# changelog

author: Steve Grubb <sgrubb@redhat.com> 1.0.3-5
changelog:
  - Make rate & backlog 32 bit unsigned int in auditctl
  - In auditctl, if -F arch is given with -t option, don't require list


author: Steve Grubb <sgrubb@redhat.com> 1.0.3-1
changelog:
  - adjust file perms of newly created log file in auditd
  - fix 2 memory leaks and an out of bounds access in auditd
  - fix case where auditd was closing netlink descriptor too early
  - fix watch rules not to take field arguments in auditctl
  - fix bug where inode, devmajor, devminor, exit, and success fields in auditctl rules were not getting the correct value stored


author: Steve Grubb <sgrubb@redhat.com> 1.0.1-2.EL4
changelog:
  - don't start auditd on old ia64 kernels
  - don't allow auditd or auditctl to enable audit on old ia64 kernels


author: Steve Grubb <sgrubb@redhat.com> 1.0.1-1.EL4
changelog:
  - Add check for fields that cannot be used with syscall entry in auditctl
  - Make auditctl not tolerate duplicate rule and watches
  - Remove uid check in ausearch


author: Steve Grubb <sgrubb@redhat.com> 1.0-1.EL4
changelog:
  - Update sample CAPP config
  - Remove warning for trimming file path in auditctl
  - Make auditctl tolerate duplicate rule and watches
  - auditd has new option so it doesn't overwrite log files
  - Fixed bug in autrace that was reporting bad descriptor


author: Steve Grubb <sgrubb@redhat.com> 0.9.20-1.EL4
changelog:
  - Fix ausearch to handle missing audit log better
  - Fix auditctl blank line handling
  - Trim trailing '/' from file system watches in auditctl
  - Catch cases where parameter was passed without option being given to auditctl
  - Add CAPP sample configuration


author: Steve Grubb <sgrubb@redhat.com> 0.9.17-1.EL4
changelog:
  - Fix ausearch buffers to hold long filenames
  - Make a0 long long for 64 bit kernels & 32 bit ausearch


author: Steve Grubb <sgrubb@redhat.com> 0.9.16-1.EL4
changelog:
  - Adjust umask
  - Adjust length of strings for file system watches to not include NUL
  - Remove extra error message from audit_send


author: Steve Grubb <sgrubb@redhat.com> 0.9.13-1.EL4
changelog:
  - Remove /lib/libaudit.so & .la from audit-libs package
  - In auditctl, if syscall not given, default to all


author: Steve Grubb <sgrubb@redhat.com> 0.9.12-1.EL4
changelog:
  - Add some syslog messages for a couple exits
  - Add some unlinks of the pid file in a couple error exits
  - Make some options of auditctl not expect a reply
  - Update support for user and watch filter lists


author: Steve Grubb <sgrubb@redhat.com> 0.9.11-1.EL4
changelog:
  - Change packet draining to nonblocking
  - Interpret id field in ausearch
  - Add error message if not able to create log
  - Ignore netlink acks when asking for rule & watch list


author: Steve Grubb <sgrubb@redhat.com> 0.9.10-1.EL4
changelog:
  - Make sure the bad packet is drained when retrying user messages
  - Add support for new user and watch filter lists
  - Interpret flags field in ausearch


author: Steve Grubb <sgrubb@redhat.com> 0.9.7-1
changelog:
  - fixed bug in send_user_message which errored on pam logins
  - Change nanosleeps over to select loops
  - Change the 'e' option to auditctl -p to 'x'


author: Steve Grubb <sgrubb@redhat.com> 0.9.6-1
changelog:
  - fix bug in incremental flush where is wrongly reported an error
  - ausearch should not do uid check for -if option
  - adjust ipc interpretation to not use ipc.h


author: Steve Grubb <sgrubb@redhat.com> 0.9.5-1
changelog:
  - interpret socketcall & ipc based on a0 in ausearch
  - change call sequence to make user space messages faster
  - update return val for auditctl


author: Steve Grubb <sgrubb@redhat.com> 0.9.4-1
changelog:
  - Rule and watch insert no longer automatically dumps list
  - auditctl rules can now use auid instead of loginuid
  - Add sighup support for daemon reconfiguration
  - Move some functions into private.h


author: Steve Grubb <sgrubb@redhat.com> 0.9.3-1
changelog:
  - Change filename handling to use linked list in ausearch
  - Add man pages for audit_setloginuid & audit_getloginuid
  - Fix problem where you couldn't set rule on unset loginuid's
  - Adjust memory management for sighup needs
  - Fix problem where netlink timeout counter wasn't being reset


author: Steve Grubb <sgrubb@redhat.com> 0.9.1-1
changelog:
  - AUDITD_CLEAN_STOP config option in /etc/sysconfig/auditd
  - When unknown, show raw record in ausearch.
  - Add CWD message type support


author: Steve Grubb <sgrubb@redhat.com> 0.9-1
changelog:
  - Translate numeric info to human readable for ausearch output
  - add '-if' option to ausearch to select input file
  - add '-c' option to ausearch to allow searching by comm field
  - init script now deletes all rules when daemon stops
  - Make auditctl display perms correctly in watch listings
  - Make auditctl -D remove all watches


author: Steve Grubb <sgrubb@redhat.com> 0.8.2-1
changelog:
  - Update documentation
  - Handle user space audit events in more uniform way
  - Update all parsers for more robustness with new kernel changes
  - Create quiet mode for error messages
  - Make rotated logs readonly


author: Steve Grubb <sgrubb@redhat.com> 0.8.1-1
changelog:
  - Fix code to "or" uid  & gid checks for ausearch -ua & -ga
  - Change msg() to audit_msg() to avoid conflicts
  - Parse socket messages for hostname in ausearch


author: Steve Grubb <sgrubb@redhat.com> 0.8-1
changelog:
  - ausearch fix bugs related to -f & -x
  - Parse messages using new types
  - Properly unescape filenames
  - Update interface for sending userspace messages to use more types


author: Steve Grubb <sgrubb@redhat.com> 0.7.3-1
changelog:
  - Add code to get watch list to auditctl
  - Get -f & -hn working in ausearch
  - Added search by terminal, exe, and syscall to ausearch program
  - Added -w parameter to match whole word in ausearch


author: Steve Grubb <sgrubb@redhat.com> 0.7.2-1
changelog:
  - Allow ausearch uid & gid to be non-numeric (root, wheel, etc)
  - Fix problems with changing run level
  - Added new code for logging shutdown reason credentials
  - Update DAEMON messages to use better timestamp


author: Steve Grubb <sgrubb@redhat.com> 0.7.1-1
changelog:
  - Make sure time calc is done using localtime
  - Raise rlimits for file size & cpu usage
  - Added new disk_error_action config item to auditd.conf
  - Rework memory management of event buffer
  - Handled all errors in event logging thread


author: Steve Grubb <sgrubb@redhat.com> 0.7-1
changelog:
  - In auditctl -l, loop until all rules are printed
  - Update autrace not to run if rules are currently loaded
  - Added code to switch to single user mode when disk is full
  - Added the ausearch program


author: Steve Grubb <sgrubb@redhat.com> 0.6.12-1
changelog:
  - Fixed bug where elf type wasn't being set when given numerically
  - Added autrace program (similar to strace)
  - Fixed bug when logs = 2 and ROTATE is the action, only 1 log resulted


author: Steve Grubb <sgrubb@redhat.com> 0.6.11-1
changelog:
  - Check log file size on start up
  - Added priority_boost config item
  - Reworked arch support
  - Reworked how run level is changed
  - Make allowances for ECONNREFUSED


author: Steve Grubb <sgrubb@redhat.com> 0.6.10-1
changelog:
  - Code cleanups
  - Support the arch field for auditctl
  - Add version to auditctl
  - Documentation updates
  - Moved default location of the audit log to /var/log/audit


author: Steve Grubb <sgrubb@redhat.com> 0.6.9-1
changelog:
  - Added patch for filesystem watch
  - Added version information to audit start message
  - Change netlink code to use ack in order to get error notification


author: Steve Grubb <sgrubb@redhat.com> 0.6.7-1
changelog:
  - Fixed bug setting loginuid
  - Added num_logs to configure number of logs when rotating
  - Added code for rotating logs


author: Steve Grubb <sgrubb@redhat.com> 0.6.6-1
changelog:
  - Fix audit_set_pid to try to read a reply, but its non-fatal if no reply.
  - Remove the read status during init
  - Change to using pthreads sync mechanism for stopping system
  - Worker thread should ignore all signals
  - Change main loop to use select for inbound event handling
  - Gave pam_loginuid a "failok" option for testing


author: Steve Grubb <sgrubb@redhat.com> 0.6.5-1
changelog:
  - Lots of code cleanups
  - Added write_pid function to auditd
  - Added audit_log to libaudit
  - Don't check file length in foreground mode of auditd
  - Added *if_enabled functions to send messages only if audit system is enabled
  - If syscall name is unknown when printing rules, use the syscall number
  - Rework the build system to produce singly threaded public libraries
  - Create a multithreaded version of libaudit for the audit daemon's use


author: Steve Grubb <sgrubb@redhat.com> 0.6.4-1
changelog:
  - Rename pam_audit to pam_loginuid to reflect what it does
  - Fix bug in detecting space left on partition
  - Fix bug in handling of suspended logging


author: Steve Grubb <sgrubb@redhat.com> 0.6.3-1
changelog:
  - Change pam install from /lib/security to /lib/security
  - Change pam_audit to write loginuid to /proc/pid/loginuid
  - Add pam_session_close handle
  - Update to newest kernel headers


author: Steve Grubb <sgrubb@redhat.com> 0.6.2-1
changelog:
  - New version
  - Add R option to auditctl to allow reading rules from file.
  - Do not allow task creation list to have syscall auditing
  - Add D option to allow deleting all rules with 1 command
  - Added pam_audit man page & sample.rules
  - Mod initscript to call auditctl to load rules at start-up
  - Write message to log file for daemon start up
  - Write message that daemon is shutting down
  - Modify auditd shutdown to wait until logger thread is finished
  - Add sample rule file to docs


author: Steve Grubb <sgrubb@redhat.com> 0.6.1-1
changelog:
  - New version: rework auditctl and its man pages.
  - Added admin_space_left config option as last chance before
    running out of disk space.


author: Colin Walters <walters@redhat.com> 1:1.0.1.gold-6
changelog:
  - Require libbluecurve.so to fix 135709, since it apparently
    cannot be done in comps at this point.


author: Colin Walters <walters@redhat.com> 1:1.0.1.gold-4
changelog:
  - Pull in 32-bit redhat-artwork on x86_64 (135709)
  - Rename hxplay.desktop to realplay.desktop, in order to set 
    default mime handlers for realplay.desktop, until we get
    multiple application support in defaults.list (135705)


author: Colin Walters <walters@redhat.com> 1:1.0.1.gold-1
changelog:
  - Update to 1.0.1
  - Add epoch since 1.0.1.gold is older than 1.0.gold
  - Drop upstreamed HelixPlayer-1.0.beta20040615-mmx-clobber.patch
  - Drop HelixPlayer-1.0.beta20040615-desktop.patch per request
  - Drop upstreamed HelixPlayer-1.0-filechooser.patch
  - Drop upstreamed HelixPlayer-1.0-clobberedx.patch
  - Switch to bingo-gold target


author: Colin Walters <walters@redhat.com> 1.0.gold-4
changelog:
  - Add patch from Real to fix math64.h compilation
  - Invoke update-desktop-database in post and postun, in
    preparation for fixing .desktop file for mime system
  - Address some issues from #130744, thanks Ling Li:
    - Do release build
    - Install release binary
    - Fix typo in png installation
  - Remove hack for installing debug ogg format


author: Colin Walters <walters@redhat.com> 1.0.gold-1
changelog:
  - Update to gold
  - Use setup -n to set directory instead of repacking tarball
  - Switch bif target to bingo-gold-free


author: Colin Walters <walters@redhat.com> 1.0.beta20040615-3
changelog:
  - Add patch to fix desktop file name
  - Set build failure color to "green" to exit on any error
  - Add smp_mflags variable for parallel building


author: Nicholas Hart <nhart@helixcommunity.org>
changelog:
  - tweaked some paths to deal with tarball generated by player/installer/app
  - changed, reformatted some of the package info


author: Tim Waugh <twaugh@redhat.com> 6.0.7.1-4
changelog:
  - The devel subpackage requires XFree86-devel (bug #126509).
  - Fixed build requirements (bug #120776).  From Robert Scheck.


author: Karsten Hopp <karsten@redhat.de> 5.5.6-1
changelog:
  - update
  - specfile fixes
            - verified that the upstream version fixes the following bugreports:


author: Karsten Hopp <karsten@redhat.de> 5.4.7-3
changelog:
  - fix non-cpp headers in -devel package
  - fix #62157 (wrong path for include files in ImageMagick-devel)
  - fix #63897 (use _target instead of _arch) in libtool workaround
  - fix #65860, #65780 (tiff2ps) expands images to >10 MB Postscript files.


author: Karsten Hopp <karsten@redhat.de> 5.4.7-1
changelog:
  - update
  - fix localdoc patch
  - fix %files section
  - disable nonroot patch
  - fix #62100,55950,62162,63136 (display doesn't start form gnome menu)
  - fix libtool workaround
  - moved Magick*-config into -devel package (#64249)


author: Bernhard Rosenkraenzer <bero@redhat.com> 5.4.0-1
changelog:
  - 5.4.0
  - work around build system breakage causing applications to be named
    i386-redhat-linux-foo rather than foo


author: Bernhard Rosenkraenzer <bero@redhat.com> 5.3.7-1
changelog:
  - 5.3.7
  - Fix build without previously installed ImageMagick-devel (#49816)
  - Move perl bindings to a separate package.


