linville)
- correct cpu id macro for dual-core Opteron support (Jim Paradis)
- add "numa=off" message on x86_64 OOM kills w/NUMA (Larry Woodman)
- improve user/system timer tick accounting on s390,x (Pete Zaitcev)
- prevent EAGAIN errs from interrupted TCP recv() calls (Dave Miller)
- update cciss disk driver to version v2.4.54.RH1 (Adam Manthei)
- eliminate diskdump cpu id from frozen list (Nobuhiro Tachino)
- fix user-space access bug in USB vicam ioctl (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.11.EL" date="1107424800">- incorporate Emulex driver ioctl module version 1.0.13 (Tom Coughlan)
- eliminate potential call_lock deadlock with diskdump (Tatsuo Uchida)
- fix potential kiobuf_lock deadlock in free_kiovec() (Larry Woodman)
- add L2 cache descriptor for EM64T Irwindale processor (Neil Horman)
- prevent mmap() syscalls from choosing NULL mappings (Rik van Riel)
- include bounce buffer pages in show_mem() output (Larry Woodman)
- add I2C driver support for ICH5 in i2c-i801.c (John Linville)
- correct parport_pc errors on insmod failures (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.10.EL" date="1106906400">- fix futex_wait() race condition that allowed app hang (Ingo Molnar)
- add/correct write barrier placement in timer routines (David Howells)
- add x86_64 NMI switch support to debug kernel hangs (Yuichi Nagahama)
- restore CIV/LVI offset operation in i810_audio driver (John Linville)
- update e1000 network driver to version 5.6.10.1-k2 (John Linville)
- prevent bogus BUG_ON during multi-threaded core dump (Roland McGrath)
- fix x86_64 crash in huge_page_release() w/SHM_HUGETLB (Larry Woodman)
- fix possible mem corruption from /proc/kcore access (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.9.EL" date="1106647200">- fix core dumping over NFS mounts with "intr" option (Roland McGrath)
- prevent multi-threaded app hang from sys_wait4() race (Ingo Molnar)
- restore e1000 support for Intel PCI device id 1014 (John Linville)
- add ac97 quirk entries for HP xw6000/xw6200/xw8000 (John Linville)
- update b44 network driver to upstream version 0.95 (John Linville)
- revert NFS silly-delete and rpciod-hang patches (Steve Dickson)
- fix panics while backing up LVM snapshots (Heinz Mauelshagen)
- fix oops in redirect_target() on DHCP refresh (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.8.EL" date="1105696800">- rework ia64 INIT switch stacks for clean tracebacks (Tatsuo Uchida)
- fix USB raced timeout errors and ohci_complete_add() (Pete Zaitcev)
- add O_DIRECT handling in LVM driver handling (Heinz Mauelshagen)
- downgrade wait4() SIGCHLD/SIG_IGN warning message (Ingo Molnar)
- eliminate potential VMA list races with do_brk() (Dave Anderson)
- ignore ICMP Source Quench messages in tcp_v4_err() (Dave Miller)
- prevent VMA overlap crashes in insert_vm_struct() (Jason Baron)
- move flock() avoidance from NFS up to F/S layer (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.7.EL" date="1105437600">- fix 32-compat alt-stack signal handling on x86_64 (Geoff Gustafson)
- add initialization of ppc64 EEH error buffer size (David Howells)
- make ppc64 xmon work properly with Power5 console (David Howells)
- prevent infinite sync loop from NFS ESTALE writes (Steve Dickson)
- update 8139too network driver w/recent 2.4 fixes (John Linville)
- avoid netfilter oops when ip_conntrack is unloaded (Dave Miller)
- fix potential rpciod hangs during NFS sillydelete (Steve Dickson)
- avoid "No locks available" errors w/flock() on NFS (Ken Preslan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.6.EL" date="1104919200">- fix x86 phys proc ids for non-clustered APIC systems (Geoff Gustafson)
- return EINVAL on e100/e1000 rx-mini/rx-jumbo settings (John Linville)
- fix i810_audio regression from modified ICH6 PCI ids (John Linville)
- prevent race conditions in add_wait_queue_cond() macros (Jeff Moyer)
- fix FAT32 file system corruption w/writing 8M files (Alexander Viro)
- fix derivation/presentation of PHB unit ids on ppc64 (David Howells)
- close OpenFirmware stdin device at boot on ppc64 (David Woodhouse)
- fix 32-bit-compat regression in CMSG validations (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.5.EL" date="1103796000">- add "CommitLimit" data to /proc/meminfo output (Frank Hirtz)
- allow autofs to expire mounts on ppc64 arch (Jeff Moyer)
- add 3c59x EEPROM_RESET for 3c900 Boomerang (John Linville)
- ignore PTE mapping status in page_anon() (Larry Woodman)
- fix SIOCGIFHWADDR handling for zero addr_len (Dave Miller)
- add netdump support for x86_64, ia64, ppc64 (Dave Anderson)
- correct overcommit accounting on fork failure (Frank Hirtz)
- raise default ia64/ia32e swiotlb size to 64M (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.4.EL" date="1103709600">- add network CMSG validation checks (Dave Miller)
- fix data struct leak in ip_options_get() (Dave Miller)
- fix IGMP vulnerabilities in ip[6]_mc_source() (Dave Miller)
- fix e_phnum binfmt_elf loader vulnerability (Dave Anderson)
- clean x86_64 32-bit-compat syscall numbers (Jim Paradis)
- prevent ia64 floating point reg val leakage (Jason Baron)
- add USB io_edgeport driver size check (Peter Martuccelli)
- enable softirq deferral for x86_64 arch (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-27.3.EL" date="1102586400">- add data/param length sanity checks in smbfs (Alexander Viro)
- prevent /proc/&lt;PID&gt;/cmdline env data disclosure (Dave Anderson)
- make tulip_stop_rxtx() wait for DMA termination (John Linville)
- fix mm_stat regression introduced in -20.13.EL (Rik van Riel)
- correct return value from vlan_dev_change_mtu() (John Linville)
- serialize datagram read w/appropriate semaphore (Dave Miller)
- fix keyboard regression introduced in -24.EL (Peter Martuccelli)
- enable mmap/mprotect PROT_EXEC for legacy apps (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-26.2.EL" date="1101722400">- fix USB problems with keyboards and ia64 oopses (Pete Zaitcev)
- add i810 PCI IDs for nforce3/CK804 audio devices (Jim Paradis)
- fix ppc64 viodasd driver dev naming/limit bugs (David Howells)
- prevent tg3 fiber link bounces w/auto-negotiation (Dave Miller)
- add ac97 quirk handling for i810_audio driver (John Linville)
- prevent incorrect OOM killing with iscsi usage (Larry Woodman)
- create kiobuf cache to reduce lowmem contention (Larry Woodman)
- fix yet another binfmt_elf loader vulnerability (Dave Anderson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.1.EL" date="1100512800">- (this is the first build for RHEL 3 Update 5)
- implement open() recovery from NFS ESTALE errors (Neil Horman)
- clean up warnings from lpfc and lpfc_703 Makefiles (Tom Coughlan)
- fix nessus-induced kernel panic with auditing (Peter Martuccelli)
- update 3c59x driver to LK1.1.18 and fix reset bug (John Linville)
- fix ext3 O_DIRECT bug in orphan list handling (Stephen Tweedie)
- flush cached dirty pages on NFS reads w/O_DIRECT (Steve Dickson)
- allow ia64 kernel unaligned access msg suppression (Neil Horman)
- correct test for performing buffer-head reclaim (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-25.EL" date="1100253600">- fix binfmt_elf loader vulnerabilities (Jim Paradis, Dave Anderson)
- limit kernel data struct slabs to single-page allocs (Larry Woodman)
- update Emulex driver to 7.1.14 (backup still 7.0.3) (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-24.EL" date="1100080800">- fix several ppc64 problems with signal catching (David Woodhouse)
- fix several bugs in /proc/ppc64/lparcfg driver (David Howells)
- fix possible diskdump hangs w/megaraid2 driver (Tatsuo Uchida)
- add support for IBM EM64T-based Groucho blade (Peter Martuccelli)
- fix regression in USB BIOS-&gt;kernel hand-off support (Pete Zaitcev)
- fix regression in ia64 kernel stack unwind handling (Don Howard)
- fix regression w/agpgart support of i8xx chipsets (Larry Woodman)
- add support for BLKSSZGET ioctl in cciss driver (Tom Coughlan)
- disable iSCSI builds in ppc64 and s390* configs (Tom Coughlan)
- update Emulex driver to 7.1.13 (backup still 7.0.3) (Tom Coughlan)
- correct SCSI whitelist for Chaparral FR1422 devices (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-23.EL" date="1098957600">- prevent kswapd from getting stuck in prune_icache() (Larry Woodman)
- fix ppc64 single-stepping into signal handlers (David Woodhouse)
- fix corruption from user stack expansion races (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-22.EL" date="1098093600">- prevent add/removal races in SCSI open handling (Doug Ledford)
- fix U3 agpgart regression with Intel i8xx chipsets (Dave Jones)
- update SCSI whitelist for IBM 1722/1724 devices (Tom Coughlan)
- correct TSS descriptor limit checking for x86_64 (Jim Paradis)
- add nforce3/CK804 device support and fix ACPI bug (Jim Paradis)
- add support for "forcedeth" net driver version 0.28 (Jim Paradis)
- enable diskdump support in amd64/ia32e configs (Nobuhiro Tachino)
- restore/improve linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- add missing page_cache_release() in launder_page() (Larry Woodman)
- update Emulex driver to 7.1.11 (backup still 7.0.3) (Tom Coughlan)
- add new USB ids to support latest Wacom tablets (Kristian Høgsberg)
- remove drivers/net/tun.o from unsupported list (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-21.EL" date="1096538400">- fix potential PTE race in do_anonymous_page() (Rik van Riel)
- add "Committed_AS" data to /proc/meminfo output (Frank Hirtz)
- revise DMA zone paging thresholds for x86_64 (Larry Woodman)
- prevent /proc/scsi/scsi oops during probes (David Woodhouse)
- avoid kswapd hangs via free_more_memory() hooks (Rik van Riel)
- update megaraid2 driver to 2.10.8.2 w/2.10.6 backup (Adam Manthei)
- fix do_notify_parent() panic from ptrace death race (Roland McGrath)
- fix large core file support on 64-bit architectures (Dave Anderson)
- enable tux on ia64 and increase max tux threads to 16 (Ingo Molnar)
- fix ia64/s390,x single-stepping w/signal handlers (David Woodhouse)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.14.EL" date="1096452000">- fix hang in SCSI starvation management code (David Howells)
- update SCSI whitelist for NETAPP LUN devices (Wendy Cheng)
- fix s390 cio handling during ESS fail-overs (Pete Zaitcev)
- update Emulex driver to 7.1.8 w/7.0.3 backup (Tom Coughlan)
- update Qlogic driver to 7.01.01 w/7.00.03 backup (Tom Coughlan)
- correct unlock/free order in proc_lookupfd() (Ernie Petrides)
- use ACPI for PCI interrupt routing on ia32e (Jim Paradis)
- allow cpus to boot w/APIC IDs &gt; 8 on ia32e (Jim Paradis)
- fix pid allocation when pid_max &gt; 32768 (Ernie Petrides)
- fix regs in multi-threaded ia64 core dumps (Keiichi Mori)
- enable sym53c8xx driver for ppc64 iSeries (David Howells)
- fix ac97 depmod errors w/hugemem configs (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.13.EL" date="1096365600">- fix aic79xx_osm.h/3c59x.c changes in prior rev (Tachino/Linville)
- allow for larger nfsd block sizes on some archs (Steve Dickson)
- fix possible aacraid driver panic in aac_info() (Tom Coughlan)
- fix xdr argsize check to handle writes &gt;= 2^31 (Steve Dickson)
- update e1000 network driver to version 5.3.19-k2 (John Linville)
- apply several cciss driver fixes (to 2.4.52.RH2) (Adam Manthei)
- fix x86_64 versions of cpu capability test macros (Jim Paradis)
- fix ppc64 HPTE memory corruption race condition (Rik van Riel)
- add sys_epoll support on s390,x (Stephen Tweedie, Pete Zaitcev)
- prevent keyboard.c warnings from mouse clicks (Norm Murray)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.12.EL" date="1096279200">- improve slab cache page reaping heuristics (Larry Woodman)
- implement diskdump support for x86_64 arch (Nobuhiro Tachino)
- add ia64 INIT trigger switch support for debugging (Tatsuo Uchida)
- fix several problems in handling of AIO on pipes (Jeff Moyer)
- update fixes for LTP read02 test hangs with tmpfs (Alexander Viro)
- fix x86_64 single-stepping out of signal handlers (Jim Paradis)
- increase size of ppc64 RTAS error log buffer (David Howells)
- increase max possible kNFSD lockd cookie size (Steve Dickson)
- backport 3c59x fixes for mii-tool problems w/10Mb (John Linville)
- incorporate Cisco's iscsi_sfnet initiator driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.11.EL" date="1095933600">- implement diskdump support for megaraid2 adapter (Tatsuo Uchida)
- update ips driver to version 7.10.18 w/7.00.15 backup (Tom Coughlan)
- correct max page aging interval boundary in kscand() (Larry Woodman)
- add ppc64 support for ptrace() with PT_SINGLESTEP (David Woodhouse)
- update e100 network driver to version 3.0.27-k2 (John Linville)
- fix LTP read02 test hangs when tmpfs is in use (Alexander Viro)
- get proc_dir_entry reference in proc_lookup() (Alexander Viro)
- add exports of several AIO-related interfaces (Larry Woodman)
- reduce swapping during excessive pagecache use (Larry Woodman)
- implement statfs64() syscall on x86 for NFS use (Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.10.EL" date="1095847200">- implement early USB hand-off (BIOS-&gt;kernel) support (Pete Zaitcev)
- fix stack pointer calculation in x86 show() handling (Jeff Moyer)
- prevent interference between flock/POSIX lock types (Frank Hirtz)
- update pcnet32 network driver to version 1.30c (John Linville)
- add export of block_commit_write() f/s interface (Larry Woodman)
- implement diskdump support for dpt_i2o adapter (Tatsuo Uchida)
- update mptfusion driver to version 2.05.16.02 (Adam Manthei)
- move disk_dump_notifier_list to diskdumplib.c (Nobuhiro Tachino)
- update s390 zfcp driver to revision 5.31.2.11+ (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.9.EL" date="1095674400">- fix occasional ibmvscsic driver insmod crash (David Howells)
- disable linux-2.4.21-ia64-fancyiommu.patch (Larry Woodman)
- prevent double slashes in symlink auditing (Peter Martuccelli)
- fix overzealous compat32 setsockopt conversions (David Woodhouse)
- backport tulip driver fixes from upstream 2.4.28 (John Linville)
- update tg3 network driver to version 3.10RH (John Linville)
- implement sysctl to force igmp protocol versions (Neil Horman)
- add diskdump performance improvement info (Nobuhiro Tachino)
- fix s390 iucv lost connections and ping hangs (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.8.EL" date="1095588000">- prevent diskdump deadlock in case of die() recursion (Tatsuo Uchida)
- add x86/x86_64 support for ptrace() w/PT_SINGLESTEP (Roland McGrath)
- fix x86/x86_64 single-stepping into signal handlers (Roland McGrath)
- increase x86 value for MAX_MP_BUSSES definition to 260 (Ingo Molnar)
- eliminate ia64 potential for scheduler runq deadlock (Larry Woodman)
- add support for /proc/sys/kernel/mem_nmi_panic sysctl (Dave Anderson)
- prevent keyboard-initiated sysrq hangs in handle_sysrq() (Jeff Moyer)
- fix intermittent netdump hangs from cpu-frozen messages (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.7.EL" date="1095415200">- fix premature OOM killing change added in prior rev (Larry Woodman)
- backport vlan driver fixes from upstream 2.4.28-rc1 (John Linville)
- add _sb_findmap symbol export in s390/s390x kernels (Pete Zaitcev)
- add ppc64 support for 32-bit sendfile64() syscall (David Howells)
- fix 32-bit IPC_INFO shmctl() syscalls for ppc64 (David Howells)
- upgrade libata/SATA support to current 2.4 bits (John Linville)
- avoid USB device resets of shared/busy interfaces (Pete Zaitcev)
- fix miscellaneous problems in ppc64 icom driver (David Howells)
- fix ip_queue_maxlen sysctl for ip[6]_queue modules (Neil Horman)
- add module parm for max entries in NFS_ACL replies (Neil Horman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.6.EL" date="1095156000">- prevent OOM killer from kicking in prematurely (Larry Woodman)
- avoid NMI watchdog crashes during sysrq-m usage (Wendy Cheng)
- add auditing support for ia64 clone2 syscall (Peter Martuccelli)
- correct sign of auditing error codes for ia64 (Peter Martuccelli)
- implement ia64 auditing 32-bit-disable sysctl (Peter Martuccelli)
- fix ia64 faults w/stale VHPT-generated TLB entries (Dave Anderson)
- fix invalid x86_64 checksums for multicast packets (Mike Gahagan)
- fix incorrect blocking bug inside wakeup_kswapd() (Larry Woodman)
- validate appropriate media type in DVD drives (Doug Ledford)
- reduce s390 stack usage in qeth/qdio drivers (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.5.EL" date="1094810400">- prevent scenarios that lead to hang of kswapd (Larry Woodman)
- add locking for access to /proc/bus/usb/devices (Pete Zaitcev)
- correct x86 rescheduling to handle apm=power-off (Ingo Molnar)
- fix OOM killer locking and mm referencing holes (Larry Woodman)
- pin ia64 mapping for idle proc stack during boot (Larry Woodman)
- fix warning throttle for amd64 stack overflow check (Neil Horman)
- fix content lengths when using tux gzip compression (Ingo Molnar)
- add auditing support for pread/pwrite syscalls (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.4.EL" date="1094724000">- prevent bogus data in /proc/scsi/ibmvscsi/* (David Howells)
- update tg3 network driver to version 3.9RH (John Linville)
- improve ramfs memory alloc w/scarce highmem (Larry Woodman)
- correct several values in /proc/ppc64/lparcfg (David Howells)
- allow dirty page rebalancing under mem pressure (Rik van Riel)
- prevent memory leak in scsi_build_commandblocks() (Doug Ledford)
- fix potential kswapd deadlock w/disk quota usage (Larry Woodman)
- increase MAX_IO_APICS from 8 to 32 for x86_64 arch (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.3.EL" date="1094205600">- fix various error path bugs in bcm5820 driver (John Linville)
- validate addresses used with /dev/kmem accesses (Neil Horman)
- eliminate IPSEC tunnel leaks when using IPComp (Dave Miller)
- add auditing support for utimes() syscalls (Peter Martuccelli)
- prevent netconsole freeze w/cable dis-/re-connect (Jeff Moyer)
- correct reboot_cpu validation for "reboot=s&lt;n&gt;" (Doug Ledford)
- fix mem/irq clean-up in olympic tokenring driver (Neil Horman)
- update network bonding driver to version 2.6.0 (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.2.EL" date="1094032800">- add maps/rlimits output with print-fatal-signals=2 (Ingo Molnar)
- backport ac97 sound support from upstream 2.4.27 (John Linville)
- eliminate kernel stack data leaks from USB drivers (Mark Cox)
- fix interrupt status mask in AMD PCnet32 driver (David Howells)
- fix module loading problems in ibmvscsic driver (David Howells)
- fix x86 shared runq mapping when ACPI data is bad (Bernd Schmidt)
- disable enhanced error handling on PCI-ISA bridges (David Howells)
- add memory-mapped i/o support to i810_audio driver (John Linville)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.1.EL" date="1093860000">- (this is the first build for RHEL 3 Update 4)
- backport r8169 network driver changes from 2.4 (John Linville)
- update i810_audio sound driver to version 1.01 (John Linville)
- convert USB UHCI driver warning to debug message (Pete Zaitcev)
- backport 2.6 PROT_GROWSDOWN/UP mprotect() support (Jakub Jelinek)
- lower ppc64 console logging level of RTAS messages (David Howells)
- fix ppc64 handling of "smt-emabled=off" boot option (David Howells)
- correct socket sndbuf accounting w/IP_MULTICAST_LOOP (Neil Horman)
- reduce x86_64 user stack start randomization to 16K (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-20.EL" date="1092823200">- change TARGET_CPUS on x86_64 to include all on-line cpus (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-19.EL" date="1092304800">- fix possible races/overflows in file offset handling (Alexander Viro)
- correct logging of boot progress messages on Power5 (David Howells)
- extend ppc64 EEH support for other types of devices (David Howells)
- fix ibmveth driver to properly shut down and restart (David Howells)
- fix several races and overflows in ppc64 RTAS driver (David Howells)
- backport "acpi=noirq" support to work around Nocona hangs (Don Howard)
- conditionalize pbn_hp_diva to fix serial driver oops (Matthew Galgoci)
- add amd64 GART entry guard mappings for PCI mis-prefetch (Jim Paradis)
- upgrade SATA support again to resolve several problems (Jeff Garzik)
- qualify ia32e IRQ affinity disable with BIOS flag check (Jim Paradis)
- fix eeh_check_failure() on ppc64 to be interrupt safe (David Howells)
- correct ppc64 EEH macros to use appropriate data size (David Howells)
- fix x86/ia64 no-wait handling in smp_call_function() (Larry Woodman)
- fix "Filter target 0x203 not known ..." audit msgs (Peter Martuccelli)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-18.EL" date="1090404000">- prevent s390 mlock hangs with follow_page() rework (Ernie Petrides)
- fix Power5 initialization and handling of RAS IRQs (David Howells)
- fix ppc64 viocons driver deadlocks with printk() (David Howells)