author: Matt Wilson <msw@redhat.com>
changelog:
  - remove hacks to move perl man pages
  - don't include the perl*/man stuff, these files go in /usr/share/man now.


author: Matt Wilson <msw@redhat.com>
changelog:
  - bootstrap rebuilt to nuke broken libbz2 deps
  - add Prefix: tag such that the FHS macros work properly


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - hacks to make it work with the new perl
  - version 4.1.0 (actually installs the sonames as 4.0.10... doh!)
  - make sure the libraries have the x bit on


author: Steve Grubb <sgrubb@redhat.com> 1.0.12-1
changelog:
  - Step up to new version
  - Add locale patch - ausearch & aureport
  - Add c++ patch - libaudit.h
  - Add fixup patch - auditd email error handler correction


author: Jakub Jelinek <jakub@redhat.com> 2.15.92.0.2-14
changelog:
  - bfd and readelf robustification (CAN-2005-1704, #158680)
  - remove symbols in .gnu.warning.* from output (Alan Modra, #156107, IT#70038)
  - make gprof work with ppc64 -mcall-linux binaries/libraries rather
    than just -mcall-aixdesc (Alan Modra, #156111, IT#70704)
  - on IA-64 add -mhint.b={error,warning,ok} option, by default error on
    hint.b@pause (H.J.Lu, Jim Wilson, Prarit Bhargava, #158336, IT#72728)


author: Jakub Jelinek <jakub@redhat.com> 2.15.92.0.2-12
changelog:
  - fix .note.GNU-stack/PT_GNU_STACK computation in linker on ppc64 (#147296)
  - fix stripping of binaries/libraries that have empty sections right before
    .dynamic section (with the same starting address; #144038)
  - handle AS_NEEDED (...) in linker script INPUT/GROUP


author: Jakub Jelinek <jakub@redhat.com> 2.15.92.0.2-7.EL4
changelog:
  - don't crash if STT_SECTION symbol has incorrect st_shndx (e.g. SHN_ABS,
    as created by nasm; #142181)


author: Jakub Jelinek <jakub@redhat.com> 2.15.92.0.2-6.EL4
changelog:
  - don't try to make absptr LSDAs relative if they don't have relocations
    against them (Alan Modra, #141162)


author: Jakub Jelinek <jakub@redhat.com> 2.15.92.0.2-3
changelog:
  - revert Sep 09 change to make ppc L second argument e.g. for tlbie
    non-optional
  - fix stripping of prelinked binaries and libraries (#133734)
  - allow strings(1) on 32-bit arches to be used again with > 2GB
    files (#133555)


author: Jakub Jelinek <jakub@redhat.com> 2.15.91.0.2-9
changelog:
  - avoid almost 1MB (sparse) gaps in the middle of -z relro
    libraries on x86-64 (Andreas Schwab)
  - fix -z relro to make sure end of PT_GNU_RELRO segment is always
    COMMONPAGESIZE aligned


author: Jakub Jelinek <jakub@redhat.com> 2.15.91.0.2-8
changelog:
  - fix linker segfaults on input objects with SHF_LINK_ORDER with
    incorrect sh_link (H.J.Lu, Nick Clifton, #130198, BZ #290)


author: Jakub Jelinek <jakub@redhat.com> 2.15.91.0.2-7
changelog:
  - resolve all undefined ppc64 .* syms to the function bodies through
    .opd, not just those used in brach instructions (Alan Modra)


author: Jakub Jelinek <jakub@redhat.com> 2.15.91.0.2-5
changelog:
  - various ppc64 make check fixes when using non-dot-syms gcc (Alan Modra)
  - fix --gc-sections
  - on ia64 create empty .gnu.linkonce.ia64unw*.* sections for
    .gnu.linkonce.t.* function doesn't need unwind info


author: Jakub Jelinek <jakub@redhat.com> 2.15.91.0.2-4
changelog:
  - kill ppc64 dot symbols (Alan Modra)
  - objdump -d support for objects without dot symbols
  - support for overlapping ppc64 .opd entries


author: Jakub Jelinek <jakub@redhat.com> 2.15.90.0.3-4
changelog:
  - -z relro ppc/ppc64/ia64 fixes
  - change x86-64 .plt symbol st_size handling to match ia32
  - prettify objdump -d output


author: Jakub Jelinek <jakub@redhat.com> 2.15.90.0.1.1-2
changelog:
  - update to 20040326 CVS
    - fix ppc64 weak .opd symbol handling (Alan Modra, #119086)
  - fix .tbss handling bug introduced


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.8-8
changelog:
  - with -z now without --enable-new-dtags create DT_BIND_NOW
    dynamic entry in addition to DT_FLAGS_1 with DF_1_NOW bit set


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.8-2
changelog:
  - fix testcases on AMD64
  - fix .got's sh_entsize on IA32/AMD64
  - set COMMONPAGESIZE on s390/s390x
  - set COMMONPAGESIZE on ppc32 (Alan Modra)


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.6-4
changelog:
  - fix assembly parsing of foo=(.-bar)/4 (Alan Modra)
  - fix IA-64 assembly parsing of (p7) hint @pause


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.6-1
changelog:
  - update to 2.14.90.0.6
  - speed up string merging (Lars Knoll, Michael Matz, Alan Modra)
  - speed up IA-64 local symbol handling during linking


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.5-4
changelog:
  - fix ppc64 elfvsb linker tests
  - some more 64-bit cleanliness fixes, give ppc64 fdesc symbols
    type and size (Alan Modra)


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-22
changelog:
  - fix elfNN_ia64_dynamic_symbol_p (Richard Henderson, #86661)
  - don't access memory beyond what was allocated in readelf
    (Richard Henderson)


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-19
changelog:
  - fix -pie support on amd64, s390, s390x and ppc64
  - issue relocation overflow errors for s390/s390x -fpic code when
    accessing .got slots above 4096 bytes from .got start


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-17
changelog:
  - fix ia64 -pie support
  - require no undefined non-weak symbols in PIEs like required for normal
    binaries


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-16
changelog:
  - fix readelf -d on IA-64
  - build libiberty.a with -fPIC, so that it can be lined into shared
    libraries


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-14
changelog:
  - added support for Intel Prescott instructions
  - fix hint@pause for ia64
  - add workaround for LTP sillyness (#97934)


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-13
changelog:
  - update CFI stuff to 2003-06-18
  - make sure .eh_frame is aligned to 8 bytes on 64-bit arches,
    remove padding within one .eh_frame section


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-9
changelog:
  - ensure R_PPC64_{RELATIVE,ADDR64} have *r_offset == r_addend
    and the other relocs have *r_offset == 0


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-8
changelog:
  - remove some unnecessary provides in ppc64 linker script
    which were causing e.g. empty .ctors/.dtors section creation


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-7
changelog:
  - some CFI updates/fixes
  - don't create dynamic relocations against symbols defined in PIE
    exported from its .dynsym


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-2
changelog:
  - rename ld --dynamic option to --pic-executable or --pie
  - fix ld --help output
  - document --pie/--pic-executable in ld.info and ld.1


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-1
changelog:
  - update to 2.14.90.0.4-1
  - gas CFI updates (Richard Henderson)
  - dynamic executables (Ulrich Drepper)


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.20-4
changelog:
  - fix ppc32 plt reference counting
  - don't include /usr/lib/debug in the non-debuginfo package
    (#87729)


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-6
changelog:
  - don't clear elf_link_hash_flags in the .symver patch
  - only use TC_FORCE_RELOCATION in s390's TC_FORCE_RELOCATION_SUB_SAME
    (Alan Modra)


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-5
changelog:
  - fix the previous .symver change
  - remove libbfd.so and libopcodes.so symlinks, so that other packages
    link statically, not dynamically against libbfd and libopcodes
    whose ABI is everything but stable


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-3
changelog:
  - handle .symver x, x@FOO in ld such that relocs against x become
    dynamic relocations against x@FOO (#83325)
  - two PPC64 TLS patches (Alan Modra)


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-2
changelog:
  - fix SEARCH_DIR on x86_64/s390x
  - fix Alpha --relax
  - create DT_RELA{,SZ,ENT} on s390 even if there is just .rela.plt
    and no .rela.dyn section
  - support IA-32 on IA-64 (#83752)
  - .eh_frame_hdr fix (Andreas Schwab)


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.16-8
changelog:
  - alpha TLS fixes
  - use .debug_line directory table to make the section tiny bit smaller
  - libtool fix from Jens Petersen


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.10-4
changelog:
  - pad .rodata.cstNN sections at the end if they aren't sized to multiple
    of sh_entsize
  - temporary patch to make .eh_frame and .gcc_except_table sections
    readonly if possible (should be removed when AUTO_PLACE is implemented)
  - fix .PPC.EMB.apuinfo section flags


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.10-3
changelog:
  - fix names and content of alpha non-alloced .rela.* sections (#76583)
  - delete unpackaged files from the buildroot


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.10-1
changelog:
  - update to 2.13.90.0.10
  - add a bi-arch patch for sparc/s390/x86_64
  - add --enable-64-bit-bfd on sparc, s390 and ppc


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.4-2
changelog:
  - fix orphan .rel and .rela section placement with -z combreloc (Alan Modra)
  - skip incompatible linker scripts when searching for libraries


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.4-1
changelog:
  - update to 2.13.90.0.4
  - x86-64 TLS support
  - some IA-32 TLS fixes
  - some backported patches from trunk
  - include opcodes, ld, gas and bfd l10n too


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.2-3
changelog:
  - allow addends for IA-32 TLS @tpoff, @ntpoff and @dtpoff
  - clear memory at *r_offset of dynamic relocs on PPC
  - avoid ld crash if accessing non-local symbols through LE relocs
  - new IA-32 TLS relocs, bugfixes and testcases
  - use brl insn on IA-64 (Richard Henderson)
  - fix R_IA64_PCREL21{M,F} handling (Richard Henderson)
  - build in separate builddir, so that gasp tests don't fail
  - include localization


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.2-1
changelog:
  - update to 2.13.90.0.2
    - fix ld TLS assertion failure (#70084)
    - fix readelf --debug-dump= handling to match man page and --help
      (#68997)
  - fix _GLOBAL_OFFSET_TABLE gas handling (#70241)


author: Jakub Jelinek <jakub@redhat.com> 2.12.90.0.15-1
changelog:
  - update to 2.12.90.0.15
  - TLS .tbss fix
  - don't use rpm %configure macro, it is broken too often (#69366)


author: Jakub Jelinek <jakub@redhat.com> 2.11.93.0.2-12
changelog:
  - fix .hidden handling on SPARC (Richard Henderson)
  - don't crash when linking -shared non-pic code with SHF_MERGE
  - fix .eh_frame_hdr for DW_EH_PE_aligned
  - correctly adjust DW_EH_PE_pcrel encoded personalities in CIEs


author: Jakub Jelinek <jakub@redhat.com> 2.11.93.0.2-4
changelog:
  - add DW_EH_PE_absptr -> DW_EH_PE_pcrel optimization for shared libs,
    if DW_EH_PE_absptr cannot be converted that way, don't build the
    .eh_frame_hdr search table


author: Jakub Jelinek <jakub@redhat.com> 2.11.93.0.2-2
changelog:
  - trade one saved runtime page for data segment (=almost always not shared)
    for up to one page of disk space where possible


author: Jakub Jelinek <jakub@redhat.com> 2.11.92.0.12-7
changelog:
  - as ld is currently not able to shrink input sections to zero size
    during discard_info, build a fake minimal CIE in that case
  - update elf-strtab patch to what was commited


author: Jakub Jelinek <jakub@redhat.com> 2.11.92.0.12-3
changelog:
  - H.J.'s patch to avoid crash if input files are not ELF
  - don't crash if a SHF_MERGE for some reason could not be merged
  - fix objcopy/strip to preserve SHF_MERGE sh_entsize
  - optimize .eh_frame sections, add PT_GNU_EH_FRAME support
  - support anonymous version tags in version script


author: Jakub Jelinek <jakub@redhat.com> 2.11.92.0.12-1
changelog:
  - update to 2.11.92.0.12
    - optimize .dynstr and .shstrtab sections (#55524)
    - fix ld.1 glitch (#55459)
  - turn relocs against SHF_MERGE local symbols with zero addend
    into STT_SECTION + addend
  - remove man pages for programs not included (nlmconv, windres, dlltool;
    - add BuildRequires for texinfo


author: Jakub Jelinek <jakub@redhat.com> 2.11.92.0.5-1
changelog:
  - update to 2.11.92.0.5
    - binutils localization (#45148)
    - fix typo in REPORT_BUGS_TO (#54325)
  - support files bigger than 2GB in strings (#54406)


author: Jakub Jelinek <jakub@redhat.com> 2.11.90.0.8-11
changelog:
  - add iplt support for IA-64 (Richard Henderson)
  - switch to new section flags for SHF_MERGE and SHF_STRINGS, put
    in compatibility code
  - "s" section flag for small data sections on IA-64 and Alpha
    (Richard Henderson)
  - fix sparc64 .plt[32768+] handling
  - don't emit .rela.stab on sparc


author: Jakub Jelinek <jakub@redhat.com> 2.11.90.0.8-8
changelog:
  - on IA-64, put crtend{,S}.o's .IA_64.unwind section last in
    .IA_64.unwind output section (for compatibility with 7.1 eh)


author: Jakub Jelinek <jakub@redhat.com> 2.11.90.0.8-6
changelog:
  - support for -z combreloc
  - remove .dynamic patch, -z combreloc patch does this better
  - set STT_FUNC default symbol sizes in .endp directive on IA-64


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - 2.11.90.0.8
    - some SHF_MERGE suport fixes
  - don't build with tooldir /usrusr instead of /usr (#40937)
  - reserve few .dynamic entries for prelinking


author: Jim Kingdon
changelog:
  - No source/spec changes, just rebuilding with egcs-1.1.2-18 because
    the older egcs was miscompling gprof.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - back out very *stupid* sparc patch done by HJLu. People, keep out of
    things you don't understand.
  - add alpha relax patch from rth


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - version  2.9.1.0.23
  - patch to make texinfo documentation compile
  - auto rebuild in the new build environment (release 2)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added ARM patch from philb
  - version 2.9.1.0.19a
  - added a patch to allow arm* arch to be identified as an ARM


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - updated to 2.8.1.0.29 (HJ warned me that this thing is a moving target...
    :-)
  - "fixed" the damn make install command so that all tools get installed


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - upgraded again to 2.8.1.0.28 (at least on alpha now egcs will compile)
  - added info packages handling


author: Trond Eivind Glomsrød <teg@redhat.com> 1.0.2-1
changelog:
  - 1.0.2
  - Total overhaul of build precedure
  - Add many small helper programs added to 1.0.2
  - drop old patches


author: Trond Eivind Glomsrød <teg@redhat.com> 1.0.1-5
changelog:
  - Don't segfault when infile is a directory and "-f" is used (#56623)
  - Automake is evil. Add workaround


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - FHS packaging to build on solaris2.5.1.
  - remove config.cache from autoconf patch.
  - sparc: use %configure, but not the m4 macros.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - autoconfed and libtoolized package 
  - fixed Copyright (it's BSD, not GPL)
  - dumped bzless (less works fine with bz2-files)
  - rewrote build and install parts
  - separated main package and devel package


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - force compilation with egcs to avoid gcc optimization bug (thank God 
    we haven't been beaten by it)


author: Jay Fenlason <fenlason@redhat.com> 2.2.13-3.4E
changelog:
  - Backport the -hop patches to prevent infinite looping when chasing referrals.
    OpenLDAP ITS #3578 as described in
    bz#158120 [RHEL3] Need help configuring host as an LDAP client

  - Create and own the /etc/openldap/cacerts directory, to close
    bz#159151 Authconfig update creates a problem with OpenLDAP server


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-3
changelog:
  - move nptl libraries into arch-specific subdirectories on %{ix86} boxes,
    to match glibc's layout
  - update notes on upgrading from previous releases
  - pull in fix for ITS #3201 from 2.2.15
  - pull in fix for ITS #3326 from 2.2.16


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-2
changelog:
  - build a separate, static set of libraries for openldap-devel with the
    non-standard ntlm bind patch applied, for use by the evolution-connector
    package (#125579), and installing them under
    %{evolution_connector_prefix} (/usr/lib/evolution-openldap)
  - provide openldap-evolution-devel = %{version}-%{release} in openldap-devel
    so that evolution-connector's source package can require a version of
    openldap-devel which provides what it wants


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-1
changelog:
  - add compat-openldap subpackage
  - default to bdb, as upstream does, gambling that we're only going to be
    on systems with nptl now


author: Thomas Woerner <twoerner@redhat.com> 2.1.29-3
changelog:
  - removed rpath
  - added pie patch: slapd and slurpd are now pie
  - requires libtool >= 1.5.6-2 (PIC libltdl.a)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-2
changelog:
  - fix incorrect use of find when attempting to detect a common permissions
    error in the init script (#114866)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-1
changelog:
  - change logging facility used from daemon to local4 (#112730, reversing #11047)
    BEHAVIOR CHANGE - SHOULD BE MENTIONED IN THE RELEASE NOTES.


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-8
changelog:
  - add another section to the ABI note for the TLS libdb so that it's marked as
    not needing an executable stack (from Arjan Van de Ven)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build bundled libdb for slapd dynamically to make the package smaller,
    among other things
  - on tls-capable arches, build libdb both with and without shared posix
    mutexes, otherwise just without
  - disable posix mutexes unconditionally for db 4.0, which shouldn't need
    them for the migration cases where it's used
  - update to MigrationTools 45


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - actually require newer libtool, as was intended back in 2.1.22-0, noted as
    missed by Jim Richardson


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-0
changelog:
  - 2.1.22 now badged stable
  - be more aggressive in what we index by default
  - use/require libtool 1.5


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install the db utils for the bundled libdb as %{_sbindir}/slapd_db_*
  - install slapcat/slapadd from 2.0.x for migration purposes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.1.17
  - disable the shell backend, not expected to work well with threads
  - drop the kerberosSecurityObject schema, the krbName attribute it
    contains is only used if slapd is built with v2 kbind support


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.27-8
changelog:
  - back down to db 4.0.x, which 2.0.x can compile with in ldbm-over-db setups
  - tweak SuSE patch to fix a few copy-paste errors and a NULL dereference


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate fixes from SuSE's security audit, except for fixes to ITS 1963,
    1936, 2007, 2009, which were included in 2.0.26.
  - add two more patches for db 4.1.24 from sleepycat's updates page
  - use openssl pkgconfig data, if any is available


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-2
changelog:
  - change LD_FLAGS to refer to /usr/kerberos/lib instead of
    /usr/kerberos/lib, which might not be right on some arches


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-1
changelog:
  - update to 2.0.25 "stable", ldbm-over-gdbm (putting off migration of LDBM
    slapd databases until we move to 2.1.x)
  - use %{_smp_mflags} when running make
  - update to MigrationTools 44
  - enable dynamic module support in slapd


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.22-2
changelog:
  - switch to an internalized Berkeley DB as the ldbm back-end  (NOTE: this breaks
    access to existing on-disk directory data)
  - add slapcat/slapadd with gdbm for migration purposes
  - remove Kerberos dependency in client libs (the direct Kerberos dependency
    is used by the server for checking {kerberos} passwords)


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.20-2
changelog:
  - temporarily disable optimizations for ia64 arches
  - specify pthreads at configure-time instead of letting configure guess


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable kbind support (deprecated, and I suspect unused)
  - configure with --with-kerberos=k5only instead of --with-kerberos=k5
  - build slapd with threads


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.12-1
changelog:
  - update to 2.0.12 to pull in fixes for setting of default TLS options, among
    other things
  - update to migration tools 39
  - drop tls patch, which was fixed better in this release


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a build-time requirement on pam-devel
  - add a build-time requirement on a sufficiently-new libtool to link
    shared libraries to other shared libraries (which is needed in order
    for prelinking to work)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - require cyrus-sasl-md5 (support for DIGEST-MD5 is required for RFC
    compliance) by name (follows from #43079, which split cyrus-sasl's
    cram-md5 and digest-md5 modules out into cyrus-sasl-md5)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move shared libraries to /lib
  - redo init script for better internationalization (#26154)
  - don't use ldaprc files in the current directory (#38402) (patch from
    hps@intermeta.de)
  - add BuildPrereq on tcp wrappers since we configure with
    --enable-wrappers (#43707)
  - don't overflow debug buffer in mail500 (#41751)
  - don't call krb5_free_creds instead of krb5_free_cred_contents any
    more (#43159)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build dummy certificate in %post, use it in default config
  - configure-time shenanigans to help a confused configure script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - back out pidfile patches, which interact weirdly with Linux threads
  - mark non-standard schema as such by moving them to a different directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add support for additional OPTIONS, SLAPD_OPTIONS, and SLURPD_OPTIONS in
    a /etc/sysconfig/ldap file (#23549)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change automount object OID from 1.3.6.1.1.1.2.9 to 1.3.6.1.1.1.2.13,
    per mail from the ldap-nis mailing list


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add Norbert Klasen's patch (via Del) to fix searches using ldaps URLs
    (OpenLDAP ITS #889)
  - add "-h ldaps:///" to server init when TLS is enabled, in order to support
    ldaps in addition to the regular STARTTLS (suggested by Del)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - reorganize the patch list to separate MigrationTools and OpenLDAP patches
  - switch to Luke Howard's rfc822MailMember schema instead of the aliases.schema
  - configure slapd to run as the non-root user "ldap" (#19370)
  - chdir() before chroot() (we don't use chroot, though) (#19369)
  - disable saving of the pid file because the parent thread which saves it and
    the child thread which listens have different pids


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add missing required attributes to conversion scripts to comply with schema
  - add schema for mail aliases, autofs, and kerberosSecurityObject rooted in
    our own OID tree to define attributes and classes migration scripts expect
  - tweak automounter migration script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - try adding the suffix first when doing online migrations
  - force ldapadd to use simple authentication in migration scripts
  - add indexing of a few attributes to the default configuration
  - add commented-out section on using TLS to default configuration


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.0.6
  - add buildprereq on cyrus-sasl-devel, krb5-devel, openssl-devel
  - take the -s flag off of slapadd invocations in migration tools
  - add the cosine.schema to the default server config, needed by inetorgperson


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add the nis.schema and inetorgperson.schema to the default server config
  - make ldapadd a hard link to ldapmodify because they're identical binaries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build a semistatic slurpd with threads, everything else without
  - disable reverse lookups, per email on OpenLDAP mailing lists
  - make sure the execute bits are set on the shared libraries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - split off clients and servers to shrink down the package and remove the
    base package's dependency on Perl
  - make certain that the binaries have sane permissions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch to gdbm; I'm getting off the db merry-go-round
  - tweak the init script some more
  - add instdir to @INC in migration scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak init script to return error codes properly
  - change initscripts dependency to one on /etc/init.d


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.11
  - add condrestart logic to init script
  - munge migration scripts so that you don't have to be
    /usr/share/openldap/migration to run them
  - add code to create pid files in /var/run


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - more minimalistic fix for bug #11111 after consultation with OpenLDAP team
  - backport replacement for the ldapuser patch


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.10
  - add revamped version of patch from kos@bastard.net to allow execution as
    any non-root user
  - remove test suite from %build because of weirdness in the build system


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the defaults for databases and whatnot to /var/lib/ldap (bug #10714)
  - fix some possible string-handling problems


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add -D_REENTRANT to make threaded stuff more stable, even though it looks
    like the sources define it, too
  - mark *.ph files in migration tools as config files


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 1.2.7
  - fix some bugs from bugzilla (#4885, #4887, #4888, #4967)
  - take include files out of base package


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Reinstated changes:
    - Applied patch to prevent occasional cupsd crash on reload (bug #164641).
    - Applied patch to fix STR #1068 (bug #164642).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - REVERTED last two changes:
    - Applied patch to prevent occasional cupsd crash on reload (bug #146850).
    - Applied patch to fix STR #1068 (bug #146236).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Applied patch to prevent occasional cupsd crash on reload (bug #146850).
  - Applied patch to fix STR #1068 (bug #146236).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.9
changelog:
  - Make cancel-cups(1) man page point to lp-cups(1) not lp(1) (bug #136973).
  - Use upstream patch for STR #953.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.7
changelog:
  - Prevent filters generating incorrect PS in locales where "," is the
    decimal separator (bug #136102).  Patch from STR #970.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.21-1.rc2.1
changelog:
  - 1.1.21rc2.
  - No longer need state, reload-timeout or str743 patches.
  - httpnBase64 patch no longer applies; alternate method implemented
    upstream.
  - Fix single byte overread in usersys.c (spotted by Colin Walters).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-9
changelog:
  - Apply patches from CVS (authtype) to fix STR #434, STR #611, and as a
    result STR #719.  This fixes several problems including those noted in
    bug #114999.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-8
changelog:
  - If cupsd fails to start, make it exit with an appropriate code so that
    initlog notifies the user (bug #110135).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fix cups/util.c:get_num_sdests() to use encryption when it is necessary
    or requested (bug #118982).
  - Use upstream patch for the HTTP/1.1 Continue bug (from STR716).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-7
changelog:
  - Fix non-conformance with HTTP/1.1, which caused failures when printing
    to a Xerox Phaser 8200 via IPP (bug #122352).
  - Make lppasswd(1) PIE.
  - Rotate logs within cupsd (instead of relying on logrotate) if we start
    to approach the filesystem file size limit (bug #123003).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-4
changelog:
  - Tracked D-BUS API changes.
  - Updated D-BUS configuration file.
  - Symlinks to avoid conflicting with bash builtins (bug #102490).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-2
changelog:
  - Try harder to find a translated page for the web interface (bug #107619).
  - Added build_as_pie conditional to spec file to facilitate debugging.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-1
changelog:
  - 1.1.20.
  - No longer need idefense, str226 patches.
  - Updated sanity patch.
  - The devel sub-package requires openssl-devel (bug #110772).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Don't ignore the file descriptor when ShutdownClient is called: it
    might get closed before we next try to read it (bug #107787).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-10
changelog:
  - Pass correct attributes-natural-language through even in the absence
    of translations for that language (bug #100984).
  - Show compilation command lines.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-0.rc4.1
changelog:
  - 1.1.19rc4.  Ported initscript, idefense, ppdsdat, dbus patches.
  - No longer need error, sigchld patches.
  - Ship cupstestppd.


author: Havoc Pennington <hp@redhat.com> 1:1.1.18-4
changelog:
  - adjust dbus patch - dbus_bus_get() sends the hello for you, 
    and there were a couple of memleaks
  - buildprereq dbus 0.9
  - rebuild for new dbus
  - hope it works, I'm ssh'd in with no way to test. ;-)


author: Tim Waugh <twaugh@redhat.com> 1.1.18-1
changelog:
  - 1.1.18.
  - No longer need uninit patch.
  - Some parts of the iDefense and pdftops patches seem to have been
    picked up, but not others.


author: Tim Waugh <twaugh@redhat.com> 1.1.17-6
changelog:
  - Add epoch to internal requirements.
  - Make 'condrestart' return success exit code when daemon isn't running.


author: Nalin Dahyabhai <nalin@redhat.com> 1.1.15-14
changelog:
  - Buildrequire pam-devel.
  - Patch default PAM config file to remove directory names from module paths,
    allowing the configuration files to work equally well on multilib systems.
  - Patch default PAM config file to use system-auth, require the file at build-
    time because that's what data/Makefile checks for.


author: Tim Waugh <twaugh@redhat.com> 1.1.15-13
changelog:
  - Use logrotate for log rotation (bug #76791).
  - No longer need cups.desktop, since redhat-config-printer handles it.


author: Tim Waugh <twaugh@redhat.com> 1.1.15-11
changelog:
  - Use %configure for multilib correctness.
  - Use libexec instead of lib for CUPS_SERVERBIN.
  - Ship translated man pages.
  - Remove unshipped files.
  - Fix file list permissions (bug #59021, bug #74738).
  - Fix messy initscript output (bug #65857).
  - Add 'reload' to initscript (bug #76114).


author: Tim Waugh <twaugh@redhat.com> 1.1.15-7
changelog:
  - Really add cups-lpd xinetd file (bug #63919).
  - Ship pstoraster (bug #69573).
  - Prevent fread from trying to read from beyond EOF (fixes a segfault
    with new glibc).