- apply eh_timeout, netdump, cli fixes in diskdump (Tatsuo Uchida)
- add skip_mapped_pages tuning for page eviction (Stephen Tweedie)
- fix initrd's effect on ppc64 mem_end calculation (David Howells)
- allow HT support on ppc64 systems with single cpu (David Howells)
- backport v2.0.8 aic7xxx driver h/w support for Dell (Tom Coughlan)
- correct ppc64 device node searching in hvsi driver (David Howells)
- fix KMI compat problem w/pgprot_t in x86 NX support (Jim Paradis)
- resurrect mptfusion driver backup version 2.05.05 (Tom Coughlan)
- disable IRQ affinity setting on some ia32e systems (Jim Paradis)
- update SCSI whitelist for Dot Hill SANnet/StorEdge (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-17.EL" date="1089280800">- account for zone holes in big hash table allocator (Stephen Tweedie)
- prevent reserved stack space overflow of mmap_top (Ernie Petrides)
- fix USB crash in scan_async() with EHCI hardware (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-16.EL" date="1088848800">- enable exec-shield and add x86 NX support (Ingo Molnar, Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.19.EL" date="1088762400">- add owner check in inode_change_ok() for gid changes (Ernie Petrides)
- fix race in finish_task_switch() between wakeup/exit (Ernie Petrides)
- remove Samsung CD-ROM SN-124 from IDE DMA blacklist (Tom Coughlan)
- update e1000 network driver to version 5.2.52-k3 (John Linville)
- add auditing support for semtimedop syscalls (Peter Martuccelli)
- fix tasklet and locking bugs in Power5 hvsi driver (David Howells)
- fix megaraid2 handling of TUR cmds with SCSI CD-ROM (Adam Manthei)
- update SCSI whitelist for HP NS E1200-160 router (Tom Coughlan)
- prevent x86 read_ldt() from reading beyond kmap (Ernie Petrides)
- force single loadable segment in ia64 kernels (Jakub Jelinek)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.18.EL" date="1088157600">- implement ia64 work-around for TLB fetch timeout MCA (Larry Woodman)
- fix Power3 interrupt initialization in ppc64 setup (David Howells)
- correct info msg, prevent double panic in diskdump (Tatsuo Uchida)
- defend against NULL "mm" ptrs in page_referenced() (Rik van Riel)
- fix miscellaneous audit subsystem problems (Peter Martuccelli)
- prevent crash with tux CGI execution on x86_64 (Ingo Molnar)
- add installer info to SATA sx8 block driver (Jeff Garzik)
- turn on vary_io flag in SCSI ips driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.17.EL" date="1087984800">- allocate big system hash tables w/bootmem allocator (David Howells)
- prevent loading aic7xxx_old when aic7xxx is in use (Doug Ledford)
- implement stat() recovery from NFS ESTALE errors (Steve Dickson)
- fix raw/O_DIRECT i/o bug with unmapped pages (Stephen Tweedie)
- correct another locking hole in RAID1 handling (Doug Ledford)
- fix __x86_64__ conditional in megaraid2.c driver (Adam Manthei)
- fix unresolved symbols on ia64 in cciss driver (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.16.EL" date="1087898400">- make NFS sillydelete wait for unlink completion (Steve Dickson)
- prevent EIO w/concurrent O_DIRECT+buffered i/o (Stephen Tweedie)
- upgrade SATA support (core, libata, and drivers) (Jeff Garzik)
- implement futex() FUTEX_CMP_REQUEUE op (Al Viro, Pete Zaitcev)
- update b44 network driver to version 0.93 (John Linville)
- avoid unix_stream_sendmsg() ENOBUFS errors (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.15.EL" date="1087812000">- improve SCSI mid-layer error handling w/sdev_retry_q (Doug Ledford)
- eliminate rw-semaphore races between waiter/wakeup (David Howells)
- add locking and fix accounting bug in RAID1 handling (Doug Ledford)
- backport Carmel sx8.c driver from upstream 2.4 base (John Linville)
- rename ppc64-squadrons-* patches to ppc64-power5-* (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.14.EL" date="1087639200">- introduce support for IBM Squadrons/Power5 systems (David Howells)
- update aacraid driver to 1.1.5-2339 w/1.1.2 backup (Adam Manthei)
- allow sys_remap_file_pages() on unlocked ramfs VMAs (Larry Woodman)
- fix diskdump hangs during resets with aic79xx driver (Tatsuo Uchida)
- fix possible data corruption when using SHM_HUGETLB (Larry Woodman)
- set QLogic HbaApiNode proc file permissions to 0600 (Tom Coughlan)
- add IRQ blocking/restoring in add_gendisk/del_gendisk (Jeff Needle)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.13.EL" date="1087466400">- fix problem causing PCI bus 255 to be missing on ia64 (Ben Woodard)
- make nfs_statfs() recognize/handle fs size overflows (Steve Dickson)
- update QLogic driver to 7.00.03-RH1 w/6.07.02 backup (Tom Coughlan)
- allow procfs to utilize more dynamic inode numbers (David Howells)
- prevent inappropriate "unexpected IO-APIC" messages (Ernie Petrides)
- avoid lost dirty page bits in s390/s390x VM handling (Pete Zaitcev)
- fix ACPI SCI interrupt defaults and add kernel params (Jim Paradis)
- fix user-space access bugs in acpi/airo/decnet/sound (Alexander Viro)
- remove drivers/net/starfire.o from unsupported list (Ernie Petrides)
- fix mm_struct mem leak in copy_process() error path (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.12.EL" date="1087293600">- correct s390/s390x tests for PT_AUDITED flag (Peter Martuccelli)
- update e100 network driver to version 2.3.43-k1 (John Linville)
- update megaraid2 driver to 2.10.6 w/2.10.1.1 backup (Adam Manthei)
- add x86_64 auditing support for 32-bit-compat (Peter Martuccelli)
- fix ia64 unwind handling for UNW_INSN_SETNAT_MEMSTK (Jason Baron)
- update cciss driver to v2.4.52 for several fixes (Tom Coughlan)
- fix variable block mode tape handling in st driver (Tom Coughlan)
- incorporate latest Emulex fibre channel driver (Tom Coughlan)
- fix USB EHCI problem with BIOS-to-host handoff (Pete Zaitcev)
- update SCSI whitelist for DDN/Xyratex/SanDisk/CBOX3 (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.11.EL" date="1087207200">- upgrade to latest autofs4, remove from unsupported list (Jeff Moyer)
- fix memory corruption bug in audit driver code (Peter Martuccelli)
- store adjusted KSP value in ia64 diskdump support (Tatsuo Uchida)
- update e1000 network driver to version 5.2.52-k1 (John Linville)
- update ips driver to version 7.00.15 w/6.11.07 backup (Adam Manthei)
- implement USB device interlock between ioctls/SCSI-ops (Pete Zaitcev)
- update tg3 driver to version 3.6RH for upcoming chipsets (Dave Miller)
- downgrade several PCI cache line size debugging messages (Jim Paradis)
- correct x86_64 32-bit-compat support for AIO syscalls (Jeff Moyer)
- prevent FPU exception handling hangs on x86/x86_64 (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.10.EL" date="1086948000">- give wait.func highest priority in wake_up_filtered() (Larry Woodman)
- reduce system time when using sys_remap_file_pages() (Larry Woodman)
- enable CONFIG_SOFT_WATCHDOG module for ppc64 configs (David Howells)
- improve page allocation to avoid unnecessary swapping (Rik van Riel)
- implement diskdump support for ia64 with mptfusion (Tatsuo Uchida)
- disable native ia32 support for ia64 Montecito cpus (Jason Baron)
- save/restore P4/ia32e perf registers for oprofile (Will Cohen)
- fix oprofile ESCR_SET_EVENT_SELECT() event mask (Will Cohen)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.9.EL" date="1086775200">- update s390 zcrypt driver to version 1.2.1 (Pete Zaitcev)
- update network tg3 driver to version 3.5RH (Dave Miller)
- eliminate separate ia32e oprofile processor id (Will Cohen)
- update SCSI whitelist for IBM 2105/2145 devs (Doug Ledford)
- avoid EAGAIN errors on blocking UDP sockets (Steve Dickson)
- avoid putting locked inodes on dirty list (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.8.EL" date="1086688800">- decouple NFS O_DIRECT handling for performance gain (Steve Dickson)
- export page_is_ram() interface for amd64/ia32e arch (Jim Paradis)
- enable CONFIG_SCSI_SATA_* options in x86_64 configs (Jim Paradis)
- update mptfusion driver to 2.05.16 w/2.05.11.03 backup (Adam Manthei)
- fix nopage_sequential_readahead() and filemap_sync() (Larry Woodman)
- fix USB EHCI driver to avoid Squadrons install oops (Pete Zaitcev)
- add x86 NMI trigger switch support for debugging (Yuichi Nagahama)
- add dmi_blacklist[] entry for "Intel NA440BX DP" (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.7.EL" date="1086602400">- apply some minor scsi_dump_status() format tweaks (Doug Ledford)
- implement SCSI support for dynamic add (hot plug) (Doug Ledford)
- upgrade lvm driver logic to version 1.0.8-2 (Heinz Mauelshagen)
- fix x86_64 definition for inlined ffs() function (Jim Paradis)
- preserve VM_MAYEXEC for executable stack support (Jim Paradis)
- add extra SLBIEs for ppc64 Power5 DD2.0 errata (David Howells)
- add ppc64 32-bit compat for TIOCGICOUNT/MIWAIT (David Howells)
- hold file struct ref when removing POSIX locks (Steve Dickson)
- fix window scaling bug in tcp_ack_update_window() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.6.EL" date="1086343200">- make fsync() flush all pending NFS updates to disk (Steve Dickson)
- complete ia64 support for multiple I/O port spaces (Larry Woodman)
- fix sending of IP broadcast frames with TTL of zero (Neil Horman)
- prevent context switch storms under high VM loads (Larry Woodman)
- fix sigaltstack() errors w/JVM on hugemem kernels (Roland McGrath)
- add locking and improve output in scsi_dump_status() (Doug Ledford)
- add size boundary checking in scsi_resize_dma_pool() (Doug Ledford)
- fix SCSI request struct leak on command init failures (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.5.EL" date="1084528800">- overhaul ia64 SAL/MCA subsystem (Ben Woodard)
- enable x86_64 32-bit UID support (Jim Paradis)
- add initial diskdump support (Nobuhiro Tachino)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.4.EL" date="1084356000">- reduce chance of "VFS: Busy inodes after unmount." errs (Steve Dickson)
- convert "uaddr2" arg ptr in s390x futex() compat syscall (Pete Zaitcev)
- add ppc64 32-bit compat handler for PE_LOCKED_COPY ioctl (David Howells)
- update s390 dasd driver with several recent bug fixes (Pete Zaitcev)
- fix amd64 NUMA node scanning for Northbridge systems (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.3.EL" date="1084183200">- prevent exp_stopfodrop() oops during cluster failover (Steve Dickson)
- make nfs_file_commit() always flush the entire file (Steve Dickson)
- fix pcnet32 driver's MAC address selection on ppc64 (Julie DeWandel)
- backport /dev/random driver fixes for missed wakeups (Mark DeWandel)
- fix hang w/SoundBlaster 16-bit sampling w/odd count (Ernie Petrides)
- make s390 tape driver specify GPL module license type (Pete Zaitcev)
- correct buffer len value in ppc64 pSeries ipr driver (David Howells)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.2.EL" date="1083664800">- enable booting on 8-way Opteron systems (Jim Paradis)
- fix 32-bit-compat truncate64() on x86_64 (Jim Paradis)
- correct promiscuous mode counter handling (Dave Miller)
- support 128-GB ia64 systems w/HP zx1 chipset (Larry Woodman)
- add export of sys_ioctl() global symbol on s390x (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.1.EL" date="1083578400">- (this is the first build for RHEL 3 Update 3)
- reenable/fix linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- clean up file locks when NFS clients receive signals (Steve Dickson)
- complete ia64-specific LAuS syscall auditing support (Mark DeWandel)
- prevent NULL pointer dereference in page_referenced() (Rik van Riel)
- fix max sectors argument in lvm_snapshot_alloc() (Heinz Mauelshagen)
- allow AGP bus scanning to execute for all architectures (John Dennis)
- fix page_referenced() rss limit checks w/unmapped pages (Rik van Riel)
- correct locking and cr/lf problems in usbserial driver (Pete Zaitcev)
- add /proc/cpuinfo support for new ppc64 processors (Julie DeWandel)
- fix sense data handling on certain SCSI cmd retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-15.EL" date="1082541600">- fix clobbering of /proc/cpuinfo vendor_id on x86_64 (Jim Paradis)
- correct MCAST_MSFILTER/IP_MSFILTER size checking (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-14.EL" date="1081936800">- disable linux-2.4.21-ppc64-pte-hash-lock.patch (Julie DeWandel)
- prevent symlink buffer overflow in ISO-9660 fs (Ernie Petrides)
- check for skb overrun in IPV4/IPV6 IGMP handling (Dave Miller)
- fix possible hang in rebalance_laundry_zone() (Larry Woodman)
- correct zone_wired[] initialization for NUMA (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-13.EL" date="1081332000">- fix several critical libata bugs (Jeff Garzik)
- correct IPSEC XFRM policy ref counting (Dave Miller)
- add amd64/ia32e parsing for "acpi=off" arg (Jim Paradis)
- update tg3 driver to v3.1 for several fixes (Dave Miller)
- fix SCSI whitelist for Hitachi/HP DFx00, Apple Xserve (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-12.EL" date="1080295200">- add USB support for Handspring Treo 600 PDA syncing (Matthew Galgoci)
- clear state for CPEs during ia64 MCA SAL error logging (Ben Woodard)
- prevent DMA resource leak in QLogic driver error path (Tom Coughlan)
- change default QLogic driver device queue depth to 64 (Tom Coughlan)
- replace fabricated cciss drive geometry w/ENXIO error (Tom Coughlan)
- update SCSI whitelist for HP SureStore/StorageWorks (Tom Coughlan)
- disable CONFIG_ACPI_DEBUG in amd64/ia32e configs (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-11.EL" date="1078740000">- add yet another Intel ICH6 SATA PCI id (Jeff Garzik)
- fix ref counting in copy_process() error path (Larry Woodman)
- remove ia64 support for /proc/bus/mckinley/bitmap (Jason Baron)
- correct depmod versioning for unsupported modules (Ernie Petrides)
- prevent data corruption in ia32e phys_proc_id[] info (Larry Woodman)
- change default value for inactive_clean_percent to 30 (Larry Woodman)
- enable improved version of s390 on-demand timer patch (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-10.EL" date="1078221600">- incorporate late-breaking libata fixes (Jeff Garzik)
- enable amd64 syscall for tux support (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.17.EL" date="1078135200">- reduce s390 idle overhead with on-demand timer patch (Pete Zaitcev)
- complete ia64 NPTL support for 32-bit-EL executables (Jason Baron)
- add several ia64 syscall table entries for 32-bit-EL (Jason Baron)
- upgrade libata/SATA support, delete ich5-sata.patch (Jeff Garzik)
- check for mremap/vmtruncate race in move_one_page() (Jason Baron)
- prevent ia64 NaT-bit corruption during sig catching (Jason Baron)
- fix amd64 get_mtrr() parsing error with &gt;4GB memory (Jim Paradis)
- change amd64 default behavior to avoid TSC timer use (Jim Paradis)
- force s390utils upgrade to prevent zipl seg fault (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.16.EL" date="1078048800">- restore varyio capability in mptfusion driver update (Adam Manthei)
- enhance SCSI mid-layer queuing for indefinite retries (Doug Ledford)
- add ia64 reg reloads for 32-bit-EL strace -f support (Jason Baron)
- fix ia64 core dump support for 32-bit-EL executables (Jason Baron)
- add SCSI whitelist devs with BLIST_RETRY_ABORTED_CMD (Doug Ledford)
- remove stack-in-interpreter check in binfmt_elf.c (Julie DeWandel)
- clear all flags in exec_usermodehelper() for kmod (Alexander Viro)
- fix aacraid command completion (rq corruption) bugs (Tom Coughlan)
- correct cciss_proc_tape_report() type in flags decl (Tom Coughlan)
- enable USB-2.0-hub-based mice/keyboards to function (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.15.EL" date="1077962400">- fix amd64 oprofile linkage problem in ia32e support (Ernie Petrides)
- update ips driver to version 6.11.07 w/6.10.52 backup (Tom Coughlan)
- add size checks to DRM ATI r128 driver ioctl handling (John Dennis)
- avoid megaraid2 irq_disable calls for mem-mapped ctlrs (Tom Coughlan)
- upgrade firmware imbedded in QLogic driver to 3.02.24 (Tom Coughlan)
- correct ia64 memory accounting in overcommit mode 2 (Larry Woodman)
- implement softirq deferral to limit kernel stack depth (Ingo Molnar)
- reduce kernel stack usage in a couple of tux functions (Ingo Molnar)
- fix shared extended attribute ref counting in ext3 (Stephen Tweedie)
- clear SCSI sense data buffer between eh retries (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.14.EL" date="1077789600">- add .RH1 suffix to cciss driver version v2.4.50 (Tom Coughlan)
- implement initial LAuS syscall auditing support (Mark DeWandel)
- introduce GFS enablers for locking and sendfile ops (Ken Preslan)
- update QLogic driver to 6.07.01 w/6.06.00b11 backup (Tom Coughlan)
- improve netdump reliability w/asynchronous IPI param (Jeff Moyer)
- add ICH6 DSP audio support to i810_audio driver (Jeff Garzik)
- apply SCSI whitelist updates for several devices (Tom Coughlan)
- fix odd byte tape i/o handling in sym53c8xx driver (Tom Coughlan)
- correct minimum nfsd version that supports acls (Steve Dickson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.13.EL" date="1077703200">- allow concurrent NFS direct i/o to same file if !append (Steve Dickson)
- introduce support for new Intel 64-bit ia32e processor (Larry Woodman)
- update mptfusion driver to 2.05.11.03 w/2.05.05 backup (Adam Manthei)
- remove fs/binfmt_misc.o from linux-modules-unsupported (Jason Baron)
- fix ia64 predicate register use in sig trampoline code (Jason Baron)
- add oprofile cpu type recognition for ia32e processor (Will Cohen)
- update e1000 network driver to version 5.2.30.1-k1 (Jeff Garzik)
- add more Intel PCI ids to match upstream 2.4 (Jeff Garzik)
- add ICH6 PATA support, PCI ids, irq routing (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.12.EL" date="1077530400">- add deferred page freeing for intr-context unmap_kvec() (Jeff Moyer)
- update megaraid2 driver to v2.10.1.1 w/v2.00.9 backup (Tom Coughlan)
- fix ppc64 pte hash table locking to avoid deadlocks (Julie DeWandel)
- fix ia64 data TLB init to prevent random boot-up hangs (Jason Baron)
- fix ia64 RNat register corruption with alt sig stacks (Jason Baron)
- allow smaller ia64 sig stacks in ia32 emulation layer (Jason Baron)
- backport ncpfs fixes to eliminate var-length arrays (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.11.EL" date="1077271200">- backport cisco aironet driver from 2.6.3-rc4 (Matthew Galgoci)
- update tg3 driver to v2.7 to fix status reg handling (Dave Miller)
- correct lost jiffies logic for x440/5 cyclone timer (Bernd Schmidt)
- fix open() error clean-up for unsupported O_DIRECT (Stephen Tweedie)
- prevent ia64 crashes when unmapping hugetlb pages (Jason Baron)
- add ppc64 processor support for future PPC970+ (Julie DeWandel)
- rework ppc64 32-bit-compat iptables support (Julie DeWandel)
- fix func ptr test in ethtool_set_ringparam() (Jeff Garzik)
- disable linux-2.4.21-scsi-affine-queue.patch (Doug Ledford)
- improve scsi_allow_ghost_devices description (Doug Ledford)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.10.EL" date="1077098400">- fix amd64 iommu bug causing data corruption on &gt;4GB systems (Jim Paradis)
- return EINVAL for unsupported ioctl32 syscalls on ppc64 (Julie DeWandel)
- remove incorrect BUG() call in __remove_inode_page() (Stephen Tweedie)
- fix s390 ctc driver problem causing build system hangs (Pete Zaitcev)
- fix s390 qeth driver error path to reset write_busy (Pete Zaitcev)
- update s390 zfcp driver to fix miscellaneous bugs (Pete Zaitcev)
- apply upstream nfs fixes for acl error handling (Steve Dickson)
- prevent kernel stack data leak via /dev/rtc (Ernie Petrides)
- allow AIO operations on sockets for non-inet (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.9.EL" date="1076925600">- restore genksyms_smp_prefix setting for non-x86 builds (Ernie Petrides)
- display/log memory stats whenever there's an OOM kill (Larry Woodman)
- update tg3 driver to v2.6, the latest upstream version (Jeff Garzik)
- update net bonding driver to v2.4.1, latest upstream (Jeff Garzik)
- fix irq, mem, printk, strtol bugs in cciss driver (Tom Coughlan)
- wait for board ready after hot add, cciss driver (Tom Coughlan)
- enable cciss adapter prefetch for x86 platforms (Tom Coughlan)
- add preserve_arg0 handling for ia32 emulation (Larry Woodman)
- fix ppc64 compat support for quota syscall (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.8.EL" date="1076580000">- remove Power-Blade-specific def for USB TEAC floppy (Julie DeWandel)
- fix s390 crash in iucv driver on connection shutdown (Pete Zaitcev)
- fix ia64 ACPI parsing for multinode IDE devs on x455 (Jim Paradis)
- fix amd64 core dumping of multithreaded 32-bit apps (Jim Paradis)
- fix s390 oprofile conditional and zero top addr bits (Will Cohen)
- add ipr driver v1.0.3 for IBM's PPC RAID adapters (Tom Coughlan)
- add {alloc,free}_netdev(), list macro, tg3 PCI ids (Jeff Garzik)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.7.EL" date="1076407200">- restrict /proc/tty/driver directory access to root (Jeff Moyer)
- allow non-standard usr/sys VM splits at 2G/2G, 1G/3G (Ingo Molnar)
- extend existing ppc64 RTAS firmware flash interface (Mark DeWandel)
- fix ppc64 version of strncpy() to zero-pad buffers (Julie DeWandel)
- fix s390/x version of strncpy() to zero-pad buffers (Pete Zaitcev)
- fix generic version of strncpy() to zero-pad buffers (Jim Paradis)
- improve ppc64 segment table entry replacement logic (Julie DeWandel)
- correct type/cast of "len" in ppc64/kernel/nvram.c (Julie DeWandel)
- implement new ppc64 RTAS system call interface (Julie DeWandel)
- increase x86 RSDT table limit in ACPI parsing (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.6.EL" date="1076320800">- fix more usb-storage bugs for Power Blade support (Julie DeWandel)
- remove extra inactive_clean_pages-- in reclaim_page() (Larry Woodman)
- return proper error codes for do_munmap() failure in mremap (Dave Jones)
- fix binfmt_elf.c problems for apps with huge bss regions (Julie DeWandel)
- update cciss driver to v2.4.50 for Smart Array 6i support (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.5.EL" date="1075975200">- prevent netdump progress output from filling up log_buf (Jeff Moyer)
- add ppc64 RAS hook at end of panic() processing (Julie DeWandel)
- correct source IP address in ICMP error message (Dave Miller)
- fix smp deadlock with pdeath_signal posting (Roland McGrath)
- add ppc64 support for /proc/ppc64/lparcfg (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.4.EL" date="1075888800">- update nfsd mode-with-acls fix for upstream conformance (Steve Dickson)
- rework usb-storage locking to avoid hangs on disconnect (Pete Zaitcev)
- fix mmio alignment error in olympic token ring driver (Julie DeWandel)
- prevent tux logger-thread shutdown problems on ppc64 (Ingo Molnar)
- add ppc64 AltiVec chip support for Power Blades (Julie DeWandel)
- eliminate multi-threaded coredump hang potential (Ingo Molnar)
- fix ppc64 segfaults with tasks &gt; 2GB in size (Julie DeWandel)
- fix usb-storage memory-allocation/iowait deadlock (Alan Cox)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.3.EL" date="1075716000">- add amd64 support for PT_GNU_STACK with exec shield (Jim Paradis)
- fix s390 raid1 sync problem w/writes at end of dev (Pete Zaitcev)
- update s390 zcrypt driver to version 1.1.4 (Pete Zaitcev)
- fix output of large /proc/pid/statm values (Mark DeWandel)
- fix output of large /proc/partitions values (Mark DeWandel)
- enable ppc64 support for JS20 Power Blades (Julie DeWandel)
- fix kernel stack memory leak on fork failures (Dave Anderson)
- fix ipv6 packet quoting problem in icmpv6_send() (Dave Miller)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.2.EL" date="1075370400">- apply Intel's x86 microcode loader update (Jim Paradis)
- enhance PCI multifunction support for ppc64 (Julie DeWandel)
- fix nfsd returning bad mode bits when acls set (Steve Dickson)
- prevent unkillable zombies from detached NPTL threads (Ingo Molnar)
- avoid missing scsi disks in /proc/partitions on detach (Jason Baron)
- correct pte calculation inside zeromap_pte_range() loop (Ben Woodard)
- add inline function PDE() to help driver backporting (Matthew Galgoci)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.1.EL" date="1074679200">- (this is the first build for RHEL 3 Update 2)
- relocate various pieces of the "undo" patch (Patch Review Committee)
- rename s390 zcrypt and zfcp driver patches (Pete Zaitcev)
- add LKML discussion to COPYING.modules (Arjan van de Ven)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-9.EL" date="1073556000">- fix race condition between thread creation and signals (Ingo Molnar)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-8.EL" date="1073469600">- fix amd64 eflags masking in 32-bit emulation of ptrace (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-7.EL" date="1073383200">- fix numerous ppc64 problems with /proc access (Julie DeWandel)
- allow user core files larger than 2GB in size (Dave Anderson)
- add ia64 support for Crestone Peak AGP bridges (John Dennis)
- fix unaligned kernel accesses in nfs_readdir() (Steve Dickson)
- add new_len/new_addr checks in do_mremap() (Ernie Petrides)
- fix nfs O_DIRECT corruption with &gt;4GB files (Steve Dickson)
- enable bus scan for AGP ctlrs on amd64 systems (John Dennis)
- limit PCI-alloc'ed physaddrs to 4GB on HP ia64 (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-6.EL" date="1070877600">- fix ppc64 firmware updates (Julie DeWandel)
- fix sync wakeup problem (Ingo Molnar)
- add ia64 cyclone support (Jason Baron)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-5.EL" date="1070272800">- undo rejected patches (Stephen Tweedie, Arjan van de Ven, Rik van Riel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.20.EL" date="1069840800">- enable NUMA support in amd64 smp configs (Jim Paradis)
- prevent oopses with tux in OOM scenarios (Ingo Molnar)
- apply several ipv6 multicast bug fixes (Dave Miller)
- assign retval in copy_process() error path (Ingo Molnar)
- add lseek-in-/proc support for s390x "ps" (Pete Zaitcev)
- redefine zone_is_highmem() for Celestica (Dave Anderson)
- fix unresolved symbols in amd64 modules (Bill Nottingham)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.19.EL" date="1069754400">- fix tg3 rx_pending limit for BCM5705/BCM5782 chips (Jeff Garzik)
- reset page error flag prior to read of new contents (Jeff Moyer)
- enable CONFIG_HOTPLUG_PCI option for ia64 configs (Doug Ledford)
- fix inactive laundry list race in ramfs_writepage() (Dave Anderson)
- avoid out_of_memory() for wired pages when there's lomem (Dave Anderson)
- conditionalize ppc64 machdep_calls change for KMI compat (Ernie Petrides)
- limit anon/cache pages scanned in refill_inactive_zone() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.18.EL" date="1069668000">- create old version (rev. 5.64) of cmpci sound driver (Tom Coughlan)
- remove ac97.o, ad1848.o, cs4232.o from unsupported (Jeff Moyer)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.17.EL" date="1069063200">- fix missing use of __GFP_HIGHMEM flag in pte_alloc_one() (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.16.EL" date="1068890400">- rework scsi mid-layer queuing logic to fix error handling (Doug Ledford)
- fix pci_dma_sync_sg() scatterlist arg in megaraid2 driver (Tom Coughlan)
- move more-ptes-in-rmap-pte-chain logic to its own patch (Ernie Petrides)
- tag uses of __GENKSYMS__ with KMI/ABI compat comment (Ernie Petrides)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.15.EL" date="1068804000">- fix MD multipath bugs causing crashes during fail-overs (Doug Ledford)
- add chain_ptep_t and revert pte_addr_t for KMI compat (Ernie Petrides)
- restore sub-timer-tick time-of-day granularity for ia64 (Jason Baron)
- modify agpgart and drm drivers for ia64 HP ZX1 support (John Dennis)
- fix ia64 32-bit emulation for several stat-related calls (Jason Baron)
- enable amd64 use of new ips driver w/config separation (Tom Coughlan)
- update e100 network driver to version 2.3.30-k1 (Jeff Garzik)
- update e1000 network driver to version 5.2.20-k1 (Jeff Garzik)
- apply scsi whitelist updates for IBM/CNSi/NEC devices (Tom Coughlan)
- reenable varyio for aic7xxx driver (hangs were unrelated) (Jeff Moyer)
- conditionalize NVIDIA_NFORCE3 to restore KMI compat (Ernie Petrides)
- prevent two ext3 panics on corrupted filesystems (Stephen Tweedie)
- apply two minor fixes to ppc64 RAS nvram reading (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.14.EL" date="1068717600">- update ServeRAID (ips) driver to version 6.10.52 (Tom Coughlan)
- configure xmon on by default in ppc64 configs (Julie DeWandel)
- create initial s390 zcrypt driver, version 1.1.2 (Pete Zaitcev)
- remove zfcp driver from linux-modules-unsupported (Pete Zaitcev)
- revise ppc64 reliability/serviceability support (Julie DeWandel)
- reduce kernel stack usage inside nfs_readdir() (Steve Dickson)
- add gameport dependency to cmpci driver config (Tom Coughlan)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.13.EL" date="1068631200">- reduce UDP retransmissions and fix slow reads for NFS (Steve Dickson)
- implement wired page lists for better ramfs handling (Larry Woodman)
- fix vfork deadlock when child process causes core dump (Ingo Molnar)
- enhance AltSysRq-M output and fix deadlock potential (Larry Woodman)
- update cmpci sound driver for some HP IPF workstations (Tom Coughlan)
- correct tq_struct struct initialization in tg3 driver (Jeff Garzik)
- fix NFS file attribute inconsistency after rename (Steve Dickson)
- prevent ia64 machine checks w/sysreport on Olympia (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.12.EL" date="1068544800">- redesign refill_inactive_zone() for smarter deactivation (Larry Woodman)
- improve page deactivation scalability w/delayed laundering (Larry Woodman)
- rework locking and timer usage in s390 ctc network driver (Pete Zaitcev)
- allow xmon to be enabled at boot-time for ppc64 debugging (Julie DeWandel)
- reverse kscand's order of anon/cache active list traversal (Larry Woodman)
- force in-lining of br_read/write_lock/unlock routines (Julie DeWandel)
- fix mistaken fall-through cases in s390 chandev driver (Pete Zaitcev)
- make a few exported symbols available to OpenGFS (Stephen Tweedie)
- fix ld/st ordering bug causing lost signal wakeups (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.11.EL" date="1068112800">- make profile=X imply nmi_watchdog=1 and fix NMI w/d bugs (Ernie Petrides)
- add lock init in scsi_get_host_dev() to fix shutdown hang (Doug Ledford)
- enable distributed interrupts by default on ppc64 iSeries (Julie DeWandel)
- improve amd64 reporting of machine check errors (Jim Paradis)
- fix disabling of autonegotiation in tg3 driver (Dave Miller)
- add image name to s390 ioctl32 debug message (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.10.EL" date="1068026400">- fix file lock ownership by NPTL threads to be process-wide (Ernie Petrides)
- upgrade megaraid driver to version 1.18k and fix isr/fw sync (Tom Coughlan)
- upgrade megaraid2 driver to version 2.00.9 and enable varyio (Tom Coughlan)
- improve scsi mlqueue handling to enable BUSY/QUEUE_FULL fix (Doug Ledford)
- correct reporting of i/o errors in ppc64 viodasd driver (Julie DeWandel)
- update acenic driver to handle enabling of jumbo frame mode (Jeff Moyer)
- fix i386 PAGE_NONE bits to prevent get_user_page() hang (Roland McGrath)
- fix ia64 show_mem() handler to use efi_memmap_walk() call (Dave Anderson)
- replace spaces in slabinfo entry name for async poll table (Matt Wilson)
- fix race condition in buffer-head memory footprint patch (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.9.EL" date="1067940000">- improve spec file robustness in %post/%preun stanzas (Florian La Roche)
- add s390x iovec length checking for 32-bit reads/writes (Matt Wilson)
- use highmem for pte/ramfs page allocation w/__GFP_WIRED (Larry Woodman)
- upgrade oprofile support with bug fixes and enhancements (Will Cohen)
- fix infinite recursion in SCSI mid-layer post-processing (Jeff Moyer)
- introduce no-auto-start-on-add handling for SCSI blacklist (Jeff Moyer)
- enable s390 support for blk stats handling for iostat -x (Pete Zaitcev)
- fix LVS timer-related hang from ip_vs_conn_expire() bug (Ernie Petrides)
- correct module init in cpqarray driver to fix insmod crash (Tom Coughlan)
- incorporate ESB PATA support and fix a pirq_routers PCI id (Jeff Garzik)
- fix nfs async write deadlock potential w/nfs_writepage() (Steve Dickson)
- fix SCSI error handling for BUSY queue status messages (Doug Ledford)
- improve ppc64 32-bit ioctl support for use by ethtool (Julie DeWandel)
- add missing unlock in ip_mc_del_src() to fix IGMP deadlock (Dave Miller)
- change ppc64 reporting of floppy capacity to be 1.44 MB (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.8.EL" date="1067421600">- fix up various problems on Nforce3-based amd64 systems (Jim Paradis)
- double number of pte addrs in rmap pte_chain structs (Larry Woodman)
- restrict slab size for kernel data structs to 2 pages (Larry Woodman)
- clean up obsolete quicklist usage for ppc64 pte pages [rejected]
- prevent readdirplus from returning hidden mount points (Steve Dickson)
- prevent lockd deadlocks caused by export table locking (Steve Dickson)
- eliminate use of parallel task_struct init macro on ia64 [rejected]
- fix broken s390x overflow checks with 32-bit F_GETLK use (Matt Wilson)
- fix SCSI errors with "mt stoptions" and IDE tape drives (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.7.EL" date="1067162400">- fix bad checksumming interaction between e100 and bridge (Jeff Garzik)
- prevent system hang by OOM killing when overcommitted (Larry Woodman)
- un-inline ext3 error function to reduce stack usage (Stephen Tweedie)
- fix several ppc64 problems with interrupt handling (Julie DeWandel)
- correct amd64 identification in /dev/oprofile/cpu_type (Jim Paradis)
- move fput() call in do_tty_hangup() to avoid oops w/kon (Alexander Viro)
- eliminate creation of never-used task_struct slab cache (Larry Woodman)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.6.EL" date="1066903200">- reduce buffer-head memory footprint from read-only files (Ingo Molnar)
- update qeth driver for reduced stack usage and bug fixes (Pete Zaitcev)
- fix s390 qeth driver again to allow tcpdump to function (Pete Zaitcev)
- add exec_mmap() locking to prevent vma lookup races (Ernie Petrides)
- rework RPC slot allocation for further NFS improvements (Steve Dickson)
- reduce frequency of RPC retransmits during NFS writes (Steve Dickson)
- make generic/ext3 file system write handling 64-bit clean (Jeff Moyer)
- allow SMP scheduling rebalancing to occur every 200 msecs (Ingo Molnar)
- prevent races during IPC semaphore set and msg queue removal (Ingo Molnar)
- fix ACPI handling to identify trigger/polarity of PCI IRQs (Jim Paradis)
- correct amd64/ia64 acpi_disabled decls for post-boot access (Jeff Moyer)
- update ppc64 viocons driver with several bug fixes (Julie DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.5.EL" date="1066298400">- move fix for PPR use in sym53c8xx driver to its own patch (Ernie Petrides)
- correct pids exported by msgctl/semctl/shmctl/fcntl calls (Ulrich Drepper)
- apply s390 lcs driver wait queue init and locking updates (Pete Zaitcev)
- enable dummy network driver use in generic s390 config file (Pete Zaitcev)
- add missing ptrace hooks for exec and vfork-done events (Bill Nottingham)
- fix SMP timer race that triggered BUG_ON() in add_timer() (Ingo Molnar)
- fix several bogus ipvs boundary checks in ftp module [rejected]
- fix vfsmount queuing in attach_mnt() for CLONE_NEWNS [rejected]
- add net_device check to prevent oops in pppoe driver [rejected]
- fix memory leak in symlink error path of /proc driver [rejected]
- fix overflow in v1_disk2mem_dqblk() quota calculation [rejected]
- increase ppc64 ramdisk size to 8192k in p/iSeries configs (Jeremy Katz)
- lower amd64 TASK_UNMAPPED_32 to increase avail address space (Jim Paradis)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.4.EL" date="1066039200">- fix ppc64 stack pointer alignment in user signal handlers (Jakub Jelinek)
- increase amd64 exception stack size to 4k to avoid overflow (Jim Paradis)
- fix ppc64 interrupt rate accounting for vmstat and /proc (Julie DeWandel)
- extend amd64 NMI watchdog timeouts to tolerate bad 2nd cpu (Jim Paradis)
- allow s390 dasd driver to use noop elevator module (Pete Zaitcev)
- add free_irq() in error path of olympic token ring driver (Matt Wilson)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.3.EL" date="1065866400">- make pid fields in ucred structures hold tgid values (Ulrich Drepper)
- prevent ppc64 iSeries virtual console writes &gt; 4k (Julie DeWandel)
- control ia64 unaligned access messages with new sysctl (Jeff Moyer)
- correct SCSI data direction on cmd to spin up disks (Pete Zaitcev)
- add do_brk() TASK_SIZE and address space wrap checks (Arjan van de Ven)
- limit PPR use in sym53c8xx driver for ppc64 Zapata drives (Doug Ledford)
- list ac97.o, ad1848.o, and cs4232.o modules as unsupported (Jeff Moyer)
- clean up conditional compilation in s390 zfcp driver (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.2.EL" date="1065693600">- identify whether i686 or athlon config in oops output (Arjan van de Ven)
- remove warning in reclaim_page() unmapped page path (Ernie Petrides)
- fix several lvm error handling paths causing memory leaks [rejected]
- correct i386 smp shutdown logic when netdump is enabled (Jeff Moyer)
- fix amd64 potential data leaks on FPU save/restore errors (Jim Paradis)
- prevent aic7xxx chip resets leading to PCI parity errors (Tom Coughlan)
- remove ia64 user tty warning on unaligned accesses (Arjan van de Ven)
- fix ppc64 /proc file buf overruns in viodasd driver (Mark DeWandel)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.1.EL" date="1065607200">- (this is the first build for RHEL 3 Update 1)
- avoid m/ctime update for pipe writes on r/o file systems (Stephen Tweedie)
- prevent theoretical ext3 fs corruption in ext3_read_inode (Stephen Tweedie)
- enable AGRESSIVE_IDLE_STEAL to improve scheduler balancing (Ingo Molnar)
- fix potential ppc64 lock-up on ioctl32 un/reregistering (Pete Zaitcev)</changelog><changelog author="Ernie Petrides &lt;petrides@redhat.com&gt; kernel-2.4.21-4.EL" date="1065175200">- extend ppc64 scsi timeout values for Zapata DVD-ROM drives (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-3.EL" date="1063965600">- make sure to release viotape op structure after use (Julie DeWandel)
- disable pgd/pmd quicklists on ppc64 (Mark DeWandel)
- temporarily disable aio on sockets (Jeff Moyer)
- correctly refile inodes to make them reclaimable (Harald Hoyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt; kernel-2.4.21-2.EL" date="1063792800">- S390: update zfcp and cio drivers (Pete Zaitcev)
- IA64: add extra check to virtual mem_map (Larry Woodman, Dave Anderson)
- initialise local variables in ide-tape &amp; ide-scsi
- cap qla2200 tcq depth to 255
- switch version number scheme to kernel-2.4.21-N.EL</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063706400">- PPC64: invalidate evicted sbl entries in the erat (Julie DeWandel)
- increase ethernet tx_queue_len to 1000 (David Miller)
- in udp_{v6_}flush_pending_frames, reset up-&gt;len too (David Miller)
- S390: CMS reserved minidisk detection (Pete Zaitcev)
- call recount_segments() on a different occasion (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063620000">- really disable exec-shield (Roland McGrath)
- reduce stack randomisation, disable brk randomisation (Ingo Molnar)
- make e1000 driver 64 bit clean (Julie DeWandel)
- minor aio corner case error condition fix (Jeff Moyer)
- AMD64: more lenient check for call workaround (Ernie Petrides)
- PPC64: disable CONFIG_XMON (Mark DeWandel)
- S390: fix CCW slab selection (Pete Zaitcev)
- fix two-disk combined mode sata (Jeff Garzik)
- move buslogic scsi driver to supported, for vmware only (Tom Coughlan)
- change viocons message from KERN_WARNING to KERN_INFO (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063360800">- VM: handle race condition in reclaim_page (Stephen Tweedie, Larry Woodman)
- PPC64: fix "log_buffer broken" xmon issue (Julie DeWandel)
- fix compiler warnings in netdump (Jeff Moyer)
- AMD64: workaround for 32 bit compat mode page fault problem (Ernie Petrides)
- IA64: make perfmon root-only (Jason Baron)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063274400">- fix smp race in rebalance_laundry_zone()</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063188000">- fix compiler warnings when hugetlbfs is disabled (Pete Zaitcev)
- fix tux performance bug (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063101600">- don't evict kernel stack seg translation on ppc64 (Julie DeWandel)
- fix callers of do_page_fault on ppc64 (Mark DeWandel)
- AMD64 munmap return value, fix lsb failure (Jeff Moyer)
- fix for PPC64 32-bit ioctl (Jim Paradis)
- bring IA64 value of MINSIGSTKSZ in line with upstream (Jakub Jelinek)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1063015200">- fix potential datacorruptor in viodasd driver (Julie DeWandel)
- fix race condition in s390 dirty bit handling (Pete Zaitcev)
- limit per-cpu slab cache size
- correct 32-bit readv/writev border cases on ppc64 (Matt Wilson)
- AMD Golem IO-APIC fixup for i686 kernel on AMD64 (Jeremy Katz)
- NFS Solaris 8 acl fix (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062756000">- minor nfs permissions bugfix (Steve Dickson)
- change mprotect return value to SuS mandated value (Arjan van de Ven)
- kernel-unsupported now provides kernel-modules (Jeremy Katz)
- correct __hugemem__modules typos in rhkernel.h
- fix subtle pmd corruption error (Larry Woodman, Dave Anderson)