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.15-3
changelog:
  - Add a symlink /usr/share/cups/doc -> /usr/share/doc/cups-devel-1.1.15
    because some applications expect to find the cups docs in
    /usr/share/cups/doc


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.15-1
changelog:
  - 1.1.15-1
  - Fix up smb printing trigger (samba-client, not samba-clients)
  - Start cupsd earlier, apparently it needs to be running before samba
    starts up for smb printing to work.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.14-12
changelog:
  - Support SMB printing (#62407)
  - Add HTML redirections to doc files to work around users mistaking
    /usr/share/doc/cups-1.1.14 for the web frontend (#62405)


author: Bill Nottingham <notting@redhat.com> 1.1.14-7
changelog:
  - lpc man page is alternative too
  - run ldconfig in -libs %post/%postun, not main
  - remove alternatives in %preun


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.13-5
changelog:
  - Move cups-config to cups-devel subpackage
  - Make alternatives usage a %define to simplify builds for earlier
    releases
  - Explicitly provide things we're supplying through alternatives
    to shut up kdeutils dependencies


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.13-1
changelog:
  - 1.1.13
  - Add patch for koi8-{r,u} and iso8859-8 encodings (#59018)
  - Rename init scripts so we can safely "killall cupsd" from there


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 1.1.1 (this has some major bugfixes)
  - Fix a typo in initscript (it's $?, not ?$)
  - Fix /usr/etc vs. /etc trouble, don't insist on /usr/var (YUCK!)
  - Create the spool dir


author: Than Ngo <than@redhat.de>
changelog:
  - update to 1.1 release
  - move back to /etc/rc.d/init.d
  - fix cupsd.init to work with /etc/init.d and /etc/rc.d/init.d
  - split cups


author: Tim Powers <timp@redhat.com>
changelog:
  - started changelog 
  - fixed init.d script location
  - changed script in init.d quite a bit and made more like the rest of our
    startup scripts


author: Adrian Havill <havill@redhat.com> 7.12.1-1
changelog:
  - upgrade to 7.12.1
  - enable GSSAPI auth (#129353)
  - enable I18N domain names (#134595)
  - workaround for broken ProFTPD SSL auth (#134133). Thanks to
    Aleksandar Milivojevic


author: Adrian Havill <havill@redhat.com> 7.10.6-7
changelog:
  - aclocal before libtoolize
  - move OpenLDAP license so it's present as a doc file, present in
    both the source and binary as per conditions


author: Joe Orton <jorton@redhat.com> 7.9.8-2
changelog:
  - fix `curl-config --libs` output for libdir!=/usr/lib
  - remove docs/LIBCURL from docs list; remove unpackaged libcurl.la
  - libtoolize and reconf


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - include curl-config in curl-devel
  - update to 7.8 to fix memory leak and strlcat() symbol pollution from libcurl


author: Tim Powers <timp@redhat.com>
changelog:
  - update to 7.4.1 to fix bug #20337, problems with curl -c
  - not using patch anymore, it's included in the new source. Keeping
    for reference


author: Tim Powers <timp@redhat.com>
changelog:
  - changelog started
  - general cleanups, changed prefix to /usr, added manpage to files section
  - including in Powertools


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-7
changelog:
  - don't error out in %install if the info dir file we remove from the build
    root isn't there (depends on the version of texinfo installed, reported by
    Arnd Bergmann)


author: Tim Waugh <twaugh@redhat.com 1.11.2-5
changelog:
  - Fix mktemp patch (bug #66669)
  - Incorporate patch to fix verifymsg behaviour on empty logs (bug #66022)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-3
changelog:
  - incorporate patch to fix incorrect socket descriptor usage (#65225)
  - incorporate patches to not choke on empty commit messages and to always
    send them (#66017)
  - incorporate patch to not infinitely recurse on assertion failures (#66019)


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.11.1p1-3
changelog:
  - Fix up initial cvs login (#47457)
  - Bring back the leading newline at the beginning of commit messages
    "a" is one key less than "O". ;)
  - Fix build in the current build system


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.11.1p1
  - drop no-longer-necessary patches
  - use bundled zlib, because it's apparently not the same as the system zlib
  - run the test suite in the build phase
  - drop explicit Requires: on perl (RPM will catch the interpreter req)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix cvs-1.11-security.patch, which had CR-LF line terminators (#25090)
  - check for and ignore ENOENT errors when attempting to remove symlinks (#25173)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - reverse sense of conditional kerberos dependency
  - add kerberos IV patch from Ken Raeburn
  - switch to using the system's zlib instead of built-in
  - default to unstripped binaries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build with gssapi auth (--with-gssapi, --with-encryption)
  - apply patch to update libs to krb5 1.1.1


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - fix the damn info pages too while we're at it.
  - fix description
  - man pages are compressed
  - make sure %post and %preun work okay


author: Christopher Aillon <caillon@redhat.com> 0.9.1-4
changelog:
  - Rebuilt to pick up new mozilla changes
  - Drop ppc from the build since mozilla doesn't build there anymore.


author: Colin Walters <walters@redhat.com> 0.9-2
changelog:
  - Apply patch from George Karabin <gkarabin@pobox.com> to
    export LD_LIBRARY_PATH (closes bug 120220).


author: Mark McLoughlin <markmc@redhat.com> 0.9-1
changelog:
  - Update to 0.9
  - Install the schemas correctly
  - Package /usr/bin/devhelp-bin
  - Update requires/buildrequires
  - Only build on platforms where mozilla is available


author: Alexander Larsson <alexl@redhat.com> 1:0.91-1
changelog:
  - Update to 0.91
  - Remove printing patch, it doesn't nearly apply yet, and might
    not be needed since dia is all utf8:y now.


author: Alexander Larsson <alexl@redhat.com>
changelog:
  - Updated from upstream (0.88.1)
  - Removed source1 (ja.po) since it was in upstream
  - Disabled patch1 since it breaks 8bit non-multibyte locales.
  - Updated patch 3


author: Akira TAGOH <tagoh@redhat.com>
changelog:
  - -2
  - Fixed install po.
  - Updated Japanese translation.
    Note: Please remove Source1: when release the next upstream version.
  - Added Japanese patch.
  - -3
  - Fixed text render bug.


author: Akira Imamura <aimamura@redhat.com> 1.1.9-1
changelog:
  Updated source package to diskdumputils-1.1.9.tar.gz:
    - Boot-time "Device not specified in /etc/sysconfig/diskdump"
      message should not be displayed when swapsavecore is executed
      by rc.sysinit.  BZ #165843


author: Akira Imamura <aimamura@redhat.com> 1.1.8-1
changelog:
  Updated source package to diskdumputils-1.1.8.tar.gz:
    - Restores the code which converts zero-ed pages to file holes.
      BZ #165356


author: Akira Imamura <aimamura@redhat.com> 1.1.7-2
changelog:
  Updated source package to diskdumputils-1.1.7.tar.gz, which
    removes the configuration line reference to the as-of-yet 
    unsupported PRESERVEDUMP feature from the sysconfig.diskdump file.


author: Akira Imamura <aimamura@redhat.com> 1.1.4-2
changelog:
  Updated source package to diskdumputils-1.1.4.tar.gz, which adds:
    - Multiple PT_LOAD segments support.  BZ #154923
    - Partial dump support added to diskdumpfmt.  FZ #145575
    - Swap partition support.  FZ #160223
    - Enabled to configure diskdump with /proc/mounts.  BZ #155200


author: Akira Imamura <aimamura@redhat.com> 1.0.1-1
changelog:
  - Updated source package to diskdumputils-1.0.1.tar.gz, which adds
    support for disk host adapters controlled by the sata_promise and
    ata_piix disk drivers.
  - User-space portion of FZ #132466, diskdumpfmt performance improvement.
  - Updated to use glib2 instead of glib1.  BZ #136227, BZ #148998
  - Added missing a BuildRequires for glib2-devel.  BZ #132872
  - Deleted dead code to avoid compiler complaint.  BZ #143202


author: Nobuhiro Tachino <ntachino@redhat.com>
changelog:
  - v0.2.99
  - Fixed by Dave Anderson's review
  - Whole English in manuals and README were updated.
  - FIxed invalid size specified in ftruncate().
  - diskdump has its own script diskdump-nospace instead of netdump-nospace.
  - add diskdump-nospace sample.


author: Jindrich Novy <jnovy@redhat.com> 0.10.12-1.EL4.1
changelog:
  - update to 10.12, this fixes CAN-2005-2361 up to CAN-2005-2367 (#164243)
  - add the rest of the cleanup patch
  - package /usr/sbin/randpkt
  - compile as PIE


author: Radek Vokal <rvokal@redhat.com> 0.10.10-1.EL4.1
changelog:
  - new release, fixes three security and stability-related issues:
  - a buffer overflow in the Etheric dissector. (CAN-2005-0704)
  - the GPRS-LLC dissector could crash if the "ignore cipher bit" option was enabled. (CAN-2005-0705)
  - a buffer overflow in the 3GPP2 A11 dissector (CAN-2005-0699)
  - a buffer overflow in the IAPP dissector.
  - a bug in the JXTA dissector could make Ethereal crash.
  - a bug in the sFlow dissector could make Ethereal crash.


author: Radek Vokal <rvokal@redhat.com> 0.10.9-1.EL4.1
changelog:
  - release fixes the following security-related issues: (#145483)
  - The COPS dissector could go into an infinite loop. (CAN-2005-0006)
  - The DLSw dissector could cause an assertion (CAN-2005-0007)
  - The DNP dissector could cause memory corruption. (CAN-2005-0008)
  - The Gnutella dissector could cause an assertion (CAN-2005-0009)
  - The MMSE dissector could free static memory. (CAN-2005-0010)
  - The X11 protocol dissector is vulnerable to a string buffer 
    overflow. (CAN-2005-0084)


author: Radek Vokal <rvokal@redhat.com> 0.10.8-1.EL4.1
changelog:
  - update to 0.10.8 due to security issues (#142952)
  - changed mozilla default browser to htmlview (#142107)


author: Phil Knirsch <pknirsch@redhat.com> 0.10.5-2
changelog:
  - Applied missing patches from previous version (#120662)
  - Fixed python module installation (#127614)


author: Phil Knirsch <pknirsch@redhat.com> 0.10.5-1
changelog:
  - Update to latest ethereal-0.10.5 due to security problems.
  - Include dftest for debugging filters.


author: Phil Knirsch <pknirsch@redhat.com> 0.9.16-3
changelog:
  - Added BuildRequires for elfutils-devel (#89466).
  - Fixed buggy desktop entry (#105704).
  - Fixed out of bound array access (#110749).


author: Phil Knirsch <pknirsch@redhat.com> 0.9.8-5
changelog:
  - Fixed overflow bug in time display (#80943, 2nd part).
  - Reenabled autoFOO stuff as ia64 has problems building.


author: Phil Knirsch <pknirsch@redhat.com> 0.9.8-1
changelog:
  - Updated to 0.9.8. Fixes security bug (#79490).
  - Included Swedish translation for desktop entry (#71874).


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-2
changelog:
  - Remove directory names from the PAM config, allowing it to work for both
    arches on multilib boxes.
  - Drop the Icon: from the package.


author: Phil Knirsch <pknirsch@redhat.com> 0.9.7-1
changelog:
  - Included a few more nifty tools in from newer releases.
  - Fixed a couple of broken %files things.
  - Update to 0.9.7


author: Elliot Lee <sopwith@redhat.com> 0.9.4-5
changelog:
  - Put -DUCD_COMPATIBLE (and a bunch of other BadHacks) into CPPFLAGS
    so that it really builds with new net-snmp


author: Phil Knirsch <pknirsch@redhat.com> 0.9.4-4
changelog:
  - Bumped and rebuild in new environment.
  - Changed requirement to net-snmp from ucd-snmp.
  - Added -DUCD_COMPATIBLE to build with new net-snmp.


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Bump release number to avoid conflicts with rawhide.
  - Changed description of ethereal-gnome package to be more precise about the
    intention of this package (#57980)


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - update 0.8.18-9 -> 0.9.0-1
  - enable IPv6 now that it is being supported without patches
  - require libpcap 0.6


author: Tim Powers <timp@redhat.com>
changelog:
  - removed packager tag to satisfy rpmlint
  - don't include the .directory file
  - added dep on usermode for ethereal
  - moved the desktop files from Applications/Network to Internet


author: Tim Powers <timp@redhat.com>
changelog:
  - merged gtk/gnome packages into the gnome package
  - merged the base and usermode packages into the main ethereal package


author: Henri Gomez <hgomez@slib.fr>
changelog:
  - rebuilt under Redhat 6.2 + updates 
  - reverted from rpm 4.0.2 to 3.0.5 for better compatibility with Redhat 6.x
  - thanks Riku for the great refactory of the spec


author: Riku Meskanen <mesrik@iki.fi>
changelog:
  - new binary package rearrangement, separated stuff that needs X11
  - I changed, and I'm proposing group to Applications/Network for now ... as 
    the /usr/share/doc/rpm-*/GROUPS 'official' list does not have appropriate
    group for networking applications and leads them to be scattered around.
    The tcpdump is now at System/Internet and nmap from Applications/System, 
    the X11/* group is now on current distros mostly dead ... the X11/* tree 
    seems to still live on contrib packages. Well if it's necessary to show X11
    in group-name, I would rather suggest then Applications/Network{,ing}/X11 
    would make more sense and keep all applications closer together and all 
    it's bits and bobs easier locatable on multiple packages are built from
    one source package.


author: Riku Meskanen <mesrik@iki.fi>
changelog:
  - rebuilt for RedHat 7.1
  - created support for usermode
  - added icons & config files for gnome and kde desktop integration
  - added %dir /usr/lib/ethereal/plugins to get clean uninstall
  - further spec file minor cleaning, converted absolute paths to
    macros for better relocatability


author: Henri Gomez <hgomez@slib.fr>
changelog:
  - 0.8.16
  - RPM built on Redhat 6.1, updates, rpm 3.0.5 and libpcap-0.4-19
  - ucd-snmp used 0.4.2-5 (added -lcrypto)


author: David Malcolm <dmalcolm@redhat.com> - 2.0.2-16.1
changelog:
  - Fixed CAN-2005-2549 (Sitic Vulnerability Advisory: SA05-001) and for
    CAN-2005-2550 as far as it can affect RHEL4 (patch 202, #165235)


author: David Malcolm <dmalcolm@redhat.com> - 2.0.2-15
changelog:
  - Added patch for #155377 (CAN-2005-0806)
  - Added patch for #155375 (camel-lock-helper, CAN-2005-0102)


author: David Malcolm <dmalcolm@redhat.com> - 2.0.2-12
changelog:
  - Changed mozilla buildtime dependencies to be >=1.7.3 rather than 1.7.3 to isolate evolution
  builds from changing mozilla versions.


author: David Malcolm <dmalcolm@redhat.com> - 2.0.2-11
changelog:
  - Removed explicit run-time spec-file requirement on mozilla.
    The Mozilla NSS API/ABI stabilised by version 1.7.3
    The libraries are always located in the libdir
    However, the headers are in /usr/include/mozilla-1.7.10
    and so they move each time the mozilla version changes.
    So we no longer have an explicit mozilla run-time requirement in the specfile; 
    a requirement on the appropriate NSS and NSPR .so files is automagically generated on build.
    We have an explicit, exact build-time version, so that we can find the headers (without
    invoking an RPM query from the spec file; to do so is considered bad practice)
  - Introduced mozilla_build_version, to replace mozilla_version


author: David Malcolm <dmalcolm@redhat.com> - 2.0.2-10
changelog:
  - apply patches to use Pango for printing addressbooks and calendars, fixing issues with non-Roman scripts (#138075)
  This introduces an ABI dependency on libgnomeprint >= 2.7.0; however this is dependency is already pulled in by the gtkhtml3 package


author: David Malcolm <dmalcolm@redhat.com> - 2.0.2-8
changelog:
  - updated s390/s390x to use the same version of mozilla as other architectures (1.7.3), rather than 1.6


author: David Malcolm <dmalcolm@redhat.com> - 2.0.2-5
changelog:
  - Added evolution-2.0.2-userguide-source-branding.patch to remove certain distro-specific references in documentation (#122195)
  - Added evolution-2.0.2-link-to-gss.patch to make "Help" links from two error dialogs take the user to GSS (#133978)
  - Added evolution-2.0.2-remove-quick-reference.patch to remove "Quick Reference" from menu (#122195)


author: David Malcolm <dmalcolm@redhat.com> - 2.0.2-2
changelog:
  - Fix for #132050 (no entry for Evolution in the menus): use the new redhat-evolution.desktop file provided by redhat-menus-1.13


author: David Malcolm <dmalcolm@redhat.com> - 2.0.2-1
changelog:
  - Update from 2.0.1 to 2.0.2
  - Updated dependency on e-d-s from 1.0.1 to 1.0.2
  - Updated dependency on libgal2 from 2.2.2 to 2.2.3
  - Updated dependency on gtkhtml3 from 3.3.0 to 3.3.2
  - ppc's mozilla dependency is now in line with the other architectures at 1.7.3


author: David Malcolm <dmalcolm@redhat.com> - 2.0.1-3
changelog:
  - Fix for #135135, updating the fix for #103826 that removes the evolution.desktop file in "Office"; the file to delete had been renamed to evolution-2.0.desktop
  - Added requirement on redhat-menus, since this supplies the target of our .desktop symlink


author: David Malcolm <dmalcolm@redhat.com> - 2.0.1-2
changelog:
  - update mozilla dependency from 1.7.2 to 1.7.3, apart from on ppc (and on s390 and s390x, which remain at 1.6, and on ppc64 where it isn't available at all)


author: David Malcolm <dmalcolm@redhat.com> - 2.0.1-1
changelog:
  - Update from 2.0.0 to 2.0.1
  - Updated dependency on e-d-s from 1.0.0 to 1.0.1
  - Updated dependency on libgal2 from 2.2.0 to 2.2.2


author: David Malcolm <dmalcolm@redhat.com> - 2.0.0-1
changelog:
  - Update from 1.5.94.1 to 2.0.0
  - Change source FTP location from 1.5 to 2.0
  - Updated dependency on e-d-s from 0.0.99 to 1.0.0
  - Documentation has now moved from 1.5 to 2.0


author: David Malcolm <dmalcolm@redhat.com> - 1.5.94.1-1
changelog:
  - updated tarball from 1.5.93 to 1.5.94.1
  - the BASE_VERSION in the configure.in script has finally been updated from 1.5 to 2.0 (affects OAFIIDs, install dirs, binary names etc); updated evo_major and various other parts of the spec-file to reflect this; however documentation is still 1.5 in upstream tarball
  - updated dependency on libgal2 from 2:2.1.14 to 2:2.2.0
  - updated dependency on libsoup from 2.1.13 to 2.2.0
  - updated dependency on e-d-s from 0.0.98 to 0.0.99


author: David Malcolm <dmalcolm@redhat.com> - 1.5.93-2
changelog:
  - updated gnome-icon-theme requirement from 1.2.0 to 1.3.6 to fix problem with missing stock icons (bz #130142)


author: David Malcolm <dmalcolm@redhat.com> - 1.5.93-1
changelog:
  - updated tarball from 1.5.92.2 to 1.5.93
  - removed filechooser patch - this is now in the upstream tarball, with a test at configuration time; it was autodetected and enabled in my test build; I've explicitly enabled it to be certain.
  - updated dependency on libgal2 from 2:2.1.13 to 2:2.1.14
  - updated dependency on libsoup from 2.1.12 to 2.1.13
  - updated dependency on e-d-s from 0.0.97 to 0.0.98


author: David Malcolm <dmalcolm@redhat.com> - 1.5.92.1-1
changelog:
  - updated tarball from 1.5.91 to 1.5.92.1
  - added a dependency on gnome-icon-theme
  - updated dependency on libgal2 from 2:2.1.11 to 2:2.1.13
  - updated dependency on gtkhtml3 from 3.1.17 to 3.3.0
  - updated dependency on libsoup from 2.1.11 to 2.1.12
  - updated dependency on e-d-s from 0.0.95 to 0.0.97


author: Jeremy Katz <katzj@redhat.com> - 1.5.90-5
changelog:
  - use mozilla 1.7 on platforms where it's available
  - check to make sure the appropriate mozilla headers exist if using
    mozilla nss for ssl or fail the build


author: David Malcolm <dmalcolm@redhat.com> - 1.5.7-3
changelog:
  - Added GtkFileChooser patch based on work by Carlos Garnacho Parro (http://lists.ximian.com/archives/public/evolution-patches/2004-March/004867.html); added requirement for GTK 2.4


author: Jeremy Katz <katzj@redhat.com> 1.4.5-6
changelog:
  - Make imap command length shorter to avoid choking some imap servers 
    (notably cyrus-imap).
  - Make wombat session managed so that we don't hit weird bonobo activation
    things.  This adds a dependency on $DISPLAY for wombat.  (#106826)


author: Jeremy Katz <katzj@redhat.com> 1.4.5-5
changelog:
  - use AI_ADDRCONFIG to avoid returning IPv6 addresses on hosts without 
    IPv6 support
  - add patch from upstream with reply-to-list shortcut (Ctrl-l)


author: Jeremy Katz <katzj@redhat.com> 1.4.5-3
changelog:
  - Pull in some patches from upstream CVS
    * Avoid division by zero with POP (X#41610)
    * Don't mangle headers (X#33545)
    * Prefix IPV6 numeric hosts properly (X#46006, #105028)
    * Use proper function for IPV6 reverse lookups (X#46006)
    * Allow timezone offset to be up to 14 hours (X#49357)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - add patch from upstream CVS to fix SMTP syntax problems (#106630) 
  - really remove duplicate menu entry (#103826)


author: Jeremy Katz <katzj@redhat.com> 1.4.4-5
changelog:
  - patch from upstream to fix display of some mails in 
    different charsets (#102899)
  - add requires on newer version of ORBit2 (#103386)
  - add patch from upstream (extracted by George Karabin) to use gnome-vfs 
    mime icon lookup where available (#102553)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - update to 1.3
  - don't build with pilot support for now
  - don't redhat-ify the summary prefs for now


author: Jeremy Katz <katzj@redhat.com> 1.2.2-5
changelog:
  - security patches from upstream
    - sanity check UUEncoding header before decoding (CAN-2003-0128)
    - don't decode doubly UUEncoded content (CAN-2003-0129)
    - don't use a bonobo component to display things without registered 
      handlers (CAN-2003-0130)


author: Jeremy Katz <katzj@redhat.com> 1.2.2-3
changelog:
  - memleak patch had some bits that weren't supposed to be there.  update 
    to newer from upstream.
  - fix directory checking in proxy patch


author: Jeremy Katz <katzj@redhat.com> 1.2.2-2
changelog:
  - add missing build dep (#84388)
  - add patch from upstream for evolution-mail memleak
  - add patch from upstream to use the gnome2 proxy settings by default


author: Jeremy Katz <katzj@redhat.com> 1.2.0-6
changelog:
  - require a newer soup, the old one Has Bugs (tm)
  - excludearch x86_64; getting a R_X86_64_32S relocation in libical 
    although everything appears to be built with -fPIC correctly


author: Jeremy Katz <katzj@redhat.com> 1.2.0-4
changelog:
  - add upstream patch to handle LDAPv3 better
  - add upstream patch to fix shell memory leaks
  - add upstream patch to fix ldap scope selection
  - build with openssl instead of mozilla-nss since it's available on 
    more platforms
  - build on all arches


author: Jeremy Katz <katzj@redhat.com> 1.2.0-2
changelog:
  - macro-ify the mozilla version to make it easier to build against 
    newer mozillas with headers in new locations
  - buildrequire pilot-link-devel (#78077)
  - drop uneeded ldapv3 patch (toshok says 1.2 already handles this)
  - drop unneeded patch for ordering of the libdb checks
  - add fejj's patch to always subscribe to the inbox from evolution-patches


author: Jeremy Katz <katzj@redhat.com> 1.0.8-3
changelog:
  - remove static and libtool archives for importers and camel-providers (#68222)
  - do desktop-file-install magic 
  - remove dead sites from summary list (#64522)
  - support openldap protocol version 3 based off of Nalin's autofs changes


author: Jeremy Katz <katzj@redhat.com> 1.0.3-6
changelog:
  - add patch to fix spool unread counts (#64198)
  - build with the fix for the crasher mail sent to 
    evolution-list (ximian #24140)


author: Jeremy Katz <katzj@redhat.com> 1.0.3-4
changelog:
  - include fejj(at)ximian.com's patch to fix the EINPROGRESS error with ssl 
    since it's been committed to the branch and fixes the problem for me
  - include patch from tagoh(at)redhat.com to change the default charset 
    for Japanese to ISO-2022-JP (#63214)


author: Jeremy Katz <katzj@redhat.com> 1.0.3-3
changelog:
  - minor tweaks to the redhatify patch
  - make accepting appointments sent to mailing lists work
  - use the RFC specified LDAP attribs for freebusy and calendarURI 
    in addressbook
  - fix a crash in the startup wizard


author: Jeremy Katz <katzj@redhat.com> 1.0.2-3
changelog:
  - mozilla 0.9.9 has nspr and nss subpackages, hooray!  rip out the static 
    libnss linkage and just link against what is provided dynamically
  - kill the -devel subpackage since it's of questionable use
  - explicitly require mozilla-nss and mozilla-nspr packages to make it easier
    to resolve the requirements


author: Jeremy Katz <katzj@redhat.com> 1.0.1-1
changelog:
  - update to 1.0.1
  - patch for autoconf 2.52 accepted upstream
  - include man page
  - use --with-sub-version=" (%{version}-%{release})"


author: Jeremy Katz <katzj@redhat.com> 1.0-2
changelog:
  - really disable news
  - add patch from Jens Petersen <juhp@redhat.com> to hopefully get 
    builds working with autoconf 2.52
  - conditionalize static libnss stuff so that it can go away when we
    have a mozilla with shared libnss


author: Jeremy Katz <katzj@redhat.com> 1.0-1.7.2
changelog:
  - add patches off of branch for:
    * do not show up as Preview Release in version string
    * have next/previous work with multiple selected messages
  - build without pilot support