- fix cut'n'paste error in SATA io port reservation
- restore NFSEXP_CROSSMNT ABI compatibility (Steve Dickson)
- round up executable name field length in core file (Jakub Jelinek)
- switch off exception_trace on amd64 (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062496800">- patch to access odd last sector on ia64 (Jason Baron)
- misc fixes from upstream (Arjan van de Ven)
- fix audigy driver (Jeff Garzik)
- tunable dcache reclaim priority for tux (Ingo Molnar)
- tg3 driver update (Jeff Garzik)
- ipv6 and icmp network bugfixes (David Miller)
- fix ppc64 memory access security bug (Julie DeWandel)
- reduce memory allocated for skb (Ingo Molnar)
- small smp fix for scalable timers (Ingo Molnar)
- make s390 recognise MSDOS partitions (Pete Zaitcev)
- small smp fixes in tux (Ingo Molnar)
- make mptfusion drivers supported on 4/4 split kernel (Tom Coughlan)
- add entries to scsi whitelist (Tom Coughlan)
- minor sata/ata driver updates (Jeff Garzik)
- small fixes to viodasd driver (Julie DeWandel)
- nfs_get_root and nfs access bit patches (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1062064800">- don't show interrupts in /proc/stat for ppc64 (Matt Wilson)
- make sure sync returns in a reasonable time
- PPC64: fix for boot cpu not being cpu 0 (Julie DeWandel)
- zero sized write no longer updates mtime (Matt Wilson)
- fix video bios read corruption on ia64 (Larry Woodman)
- network fixes to tg3, bonding (Jeff Garzik)
- properly reserve legacy IDE regions in sata driver (Jeff Garzik)
- fix ppc64 signal handling bugs (Mark DeWandel)
- tux fixes (Ingo Molnar)
- tgkill syscall for s390(x) (Pete Zaitcev)
- amd64 32 bit compatibility fixes (Jim Paradis)
- ppc64 32 bit compatibility fixes (Julie DeWandel)
- fix 4G/4G follow_page problem (Ingo Molnar)
- reduce memory used by VMAs and dentries (Arjan van de Ven)
- make LVM snapshotting of ext3 work reliably (Stephen Tweedie)
- make netdump play better with the nmi watchdog (Jeff Moyer)
- QLA2200: disable irq mitigation, fix off-by-one (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061805600">- seq_file /proc/interrupts for x86 too (Ingo Molnar)
- fix memory leak in ia64 exec of ia32 binaries
- check tgid not pid in scm_check_creds()  (David Miller)
- VM fixes: shm swap priority, zeromap_page_range
- workaround VFS limitations for VXFS NFS export</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061546400">- use personality for 3GB userspace on x86 -hugemem (Ingo Molnar)
- add sysctl interface for lockd (Steve Dickson)
- don't prod VGA space on HP Pinnacle systems (Larry Woodman)
- fix for 32 bit binaries on amd64 (Jim Paradis)
- add preemption point to write_some_buffers (Julie DeWandel)
- sort ACPI table to get correct device ordering on HP (Larry Woodman)
- fix refcounting bug with ipv6 addresses on netdevs (David Miller)
- add s390 syscalls for tux (Pete Zaitcev)
- md multipath enablers (Doug Ledford)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061460000">- fix process and nice time accounting (Doug Ledford)
- amd64: syscall table updates, timer robustness (Jim Paradis)
- amd64 3GB personality for 32-bit processes (Jim Paradis)
- use 256MB pagesize for hugetlbfs on ia64 (Larry Woodman)
- make sure e100 only claims ipv4 checksumming
- igmpv3/mldv2 OOPS'er fix (David Miller)
- hugetlbfs: make chown work and allow uid=X,gid=Y mount options
- make larger mmap windows work (Ernie Petrides, Ingo Molnar)
- ia64: improve ia32 compatibility (Larry Woodman)
- fix bug in rpc retry code (Steve Dickson)
- make acpi pci hotplug modulable (Jeff Moyer)
- update (trivial) to megaraid 1.18j (Tom Coughlan) 
- enable varyio on mptfusion (Tom Coughlan)
- panic on oops to prevent data corruption opportunities (Ernie Petrides)
- small iorl locking fix (Doug Ledford)
- fix ppc64 get_wchan() bad deref (Mark DeWandel)
- fix aio read into mmap()d PROT_WRITE (Jeff Moyer, Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1061373600">- libata update (Jeff Garzik)
- amd64 syscalls for xattrs &amp; ACLs (Jim Paradis)
- tux fixes (Julie DeWandel, Ingo Molnar)
- via &amp; i810 audio fixes (Jeff Garzik)
- small 4G/4G split bugfixes (Ingo Molnar)
- fix sigsuspend race on x86, amd64, ia64 (Mark DeWandel)
- ia32 behavior for FP denormal exceptions on ia64 (Jason Baron)
- get the set/get of NAT bits for ia64 correct (Jason Baron)
- ipsec update, adds cast6 encryption (David Miller)
- VM update: OOM bugfix &amp; page-&gt;flags atomic updates (Rik van Riel)
- reenable serpent encryption on ppc64
- bladecenter usb-ohci support (Pete Zaitcev)
- iorl fixes (Doug Ledford)
- network bonding driver oops fix (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060768800">- DAC960 back to bigmem supported, ne2k-pci &amp; usb audio to bigmem unsupported
- netdump updates for tg3 and e1000 (Jeff Moyer)
- put a hole between stack and mmap area (Ernie Petrides)
- process time accounting updates (Doug Ledford)
- fix null characters in TUX header (Julie DeWandel, Ingo Molnar)
- display correct executable when running interpreted script
- zfcp zSeries fibrechannel driver (Pete Zaitcev)
- ipsec updates (David Miller)
- fix 4G/4G race conditions (Ingo Molnar)
- rename -bigmem kernel to -hugemem to reflect changed tradeoffs
- optionally show task states from hangcheck timer (Jason Baron)
- various small bugfixes from upstream</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060423200">- fix scalable timer race condition  (Julie DeWandel, Ingo Molnar)
- print warning on boot with &gt;16GB RAM on -smp kernel (Arjan van de Ven)
- fix for xapic issue with ServerWorks chipsets (Ernie Petrides)
- remove spurious ioctl printk on ppc64 (Mark DeWandel)
- ppc64 wchan improvement (Mark DeWandel)
- hint @pause changes for ia64
- longer scsi scan timeout on ppc64 (Julie DeWandel)
- readv/writev for raw IO (Stephen Tweedie)
- fix for easy stack/mmap collisions (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060164000">- various XAPIC related fixes (Ingo Molnar)
- correct context switch and iowait stats with HT shared runqueues
- ext3 obscure deadlock fixes (Stephen Tweedie)
- knfsd fixes: blocked lock, symlink error &amp; missing bkl  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1060077600">- de_thread bugfix from 2.6 upstream  (Matt Wilson)
- viocons driver update (Julie DeWandel)
- fix VM non-overcommit mode (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059991200">- plug data leak in aio code (Jeff Moyer)
- initial list of 4G/4G unsupported modules (Tom Coughlan)
- nfs softirq race fix (Steve Dickson)
- updated IPSEC patch (David Miller)
- networking updates/fixes from 2.4.22-preX (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059904800">- drop orlov allocator for now (Arjan van de Ven)
- correct HT cpu pair detection (Arjan van de Ven)
- build zImage.partial for netbooting on pSeries (Matt Wilson)
- fix missing symbols</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059818400">- export two AIO symbols for OCFS
- disable CONFIG_DEBUG_SLAB so performance testing can start
- crosshost mmap hooks for distributed filesystems (Stephen Tweedie)
- include partially linked zImage for pSeries netboot (Matt Wilson)
- nfs highmem fix, unmap when xdr_kmap() fails (Steve Dickson)
- update megaraid2 locking to work with IORL (Com Coughlan)
- make sure to build the qla2100 driver (Tom Coughlan)
- fix cdrom ioctl 32 bit compatibility for ppc64, amd64 (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059645600">- run depmod on install of unsupported modules (Arjan van de Ven)
- fix register corruption in IA64 lazy fpu handling (Larry Woodman)
- add b44 network driver (Jeff Garzik)
- make ppc64 pci interface routines compatible (Julie DeWandel)
- allow 32 bit userland on AMD64 and PPC64 to use volumes &gt; 2GB (Jeff Moyer)
- nfsd: acl related mount and export flags (Steve Dickson)
- fix nfs exp_fodrop oops (Steve Dickson)
- fix missed signal wakeups on ppc64 (Mark DeWandel)
- smp scalable timer bugfixes (Ingo Molnar)
- workaround for a prefetch bug in some Athlon CPUs (Ernie Petrides)
- code to make more modules unsupported for 4/4 split (Arjan van de Ven)
- various spec file and config cleanups
- viopath driver fix (Julie DeWandel)
- add match for 440gx chipset bioses (Arjan van de Ven)
- move epic100 and ne2k-pci back to supported (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1059472800">- updated finegrained process accounting patch (Doug Ledford)
- make iSeries compile without CONFIG_ICOM (Julie DeWandel)
- nfsd: only set -&gt;reuse for tcp sockets, not udp  (Steve Dickson)
- enable the 4G/4G split on the i686-bigmem kernel only
- sysrq support for viocons (Julie DeWandel)
- limit pci_bus size changes to ppc64 (Jeff Garzik)
- fix for signal delivery race (Ernie Petrides, Mark DeWandel)
- add ShdPnd to /proc (Ingo Molnar)
- fix de_thread() hang (Ingo Molnar)
- add kernel support for CLONE_STOPPED (Ernie Petrides)
- make sure to initialise HVC console (Julie DeWandel)
- fix _SEG abort hit in ACPI code (Larry Woodman)
- build addon drivers on amd64 and ppc64 too (Tom Coughlan)
- build IPS driver on all architectures (Tom Coughlan)
- fix a few ia32 emulation bugs for IA64 (Larry Woodman)
- enable correct/new __clear_bit macro for IA64 (Larry Woodman)
- flexible mmap allows mappings of huge executable segments (Larry Woodman)
- sysrq-w for s390 (Pete Zaitcev)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058436000">- have s390 cpu_relax() also include barrier  (Pete Zaitcev)
- convert ppc64 xmon traceback code to ksymoops (Matt Wilson)
- rename kstat_sum() variable with aliasing problems  (Ingo Molnar)
- fix AIO-on-hugetlbfs crash (Ingo Molnar)
- update support for IA64 Long's Peak ACPI serial ports  (Larry Woodman)
- turn on xmon for both iSeries and pSeries (Matt Wilson)
- bugfix to make CLI work correctly on iSeries (Julie DeWandel)
- SATA bugfixes (Jeff Garzik)
- enable 4G/4G split in -BOOT kernel, due to syslinux trouble</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058349600">- fix s390 compile (Pete Zaitcev)
- taint the kernel on sii6512 driver link, GPL but no source available
- handle debug registers with 4G/4G split (Ingo Molnar)
- tgkill syscall for ppc64 (Julie DeWandel)
- fix NFSD/ACL/ext3/jbd deadlock (Stephen Tweedie, Steve Dickson)
- fix maxcpus=1 installation panic fix for ppc64 (Julie DeWandel)
- IDE byteswapping io functions for ppc64 (Julie DeWandel)
- update sata driver (Jeff Garzik)
- raise the number of /proc entries (Julie DeWandel)
- sticky sysrq key with timeout (Jeff Moyer)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058263200">- make SysRq-W useable on s390 (Pete Zaitcev)
- updated process accounting patch (Doug Ledford)
- siginfo_t fixes for s390x and amd64 (Jakub Jelinek)
- clustered NFS fail-over support (Steve Dickson)
- autofs4 updates and fixes
- ia64 patches to reduce cpu power/temp in idle loop (Larry Woodman)
- add irqsafe up() for LVM locking (Stephen Tweedie)
- O_DIRECT fallback to synchronous allocation in holes (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1058176800">- ia64 HP iommu: add sx1000 detection
- possible bug in s390x 32-bit emulation  (Roland McGrath)
- updated ipsec patch, should fix all current ipv6 bugs  (David Miller)
- finegrained process accounting (Doug Ledford)
- ICH5 pci irq routing, and associated ids (Jeff Garzik)
- fix the machine_real_restart() reboot path on 4G/4G (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057917600">- fix amd64 agp-gart code to work around hugetlbfs debug code (Jim Paradis)
- fix ppc32 pthread_cancel (Jakub Jelinek) 
- Do not sent IGMP leave messages unless IFF_UP  (David Miller)
- software iommu for ia64 systems without hardware iommu (Jason Baron)
- fix ext3 oops fix during dio, LTP failure (Arjan van de Ven, Stephen Tweedie)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057831200">- Remove illegal calls to dst_link_failure</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057831200">- enable HT scheduler for bigmem kernel
- add tgkill syscall for x86 and ia64
- make -BOOT kernel smaller w/ modular md and CONFIG_SMALL
- rmap VM updates
- 4G/4G agpgart potential corruption fix (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057744800">- switch off exec shield everywhere
- eliminate hostfs for amd64 (Jim Paradis)
- megaraid update, mostly vendor ID (Tom Coughlan)
- shrink boot kernel by disabling some config options
- additions for the SCSI whitelist (Tom Coughlan)
- ia64 extable fix (Jason Baron)
- viocons driver upgrade (Julie DeWandel)
- another ia64 mmu context wraparound deadlock fix (Larry Woodman)
- iSeries icom debugger patch (Julie DeWandel)</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1057658400">- Drop io_request_lock in usb scsiglue.c:device_reset</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057658400">- fix cpu_relax for amd64 and ia64 to include a barrier (Ingo Molnar)
- restore o_direct api compatibility (Stephen Tweedie)
- fix possible ext3 deadlock in o_direct patches (Stephen Tweedie)
- ACLs for JFS (Stephen Tweedie)
- fix /proc/cpuinfo runqueue printing (Ingo Molnar)
- via audio fixes, smaller emu10k1 patch (Alan Cox, Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057572000">- fix process accounting, tux ftp passwords and si_pid (Ingo Molnar)
- 32bit compat statfs fix (Guy Streeter)
- don't serialise exit on BKL when accounting is off (Ingo Molnar)
- truncate timeouts to 32 bits on 64bit systems (Ingo Molnar)
- fix network channel bonding (Jeff Garzik)
- split netdump patch into core and net-drivers (Jeff Garzik)
- delayed tlb flushing for ia64 (Larry Woodman)
- emu10k1 driver fixes
- kksymoops for AMD64 (Jim Paradis)
- select bugfixes from 2.4 upstream (Jeff Garzik)
- OOM tweaks (Rik van Riel)
- use seq_file for /proc/interrupts on ppc64 (Mark DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057140000">- add qdio and qeth drivers for s390(x)  (Phil Knirsch)
- slab cache scale bugfix (Larry Woodman)
- S390: qdio &amp; qeth drivers (Phil Knirsch)
- hangcheck timer for ppc64 (Julie DeWandel)
- fix race conditions in ia64 ia32 compat layer (Larry Woodman)
- update megaraid, aic7xxx, cciss and cpqarray drivers (Tom Coughlan)
- nfs xdr_shift_buf, tcp client corruption and alignment (Steve Dickson)
- rhconfig.h stuff for ppc64, s390 and s390x (Matt Wilson)
- AIO on sockets</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1057053600">- kiobuf optimisations (Stephen Tweedie, Larry Woodman)
- ipsec update (David Miller)
- ipvs update to deal with timer changes (David Miller)
- 4G/4G split patch optimisations (Ingo Molnar)
- hangcheck timer (Jason Baron)
- recent (AGP 3.0) agpgart support (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056967200">- semtimedop() support on s390/s390x  (Ernie Petrides)
- fix a 4G bug that triggers on systems with &gt;30 CPUs (Ingo Molnar)
- updated SCSI SMP affine queueing patch  (Arjan van de Ven)
- page hash prefetch in do_generic_file_read bugfix (Julie DeWandel)
- updates the qlogic driver to the latest (Arjan van de Ven)
- slab cache SMP scalability tweaks (Ingo Molnar)
- ACPI 2.0 for IPF and AMD64 (Jim Paradis, Larry Woodman)
- statm fixes for hugetlbfs and remap_file_pages (Jason Baron)
- acpi serial port detection (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056708000">- iseries driver updates (Julie DeWandel)
- aio scalability and 2.5 backports  (Ingo Molnar)
- SMP scalable timers (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056621600">- make qlogic driver use new scsi infrastructure (Arjan van de Ven)
- export aio kvec functions
- fix statm oops
- compile fixes 
- NFS ACL over the wire protocol extensions (Steve Dickson)
- rate limit slab pruning, to limit IPI load on SMP systems (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056448800">- scsi request lock scaling (Ingo Molnar)
- cpu affinity for scsi command processing (Ingo Molnar)
- use softirqs instead of bhs for the scsi layer (Doug Ledford)
- igmpv3 fixes and improvements (David Miller)
- oprofile for ppc64 (Will Cohen)
- Increase MAX_ADDR_LEN from 8 to 32 for Infiniband over IP (Tom Coughlan)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056362400">- per-cpu kstat arrays (Ingo Molnar)
- optimise 4G/4G tlb flushing (Ingo Molnar)
- kiobuf reclaim together with buffer reclaim (Arjan van de Ven)
- more scalable gendisk statistics (Ingo Molnar)
- nfs reconnect fixes (Steve Dickson)
- add 32-bit compatibility for ustat system call on ppc64 (Julie DeWandel)
- scalable gettimeofday (Ingo Molnar)
- hugetlbfs ppc64 &amp; s390 bits (Mark DeWandel, Pete Zaitcev)
- hugetlbfs for ia64 (Jason Baron)
- qlogic scsi driver update (Arjan van de Ven)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056189600">- nfs patches (Steve Dickson)
- xapic improvements, summit support (Ingo Molnar)
- fix core dump name for multithreaded programs (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056103200">- merge up to marcelo's latest</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1056016800">- oom killer fixes (Larry Woodman, Rik van Riel)
- tunable VM overcommit (Rik van Riel)
- hugetlbfs for amd64 (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055930400">- updated iseries virtual drivers (Julie DeWandel)
- nfs lockd improvements (Steve Dickson)
- remap_file_pages improvements (Ingo Molnar)
- /proc/efi/symtab patch for ia64 (Larry Woodman)
- disable O_PROFILE on UP x86 machines
- allow NMI watchdog profiling frequencies up to 10kHz (Ingo Molnar)
- statm (Jason Baron)
- hugetlbfs (Ingo Molnar)
- have nfsd honour ACLs on a per-export basis (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055844000">- Enable O_PROFILE on non-SMP configs (Stephen Tweedie)
- more conservative AIC config options
- Fix BOOT kernel panic while mounting /dev/cdrom (Larry Woodman)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055757600">- merge to 2.4.21 + selected ac bits
- ipsec upgrade (David Miller)
- HT scheduler patch fix (correct sibling counting)
- make bdflush writeout smoother
- AMD64 gdb fix (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055412000">- don't include unsupported drivers in -BOOT kernel
- merge up to 2.4.21-rc8 + selected ac bits
- FIXME: sysrq for 3170, dasd, odirect &amp; odirect for nfs</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com" date="1055412000">- oprofile for s390</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055239200">- statm (Jason Baron / Julie DeWandel)
- AIO 32-bit compat for 64-bit machines (Julie DeWandel)
- only do bufferhead reclaim in extreme situations (Rik van Riel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1055152800">- Serial ATA support (Jeff Garzik)
- mtp fusion 2.05.05+ (Dave Maley)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054893600">- XATTR/ACL patches, except NFS over the wire (Stephen Tweedie)
- ipsec module autoloading (David Miller)
- remap_file_pages (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054807200">- upgrade to latest -rmap with Ernie's fixes
- sysrq+C shows the stack dump of all CPUs
- ext3 truncate fix (Stephen Tweedie)
- NFS fixes for HZ=1000 machines (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054720800">- 4G/4G split fix (Ingo Molnar)
- ppc64 fixes (Guy Streeter, Rik van Riel)
- enable oprofile on amd64
- ipsec updates (David Miller)
- fork returns pid instead of task_struct* (Julie DeWandel)
- ia64 ptrace bugfixes (Dave Anderson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054634400">- HP diva serial driver (Jeff Garzik)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054548000">- NFS over TCP patches (Steve Dickson)
- switch to using ppc64pseries/ppc64iseries arches instead of
  kernel-pseries and kernel-iseries (Jeremy Katz)
- egenera scsi bus rescan patch (Jeff Garzik)
- oprofile (Graydon Hoare)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054288800">- futex requeue (Ingo Molnar)
- enable NAPI for E1000
- signal latency and scheduler improvements (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1054202400">- kscand oops fix (Ingo Molnar, Rik van Riel)
- pcnet32 fixes (Julie Dewandel)
- raid autorun (Pete Zaitcev)
- turn off CONFIG_SUNDANCE_MMIO (Jeff Garzik)
- flexible mmap (Larry Woodman)
- ppc64 fixes (Matt Wilson, Guy Streeter)
- loop softirq 10 times before giving up (Ingo Molnar)
- O_DIRECT for NFS (Steve Dickson)
- prevent md from shutting down active arrays (Doug Ledford)
- rmap updates, inode reclaim &amp; higher order allocations (Rik van Riel)
- network channel bonding (Jeff Garzik)</changelog><changelog author="Jim Paradis &lt;jparadis@redhat.com&gt;" date="1054116000">- Re-enable x86_64 in build
- x86_64-specific updates for exec-shield
- Bring in improved "nonx" support for x86_64 from upstream</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1054116000">- Hush s390 printks upon user SIGSEGV by default. It can be enabled back with
  a sysctl kernel.userprocess_debug.
- Enable optional 3270 console mode on s390.</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053684000">- get rid of vsyscall page (Arjan van de Ven)
- fix missing symbol copy_str_fromuser_size</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053424800">- exec-shield updates to fix hang-on-boot on some systems (Ingo Molnar)
- temporarily disabled the architectures, which got broken by exec-shield updates
- fix for LTP sigprocmask02 failure (Matt Wilson)
- ppc64 updates (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1053338400">- pagecache scalability patch (Ingo Molnar)
- IPC semaphore scalability patch (Ingo Molnar)
- ppc64 updates (Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052992800">- exec-shield (Ingo Molnar)
- AMD64 ACPI updates (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052906400">- reenable O_DIRECT, O_DIRECT fixes and superbh-aio (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052820000">- vma merging (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052733600">- nmi profiler
- VM updates: rmap, dma zone isolation
- tux (Ingo Molnar)
- ext3 stall fixes (Ingo Molnar)
- e1000 fixes (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052474400">- config files overhaul (Arjan van de Ven)
- fix bug in mlock patch
- IPVS (Dave Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052388000">- import IO elevator changes from gingin
- critical VM fix
- matrox framebuffer patch for pseries (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052301600">- hammer nptl fixes (Ulrich Drepper)
- 4G/4G split (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052215200">- upgrade to 2.4.21-rc1-ac4 (minus -ac acpi and xapic changes)
- drop nfs patches since those seem to be in -ac</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1052128800">- larger message buffer size + boot option (Mark DeWandel)
- AMD64: tls handling, coredump fixes (Jim Paradis)
- SMP &amp; highmem VM fixes (Ben LaHaise)
- HT+NUMA scheduler (Ingo Molnar)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051956000">- ext3 orphan cleanup fix (Ernie Petrides)
- s390 affinity fixes (Pete Zaitcev)
- i386 vsyscall DSO changes (Roland McGrath)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051869600">- bugfixes and config changes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051783200">- enable semtimedop for other architectures (Ernie Petrides)
- large pci bus numbers (Julie DeWandel)
- bugfixes galore</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051610400">- igmpv3 (David Miller)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051524000">- generic 32bit compat stuff + amd64/ppc64/ipf pieces (Matt Wilson)
- clustered apic (XAPIC) support (Ingo Molnar)
- ppc64 architecture updates (Matt Wilson, Guy Streeter)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051264800">- ppc64 fixes</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051178400">- collapse ipsec into one patch (David Miller)
- ppc64 build fix (Matt Wilson)
- improve smp scheduler fairness (Ingo Molnar)
- allow mlock for normal users, up to ulimit (Ingo Molnar)
- AMD64 port (Jim Paradis)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051092000">- clean up mechanism to pass extra CFLAGS so we don't override what's
  already there
- merge ia64 build stuff (Larry Woodman)
- merge varyio + superbh (Stephen Tweedie)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1051005600">- merge up to 2.4.21-rc1
- IA64: virtual mem_map, acpi updates, netdump update, pte-highmem &amp; fealnx
- IA64: architecture specific patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050919200">- import davem's ipsec patch pile
- ppc64 kallsyms and dump_fpu patches (Matt Wilson)
- rmap updates (x86_64 &amp; bufferhead reclaim)
- ppc64 ptrace patch (Matt Wilson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050660000">- open up patch namespace 2000-5000 for network protocol changes
- renumber existing patches in that range</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050573600">- make sure to actually apply the rmap-updates patch
- iowait statistics
- ppc64 code merge (Mark &amp; Julie DeWandel)
- ppc64 build scripts (Matt Wilson)
- raise symlink recursion level to 8 (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050487200">- merge up to marcelo's latest
- pte-highmem bits for x86-64 and ppc64</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050400800">- merge up to 2.4.21-pre7-ac1
- drop semtimedop patches (now in -ac)
- drop nfs xprt_fixes, fix_softirq, d_drop and nfs-readeof (merged in -pre7)
- add !CONFIG_QUOTA compile fix for 2.4.21-pre7-ac1</changelog><changelog author="Pete Zaitcev &lt;zaitcev@redhat.com&gt;" date="1050314400">- add LCS driver (endemic to s390)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050314400">- add rmap VM
- add kunmap_atomic debugging patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050141600">- remove dir.c part of NFS kmap_atomic patch for now
- using strlen as local variable name in nfs code kills, literally</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1050055200">- merge S390(x) back in  (Pete Zaitcev)
- fix NFS kmap_atomic patch
- sched.c patch to disable interrupts in wake_forked_task  (Julie DeWandel)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049968800">- AIO infrastructure  (Ben LaHaise)
- update NFS kmap_atomic patch  (Steve Dickson)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049882400">- semtimedop patches  (Ernie Petrides)</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049796000">- I know understand linux-2.4.20-nfs-readeof.patch, so I merged it
- netdump update (Dave Anderson)
- 64 bit pci &amp; elf loader fix (Mark &amp; Julie)
- nptl whitespace patches, folded into nptl patch (Arjan van de Ven)
- rediff linux-2.4.18-smallpatches.patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049709600">- merge NFS patches by Steve Dickson (blame me for NFS kmap_atomic patch)
- split x86 syscall stuff out into separate patch</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049536800">- fix nptl patch, now it boots</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049450400">- port linux-2.4.20 o1-nptl.patch from gingin
- rediff a few patches</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049277600">- update linux-modules-unsupported (with Arjan)
- fix up the list a second time to fix module dependencies</changelog><changelog author="Rik van Riel &lt;riel@redhat.com&gt;" date="1049191200">- copy -head into new AS3 branch
- remove i586 build
- remove 7.x compatibility (linux-2.4.9-fstat.patch)
- architecture patches get more breathing room (100 - 500)
- reserve patch numbers 1000 - 2000 for VM
- patch numbers 2000 - 5000 for bugfixes, changes and updates to
  existing drivers and filesystems
- remove inode reclaim patch (will be merged later as part of rmap)
- remove io priority scheduler (still experimental)
- remove nfs patches (linux-2.4.20-nfs-cto.patch,
  linux-2.4.20-nfs-access.patch &amp; linux-2.4.20-nfs-rdplus.patch)
- remove linux-2.4.18-gericom.patch
- update netdump from RH9 branch</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1048240800">- Added three NFS performance patches</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048240800">- add a timer for aging requests up</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048154400">- fix the sorting in the io elevator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1048068000">- remerge ext3 orlov allocator and enable
- more priority io elevator infrastructure work</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1047117600">- merge ext3 orlov allocator</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046772000">- go to 2.4.21-pre5-ac1
- split the rpm into a primary fileset and secondary (rare modules) fileset</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1046253600">- go to 2.4.21-pre4-ac6
- drop lots of patches
- trim changelog to not have 2000, 2001 and 2002 anymore</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045476000">- downgrade pwc webcam driver one notch to the last known working version
- work around vm livelock
- make the cciss driver not enable irq's in it's irq handler</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1045130400">- fix for shared statistic &lt; 0</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1045130400">- Signal fixes for LSB testsuite
- merge patch to fix init=/bin/sh
- 2.4.21-pre4-ac4 bugfixes (mostly IDE crashes)</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044784800">- merge 2.4.21-pre4-ac3 bugfixes</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1044352800">- Add ext3 fix for truncating negative i_blocks</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1044266400">- add oopsmeharder for debugging hard hangs</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1044266400">- merge rmap15d
- set the sbp2 command buffer to 64 elements instead of 8</changelog><changelog author="Arjan van de Ven &lt;arjanv@redhat.com&gt;" date="1043834400">- merge tcp stall fix from DaveM
- merge bugfixes from 2.4.21-pre4</changelog><changelog author="Steve Dickson &lt;SteveD@RedHat.com&gt;" date="1042452000">- Merge in the ACL and XATTR patches from the UL and BestBits trees.</changelog><changelog author="Stephen C. Tweedie &lt;sct@redhat.com&gt;" date="1042279200">- Merge in the LVM pvmove fix to current tree</changelog><changelog author="Benjamin LaHaise &lt;bcrl@redhat.com&gt;" date="1042020000">- add AMD Golem fixup</changelog></package>
<package pkgid="479608abb1aead869e383ca65e0529ebf3b8d470" name="kernel-module-xfs-2.4.21-32.0.1.EL.XFS" arch="src"><version epoch="1" ver="1.3.3" rel="1.SL"/><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1086170400">- repackaged to followup Fedora Core guidelines</changelog><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1081245600">- initial build</changelog></package>
<package pkgid="7e2e064485225d8127dbda8840c851e5e68e4d6f" name="kernel-module-xfs-2.4.21-37.EL.XFS" arch="src"><version epoch="1" ver="1.3.3" rel="1.SL"/><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1086170400">- repackaged to followup Fedora Core guidelines</changelog><changelog author="Jaroslaw Polok &lt;jaroslaw.polok@cern.ch&gt;" date="1081245600">- initial build</changelog></package>
<package pkgid="70bfc92db931fb4242eeedf9d6698da55306511e" name="xfsdump" arch="src"><version epoch="0" ver="2.2.21" rel="1"/></package>
<package pkgid="90e7bb79afdde3bffbbf7b024ab5a63e3bb15d68" name="xfsprogs" arch="src"><version epoch="0" ver="2.6.13" rel="1"/></package>
<package pkgid="28587d4b8d94676d33712b807e8172242ae9e9a9" name="krb5" arch="src"><version epoch="21" ver="1.9m" rel="LTS4x.4"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.9m-LTS4x.3" date="1152921600">- made the profile scripts be the right ones</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.9m-LTS4x.2" date="1152921600">- Removed programs (kcron, kx509) that worn't compiled with
the right libraries</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.9m-LTS4x.1" date="1152835200">- Moved things to 1.9m</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.9e-LTS4x.1" date="1147305600">- Moved things to 1.9e</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.9c-LTS4x.1" date="1144972800">- Moved things to 1.9c</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.8a-LTS4x.3" date="1125360000">- Fixed spec files so upgrades work correctly
- removed the login-fermi package</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.8a-LTS4x.2" date="1125360000">- Changed the check to see if you have kerberos tickets before doing aklog</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1117324800">- Added checked for AFS, and if so, do an aklog to the profile.d scripts</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1075766400">- Fixed some suid properties on files.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1073433600">- Changed everything to use a BuildRoot, so it works for LTS</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1071187200">- Upgraded it to version 1.8</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1068076800">- Put in kx509 and kxlist</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1066867200">- Put in the fixed ftpd, provided by Matt Crawford</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1046217600">- Upgraded the kerberos to Fermi Kerberos 1.7.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1038009600">- Changed the profile.d scripts.  They now add the path, whether the kerberos
  path, whether the it is already in the users path or not.  This is to fix
  the ssh problem, where /usr/krb5/bin is too early in the path.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1030406400">- Changed the name for the files in profile.d, so it doesn't conflict with
  RedHats  krb5-workstation.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1026345600">- Changed the spec file so that the names matched those of redhat's rpms.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1020729600">- Updated the rpm to 1.6.  This also added k5push, and new-portal-ticket</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1004659200">- I added kcroninit and kcommon to the rpm.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="998956800">- I upgraded the rpm to 1.3c</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="992476800">- I added the rpm krb-fermi-login rpm</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="990576000">- I changed the binaries to those of 1.3</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="989452800">- I changed the spec file again so that it only makes one rpm, instead of 
  three.  I also changed the binaries to those of 1.2.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="988848000">- I changed the spec file so that everything is done by hand.  This 
  isn't as efficient for future changes, but it makes sure that everything
  is put in it's proper place as expected.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="988675200">- took the spec file from MIT's krb5 program for RedHat Linux 5.1 and
  did some major rewritting.</changelog></package>
<package pkgid="a4d33c867d04e54703894ed957640665026cc4f9" name="pam_krb5" arch="src"><version epoch="0" ver="2.2.8f1" rel="1"/><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.8-1" date="1143676800">- don't try to validate creds in a password-changing situation, because the
  attempt will always fail unless the matching key is in the keytab, which
  should never be the case for the password-changing service (#187303, rbasch)
- if v4 has been disabled completely, go ahead and try to set 2b tokens
  because we're going to end up having to do that anyway (#182378)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.7-2" date="1142035200">- fixup man page conflicts in %install</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; - 2.2.6-2.2" date="1141862400">- don't use paths in man pages - avoids multilib conflicts</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.7-1" date="1140566400">- add v4 credential conversion for "use_shmem" and "external" cases (though
  it should be redundant with "use_shmem") (#182239)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.6-2" date="1139875200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.6-1" date="1139270400">- add a "krb4_use_as_req" option so that obtaining v4 creds kinit-style can
  be disabled completely (Hugo Meiland)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.5-1" date="1138320000">- don't log debug messages that we're skipping session setup/teardown unless
  debugging is enabled (#179037)
- try to build the module with -Bsymbolic if we can figure out how to do that</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1137542400">- include the NEWS file as documentation</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.4-1" date="1137456000">- fix reporting of the exact reason why a password change failed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.3-1" date="1135036800">- fix a compile problem caused by a missing #include (Jesse Keating)</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt; - 2.2.2-1.3" date="1134172800">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.2-1" date="1132617600">- don't leak the keytab descriptor during validation (#173681)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.1-1" date="1132099200">- update to 2.2.1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.0-2" date="1131753600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.0-1" date="1131753600">- update to 2.2.0</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.1.95-0" date="1128556800">- update to 2.1.95</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.1.2-1" date="1093910400">- update to 2.1.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.1.1-1" date="1087862400">- update to 2.1.1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.1.0-1" date="1082592000">- update to 2.1.0</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.0.11-1" date="1080086400">- update to 2.0.11</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.0.10-1" date="1079481600">- update to 2.0.10</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.0.9-1" date="1079481600">- update to 2.0.9</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.0.8-1" date="1079481600">- update to 2.0.8</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.0.7-1" date="1078963200">- update to 2.0.7</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.0.6-1" date="1077926400">- update to 2.0.6</changelog><changelog author="Harald Hoyer &lt;harald@redhat.com&gt; - 2.0.5-3" date="1077667200">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.0.5-2" date="1069804800">- actually changelog the update to 2.0.5</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.0.5-1" date="1069804800">- update to 2.0.5</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.0.4-1" date="1065830400">- update to 2.0.4</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.0.3-1" date="1064016000">- update to 2.0.3</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.0.2-1" date="1062806400">- update to 2.0.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.0.1-1" date="1060905600">- update to 2.0.1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.0-1" date="1060387200">- update to 2.0</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.60-1" date="1043971200">- fix uninitialized pointer crash reading cached return values</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.59-1" date="1043884800">- fix crash with per-user stashes and return values</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.58-1" date="1043798400">- fix configure to not link with both libk5crypto and libcrypto</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.57-1" date="1043712000">- force -fPIC
- add --with-moduledir, --with-krb5-libs, --with-krbafs-libs to configure
- add per-user stashes and return values</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.56-1" date="1022630400">- guess a default cell name
- fix what's hopefully the last parser bug</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.55-2" date="1021593600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.55-1" date="1017100800">- handle account management for expired accounts correctly</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.54-1" date="1016668800">- reorder configuration checks so that setting afs_cells will properly
  force krb4_convert on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.53-1" date="1016668800">- fix what's hopefully the last parser bug</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.52-1" date="1016496000">- apply patch from David Howells to add retain_tokens option</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.51-1" date="1015545600">- fix what's hopefully the last parser bug</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.50-3" date="1014508800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.50-2" date="1014249600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.50-1" date="1013817600">- documentation updates (no code changes)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.49-1" date="1013558400">- set PAM_USER using the user's parsed name, converted back to a local name
- add account management service (checks for key expiration and krb5_kuserok())
- handle account expiration errors</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.48-1" date="1012003200">- autoconf fixes</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.47-2" date="1004140800">- bump release number and rebuild to link with new version of krbafs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.47-1" date="1001462400">- fix parsing of options which have multiple whitespace-separated values,
  like afs_cells</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.46-1" date="999734400">- link with libresolv to get res_search, tip from Justin McNutt, who
  built it statically
- explicitly link with libdes425
- handle cases where getpwnam_r fails but still sets the result pointer
- if use_authtok is given and there is no authtok, error out</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.45-1" date="998956800">- set the default realm when a default realm is specified</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.44-1" date="998611200">- only use Kerberos error codes when there is no PAM error yet</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.43-1" date="998524800">- add minimum UID support (#52358)
- don't link pam_krb5 with libkrbafs
- make all options in krb5.conf available as PAM config arguments</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996624000">- merge patch from Chris Chiappa for building with Heimdal</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996019200">- note that we had to prepend the current directory to a given path in
  dlopen.c when we had to (noted by Onime Clement)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.42-1" date="995414400">- return PAM_NEW_AUTHTOK_REQD when attempts to get initial credentials
  fail with KRB5KDC_ERR_KEY_EXP (noted by Onime Clement)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994982400">- add info about accessing the CVS repository to the README
- parser cleanups (thanks to Dane Skow for a more complicated sample)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- buildprereq the krbafs-devel package</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994464000">- don't set forwardable and assorted other flags when getting password-
  changing service ticket (noted, and fix supplied, by Onime Clement)
- try __posix_getpwnam_r on Solaris before we try getpwnam_r, which may
  or may not be expecting the same number/type of arguments (noted by
  Onime Clement)
- use krb5_aname_to_localname to convert the principal to a login name
  and set PAM_USER to the result when authenticating
- some autoconf fixes for failure cases</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993600000">- use krb5_change_password() to change passwords</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992390400">- use getpwnam_r instead of getpwnam when available</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992044800">- cleanup some autoconf checks</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- don't call initialize_krb5_error_table() or initialize_ovk_error_table()
  if they're not found at compile-time (reported for RHL 6.x by Chris Riley)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991353600">- note that [pam] is still checked in addition to [appdefaults]
- note that AFS and Kerberos IV support requires working Kerberos IV
  configuration files (i.e., kinit -4 needs to work) (doc changes
  suggested by Martin Schulz)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991180800">- add max_timeout, timeout_shift, initial_timeout, and addressless options
  (patches from Simon Wilkinson)
- fix the README to document the [appdefaults] section instead of [pam]
- change example host and cell names in the README to use example domains</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- don't delete tokens unless we're also removing ticket files (report and
  patch from Sean Dilda)
- report initialization errors better</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988329600">- treat semicolons as a comment character, like hash marks (bug reported by
  Greg Francis at Gonzaga University)
- use the [:blank:] equivalence class to simplify the configuration file parser
- don't mess with the real environment
- implement mostly-complete aging support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986688000">- tweak the man page (can't use italics and bold simultaneously)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986601600">- restore the default TGS value (#35015)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985824000">- fix a debug message
- fix uninitialized pointer error</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985651200">- don't fail to fixup the krb5 ccache if something goes wrong obtaining
  v4 credentials or creating a krb4 ticket file (#33262)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- fixup the man page
- log return code from k_setpag() when debugging
- create credentials and get tokens when setcred is called for REINITIALIZE</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985219200">- don't twiddle ownerships until after we get AFS tokens
- use the current time instead of the issue time when storing v4 creds, since
  we don't know the issuing host's byte order
- depend on a PAM development header again instead of pam-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- add a separate config file parser for compatibility with settings that
  predate the appdefault API
- use a version script under Linux to avoid polluting the global namespace
- don't have a default for afs_cells
- need to close the file when we succeed in fixing permissions (noted by
  jlkatz@eos.ncsu.edu)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985046400">- use the appdefault API to read krb5.conf if available
- create v4 tickets in such a way as to allow 1.2.2 to not think there's
  something fishy going on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- don't log unknown user names to syslog -- they might be sensitive information</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="981763200">- handle cases where krb5_init_context() fails</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979776000">- be more careful around memory allocation (fixes from David J. MacKenzie)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979603200">- no fair trying to make me authenticate '(null)'</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975715200">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973728000">- only try to delete ccache files once
- ignore extra data in v4 TGTs, but log that we got some
- require "validate" to be true to try validating, and fail if validation fails</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972000000">- catch and ignore errors reading keys from the keytab (for xscreensaver, vlock)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971913600">- fix prompting when the module's first in the stack and the user does not have
  a corresponding principal in the local realm
- properly implement TGT validation
- change a few non-error status messages into debugging messages
- sync the README and the various man pages up</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- fix "use_authtok" logic when password was not set by previous module
- require pam-devel to build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967420800">- fix errors with multiple addresses (#16847)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="966470400">- change summary</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="965952000">- fix handling of null passwords</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- fixes for Solaris 7 from Trevor Schroeder</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- add Seth Vidal's no_user_check flag
- document no_user_check and skip_first_pass options in the man pages
- rebuild against Kerberos 5 1.2 (release 15)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960249600">- move man pages to /usr/share/man</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="958608000">- Make errors chown()ing ccache files non-fatal if (getuid() != 0), suggested
  by Steve Langasek.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="958435200">- Attempt to get initial Kerberos IV credentials when we get Kerberos 5 creds</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="956275200">- Chris Chiappa's modifications for customizing the ccache directory</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="956188800">- Mark Dawson's fix for krb4_convert not being forced on when afs_cells defined</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="953856000">- fix problem with leftover ticket files after multiple setcred() calls</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="953596800">- add proper copyright statements
- save password for modules later in the stack</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="952128000">- clean up prompter</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="952041600">- add krbafs as a requirement</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="949708800">- pick up non-afs PAM config files again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="949536000">- autoconf and putenv() fixes for broken apps
- fix for compressed man pages</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="947894400">- tweak passwd, su, and vlock configuration files</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="947289600">- added both modules to spec file</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="945907200">- adapted the original spec file from pam_ldap</changelog></package>
<package pkgid="22fb34adda8125e70953cfc7ee8a8bb11f35aa2a" name="openssh" arch="src"><version epoch="0" ver="3.9p1" rel="8.SLF.3.16"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.16" date="1156896000">- Uncommented out the fermi patches (60 and 61)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.16" date="1156896000">- Built to do aklog with the --with-afs-krb5 config option</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.15" date="1156377600">- Commented out patches 60 and 61 because they are fermi specific</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.14" date="1156377600">- Renumbered 50+ and 60+ patches
- Added Patch52 for machines with multiple IP addresses
- Added Patch53 for turning X11 forwarding on</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.13" date="1156204800">- Uncommented out patch52 (sshd_config kerberos only)
- Uncommentd out patch 53 (pam.d/sshd use cryptocard pam)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.13" date="1156204800">- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- Added patches to have pam.d/sshd use the cryptocard pam (commented out)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.3.12" date="1155254400">- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have sshd_config be kerberos only (commented out)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SL.4.12" date="1145059200">- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="567ad514c6fcb7a64f1188d85884e13985ca71ef" name="krb5-fermi-config" arch="src"><version epoch="0" ver="1.15" rel="1.LTS3"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.10-1.LTS3" date="1123286400">- updated the krb5.conf.template file to version 1.10</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.9-4.LTS" date="1099440000">- added config-krb5.conf.aklog and /etc/sysconfig/krb5.conf.aklog
- added triggers to run config-krb5.conf.aklog with AFS triggers</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.9-3.LTS" date="1096675200">- fixed script that says it's 1.8a
- made the rpm a noarch</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.9-1.LTS" date="1096416000">- updated to 1.9</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1081296000">- added .sdsc.edu to the FNAL.GOV realm</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1081296000">- added .sdsc.edu to the FNAL.GOV realm</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1080950400">- Changed krb5.conf.template to put PAM section at top.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1076371200">- Fixed it so that it no longer moves the current krb5.conf out of the way
if it does not have to.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1074297600">- Updated to krb5conf 1.8a</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1068595200">- Put back in the krb.conf, but with proper settings, and triggers</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1065312000">- Cleaned out krb.conf so it quits messing things up.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1065312000">- Converted to krb5conf 1.7.  I had missed a few things the first time</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1064534400">- Added triggers for the xinetd configs</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1049760000">- Took out the check that took krb.conf completely out.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1049328000">- Took /etc/krb.conf out</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1028937600">- Changed the requires, put in a check before it does ssh config</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1022284800">- Fixed a bug in the krb5.conf template (removed two 4's)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1020816000">- Made changes to the config xinetd script</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1020729600">- Configured to use the krb5conf v1_6 stuff</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1004054400">- Changed spec file so that it moves the /etc/krb5.conf file</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1004054400">- Changed the krb5.conf.template file so that the Pam part was first, 
also lengthened ticket time
- Edited the spec file so that it doesn't automatically move the /etc/krb5.conf file</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1002067200">- Made changes for pam usage in krb.conf and krb5.conf
- Also removed the linking of /usr/krb5 and /usr/kerberos</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="998956800">- Upgraded from krb5conf 1.5.  Also put in changes for xinetd.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="992390400">- Made improvements to the makehostkeys script.  I also have it check 
  for the varias files (sshd_config, services) before modifying them.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="991785600">- The config-inetd.conf script has been changed to look for services
  that have a kerberos equal.  If these services were originally turned
  off, then the kerberized version is turned off.  I also took out the
  keytab-convert program, as this is dependant on one particular flavor
  of fermi kerberos.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="990576000">- I added the keytab-convert program into the config rpm, with it's
  corresponding manpage.  It will also be in the normal kerberos rpm
  but in the bin area.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="990489600">- I changed things to the version 1.4.  I also added the config-sshd_config
  script, as well as the config-hostkeys script.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="989452800">- I finished with the config-services and config-inetd.conf scripts.