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - let's build with an included copy of libnss now since OpenSSL is support
    is disabled on the 1.0 branch
  - build with --enable-dot-locking=no
  - excludearch ia64 again now that we need libnspr


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - build with gnome-pilot and krb5 support
  - conditionalize ldap, pilot and krb5 support
  - clean up buildrequires some


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - we can build on ia64 since we're using openssl instead of nspr
  - disable non-functional nntp support 
  - 0.99.2 (rc2)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - add explicit requires on current bonobo, oaf, and GConf to help people
    help themselves
  - s/Copyright/License/


author: Thomas Woerner <twoerner@redhat.com> 4.43-1
changelog:
  - new version 4.43 with sasl support
  - new exiscan-acl-4.43-28
  - new config.samples and FAQ-html (added publication date)
  - new BuildRequires for cyrus-sasl-devel openldap-devel openssl-devel
    and PreReq for cyrus-sasl openldap openssl


author: Thomas Woerner <twoerner@redhat.com> 4.34-3
changelog:
  - added pre-definition of local_delivery using Cyrus-IMAP (#122912)
  - added BuildRequires for pam-devel (#124555)
  - fixed format string bugs (#125117)
  - fixed sa-exim code placed wrong in spec file (#127102)
  - extended postun with alternatives call


author: David Woodhouse <dwmw2@redhat.com> 4.32-1
changelog:
  - update to Exim 4.32, exiscan-acl 4.32-17, sa-exim 4.0
  - Fix Provides: and Source urls.
  - include exiqgrep, exim_checkaccess, exipick
  - require /etc/aliases instead of setup


author: Thomas Woerner <twoerner@redhat.com> 4.30-5
changelog:
  - /usr/lib/sendmail is in alternatives, now
  - /etc/alises is now in setup: new Requires for setup >= 2.5.31-1


author: Thomas Woerner <twoerner@redhat.com> 4.30-4
changelog:
  - fixed group test in init script
  - fixed config patch: use /etc/exim/exim.conf instead of /usr/exim/exim4.conf


author: Nigel Metheringham <Nigel.Metheringham@InTechnology.co.uk> - 4.30-3
changelog:
  - Use exim.8 manpage from upstream
  - Add eximstats.8 man page (from pod)
  - Fixed mailq(1) man page alternatives links


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - do not package /etc/aliases. We currently require sendmail rpm until
    /etc/aliases moves into a more suitable rpm like "setup" or something else.


author: Tim Waugh <twaugh@redhat.com> 3.22-11
changelog:
  - SIGALRM patch from maintainer (bug #20908).
  - There's no README.IPV6 any more (bug #32378).
  - Fix logrotate entry for exim's pidfile scheme (bug #35436).
  - ignore_target_hosts crash fix from maintainer.
  - Make the summary start with a capital letter.
  - Add reload entry to initscript; use $0 in strings.


author: Tim Waugh <twaugh@redhat.com> 3.22-10
changelog:
  - Make sure db ownership is correct on upgrade, since we don't run as
    root when running as a daemon any more.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Security patch no longer required; 3.20 and later have a hide feature
    to do the same thing.
  - Mark exim.conf noreplace.
  - Better libident (RST) patch.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fix eximconfig so that it tells the user the correct place to look
    for documentation
  - Fix configure.default to deliver mail as group mail so that local
    delivery works


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - 3.20 (bug #21895).  Absorbs configure.default patch
  - Put URLs in source tags where applicable
  - Add build requirement on pam-devel


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix up eximconfig's header generation (we're not Debian), Bug #18068
  - BuildRequires db2-devel (Bug #18089)
  - Fix typo in logrotate script (Bug #18308)
  - Local delivery must be setuid to work (Bug #18314)
  - Don't send TCP RST packages to ident (Bug #19048)


author: Than Ngo <than@redhat.de>
changelog:
  - add missing restart function in startup script
  - add rm -rf $RPM_BUILD_ROOT in install section
  - use %{_tmppath}


author: Tim Powers <timp@redhat.com>
changelog:
  - fixed the groups to be in Red Hat groups.
  - removed Vendor header since it is going to be marked Red Hat in our build
  	system.
  - quiet setups
  - strip binaries
  - fixed so that man pages can be auto gzipped by new RPM (in files list
  	/usr/man/*/* )
  - built for Powertools 6.2


author: Mark Bergsma <mark@mbergsma.demon.nl>
changelog:
  - Added embedded Perl support.
  - Added tcp_wrappers support.
  - Added extra documentation in a new doc subpackage.


author: Mark Bergsma <mark@mbergsma.demon.nl>
changelog:
  - Now using the '%changelog' tag.
  - Removed the SysV init links - let chkconfig handle them. 
  - Replaced install -d with mkdir -p


author: Mark Bergsma <mark@mbergsma.demon.nl>
changelog:
  - Removed executable permission bits of /etc/exim.conf
  - Removed setuid permission bits of all programs except exim
  - Changed spool/log directory owner/groups to 'mail'
  - Changed the default configuration file to make exim run
        as user and group 'mail'.


author: Mark Bergsma <mark@mbergsma.demon.nl>
changelog:
  - Added the /usr/bin/rmail -> /usr/sbin/exim symlink.
  - Added the convert4r3 script.
  - Added the transport-filter.pl script to the documentation.


author: Mark Bergsma <mark@mbergsma.demon.nl>
changelog:
  - Added procmail transport and director, and made that the
        default.
  - Added the unknownuser.sh script to the documentation.


author: Mark Bergsma <mark@mbergsma.demon.nl>
changelog:
  - Added manpage for exim.
  - Fixed symlinks pointing to targets under Buildroot.
  - The exim logfiles will now only be removed when uninstalling,
        not upgrading.


author: Christopher Aillon <caillon@redhat.com> 0:1.0.3-1.4.1
changelog:
  - Update to upstream 1.0.3 fixing several security vulnerabilities.
  - Update to latest pango patchset, fixing italic font rendering.
  - Use latest firefox artwork


author: Christopher Aillon <caillon@redhat.com> 0:1.0-12.EL4
changelog:
  - Fix dummy locales for proper navigator.language support (#141452)
  - Don't have downloads "disappear" when downloading to desktop (#139015)
  - Add RPM version to useragent
  - BuildRequires pango-devel


author: Christopher Aillon <caillon@redhat.com> 0:1.0-10.EL4
changelog:
  - Only enable pango for Indic locales
  - Add dummy langpacks for indic and es to get the correct index.html start page


author: Christopher Blizzard <blizzard@redhat.com> 0:1.0-6.EL4
changelog:
  - Patch from notting to make sure navigator.language is set the
    same as the language pack in use (#141452)


author: Christopher Aillon <caillon@redhat.com> 0:0.10.1-1.0PR1.20
changelog:
  - More file chooser fixes:
      Pop up a confirmation dialog before overwriting files (#134648)
      Allow saving as complete once again
  - Fix for upstream 263263.


author: Christopher Blizzard <blizzard@redhat.com> 0:0.10.1-1.0PR1.15
changelog:
  - Fix problem where default apps aren't showing up in the download
    dialog (#136261)
  - Fix default height being larger than the available area, cherry picked
    from upstream


author: Christopher Aillon <caillon@redhat.com> 0:0.10.1-1.0PR1.12
changelog:
  - Disable the default application checks. (#133713)
  - Disable the software update feature. (#136017)


author: Christopher Aillon <caillon@redhat.com> 0:0.10.1-1.0PR1.9
changelog:
  - Fix compile issues (#134914)
  - Add patch to fix button focus issues (#133507)
  - Add patches to fix tab focus stealing issue (b.m.o #124750)


author: Christopher Aillon <caillon@redhat.com> 0:0.10.0-1.0PR1.2
changelog:
  - Change the vendor to mozilla not fedora
  - Build with --disable-strip so debuginfo packages work (#133738)
  - Add pkgconfig patch (bmo #261090)


author: Christopher Aillon <caillon@redhat.com> 0:0.10.0-1.0PR1.1
changelog:
  - Add a BR for desktop-file-utils
  - Update default configuration options to use the firefox mozconfig (#132916)
  - Use Red Hat bookmarks (#133262)
  - Update default homepage (#132721)
  - Fix JS math on AMD64 (#133226)
  - Build with MOZILLA_OFICIAL (#132917)


author: Christopher Aillon <caillon@redhat.com> 0:0.10.0-1.0PR1.0
changelog:
  - Update to 1.0PR1
  - Update man page references to say Firefox instead of Firebird
  - Remove gcc34 and extensions patch; they are now upstream
  - Update desktop database
  - Minor tweaks to the .desktop file


author: Christopher Aillon <caillon@redhat.com> 0:0.9.3-8
changelog:
  - Fixup .desktop entry Name, GenericName, and Comment (#131602)
  - Add MimeType desktop entry (patch from jrb@redhat.com)
  - Build with --disable-xprint


author: Adrian Reber <adrian@lisas.de> 0:0.9.3-0.fdr.5
changelog:
  - remove ldconfig from scriptlets (bug #1846 comment #40)
  - reenabled mng support (bug #1971)
  - removed --enable-strip to let rpm to the stripping (bug #1971)
  - honor system settings in firefox.sh (bug #1971)
  - setting umask 022 in scriptlets (bug #1962)


author: Adrian Reber <adrian@lisas.de> 0:0.9.3-0.fdr.1
changelog:
  - updated to 0.9.3
  - removed following from .mozconfig:
      ac_add_options --with-system-mng
      ac_add_options --enable-xprint
      ac_add_options --disable-dtd-debug
      ac_add_options --disable-freetype2
      ac_add_options --enable-strip-libs
      ac_add_options --enable-reorder
      ac_add_options --enable-mathml
      ac_add_options --without-system-nspr


author: Adrian Reber <adrian@lisas.de> 0:0.9.2-0.fdr.5
changelog:
  - applied parts of the patch from Matthias Saou (bug #1846)
  - delete empty directories in %{ffdir}/chrome
  - more cosmetic changes to the spec file


author: Adrian Reber <adrian@lisas.de> 0:0.9-0.fdr.4
changelog:
  - remove extensions patch
  - add post hack to create extensions
  - enable negotiateauth extension
  - copy icon to browser/app/default.xpm
  - --enable-official-branding


author: Gene Czarcinski <gene@czarc.net>
changelog:
  - more x86_64 fixes
  - fix firefix-xremote-client for x86_64 (similar to what is done for
    firefox.sh.in)


author: Warren Togami <wtogami@redhat.com> 0:0.8-0.fdr.9
changelog:
  - xremote patch for thunderbird integration #1113
  - back out ugly hack from /usr/bin/firefox
  - correct default bookmarks


author: Adrian Reber <adrian@lisas.de> - 0:0.7-0.fdr.2
changelog:
  - s/0.6.1/0.7/
  - changed user-app-dir back to .phoenix as .mozilla-firebird
    is not working as expected
  - manpage now also available as MozillaFirebird.1


author: Adrian Reber <adrian@lisas.de> - 0:0.7-0.fdr.1
changelog:
  - updated to 0.7
  - provides webclient
  - run regxpcom and regchrome after installation and removal
  - added a man page from the debian package
  - changed user-app-dir from .phoenix to .mozilla-firebird


author: Adrian Reber <adrian@lisas.de> - 0:0.6.1-0.fdr.1
changelog:
  - updated to 0.6.1
  - changed buildrequires for XFree86-devel from 0:4.3.0 to 0:4.2.1 
    it should now also build on RH80


author: Adrian Reber <adrian@lisas.de> - 0:0.6-0.fdr.4.rh90
changelog:
  - renamed it again back to MozillaFirbird
  - added libmng-devel to BuildRequires
  - startup homepage is now www.fedora.us
  - improved the startup script to use the unix remote protocol 
    to open a new window


author: Adrian Reber <adrian@lisas.de> - 0:0.6-0.fdr.3.rh90
changelog:
  - new icon from http://iconpacks.mozdev.org/phoenix/iconshots/flame48true.png
  - now using gtk2 as toolkit
  - renamed again back to mozilla-firebird (I like it better)
  - Provides: MozillaFirebird for compatibility with previous releases
  - changed default bookmarks.html to contain links to www.fedora.us


author: Adrian Reber <adrian@lisas.de> - 0:0.6-0.fdr.2.rh90
changelog:
  - renamed package to MozillaFirebird and all files with the old name
  - enabled mng, mathml, xinerama support
  - now honouring RPM_OPT_FLAGS


author: Phillip Compton <pcompton[AT]proteinmedia.com> - 0:0.6-0.fdr.0.3.cvs20030402.rh90
changelog:
  - Changed Prereq to Requires.
  - Changed BuildRequires to gtk+-devel (instead of file).
  - Recompressed source with bzip2.
  - Removed post.


author: Phillip Compton <pcompton[AT]proteinmedia.com> - 0:0.6-0.fdr.0.2.cvs20030402.rh90
changelog:
  - Added desktop-file-utils to BuildRequires.
  - Changed category to X-Fedora-Extra.
  - Updated to CVS.