  I also changed how the /usr/krb5 and /usr/kerberos were linked.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="988848000">- I put the raw scripts into the package from Fermi.  These will
  need to be rewritten so that they don't depend on Fermi packages.</changelog></package>
<package pkgid="472517ddbd5e0f68421964f26db4b0fc51eebd0e" name="krb5-fermi-krb5.conf" arch="src"><version epoch="0" ver="1.15" rel="1.LTS3"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.15-1.LTS3" date="1157068800">- updated the krb5.conf.template file to version 1.15</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.10-1.LTS3" date="1123286400">- updated the krb5.conf.template file to version 1.10</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.9-3.LTS" date="1096675200">- fixed script that says it's 1.8a
- made the rpm a noarch</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 1.9-1.LTS" date="1096416000">- updated to 1.9</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1081296000">- added .sdsc.edu to the FNAL.GOV realm</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1080950400">- Changed krb5.conf.template to put PAM section at top.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1076371200">- Fixed it so that it no longer moves the current krb5.conf out of the way
if it does not have to.</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt;" date="1065398400">- Created krb5-fermi-krb5.conf from krb5-fermi-config.</changelog></package>
<package pkgid="d7e012216f71115f368147a8541b44d4918aba0a" name="zz_sshd_aklog" arch="src"><version epoch="0" ver="3.9" rel="2"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9-2" date="1156377600">- Changed /etc/ssh/sshd_conf to /etc/ssh/sshd_config</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9-1" date="1156204800">- Changed it so that it applies to the 3.9 release</changelog></package>
<package pkgid="c83df71dd012f820ab434b673870a6b47edc4b7c" name="zz_sshd_pam" arch="src"><version epoch="0" ver="3.9" rel="2"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9-2" date="1156377600">- Changed /etc/ssh/sshd_conf to /etc/ssh/sshd_config</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9-1" date="1156204800">- First go round</changelog></package>
<package pkgid="0a502c692d63740c84a43ec851208a5a3750f078" name="pam_krb5" arch="src"><version epoch="0" ver="2.2.8" rel="2"/><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.8-1" date="1143676800">- don't try to validate creds in a password-changing situation, because the
  attempt will always fail unless the matching key is in the keytab, which
  should never be the case for the password-changing service (#187303, rbasch)
- if v4 has been disabled completely, go ahead and try to set 2b tokens
  because we're going to end up having to do that anyway (#182378)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.7-2" date="1142035200">- fixup man page conflicts in %install</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; - 2.2.6-2.2" date="1141862400">- don't use paths in man pages - avoids multilib conflicts</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.7-1" date="1140566400">- add v4 credential conversion for "use_shmem" and "external" cases (though
  it should be redundant with "use_shmem") (#182239)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.6-2" date="1139875200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.6-1" date="1139270400">- add a "krb4_use_as_req" option so that obtaining v4 creds kinit-style can
  be disabled completely (Hugo Meiland)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.5-1" date="1138320000">- don't log debug messages that we're skipping session setup/teardown unless
  debugging is enabled (#179037)
- try to build the module with -Bsymbolic if we can figure out how to do that</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1137542400">- include the NEWS file as documentation</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.4-1" date="1137456000">- fix reporting of the exact reason why a password change failed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.3-1" date="1135036800">- fix a compile problem caused by a missing #include (Jesse Keating)</changelog><changelog author="Jesse Keating &lt;jkeating@redhat.com&gt; - 2.2.2-1.3" date="1134172800">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.2-1" date="1132617600">- don't leak the keytab descriptor during validation (#173681)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.1-1" date="1132099200">- update to 2.2.1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.0-2" date="1131753600">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.2.0-1" date="1131753600">- update to 2.2.0</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.1.95-0" date="1128556800">- update to 2.1.95</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.1.2-1" date="1093910400">- update to 2.1.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.1.1-1" date="1087862400">- update to 2.1.1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.1.0-1" date="1082592000">- update to 2.1.0</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.0.11-1" date="1080086400">- update to 2.0.11</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.0.10-1" date="1079481600">- update to 2.0.10</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.0.9-1" date="1079481600">- update to 2.0.9</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.0.8-1" date="1079481600">- update to 2.0.8</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.0.7-1" date="1078963200">- update to 2.0.7</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 2.0.6-1" date="1077926400">- update to 2.0.6</changelog><changelog author="Harald Hoyer &lt;harald@redhat.com&gt; - 2.0.5-3" date="1077667200">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.0.5-2" date="1069804800">- actually changelog the update to 2.0.5</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.0.5-1" date="1069804800">- update to 2.0.5</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.0.4-1" date="1065830400">- update to 2.0.4</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.0.3-1" date="1064016000">- update to 2.0.3</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.0.2-1" date="1062806400">- update to 2.0.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.0.1-1" date="1060905600">- update to 2.0.1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.0-1" date="1060387200">- update to 2.0</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.60-1" date="1043971200">- fix uninitialized pointer crash reading cached return values</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.59-1" date="1043884800">- fix crash with per-user stashes and return values</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.58-1" date="1043798400">- fix configure to not link with both libk5crypto and libcrypto</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.57-1" date="1043712000">- force -fPIC
- add --with-moduledir, --with-krb5-libs, --with-krbafs-libs to configure
- add per-user stashes and return values</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.56-1" date="1022630400">- guess a default cell name
- fix what's hopefully the last parser bug</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.55-2" date="1021593600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.55-1" date="1017100800">- handle account management for expired accounts correctly</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.54-1" date="1016668800">- reorder configuration checks so that setting afs_cells will properly
  force krb4_convert on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.53-1" date="1016668800">- fix what's hopefully the last parser bug</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.52-1" date="1016496000">- apply patch from David Howells to add retain_tokens option</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.51-1" date="1015545600">- fix what's hopefully the last parser bug</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.50-3" date="1014508800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.50-2" date="1014249600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.50-1" date="1013817600">- documentation updates (no code changes)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.49-1" date="1013558400">- set PAM_USER using the user's parsed name, converted back to a local name
- add account management service (checks for key expiration and krb5_kuserok())
- handle account expiration errors</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.48-1" date="1012003200">- autoconf fixes</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.47-2" date="1004140800">- bump release number and rebuild to link with new version of krbafs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.47-1" date="1001462400">- fix parsing of options which have multiple whitespace-separated values,
  like afs_cells</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.46-1" date="999734400">- link with libresolv to get res_search, tip from Justin McNutt, who
  built it statically
- explicitly link with libdes425
- handle cases where getpwnam_r fails but still sets the result pointer
- if use_authtok is given and there is no authtok, error out</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.45-1" date="998956800">- set the default realm when a default realm is specified</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.44-1" date="998611200">- only use Kerberos error codes when there is no PAM error yet</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.43-1" date="998524800">- add minimum UID support (#52358)
- don't link pam_krb5 with libkrbafs
- make all options in krb5.conf available as PAM config arguments</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996624000">- merge patch from Chris Chiappa for building with Heimdal</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996019200">- note that we had to prepend the current directory to a given path in
  dlopen.c when we had to (noted by Onime Clement)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.42-1" date="995414400">- return PAM_NEW_AUTHTOK_REQD when attempts to get initial credentials
  fail with KRB5KDC_ERR_KEY_EXP (noted by Onime Clement)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994982400">- add info about accessing the CVS repository to the README
- parser cleanups (thanks to Dane Skow for a more complicated sample)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- buildprereq the krbafs-devel package</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994464000">- don't set forwardable and assorted other flags when getting password-
  changing service ticket (noted, and fix supplied, by Onime Clement)
- try __posix_getpwnam_r on Solaris before we try getpwnam_r, which may
  or may not be expecting the same number/type of arguments (noted by
  Onime Clement)
- use krb5_aname_to_localname to convert the principal to a login name
  and set PAM_USER to the result when authenticating
- some autoconf fixes for failure cases</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993600000">- use krb5_change_password() to change passwords</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992390400">- use getpwnam_r instead of getpwnam when available</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992044800">- cleanup some autoconf checks</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- don't call initialize_krb5_error_table() or initialize_ovk_error_table()
  if they're not found at compile-time (reported for RHL 6.x by Chris Riley)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991353600">- note that [pam] is still checked in addition to [appdefaults]
- note that AFS and Kerberos IV support requires working Kerberos IV
  configuration files (i.e., kinit -4 needs to work) (doc changes
  suggested by Martin Schulz)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991180800">- add max_timeout, timeout_shift, initial_timeout, and addressless options
  (patches from Simon Wilkinson)
- fix the README to document the [appdefaults] section instead of [pam]
- change example host and cell names in the README to use example domains</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- don't delete tokens unless we're also removing ticket files (report and
  patch from Sean Dilda)
- report initialization errors better</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988329600">- treat semicolons as a comment character, like hash marks (bug reported by
  Greg Francis at Gonzaga University)
- use the [:blank:] equivalence class to simplify the configuration file parser
- don't mess with the real environment
- implement mostly-complete aging support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986688000">- tweak the man page (can't use italics and bold simultaneously)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986601600">- restore the default TGS value (#35015)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985824000">- fix a debug message
- fix uninitialized pointer error</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985651200">- don't fail to fixup the krb5 ccache if something goes wrong obtaining
  v4 credentials or creating a krb4 ticket file (#33262)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- fixup the man page
- log return code from k_setpag() when debugging
- create credentials and get tokens when setcred is called for REINITIALIZE</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985219200">- don't twiddle ownerships until after we get AFS tokens
- use the current time instead of the issue time when storing v4 creds, since
  we don't know the issuing host's byte order
- depend on a PAM development header again instead of pam-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- add a separate config file parser for compatibility with settings that
  predate the appdefault API
- use a version script under Linux to avoid polluting the global namespace
- don't have a default for afs_cells
- need to close the file when we succeed in fixing permissions (noted by
  jlkatz@eos.ncsu.edu)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985046400">- use the appdefault API to read krb5.conf if available
- create v4 tickets in such a way as to allow 1.2.2 to not think there's
  something fishy going on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- don't log unknown user names to syslog -- they might be sensitive information</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="981763200">- handle cases where krb5_init_context() fails</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979776000">- be more careful around memory allocation (fixes from David J. MacKenzie)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979603200">- no fair trying to make me authenticate '(null)'</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975715200">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973728000">- only try to delete ccache files once
- ignore extra data in v4 TGTs, but log that we got some
- require "validate" to be true to try validating, and fail if validation fails</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972000000">- catch and ignore errors reading keys from the keytab (for xscreensaver, vlock)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971913600">- fix prompting when the module's first in the stack and the user does not have
  a corresponding principal in the local realm
- properly implement TGT validation
- change a few non-error status messages into debugging messages
- sync the README and the various man pages up</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- fix "use_authtok" logic when password was not set by previous module
- require pam-devel to build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967420800">- fix errors with multiple addresses (#16847)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="966470400">- change summary</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="965952000">- fix handling of null passwords</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- fixes for Solaris 7 from Trevor Schroeder</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- add Seth Vidal's no_user_check flag
- document no_user_check and skip_first_pass options in the man pages
- rebuild against Kerberos 5 1.2 (release 15)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960249600">- move man pages to /usr/share/man</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="958608000">- Make errors chown()ing ccache files non-fatal if (getuid() != 0), suggested
  by Steve Langasek.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="958435200">- Attempt to get initial Kerberos IV credentials when we get Kerberos 5 creds</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="956275200">- Chris Chiappa's modifications for customizing the ccache directory</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="956188800">- Mark Dawson's fix for krb4_convert not being forced on when afs_cells defined</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="953856000">- fix problem with leftover ticket files after multiple setcred() calls</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="953596800">- add proper copyright statements
- save password for modules later in the stack</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="952128000">- clean up prompter</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="952041600">- add krbafs as a requirement</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="949708800">- pick up non-afs PAM config files again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="949536000">- autoconf and putenv() fixes for broken apps
- fix for compressed man pages</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="947894400">- tweak passwd, su, and vlock configuration files</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="947289600">- added both modules to spec file</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="945907200">- adapted the original spec file from pam_ldap</changelog></package>
<package pkgid="eb6003db7c4f3d3792787c6cb7bd9615c865977e" name="openssh" arch="src"><version epoch="0" ver="3.9p1" rel="8.SLF.3.18"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.18" date="1159833600">- Built to do aklog with the --with-afs-krb5 config option
- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/
- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have pam.d/sshd use the cryptocard pam (fermi only)
- Added patches to have sshd_config be kerberos only (fermi only)
- Took out "KerberosGetAFSToken no" from sshd_config (fermi only)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.17" date="1159488000">- CVE-2006-5051 don't call cleanups from signal handler (#208347)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.16" date="1159401600">- CVE-2006-4924 prevent DoS on deattack detector code (#207955)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.15" date="1146528000">- fixed the scp-no-system patch to return zero from scp when copy
  succeeded (#190147)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.14" date="1141344000">- changed the audit patch so it tolerates kernels without auditing
  support</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.13" date="1140652800">- don't overwrite last argument of scp if multiple files are copied
  and it isn't a directory (patch by Bjorn Augustsson #178923)
- send final nonquery messages from pam_authenticate to client
  when kbd_int is used (#174995)
- removed another syslog call from signal handler (#180607)
- enable syslog in chroot by opening syslog fd permanently (#182281)
- fixed audit patch so it prevents login when auditing fails (#182930)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="de0a18accaf3f735174dc0336a85cc8a04dc1c76" name="zz_sshd_aklog" arch="src"><version epoch="0" ver="3.9" rel="4"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9-3" date="1156377600">- Rearranged when things got done</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9-2" date="1156377600">- Changed /etc/ssh/sshd_conf to /etc/ssh/sshd_config</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9-1" date="1156204800">- Changed it so that it applies to the 3.9 release</changelog></package>
<package pkgid="f987593a885bda3aa2286813388d88a0bf6e1628" name="openssh" arch="src"><version epoch="0" ver="3.9p1" rel="8.SLF.3.20"/><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.SLF.3.20" date="1163203200">- CVE-2006-5794 properly detect failed key verify in monitor (#21640)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.18" date="1159833600">- Built to do aklog with the --with-afs-krb5 config option
- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/
- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have pam.d/sshd use the cryptocard pam (fermi only)
- Added patches to have sshd_config be kerberos only (fermi only)
- Took out "KerberosGetAFSToken no" from sshd_config (fermi only)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.17" date="1159488000">- CVE-2006-5051 don't call cleanups from signal handler (#208347)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.16" date="1159401600">- CVE-2006-4924 prevent DoS on deattack detector code (#207955)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.15" date="1146528000">- fixed the scp-no-system patch to return zero from scp when copy
  succeeded (#190147)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.14" date="1141344000">- changed the audit patch so it tolerates kernels without auditing
  support</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.13" date="1140652800">- don't overwrite last argument of scp if multiple files are copied
  and it isn't a directory (patch by Bjorn Augustsson #178923)
- send final nonquery messages from pam_authenticate to client
  when kbd_int is used (#174995)
- removed another syslog call from signal handler (#180607)
- enable syslog in chroot by opening syslog fd permanently (#182281)
- fixed audit patch so it prevents login when auditing fails (#182930)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="a2bd5d30aa3d06b548a3175440ccb78c7cbea067" name="sendmail" arch="src"><version epoch="0" ver="8.12.11" rel="4.SLF3.6"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 8.12.11-4.SLF3.6" date="1165449600">- Put in MASQUERADE_AS(`fnal.gov') into the sendmail-redhat.mc
- Put in define(`confQUEUE_LA', `30')dnl into the sendmail-redhat.mc
- Put in define(`confREFUSE_LA', `50')dnlinto the sendmail-redhat.mc</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.6" date="1149897600">- second incarnation of patch for CVE-2006-1173 (VU#146718)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.5" date="1148428800">- fixed CVE-2006-1173 (VU#146718): possible denial of service issue caused by
  malformed multipart messages (#191203)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.4" date="1142899200">- fixed another time_t timeout problem in the VU patch in usersmtp.c</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.3" date="1142726400">- fixed adaption failure in VU#834865</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.2" date="1142035200">- fixed VU#834865 (#184465)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.1.1" date="1116028800">- enabled _FFR_DEAL_WITH_ERROR_SSL to stop read error messages on saturated
  networks (#146635), thanks to Kevin Krafthefer for the hint</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3.1" date="1088640000">- fixed init script to not complain missing sendmail-cf package (#126975)
- better message in /etc/mail/Makefile for missing sendmail-cf package.</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-4.RHEL3" date="1088035200">- made /etc/mail/Makefile complain missing sendmail-cf package (#123348)
- moved back to /usr/share/ssl/certs as certificate directory (commented out)
  (#125795)
- fixed ownership of %{_includedir}/libmilter (#73977)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-3.3" date="1084492800">- added trigger to reenable sendmail after update from 8.12.10</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-3" date="1077235200">- RH3.0E version: sasl1, no pie, old_setup (provide /etc/aliases)
- new switches for pie and old_setup</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-2.1" date="1076025600">- new Sendmail.conf for sasl1 (#114726)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-2" date="1075334400">- added information for saslauthd and AUTH (#113463)
- fixed STATUS_FILE in sendmail-redhat.mc (#114302)
- reset mta after update if mta was sendmail (#114257)
- enabled pie for ia64 again</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-1.3" date="1075161600">- removed /etc/aliases (now in setup)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-1.2" date="1074816000">- /usr/lib/sendmail is in alternatives, now
- removed trailing / from stdir
- fixed define for STATUS_FILE</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-1.1" date="1074729600">- disabled pie for ia64</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.11-1" date="1074643200">- new version 8.12.11
- pie</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.10-7" date="1073952000">- fc2 version (with sasl2)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 8.12.10-6" date="1073952000">- reverted to sasl1 for 3.0E: added with_sasl1
- spec file cleanup
- new location for statistics file (/var/log/)</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1071446400">- Fix download url.</changelog><changelog author="Jeff Johnson &lt;jbj@jbj.org&gt; 8.12.10-5" date="1071360000">- rebuild against db-4.2.52.</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1071187200">- fix pam alternatives handling
- add patch from Jakub Jelinek for PIE</changelog><changelog author="Karsten Hopp &lt;karsten@redhat.de&gt; 8.12.10-3" date="1070668800">- fix usage of RPM_OPT_FLAGS variable in spec file
- add makecert.sh script to -doc subpackage
- add cert paths to sendmail.mc</changelog><changelog author="Karsten Hopp &lt;karsten@redhat.de&gt; " date="1069891200">- fix alternatives (#109313)
- enable TLS</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1067299200">- add some more system account entries into /etc/aliases
- add example for a mixed IPv6/IPv4 setup</changelog><changelog author="Harald Hoyer &lt;harald@redhat.de&gt; 8.12.10-2" date="1067040000">- added with_ options</changelog><changelog author="Jeff Johnson &lt;jbj@jbj.org&gt; 8.12.10-1.2" date="1064534400">- rebuild against db-4.2.42.</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1063929600">- update to 8.12.10</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1063843200">- add security patches for CAN-2003-0694 and CAN-2003-0681</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1062460800">- move debug information from sendmail into debuginfo rpm
- on %post make sure /etc/aliases.db and /etc/mail/*.db is correctly
  owned by root
- do not set confTRUSTED_USER to smmsp in sendmail-redhat.mc</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1060387200">- run "make -C /etc/mail" (maybe generating new sendmail.cf, then newaliases
- added $SENDMAIL_OPTARG that could be set by /etc/sysconfig/sendmail #99224</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1059609600">- adjust rpm license tag to say "Sendmail"</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1057363200">- enable pie only for a few archs
- enable full optims for s390 again, compiler seems to be fixed</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1057017600">- apply patch from Ulrich Drepper to support -pie</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1054425600">- make init script more robust #91879</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1052697600">- sendmail-cf requires m4, #90513</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 8.12.9-6" date="1052524800">- move Sendmail.conf from /usr/lib/sasl to /usr/lib/sasl2 and change the
  default pwcheck method to "saslauthd"</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 8.12.9-5" date="1052179200">- configure to use libsasl2 instead of libsasl to avoid linking with both
  (we also link to libldap, which now uses libsasl2)
- link with -ldb instead of -ldb-4.0 on all releases after RHL 7.3 instead
  of just 7.3 (all versions of db4-devel thereafter are expected to provide
  the right linking setup)</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1050451200">- add a "umask 022" before building the *.cf files in /etc/mail/Makefile</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1049500800">- mark /etc/mail/Makefile as config(noreplace) #87688
- mark /etc/pam.d/smtp as config(noreplace) #87731</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1049068800">- update to 8.12.9</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048723200">- call make with the target "all" #86005
- add start/stop/restart as Makefile targets
- add another security patch</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1046908800">- add correct db4-devel requirements for newer releases
- completely re-do many ifdef code in the spec-file
- fix some issues building for older RHL releases</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1046131200">- rebuilt</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1046131200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1046131200">- update to 8.12.8</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1045008000">- rebuilt</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1043280000">- add a confTRUSTED_USER line into sendmail.mc, submit.mc is already ok
- add patch from sendmail.org for cf/m4/proto.m4</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1042502400">- do not reject all numeric login names if hesiod support is
  compiled in.   #80060
- remove reference to non-existing man-pages #74552</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1042416000">- sendmail-8.12.7-etrn.patch from Jos Vos &lt;jos@xos.nl&gt;
- submit.mc: enable "use_ct_file" by default  #80519
- add _FFR_MILTER_ROOT_UNSAFE  #78223</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1042329600">- update to 8.12.7
- hack to make lib64 version work
- downgrade s390 optims to make it compile</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1041897600">- add openssl-devel as a build-time requirement
- preprocess the config file to add the right version of %{_lib}
- add kerberos -I and -L flags to build configuration, needed for newer
  versions of libssl</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1039651200">- always have a queue run interval for sm-msp-queue   #81424
- Jos Vos suggests adding another variable for sm-client queue-run</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1038873600">- add the following changes from Adrian Havill &lt;havill@redhat.com&gt;
  to our default sendmail.mc file:
	- added commented-out-by-default common AUTH/SSL examples
	- updated m4 example and rpm reference
	- added more comment documentation
	- add commented out confAUTO_REBUILD example
	- improve description about MASQUERADE_AS</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1037664000">- add to submit.mc: define(`_MTA_HOST_', `[127.0.0.1]')
  to deliver directly to localhost IP instead of going through DNS
- submit.mc: exchange msp and use_ct_file to better enable it
- do not undefine UUCP_RELAY and BITNET_RELAY
- sendmail.mc: use LOCAL_DOMAIN instead of "Cw" directly
- sendmail.mc: add commented out MASQUERADE_AS example
- re-enable DAEMON variable for now</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1037145600">- remove absolute path names from the PAM configuration, allowing it to be
  used by any arch on a multilib system</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1036368000">- fix mailman alias  #75129</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1036281600">- update to 8.12.6</changelog><changelog author="Phil Knirsch &lt;pknirsch@redhat.com&gt; 8.12.5-7.2" date="1033776000">- Drop optflags to default to build correctly on s390(x).</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 8.12.5-7.1" date="1031875200">- Added fix to build on x86_64</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1030665600">- clean up some specfile cruft
- add more pseudo accounts to /etc/aliases</changelog><changelog author="Phil Knirsch &lt;pknirsch@redhat.com&gt;" date="1027641600">- Only generate new cf files if the /usr/share/sendmail-cf/m4/cf.m4 exists.</changelog><changelog author="Phil Knirsch &lt;pknirsch@redhat.com&gt;" date="1027555200">- Changed the behaviour in /etc/mail/Makefile to generate the sendmail.cf and
  submit.cf from the mc files if they changed.
- Added a small README.redhat that descibed the new mc file behaviour and the
  split into sendmail.cf and submit.cf.</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1027555200">- suggestions form Stephane Lentz:
	- add correct include statement into submit.mc (like sendmail.mc)
	- add commented out further suggestions into submit.mc
	- disable ident lookups</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1026432000">- fix initscript for the second daemon and pidfile location #67910</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1025568000">- update to 8.12.5</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1025222400">- add further queue runs, slight spec-file cleanups</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1023840000">- update to 8.12.4, adjust smrsh patch</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1022198400">- automated rebuild</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1018742400">- update to 8.12.3</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1017187200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1017100800">- fix alternatives --remove  #61737
- add sendmail/SECURITY as docu #61870, #61545</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1016668800">- add libsm.a    #61270
- change from /etc/sendmail.cf to /etc/mail/sendmail.cf
- add milter patch</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="1016064000">- ignore DAEMON=no; that configuration no longer functions</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1016064000">- make sure more version information is in the cf file #54418
- do not use "-b" flag when patching in spec file
- require newer chkconfig version #61035
- fix preun script #60880
- add TMPF to access file creation #60956</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1015718400">- mv include files to /usr/include/libmilter/ #60795
- do not use "-f" option to virtusertable #60196
- ad an example smarthost entry to config file #58298</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 8.12.2-5" date="1015632000">- use alternatives --initscript support
- run chkconfig --add before alternatives</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 8.12.2-3" date="1014940800">- run alternatives --remove in %preun
- add some prereqs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 8.12.2-2" date="1014681600">- fix smmsp useradd invocation in %pre
- switch back to db3 for storing db files</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 8.12.2-1" date="1014249600">- update to 8.12.2 (adds STARTTLS support without need for sfio)
- don't forcibly strip binaries; let the build root handle it
- add creation of the smmsp account (51/51) in %pre
- enable hesiod map support
- modify default config to use an MSP
- comment out 'O AutoRebuildAliases' in %post, otherwise sendmail will
  fail to restart on upgrades</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1014249600">- add proper ifdefs around new alternative stuff to also be able
  to build this for older releases</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 8.11.6-12" date="1012608000">- %triggerpostun on older versions to make sure alternatives work on
  upgrades</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 8.11.6-11" date="1012521600">- clean up alternatives somewhat, provide /usr/sbin/sendmail &amp; friends</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 8.11.6-10" date="1012521600">- Use alternatives</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1011744000">- fix quotation in spec-file</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1010707200">- integrate ugly logic to compile this src.rpm also on older Red Hat
  Linux releases
- clean up spec file and patches a bit
- add db4 support</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1010620800">- fix another path to correct docu
- include sendmail/README in the docu
- compile with -D_FFR_WORKAROUND_BROKEN_NAMESERVERS, but do not
  enable this at runtime
- devel subpackage files owned by root now</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1007769600">- change "-q" to "-s" as option to make #57216
- move milter lib into separate "devel" sub-package
- add include files to devel sub-package #56064
- fix pointer in access file to docu #54351</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1000166400">- add libmilter docu
- add support for userdb to /etc/mail/Makefile
- use "btree" database files if a userdb is used
- buildrequires tcp_wrappers</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="999302400">- fix libmilter support
- fix init script to use /etc/mail/Makefile #52932</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="998784000">- add libmilter library</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="998611200">- update to 8.11.6
- correctly use /etc/mail/statistics</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="997401600">- change init script back to older conventions #51297
- remove DoS patch, not needed anymore #51247</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="997142400">- add option '-t' to procmail for local mail delivery</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="996019200">- point to the map files in sendmail.cf as pointed out by
  David Beveridge &lt;David@beveridge.com&gt;</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="995932800">- add build requires #49695
- do not call "userdel"</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="994809600">- change sendmail.cf to "noreplace"</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="991958400">- update to 8.11.4</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="989452800">- update to 8.11.3
- add "localhost.localdomain" to the list of hostnames accepted
  for local delivery "Cw" in /etc/mail/sendmail.mc
- add patches from Pekka Savola &lt;pekkas@netcore.fi&gt;
	- Enable IPv6 at compile time, patch for glibc 2.2 from PLD
	- Add a commented-out IPv6 daemon .mc line to sendmail.mc
	- buildrequire: openldap-devel, cyrus-sasl-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="983318400">- add noreplace for /etc/sysconfig/sendmail and /etc/mail/sendmail.mc</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="982800000">- add changes from Christopher McCrory &lt;chrismcc@pricegrabber.com&gt;:
	- prepare /etc/mail/Makefile for more maps not shipped with this rpm
	- changed sendmail.mc to include some more commented out options,
	  so that people are directly pointed at important options
	- add /etc/pam.d/smtp for AUTH
	- add FEATURE(use_ct_file) and /etc/mail/trusted-users</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="982368000">- don't obsolete postfix and exim, only conflict (for RHN purposes)</changelog><changelog author="Trond Eivind Glomsr&#xF8;d &lt;teg@redhat.com&gt;" date="982281600">- obsolete and conflict with exim and postfix</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="982195200">- fix devision by zero bug in #20395
- mv /usr/lib/sendmail-cf /usr/share/sendmail-cf</changelog><changelog author="Trond Eivind Glomsr&#xF8;d &lt;teg@redhat.com&gt;" date="981590400">- i18n tweaks to initscript</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="981590400">- aliases.db should be owned by group root</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="980380800">- prepare for startup-script translation</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="980294400">- enable daemon mode again, but only listen to the loopback device
  instead of all devices.
- do not include check.tar with old anti-spam rules</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="979344000">- fix configuration of /etc/aliases</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="978998400">- fix interoperation problems with communigate pro
- disable msa</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="978652800">- update to (security release) 8.11.2
- build also on RHL 6.x #16061
- include smrsh man-page #17901
- use the "-f" flag for makemap to preserve case for virtusertable
  and userdb in /etc/mail/Makefile - suggested by Harald Hoyer
- fix /usr/doc -&gt; usr/share/doc in docu #20611
- wrong path in sendmail.mc #20691
- tcp-wrapper support wasn't enabled correctly #21642
- do not expose user "root" when masquerading like in older releases #21643
- disable the VRFY and EXPN smtp commands #21801
- disable queue-runs for normal users (restrictqrun privacy flag)
- fix typo in sendmail.mc #21880, #22682
- disable daemon mode to see what needs fixing</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="970531200">- update to 8.11.1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968457600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="966988800">- apply fixes for LDAP maps being closed too soon</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="966297600">- provide /usr/lib/sasl/Sendmail.conf so that people know we can use it (#16064)</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="965692800">- enable listening on the smtp port again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="965433600">- fix "missing find_m4.sh" problem by defining M4=/usr/bin/m4 (#14767)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="965088000">- okay, enable LDAP support again
- enable SMTP auth support via Cyrus SASL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="964569600">- disable the LDAP support until we can remove the sendmail-&gt;OpenLDAP-&gt;perl dep
- fix prereq</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="964569600">- update to sendmail 8.11.0
- add LDAP support</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="964137600">- move initscript back</changelog><changelog author="Prospector &lt;bugzilla@redhat.com&gt;" date="963446400">- automatic rebuild</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="963187200">- require procmail
- add further aliases</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="963100800">- prereq init.d
- fix typo</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="962755200">- ignore error from useradd</changelog><changelog author="Than Ngo &lt;than@redhat.de&gt;" date="962409600">- FHS fixes
- /etc/rc.d/init.d -&gt; /etc/init.d
- fix initscript</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="961804800">- change to /usr/share/man</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="961632000">- turn off daemon behaviour by default</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="961372800">- rebuild, fix dependencies</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="960681600">- prereq /usr/sbin/useradd</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="958780800">- enable MAP_REGEX
- enable tcp_wrapper support</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="958694400">- fix etc/mail/aliases -&gt; /etc/aliases in sendmail-redhat.mc</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="957398400">- update to 8.10.1
- fix build without sendmail installed
- add 'mailnull' user</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="953164800">- update to 8.10.0
- remove compatiblity chkconfig links
- add a mailnull user for sendmail to use</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="950832000">- break the hard link for makemap and create it as a symlnk (#8223)</changelog><changelog author="Bernhard Rosenkr&#xE4;nzer &lt;bero@redhat.com&gt;" date="950832000">- Fix location of mailertable (Bug #6035)</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="949795200">- fixes for non-root builds (#8178)</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;" date="949536000">- change perms on /etc/sysconfig/sendmail from 0755 to 0644
- allow compressed man-pages</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="944179200">- add patch to prevent the DoS when rebuilding aliases</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="936230400">- install man pages, not groff output (#3746).
- use dnl not '#' in m4 comment (#3749).
- add FEATURE(mailtertable) to the config -- example file needs this (#4649).
- use db2 not db1.</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="936144000">- add 127.0.0.1 to /etc/mail/access to avoid IDENT: relay problem (#3178).</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="936144000">- chkconfig --del in preun, not postun (#3982)</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt;" date="934848000">- initscript munging</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="930960000">- fixed typo bug in comment in the default .mc file (#2812)</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="924566400">- fox the awk scripts in the postinstall
- enable FEATURE(accept_unresolvable_domains) by default to make laptop
  users happy.</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="924480000">- make the redhat.mc be a separate source files. Sanitize patches that used
  to touch it.
- install redhat.mc as /etc/sendmail.mc so that people can easily modify
  their sendmail.cf configurations.</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="923356800">- fixed virtusertable patch
- make smrsh look into /etc/smrsh</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="922752000">- remove noreplace attr from sednmail.cf.</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="922406400">- provide a more sane /etc/mail/access default config file
- use makemap to initializa the empty databases, not touch
- added a small, but helpful /etc/mail/Makefile</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="922147200">- correxct dangling symlinks.
- check for map file existence in %post.</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt; " date="922060800">- auto rebuild in the new build environment (release 3)</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="921888000">- improved 8.9.3 config from Mike McHenry &lt;mmchen@minn.net&gt;</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="921628800">- version 8.9.3</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="914976000">- build for 6.0
- use the libdb1 stuff correctly</changelog><changelog author="Michael K. Johnson &lt;johnsonm@redhat.com&gt;" date="906422400">- Allow empty QUEUE in /etc/sysconfig/sendmail for those who
  want to run sendmail in daemon mode without processing the
  queue regularly.</changelog><changelog author="Michael K. Johnson &lt;johnsonm@redhat.com&gt;" date="906076800">- /etc/sysconfig/sendmail</changelog><changelog author="Jeff Johnson &lt;jbj@redhat.com&gt;" date="904348800">- recompile statically linked binary for 5.2/sparc</changelog><changelog author="Prospector System &lt;bugs@redhat.com&gt;" date="894412800">- translations modified for de, fr, tr</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="894153600">- enhanced initscripts</changelog><changelog author="Cristian Gafton &lt;gafton@redhat.com&gt;" date="894067200">- added a rmail patch</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="878169600">- argh!  Fixed some of the db1 handling that had to be added for glibc 2.1</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="877737600">- added support for db1 on SPARC</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="877046400">- added chkconfig support
- various spec file cleanups
- changed group to Networking/Daemons (from Daemons).  Sure, it runs on
  non networked systems, but who really *needs* it then?</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="876355200">- made /etc/mail/deny.db a ghost
- removed preun that used to remove deny.db (ghost handles that now)
- NOTE: upgrading from the sendmail packages in 4.8, 4.8.1, and possibly
  4.9 (all Red Hat betas between 4.2 and 5.0) could cause problems.  You
  may need to do a makemap in /etc/mail and a newaliases after upgrading
  from those packages.  Upgrading from 4.2 or prior should be fine.</changelog><changelog author="Erik Troan &lt;ewt@redhat.com&gt;" date="876182400">- made aliases.db a ghost</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="875059200">- fixed preuninstall script to handle aliases.db on upgrades properly</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="874368000">- fixed post-install output and changed /var/spool/mqueue to 755</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="874022400">- fixed /usr/lib/sendmail-cf paths</changelog><changelog author="Donnie Barnes &lt;djb@redhat.com&gt;" date="873849600">- updated to 8.8.7
- added some spam filtration
- combined some makefile patches
- added BuildRoot support</changelog><changelog author="Erik Troan &lt;ewt@redhat.com&gt;" date="873331200">- marked initscript symlinks as missingok
- run newalises after creating /var/spool/mqueue</changelog><changelog author="Erik Troan &lt;ewt@redhat.com&gt;" date="866160000">- built against glibc, udated release to -6 (skipped -5!)</changelog><changelog author="Erik Troan &lt;ewt@redhat.com&gt;" date="859939200">- Added -nsl on the Alpha (for glibc to provide NIS functions).</changelog><changelog author="Erik Troan &lt;ewt@redhat.com&gt;" date="857433600">- Added nis support.</changelog></package>
<package pkgid="e4074bfe12a5093b08381886003c95fb73a37fbb" name="openssh" arch="src"><version epoch="0" ver="3.9p1" rel="8.SLF.3.21"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.21" date="1179273600">- Rebuilt from the latest errata 3.9p1-8.RHEL4.20</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.SLF.3.20" date="1163203200">- CVE-2006-5794 properly detect failed key verify in monitor (#21640)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.19" date="1160524800">- add support for hashed known_hosts file (#162681)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.18" date="1160092800">- fixed client behaviour when remote program generates large output (#184357)
- don't report duplicate syslog messages, use correct local time (#203671)
- don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)
- fix audit patch to include loginrec.h in auth.c (#193710)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.18" date="1159833600">- Built to do aklog with the --with-afs-krb5 config option
- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/
- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have pam.d/sshd use the cryptocard pam (fermi only)
- Added patches to have sshd_config be kerberos only (fermi only)
- Took out "KerberosGetAFSToken no" from sshd_config (fermi only)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.17" date="1159488000">- CVE-2006-5051 don't call cleanups from signal handler (#208347)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.16" date="1159401600">- CVE-2006-4924 prevent DoS on deattack detector code (#207955)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.15" date="1146528000">- fixed the scp-no-system patch to return zero from scp when copy
  succeeded (#190147)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.14" date="1141344000">- changed the audit patch so it tolerates kernels without auditing
  support</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.13" date="1140652800">- don't overwrite last argument of scp if multiple files are copied
  and it isn't a directory (patch by Bjorn Augustsson #178923)
- send final nonquery messages from pam_authenticate to client
  when kbd_int is used (#174995)
- removed another syslog call from signal handler (#180607)
- enable syslog in chroot by opening syslog fd permanently (#182281)
- fixed audit patch so it prevents login when auditing fails (#182930)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>
<package pkgid="a18672f1106582907b2c45afe113d39d244ef384" name="openssh" arch="src"><version epoch="0" ver="3.9p1" rel="8.SLF.3.22"/><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.22" date="1179273600">- Removed the hpn11 patch</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.21" date="1179273600">- Rebuilt from the latest errata 3.9p1-8.RHEL4.20</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.SLF.3.20" date="1163203200">- CVE-2006-5794 properly detect failed key verify in monitor (#21640)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.19" date="1160524800">- add support for hashed known_hosts file (#162681)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.18" date="1160092800">- fixed client behaviour when remote program generates large output (#184357)
- don't report duplicate syslog messages, use correct local time (#203671)
- don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)
- fix audit patch to include loginrec.h in auth.c (#193710)</changelog><changelog author="Troy Dawson &lt;dawson@fnal.gov&gt; 3.9p1-8.SLF.3.18" date="1159833600">- Built to do aklog with the --with-afs-krb5 config option
- Added High Performance Networking patch from http://www.psc.edu/networking/projects/hpn-ssh/
  it was modified to work by Mark Mengal
- applied slightly modified patch to get older gssapi working.  