author: Phillip Compton <pcompton[AT]proteinmedia.com> - 0.6-0.fdr.0.1.cvs20030326.rh90
changelog:
  - Updated to latest CVS.
  - Changed release to 9 vs 8.1.
  - Added cvs script.
  - added encoding to desktop file.


author: Phillip Compton <pcompton[AT]proteinmedia.com> - 0.6-0.fdr.0.1.cvs20030323.rh81
changelog:
  - Updated to latest CVS.
  - added release specification XFree86-devel Build Requirement.
  - changed chmod to %attr


author: Christopher Aillon <caillon@redhat.com> 0:1.0.7-1.4.1
changelog:
  - Update to 1.0.7, containing fixes for:
    CAN-2005-2701 CAN-2005-2702 CAN-2005-2703 CAN-2005-2704
    CAN-2005-2705 CAN-2005-2706 CAN-2005-2707 CAN-2005-2968


author: Thomas Woerner <twoerner@redhat.com> 1.0.1-3.RHEL4
changelog:
  - Fixed buffer overflow and possible SQL injection attacks in rlm_sql
    CAN-2005-1454, CAN-2005-1455 (#156941)


author: Thomas Woerner <twoerner@redhat.com> 1.0.0-0.pre3.2
changelog:
  - added buildrequires for zlib-devel (#127162)
  - fixed libdir patch to prefer own libeap instead of installed one (#127168)
  - fixed samba account maps in LDAP for samba v3 (#127173)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.0-2.2
changelog:
  - modify default PAM configuration to remove the directory part of the module
    name, so that 32- and 64-bit libpam (called from 32- or 64-bit radiusd) on
    multilib systems will always load the right module for the architecture
  - modify default PAM configuration to use pam_stack


author: Thomas Woerner <twoerner@redhat.com>
changelog:
  - removed la files, removed devel package
  - split into 4 packages: freeradius, freeradius-mysql, freeradius-postgresql,
      freeradius-unixODBC
  - fixed requires and buildrequires
  - create logging dir in post if it does not exist
  - fixed module load without la files


author: Warren Togami <wtogami@redhat.com> 1:1.3.1-0
changelog:
  - 1.3.1 more bug fixes
    CAN-2005-1269 CAN-2005-1934
  - enable Message Notification plugin by default


author: Warren Togami <wtogami@redhat.com> 1:1.3.0-1
changelog:
  - 1.3.0 many bug fixes and two security fixes
    long URL crash fix (#157017) CAN-2005-1261
    MSN bad messages crash fix (#157202) CAN-2005-1262


author: Warren Togami <wtogami@redhat.com> 1:1.1.4-4
changelog:
  - 144: POSIX functions became macros, build fix (#150429)
  - 145: Fix non-proxy yahoo file transfer
  - 146: Fix non-proxy yahoo buddy icons


author: Warren Togami <wtogami@redhat.com> 1:1.1.4-1
changelog:
  - 1.1.4 with MSN crash fix, g_stat() crash workaround
    CAN-2005-0208 Gaim HTML parsing DoS (another one)


author: Warren Togami <wtogami@redhat.com> 1:1.1.3-2
changelog:
  - 1.1.3 including two security fixes
    CAN-2005-0472 Client freezes when receiving certain invalid messages
    CAN-2005-0473 Client crashes when receiving specific malformed HTML


author: Warren Togami <wtogami@redhat.com> 0.82-1
changelog:
  - Update to 0.82 resolves several security issues and bugs
    CAN-2004-0500, CAN-2004-0754, CAN-2004-0784, CAN-2004-0785
    More details at http://gaim.sourceforge.net/security/


author: Warren Togami <wtogami@redhat.com> 0.81-4
changelog:
  - conditionalize features for alternate target distributions
  - remove unnecessary ExclusiveArch
  - other cleanups


author: Warren Togami <wtogami@redhat.com> 0.81-3
changelog:
  - CVS backport 133: CAN-2004-0500 MSNLP buffer overflow
                 134: Select buddy icon in new account crash
                 135: Jabber join crash
                 136: Jabber tooltip fake self crash


author: Warren Togami <wtogami@redhat.com> 0.81-1
changelog:
  - 0.81
  - krb5-devel for Zephyr
  - evolution-data-server-devel integration
    plugin disabled by default because it seems very unstable


author: Warren Togami <wtogami@redhat.com> 0.80-1
changelog:
  - update to 0.80
  - enable ExtPlacement plugin by default
  - Smiley Theme "Default" by default (bug fix)
  - Insertions -> Control-{B/I/U} by default


author: Warren Togami <wtogami@redhat.com> 0.79-2
changelog:
  - remove tray icon patch temporarily because it seems to cause more
    problems than it solves.
  - provide gaim-devel
  - CVS backport 128: Cached buddy icons fix


author: Warren Togami <wtogami@redhat.com> 0.79-1
changelog:
  - update to 0.79
  - update desktop patch
  - update header and pkgconfig locations
  - update default prefs
  - FC3 sed behavior workaround
  - temporarily disable evolution integration


author: Warren Togami <wtogami@redhat.com> 0.78-7
changelog:
  - CVS backport 125: MSN disconnect on non-fatal error fix
                 126: Paste html with img crash fix
                 127: Misplaced free fix


author: Warren Togami <wtogami@redhat.com> 0.77-7
changelog:
  - CVS backport 121: byte order badness and crashing copy & paste fix
                 122: history.so scroll to bottom in new tabs fix


author: Warren Togami <wtogami@redhat.com> 0.77-6
changelog:
  - CVS backport 118: x86-64 yahoo auth fix
                 119: Copy/paste fixes for UCS-2 encoded selection
                 120: IRC reconnect segfault fix
  - remove relnot.so plugin because it is unusable in FC
  - Default enable logging and history.so plugin
            enable autoreconnect plugin
  - Fix Gnome Default url handler


author: Warren Togami <wtogami@redhat.com> 0.77-3
changelog:
  - remove gnome-open manual, since 0.77 has "GNOME Default" as default.
  - update default prefs.xml, disable buddy icons in buddy list
  - CVS backport 114: plugin prefs saving fix
                 115: autoreconn-suppress-dialogs
                 116: fix smileys in dialogs
                 117: gtk+ 2.0 compat


author: Warren Togami <wtogami@redhat.com> 0.76-6
changelog:
  - CVS backports:
    111 Prevent Crash during password change if blank fields
    112 Prevent Crash if remote sends invalid characters
    113 Enable /etc/gaim/prefs.xml defaults for new profiles
  - Tray Icon enabled by default
  - Relabel internal version with V-R


author: Warren Togami <wtogami@redhat.com> 0.76-5
changelog:
  - CVS backports: 
    102 Fix ^F keybinding when gtkrc is set to emacs mode
    103 Add Missing File: evolution-1.5.x buildability
    104 When MSN server intermittently has problems accessing buddy list, MSN will crash with 0.76
    105, 106, 107 MSN Error reporting fixes
    108 History plugin causes unnecessary horizontal scrollbars
    109 Fix the text replace plugin 
    110 Prevent message sending while offline


author: Warren Togami <wtogami@redhat.com>
changelog:
  - CVS snapshot, generated with automake-1.7.9
  - update #4
  - update #2 but disable
  - #5 no longer needed
  - default to gnome-open #6
  - some spec cleanup


author: Christopher Blizzard <blizzard@redhat.com> 1:0.75-1.1.0
changelog:
  - Include patch that fixes a bunch of buffer-related problems, mostly
    from nectar@freebsd.org and some of my own changes.


author: Christopher Blizzard <blizzard@redhat.com> 1:0.75-0
changelog:
  - Update to 0.75.
  - Remove mem leak patch that is already included in 0.75.
  - Clean up a lot of old unused patches and old source tarballs.


author: Christopher Blizzard <blizzard@redhat.com> 0.59-7
changelog:
  - Include patch that uses htmlview instead of calling Netscape
    directly
  - Include patch that turns off the buddy ticker and changes the button
    look to the (sane) default.


author: Tim Powers <timp@redhat.com>
changelog:
  - updated to 0.11.0pre2
  - enable gnome support
  - updated ispell to aspell patch
  - cleaned up file list


author: Tim Powers <timp@redhat.com>
changelog:
  - some ideas taken from the package available at the gaim website, mainly to install the applet stuff too.


author: Tim Powers <timp@redhat.com>
changelog:
  - cleaned up spec for use with RPM 4.0 (al la _sysconfdir _datadir etc)
  - update to 0.9.17
  - yay! a man page!


author: Phil Knirsch <pknirsch@redhat.com> 2.0.27-1
changelog:
  - Updated to 2.0.27 due to:
    o Potential memory overruns in gdImageFilledPolygon. Thanks to John Ellson.
    o The sign of Y-axis values returned in the bounding box by gdImageStringFT was
      incorrect. Thanks to John Ellson and Riccardo Cohen.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.8.4-3
changelog:
  - There's really no reason to link against both freetype 1.x and 2.x,
    especially when gd is configured to use just freetype 2.x. ;)


author: Philipp Knirsch <Philipp.Knirsch@redhat.de>
changelog:
  - Fixed bug #22001 where during installation the .so.1 and the so.1.8 links
    didn't get installed and therefore updates had problems.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - define HAVE_LIBTTF to actually enable ttf support (oops, #18299)
  - remove explicit dependencies on libpng, libjpeg, et. al.
  - add BuildPrereq: freetype-devel


author: Jeff Johnston <jjohnstn@redhat.com> 6.3.0.0-1.50
changelog:
  - Fix bug with info frame and cursor address on ia64.
  - Add testcase to verify pseudo-registers calculated for ia64 sigtramp.
  - Bugzilla 160339


author: Jeff Johnston <jjohnstn@redhat.com> 6.3.0.0-1.16
changelog:
  - Update ia64 sigtramp support to use libunwind and fix top-level
    rse register reads to also use libunwind.
  - Bugzilla 151741


author: Jeff Johnston <jjohnstn@redhat.com> 6.3.0.0-0.32
changelog:
  - Modify debug register handling for x86, x86-64 to be thread-specific.
  - Modify threaded watchpoint code for x86, x86-64 to properly insert
    and remove watchpoints on all threads.


author: Andrew Cagney <cagney@redhat.com> 6.3.0.0-0.29
changelog:
  - Modify gdb-6.3-dwattype0-20050201.patch to check for a zero address
    and not zero unsnd.  Fix BE 32- vs 64-bit problem.


author: Jeff Johnston <jjohnstn@redhat.com> 6.3.0.0-0.15
changelog:
  - Tolerate DW_AT_type referencing <0> and instead of generating an
    error, treat as unknown type.
  - Bugzilla 144852.


author: Andrew Cagney <cagney@redhat.com> 6.3.0.0-0.11
changelog:
  - gdb-6.3-ppcdotsyms-20050126.patch: Backport BFD changes for reading
    synthetic symbols.  Rewrite code reading elf minimal symbols so that
    it includes synthetics.


author: Jeff Johnston <jjohnstn@redhat.com> 6.3.0.0-0.10
changelog:
  - Fix to prevent resetting unwind kernel table size to invalid value
    when debugging a core file
  - Bugzilla 145309


author: Andrew Cagney <cagney@redhat.com> 6.3.0.0-0.9
changelog:
  - When single stepping handle both back-to-back and nested signals.
  - Disable .symbol patch, results in BFD errors.


author: Jeff Johnston <jjohnstn@redhat.com> 6.3.0.0-0.8
changelog:
  - Support listing both in-charge and not-in-charge dtors when
    just the dtor name is given.
  - Add new test case for newly added ctor/dtor functionality.


author: Jeff Johnston <jjohnstn@redhat.com> 6.3.0.0-0.7
changelog:
  - Fix to allow breaking by line in both the in-charge and
    not-in-charge ctor/dtor.
  - Bugzilla 117826


author: Elena Zannoni <ezannoni@redhat.com> 6.3.0.0-0.1
changelog:
  Andrew Cagney <cagney@redhat.com>	
                    Jeff Johnston <jjohnstn@redhat.com>	
  - Various fixes to complete the import and merge.


author: Andrew Cagney <cagney@redhat.com> 1.200400607.60
changelog:
  - For PPC-64, do not set malloc name to ".malloc"; no longer needed.
  - For all, only define kfail when not already defined.


author: Andrew Cagney <cagney@redhat.com> 1.200400607.58
changelog:
  - Add rs6000 reggroups; fixes problem of PS register being trashed
    causing mysterious branch breakpoints.


author: Andrew Cagney <cagney@redhat.com> 1.200400607.57
changelog:
  - Backport i386 prolog parser - better backtraces out of semop().
  - Add option --readnever to suppress the reading of symbolic debug
    information.
  - Add script gstack.sh, installed as gstack.
    Bugzilla 136584, 137121
  - Add missing files gdb.pie/attach2.c, gdb.pie/break1.c and
    gdb.pie/Makefile.in along with testsuite/configure stuff for pie.


author: Andrew Cagney <cagney@redhat.com> 1.200400607.57
changelog:
  - Backport i386 prolog parser - better backtraces out of semop().
  - Add option --readnever to suppress the reading of symbolic debug
    information.
  - Add script gstack.sh, installed as gstack.
    Bugzilla 136584, 137121


author: Elena Zannoni <ezannoni@redhat.com> 1.200400607.51
changelog:
  - Modify configure line to not use absolute paths. This was 
    creating problems with makeinfo/texinfo.
  - Get rid of makeinfo hack.
  Bugzilla 135633


author: Andrew Cagney <cagney@redhat.com> 1.200400607.43
changelog:
  - Hack around broken PT_FPSCR defined in headers.
  - Import latest s390 fixes.
  - Disable sigstep.exp - s390 has problems.
  - Use PC's symtab when looking for a symbol.
  - Work around DW_OP_piece.