  got patch from ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/
- Turned PIE off to get it to compile on S.L. 3.0.x
- Added patches to have pam.d/sshd use the cryptocard pam (fermi only)
- Added patches to have sshd_config be kerberos only (fermi only)
- Took out "KerberosGetAFSToken no" from sshd_config (fermi only)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.17" date="1159488000">- CVE-2006-5051 don't call cleanups from signal handler (#208347)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.16" date="1159401600">- CVE-2006-4924 prevent DoS on deattack detector code (#207955)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.15" date="1146528000">- fixed the scp-no-system patch to return zero from scp when copy
  succeeded (#190147)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.14" date="1141344000">- changed the audit patch so it tolerates kernels without auditing
  support</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.13" date="1140652800">- don't overwrite last argument of scp if multiple files are copied
  and it isn't a directory (patch by Bjorn Augustsson #178923)
- send final nonquery messages from pam_authenticate to client
  when kbd_int is used (#174995)
- removed another syslog call from signal handler (#180607)
- enable syslog in chroot by opening syslog fd permanently (#182281)
- fixed audit patch so it prevents login when auditing fails (#182930)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.12" date="1135209600">- rebuild with updated gcc</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.11" date="1133913600">- add requires and buildrequires for audit-libs (#175082)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.10" date="1132617600">- don't use system() in scp (#170466)
- kill only the main daemon in the init script (#170468)
- add patch for user login auditing by Steve Grubb (#170568)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.9" date="1126137600">- destroy creds if gssapi authentication fails - CAN-2005-2798 (#167444)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.8" date="1122508800">- don't use X11 port which can't be bound on all IP families (#163732)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.7" date="1119916800">- fix pam_loginuid.so dependency on 64bit platforms</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.6" date="1119052800">- add pam_loginuid.so to the sshd pam stack (#159331)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.5" date="1114041600">- don't deadlock on exit with multiple X forwarded channels (#152432)
- allow ssh-ing from root account with nondefault group (#155220)</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.4" date="1109635200">- rebuild to pick up gcc fix removing TEXTREL on ppc32</changelog><changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 3.9p1-8.RHEL4.3" date="1108771200">- enable trusted forwarding by default if X11 forwarding is
  required by user (#137685 and duplicates)
- discard the previous patch and remove the logging from sigalarm 
  handler completely as syslog is not signal handler safe anyway (#143929)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8.RHEL4.2" date="1105660800">- block SIGALRM in do_log around openlog/closelog (possible fix for #143929)</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.9p1-8.RHEL4.1" date="1101859200">- fixed PIE build for all architectures</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-8" date="1096934400">- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
  to enable display of a vendor patch level during version exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.9p1-7" date="1095724800">- when using gtk2 for askpass, don't buildprereq gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.9p1-6" date="1095206400">- build</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1095120000">- disable ACSS support</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-5" date="1094169600">- Change selinux patch to use get_default_context_with_role in libselinux.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-4" date="1094169600">- Fix patch
	* Bad debug statement.
	* Handle root/sysadm_r:kerberos</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-3" date="1094169600">- Modify Colin Walter's patch to allow specifying rule during connection</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-2" date="1093996800">- Fix TTY handling for SELinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.9p1-1" date="1093392000">- Update to upstream</changelog><changelog author="Alan Cox &lt;alan@redhat.com&gt; 3.8.1p1-5" date="1091404800">- Apply buildreq fixup patch (#125296)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-4" date="1087344000">- Clean up patch for upstream submission.</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1087344000">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.8.1p1-2" date="1086825600">- Remove use of pam_selinux and patch selinux in directly.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-1" date="1086652800">- request gssapi-with-mic by default but not delegation (flag day for anyone
  who used previous gssapi patches)
- no longer request x11 forwarding by default</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-36" date="1086307200">- Change pam file to use open and close with pam_selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.8.1p1-0" date="1086134400">- update to 3.8.1p1
- add workaround from CVS to reintroduce passwordauth using pam</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-35" date="1086134400">- Remove CLOSEXEC on STDERR</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-34" date="1079481600">* Wed Mar 03 2004 Phil Knirsch &lt;pknirsch@redhat.com&gt; 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-33" date="1078358400">- Close file descriptors on exec</changelog><changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 3.6.1p2-32" date="1078185600">- fixed pie build</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-31" date="1077840000">- Add restorecon to startup scripts</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-30" date="1077840000">- Add multiple qualified to openssh</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-29" date="1077580800">- Eliminate selinux code and use pam_selinux</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1076716800">- rebuilt</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-27" date="1075161600">- turn off pie on ppc</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-26" date="1075161600">- fix is_selinux_enabled</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-25" date="1074124800">- Rebuild to grab shared libselinux</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-24" date="1070496000">- turn on selinux</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1069200000">- un#ifdef out code for reporting password expiration in non-privsep
  mode (#83585)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1068508800">- add machinery to build with/without -fpie/-pie, default to doing so</changelog><changelog author="David Woodhouse &lt;dwmw2@redhat.com&gt; 3.6.1p2-23" date="1068163200">- Don't whinge about getsockopt failing (#109161)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1067040000">- add missing buildprereq on zlib-devel (#104558)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-22" date="1066089600">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21.sel" date="1066089600">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-21" date="1064016000">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-20.sel" date="1064016000">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1064016000">- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-19" date="1063843200">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-18" date="1063843200">- additional buffer manipulation cleanups from Solar Designer</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-17" date="1063843200">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-16.sel" date="1063843200">- turn selinux on</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-15" date="1063756800">- rebuild</changelog><changelog author="Bill Nottingham &lt;notting@redhat.com&gt; 3.6.1p2-14" date="1063756800">- additional buffer manipulation fixes (CAN-2003-0695)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-13.sel" date="1063756800">- turn selinux on</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-12" date="1063756800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-11" date="1063756800">- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
  empty passwords are not permitted in our configuration (#103998)</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-10" date="1062806400">- turn selinux off</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-9.sel" date="1062806400">- turn selinux on</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-8" date="1061942400">- Add BuildPreReq gtk2-devel if gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-7" date="1060732800">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-6" date="1060732800">- modify patch which clears the supplemental group list at startup to only
  complain if setgroups() fails if sshd has euid == 0
- handle krb5 installed in %{_prefix} or elsewhere by using krb5-config</changelog><changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; 3.6.1p2-5" date="1059436800">- Add SELinux patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-4" date="1058918400">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-3" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-2" date="1055808000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.6.1p2-1" date="1054857600">- update to 3.6.1p2</changelog><changelog author="Elliot Lee &lt;sopwith@redhat.com&gt;" date="1054771200">- rebuilt</changelog><changelog author="Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;" date="1048550400">- add patch for getsockopt() call to work on bigendian 64bit archs</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-6" date="1045267200">- move scp to the -clients subpackage, because it directly depends on ssh
  which is also in -clients (#84329)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-5" date="1044921600">- rebuild</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1043280000">- rebuilt</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-3" date="1041984000">- rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-2" date="1037145600">- patch PAM configuration to use relative path names for the modules, allowing
  us to not worry about which arch the modules are built for on multilib systems</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.5p1-1" date="1034726400">- update to 3.5p1, merging in filelist/perm changes from the upstream spec</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-3" date="1033776000">- merge</changelog><changelog author="Than Ngo &lt;than@redhat.com&gt; 3.4p1-2.1" date="1031875200">- fix to build on multilib systems</changelog><changelog author="Curtis Zinzilieta &lt;curtisz@redhat.com&gt; 3.4p1-2gss" date="1030665600">- added gssapi patches and uncommented patch here</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-2" date="1029369600">- pull patch from CVS to fix too-early free in ssh-keysign (#70009)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.4p1-1" date="1025222400">- 3.4p1
- drop anon mmap patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-2" date="1025049600">- rework the close-on-exit docs
- include configuration file man pages
- make use of nologin as the privsep shell optional</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.3p1-1" date="1024963200">- update to 3.3p1
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
- disable gtk2 askpass
- require pam-devel by filename rather than by package for erratum
- include patch from Solar Designer to work around anonymous mmap failures</changelog><changelog author="Tim Powers &lt;timp@redhat.com&gt;" date="1024704000">- automated rebuild</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-3" date="1023494400">- don't require autoconf any more</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-2" date="1022889600">- build gnome-ssh-askpass with gtk2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.3p1-1" date="1022630400">- update to 3.2.3p1
- merge in spec file changes from upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.2.2p1-1" date="1021680000">- update to 3.2.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-4" date="1021680000">- drop buildreq on db1-devel
- require pam-devel by package name
- require autoconf instead of autoconf253 again</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-3" date="1017792000">- pull patch from CVS to avoid printing error messages when some of the
  default keys aren't available when running ssh-add
- refresh to current revisions of Simon's patches</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2gss" date="1016755200">- reintroduce Simon's gssapi patches
- add buildprereq for autoconf253, which is needed to regenerate configure
  after applying the gssapi patches
- refresh to the latest version of Markus's patch to build properly with
  older versions of OpenSSL</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-2" date="1015545600">- bump and grind (through the build system)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-1" date="1015545600">- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably won't
  work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
  http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
  building for 6.x</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.1p1-0" date="1015545600">- update to 3.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020305" date="1015372800">- update to SNAP-20020305
- drop debug patch, fixed upstream</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; SNAP-20020220" date="1014249600">- update to SNAP-20020220 for testing purposes (you've been warned, if there's
  anything to be warned about, gss patches won't apply, I don't mind)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-3" date="1013644800">- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
  exchange, authentication, and named key support</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-2" date="1011830400">- remove dependency on db1-devel, which has just been swallowed up whole
  by gnome-libs-devel</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1009670400">- adjust build dependencies so that build6x actually works right (fix
  from Hugo van der Kooij)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.2p1-1" date="1007510400">- update to 3.0.2p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0.1p1-1" date="1005955200">- update to 3.0.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005696000">- update to current CVS (not for use in distribution)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 3.0p1-1" date="1005264000">- merge some of Damien Miller &lt;djm@mindrot.org&gt; changes from the upstream
  3.0p1 spec file and init script</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1005177600">- update to 3.0p1
- update to x11-ssh-askpass 1.2.4.1
- change build dependency on a file from pam-devel to the pam-devel package
- replace primes with moduli</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-9" date="1001635200">- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs</changelog><changelog author="Bernhard Rosenkraenzer &lt;bero@redhat.com&gt; 2.9p2-8" date="1000425600">- Merge changes to rescue build from current sysadmin survival cd</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-7" date="999820800">- fix scp's server's reporting of file sizes, and build with the proper
  preprocessor define to get large-file capable open(), stat(), etc.
  (sftp has been doing this correctly all along) (#51827)
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
- mark profile.d scriptlets as config files (#42337)
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
- change a couple of log() statements to debug() statements (#50751)
- pull cvs patch to add -t flag to sshd (#28611)
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 2.9p2-6" date="998352000">- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="998006400">- pull cvs patch to fix remote port forwarding with protocol 2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997401600">- pull cvs patch to add session initialization to no-pty sessions
- pull cvs patch to not cut off challengeresponse auth needlessly
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed (#49263)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997315200">- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="997142400">- pass OPTIONS correctly to initlog (#50151)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="996105600">- switch to x11-ssh-askpass 1.2.2</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="994896000">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="993513600">- disable the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="992908800">- update to 2.9p2
- refresh to a new version of the gssapi patch</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="991958400">- change Copyright: BSD to License: BSD
- add Markus Friedl's unverified patch for the cookie file deletion problem
  so that we can verify it
- drop patch to check if xauth is present (was folded into cookie patch)
- don't apply gssapi patches for the errata candidate
- clear supplemental groups list at startup</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990835200">- fix an error parsing the new default sshd_config
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
  dealing with comments right</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="990748800">- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
  to be removed before the next beta cycle because it's a big departure
  from the upstream version</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988934400">- finish marking strings in the init script for translation
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
  at startup (change merged from openssh.com init script, originally by
  Pekka Savola)
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
  it by default on a system that doesn't have X installed</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="988848000">- update to 2.9
- drop various patches that came from or went upstream or to or from CVS</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="987638400">- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)</changelog><changelog author="Preston Brown &lt;pbrown@redhat.com&gt;" date="986774400">- remove explicit openssl requirement, fixes builddistro issue
- make initscript stop() function wait until sshd really dead to avoid 
  races in condrestart</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="986256000">- mention that challengereponse supports PAM, so disabling password doesn't
  limit users to pubkey and rsa auth (#34378)
- bypass the daemon() function in the init script and call initlog directly,
  because daemon() won't start a daemon it detects is already running (like
  open connections)
- require the version of openssl we had when we were built</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985392000">- make do_pam_setcred() smart enough to know when to establish creds and
  when to reinitialize them
- add in a couple of other fixes from Damien for inclusion in the errata</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985305600">- update to 2.5.2p2
- call setcred() again after initgroups, because the "creds" could actually
  be group memberships</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="985132800">- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
- don't enable challenge-response by default until we find a way to not
  have too many userauth requests (we may make up to six pubkey and up to
  three password attempts as it is)
- remove build dependency on rsh to match openssh.com's packages more closely</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983664000">- remove dependency on openssl -- would need to be too precise</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983577600">- rebuild in new environment</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="983232000">- Revert the patch to move pam_open_session.
- Init script and spec file changes from Pekka Savola. (#28750)
- Patch sftp to recognize '-o protocol' arguments. (#29540)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982886400">- Chuck the closing patch.
- Add a trigger to add host keys for protocol 2 to the config file, now that
  configuration file syntax requires us to specify it with HostKey if we
  specify any other HostKey values, which we do.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982713600">- Redo patch to move pam_open_session after the server setuid()s to the user.
- Rework the nopam patch to use be picked up by autoconf.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982627200">- Update for 2.5.1p1.
- Add init script mods from Pekka Savola.
- Tweak the init script to match the CVS contrib script more closely.
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
  adding id_rsa.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982368000">- Update for 2.5.0p1.
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
- Resync with parts of Damien Miller's openssh.spec from CVS, including
  update of x11 askpass to 1.2.0.
- Only require openssl (don't prereq) because we generate keys in the init
  script now.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="982108800">- Don't open a PAM session until we've forked and become the user (#25690).
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
  host the user is attempting a login from.
- Resync with parts of Damien Miller's openssh.spec from CVS.
- Don't expose KbdInt responses in debug messages (from CVS).
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).</changelog><changelog author="Trond Eivind Glomsrxd &lt;teg@redhat.com&gt;" date="981590400">- i18n-tweak to initscript.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="980294400">- More gettextizing.
- Close all files after going into daemon mode (needs more testing).
- Extract patch from CVS to handle auth banners (in the client).
- Extract patch from CVS to handle compat weirdness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979948800">- Finish with the gettextizing.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="979862400">- Fix a bug in auth2-pam.c (#23877)
- Gettextize the init script.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="977356800">- Incorporate a switch for using PAM configs for 6.x, just in case.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="976060800">- Incorporate Bero's changes for a build specifically for rescue CDs.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975542400">- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
  succeeded, to allow public-key authentication after a failure with "none"
  authentication.  (#21268)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975456000">- Update to x11-askpass 1.1.1. (#21301)
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975369600">- Merge multiple PAM text messages into subsequent prompts when possible when
  doing keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="975283200">- Disable the built-in MD5 password support.  We're using PAM.
- Take a crack at doing keyboard-interactive authentication with PAM, and
  enable use of it in the default client configuration so that the client
  will try it when the server disallows password authentication.
- Build with debugging flags.  Build root policies strip all binaries anyway.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974851200">- Use DESTDIR instead of %makeinstall.
- Remove /usr/X11R6/bin from the path-fixing patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974764800">- Add the primes file from the latest snapshot to the main package (#20884).
- Add the dev package to the prereq list (#19984).
- Remove the default path and mimic login's behavior in the server itself.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="974505600">- Resync with conditional options in Damien Miller's .spec file for an errata.
- Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="973641600">- Update to OpenSSH 2.3.0p1.
- Update to x11-askpass 1.1.0.
- Enable keyboard-interactive authentication.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="972950400">- Update to ssh-askpass-x11 1.0.3.
- Change authentication related messages to be private (#19966).</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="971222400">- Patch ssh-keygen to be able to list signatures for DSA public key files
  it generates.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970790400">- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
- Clean out no-longer-used patches.
- Patch ssh-add to try to add both identity and id_dsa, and to error only
  when neither exists.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="970531200">- Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
- Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
- Try to handle obsoletion of ssh-server more cleanly.  Package names
  are different, but init script name isn't. (#17865)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="968284800">- Update to 2.2.0p1. (#17835)
- Tweak the init script to allow proper restarting. (#18023)</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="967075200">- Update to 20000823 snapshot.
- Change subpackage requirements from %{version} to %{version}-%{release}
- Back out the pipe patch.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963878400">- Update to 2.1.1p4, which includes fixes for config file parsing problems.
- Move the init script back.
- Add Damien's quick fix for wackiness.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="963446400">- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962928000">- Move condrestart to server postun.
- Move key generation to init script.
- Actually use the right patch for moving the key generation to the init script.
- Clean up the init script a bit.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962841600">- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962582400">- Update to 2.1.1p2.
- Use of strtok() considered harmful.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962496000">- Get the build root out of the man pages.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962323200">- Add and use condrestart support in the init script.
- Add newer initscripts as a prereq.</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="962150400">- Build in new environment (release 2)
- Move -clients subpackage to Applications/Internet group</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960595200">- Update to 2.2.1p1</changelog><changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="960076800">- Patch to build with neither RSA nor RSAref.
- Miscellaneous FHS-compliance tweaks.
- Fix for possibly-compressed man pages.</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="953164800">- Updated for new location
- Updated for new gnome-ssh-askpass build</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="946252800">- Added Jim Knoble's &lt;jmknoble@pobox.com&gt; askpass</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942710400">- Split subpackages further based on patch from jim knoble &lt;jmknoble@pobox.com&gt;</changelog><changelog author="Damien Miller &lt;djm@mindrot.org&gt;" date="942537600">- Added 'Obsoletes' directives</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942192000">- Use make install
- Subpackages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="942105600">- Added links for slogin
- Fixed perms on manpages</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941328000">- Renamed init script</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941241600">- Back to old binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941155200">- Use autoconf
- New binary names</changelog><changelog author="Damien Miller &lt;djm@ibs.com.au&gt;" date="941068800">- Initial RPMification, based on Jan "Yenya" Kasprzak's &lt;kas@fi.muni.cz&gt; spec.</changelog></package>

</otherdata>