author: Andrew Cagney <cagney@redhat.com> 1.200400607.30
changelog:
  - Merge in mainline testsuite up to 2004-09-23, pick up sig*.exp tests.
    Merge in mainline infrun.c, pick up all infrun.c fixes.
    Generate bigcore's corefile from the running inferior.
    Limit bigcore's corefile to max file-size.


author: Andrew Cagney <cagney@redhat.com> 1.200400607.24
changelog:
  - Fix single-stepping when a signal is pending, was exiting program.
    -- needs kernel fix so that ptrace(PT_STEP,SIG) doesn't do a PT_CONT.
    -- sigstep.exp tests pass with this fix applied.


author: Elena Zannoni <ezannoni@redhat.com> 1.200400607.23
changelog:
  - Delete some part of gdb-6.1post-test-rh.patch, to avoid confusing
    gdb when testing itself, and loading separate debug info.


author: Andrew Cagney <cagney@redhat.com> 1.200400607.12
changelog:
  - Import wild frame ID patch.  Stops GDB incorrectly matching invalid
    frame IDs.
  - Disable bigcore on ia64 and amd64.


author: Andrew Cagney <cagney@redhat.com> 1.200400607.11
changelog:
  - Fix testsuite to kill attach process (from corrinna/mainline).
  - Fix build problems with vsyscall patch.


author: Andrew Cagney <cagney@redhat.com> 1.200400607.7
changelog:
  - Fix to ppc64 unwinder - handle glibcs function within syscall
    function hack.
  - Update sigbpt.exp, ena-dis-br.exp observer.exp signull.exp,
    step-test.exp and sizeof.exp, so that test names are architecture
    clean.
  - Disable bigcore.exp on PowerPC 64.


author: Andrew Cagney <cagney@redhat.com> 1.200400607.6
changelog:
  - Merge in mainline testsuite changes up to 2004-06-21.
  - Re-implement 32 and 64-bit PPC signal trampolines.
  - Check i386 and amd64 signal trampolines before dwarf2.
  - Allow tramp-frame when there is a symbol.
  - Test interaction between single-step, breakpoint and signal.
  - ABI: Fix PPC64 function parameters, sizeof long-double, and enum
    return values.


author: Elena Zannoni <ezannoni@redhat.com> 0.200400607.3
changelog:
  - Remove installation of mmalloc, and its info files.
  - Add hack to deal with differring info files generated by makeinfo.
  - Restore release number convention.


author: Elena Zannoni <ezannoni@redhat.com> 0.200400607.2
changelog:
  - Fix Requires and BuildRequires for libunwind dependencies.
  - Add patch to silence gcc3.4 warnings.


author: Elena Zannoni <ezannoni@redhat.com> 0.200400607.1
changelog:
  - New import: revamp everything. Remove all patches for now.
  - Update the Requires and BuildRequires sections.
  - Removed stupid Ada testcases (there is no ada support in gdb yet).


author: Jeff Johnston <jjohnstn@redhat.com> 0.20040223.6
changelog:
  - Fix thread support to recognize new threads even when they reuse
    tids of expired threads.  Also ensure that terminal is held by gdb
    while determining if a thread-create event has occurred.


author: Jeff Johnston <jjohnstn@redhat.com> 1.20031117.8
changelog:
  - Switch ia64-tdep.c to use new abi used by libunwind-0.95 and up.
  - Fix gate area specification for ia64-linux-tdep.c.
  - Fix long double support for ia64.


author: Elena Zannoni <ezannoni@redhat.com> 0.20031117.6
changelog:
  - Add patch to have unique binary names in the testsuite.
  - Disable s390/s390x pthread.exp test (FIXME)
  - Don't install any info files for the ppc platform. Let's take them
    from the ppc64 one (or we get install conflicts).
  - Remove generated info files from the source tree. They are generated
    as part of the FSF snapshot process.


author: Elena Zannoni <ezannoni@redhat.com> 0.20031117.5
changelog:
  - Add patches from old rpm for i386 support on x86_64.
  - Add build dependency on libunwind for ia64.


author: Elena Zannoni <ezannoni@redhat.com> 0.20031117.1
changelog:
  - Import new gdb snapshot from mainline FSF.
  - Fix some testfiles. 
  - Add fixes for gcore, and patch for libunwind support on ia64.
  - Add tests to see what versions of gcc, binutils, glibc and kernel we
    are running with.


author: Andrew Cagney <cagney@redhat.com> 0.20030710.36
changelog:
  - Rewrite ppc64 retun value methods so that they (hopefully)
  match the SysV spec.
  - Enable ppc64 testsuite.


author: Andrew Cagney <cagney@redhat.com> 0.20030710.35
changelog:
  - Hack around problem "break main" vs "break .main" when there is
  only a minimal ppc64 symbol table.  The former is a function descriptor
  and not where you want the breakpoint to go.  Only convert descriptors
  to pointers when the address is in the ".opd" section.


author: Elena Zannoni <ezannoni@redhat.com> 0.20030710.23
changelog:
  - Relax one testcase in selftest.exp a bit.
  - Accept different output as well in thread bt (platform dependent).
  - Enable testsuite run for ia64, ppc, s390 and s390x. They are in
    reasonably good shape.


author: Jeff Johnston <jjohnstn@redhat.com> 0.20030710.22
changelog:
  - Multiple ia64 fixes.
  - Fix ia64 printing of function pointers.
  - Fix ia64 prologue examination to ignore predicated insns if we
    haven't found the return address yet.
  - Skip dump.exp testcase for ia64


author: Elena Zannoni <ezannoni@redhat.com> 0.20030710.8
changelog:
  - Fix some tests by xfailing the correct target triplet for RedHat.
  - Remove include of config.h from pthreads.c testcases.


author: Elena Zannoni <ezannoni@redhat.com> 0.20030710.4
changelog:
  - Bring in sync with current head of gdb-6 branch.
  - Remove linespec patch, because included in the new sync patch.


author: Elena Zannoni <ezannoni@redhat.com> 0.20030710.3
changelog:
  - Add patch to avoid gdb segfault with bad debug info.
  - Change location of build tree to avoid conflicts with older versions
    possibly installed.


author: Elena Zannoni <ezannoni@redhat.com> 0.20030710.2
changelog:
  - Add patch to synchronize the current snapshot with the gdb-6 branch head.
  - Remove some patches that are includd in such diff.
  - Enable tests on AMD64 as well.


author: Elena Zannoni <ezannoni@redhat.com> 0.20030710.1
changelog:
  - Import new gdb snapshot.
  - Revamp gdb.spec. Get rid of patches that apply to older versions.
  - Add patches for ppc64 support, kfail and make gdb more robust in copingi
    with bad debug info.


author: Elena Zannoni <ezannoni@redhat.com> 0.20021129.37
changelog:
  * Tue Jun 03 2003 Elena Zannoni  <ezannoni@redhat.com>  0.20021129.36
  - Enable warnings for x86_64, not x86-64.
  - Fix warnings from infptrace.c and dwarfread.c.
  - Print error message only when reading separate debug info really
    doesn't work (jimb@redhat.com).


author: Elena Zannoni <ezannoni@redhat.com> 0.20021129.33
changelog:
  - New tests for asm on s390x (jimb@redhat.com). Bugzilla 90503.
  - Fixes for prologue analysis on s390x (jimb@redhat.com). Bugzilla 90506.
  - bfd fix for 64-bit platforms (jimb@redhat.com).
  - Disable ppc64 builds until we have a port.


author: Elena Zannoni <ezannoni@redhat.com> 0.20021129.29
changelog:
  - Include the gcore script, as gdb_gcore.sh and install it in
    /usr/bin as gcore.
  - One more disassembly fix for core files. Added to
    gdb-5.3post-disasm-mar2003.patch. Bugzilla 87677.
  - Enable build warnings for x86-64.


author: Elena Zannoni <ezannoni@redhat.com> 0.20021129.28
changelog:
  - Fix Java strings printing.
  - Fix memory corruption in disassembly code. Bugzilla 85644.
  - Testsuite fixes (jimb@redhat.com). Bugzilla 85457.
  - Fixes for s390 stack handling (jimb@redhat.com). Bugzilla 85039.
  - Fixes for s390 struct return (jimb@redhat.com).


author: Elena Zannoni <ezannoni@redhat.com> 0.20021129.27
changelog:
  - Fixes for disassembly of code in threaded applications. Bugzilla 87495.
  - Fixes for s390 prologue analysis. (jimb@redhat.com).
    Bugzilla bugs 85251, 85214.


author: Elena Zannoni <ezannoni@redhat.com> 0.20021129.26
changelog:
  - Fix inferior function calls with void return on x86-64. Bugzilla bug 83197.
  - Fix for upstream PR/699.
  - Fix some problems with gdb-5.3post-thrtst-feb2003.patch.


author: Elena Zannoni <ezannoni@redhat.com> 0.20021129.14
changelog:
  - New patch to fix disassembly on s390. Bugzilla bug 84286.
  - New patch for attach/ptrace fix. Bugzilla bug 84220.
  - Reenable tests for x86.


author: Elena Zannoni <ezannoni@redhat.com> 0.20021129.11
changelog:
  - Add patch for mi threads tests.
  - Add patch for dwarf2 debug_ranges section.
  - Add patch for detach bug.


author: Elena Zannoni <ezannoni@redhat.com> 0.20021129.10
changelog:
  - Add patch for testsuite auto answering internal error queries.
  - Add new TLS tests.
  - Add cleanup patches for thread tests.


author: Elena Zannoni <ezannoni@redhat.com> 0.20021129.9
changelog:
  - Add new patch for thread support. Apply on all arches.
  - Do not apply old patches, but leave them around for now.
  - Add new patch for dwarf2 debug info reading.
  - Add new patch for dwarf2 cfi engine cleanup.
  - Add new patch for uiout problems.
  - Add new patch for s390 build.
  - Disable tests on all platforms but x86.


author: Elena Zannoni <ezannoni@redhat.com> 0.20021129.8
changelog:
  - Move all the changelog entries to a single patch.
  - Add tests to the args patch.
  - Add new patch for until command fix (bugzilla Bug 19890).
  - s390 and s390x can be built with -Werror.
  - Run make check for s390 and s390x too.
  - Include an updated version of the thread nptl patch (still WIP).


author: Elena Zannoni <ezannoni@redhat.com> 0.20021129.6
changelog:
  - Add patches for NPTL support, to be applied on i386 only.
    (this is still WIP)
  - Split old misc patch in two parts.
  - Temporarily disable testsuite run on alpha.


author: Elliot Lee <sopwith@redhat.com> 0.20021129.4
changelog:
  - The define directive to rpm is significant even if the line it is 
    in happens to start with a '#' character. Fixed.


author: Elena Zannoni <ezannoni@redhat.com> 0.20021129.3
changelog:
  - Merge previous patches for warnings into a single one.
  - Add changelogs to patches.
  - Add, but don't use, a macro to avoid stripping.


author: Elena Zannoni <ezannoni@redhat.com>
changelog:
  - Add patch to allow debugging of executables with debug info stored
    in separate files.
  - Add patch for Makefile dependencies and disable warnings for
    building thread-db.c.
  - Re-enable building with -Werror for alpha, ia64, ppc.


author: Elena Zannoni <ezannoni@redhat.com>
changelog:
  - Don't pass to gdb an empty build warnings flag, or that will disable warnings
    completely. We want to build using gdb's standard warnings instead.


author: Elena Zannoni <ezannoni@redhat.com>
changelog:
  - x86_64 doesn't build with Werror yet.
  - Add patch for alpha.
  - Alpha doesn't build with -Werror either.
  - Add patch for ia64.
  - Add patch for ppc.
  - Drop ia64 from -Werror list.
  - Drop ppc from -Werror list.


author: Elena Zannoni <ezannoni@redhat.com>
changelog:
  - Add dejagnu to the build requirements.
  - Enable make check.
  - Add enable-gdb-build-warnings to the configure flags.


author: Elena Zannoni <ezannoni@redhat.com>
changelog:
  - Import new upstream sources.
  - Change version and release strings.
  - Upgrade patches.
  - Build gdb/gdbserver as well.
  - Define and use 'cvsdate'.
  - Do %setup specifying the source directory name. 
  - Don't cd up one dir before removing tcl and friends.
  - Change the configure command to allow for the new source tree name.
  - Ditto for the copy of NEWS.
  - Add some comments.


author: Elena Zannoni <ezannoni@redhat.com> 5.2.1-5
changelog:
  General revamp.
  - Add patch for gdb/doc/Makefile.in. Part of fix for bug 77615.
  - Add patch for mmalloc/Makefile.in. Part of fix for bug 77615.
  - Change string printed in version.in to <version>-<release>rh.
  - Move the deletion of dejagnu, expect, tcl to the prep section,
    from the build section.
  - Add build directory housekeeping to build section.
  - Use macros for configure parameters.
  - Do the build in a separate directory.
  - Prepare for testing, but not enable it yet.
  - Correctly copy the NEWS file to the top level directory, for the doc
    section to find it.
  - Cd to build directory before doing install.
  - Use makeinstall macro, w/o options.
  - Remove workaround for broken gdb info files. Part of fix for bug 77615.
  - Remove share/locale directory, it is in binutils.
  - Remove info/dir file.
  - Clarify meaning of post-install section.
  - Add gdbint info files to post-install, pre-uninstall and files sections.
    Part of fix for bugs 77615, 76423.
  - Add libmmalloc.a to package.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - New snapshot
  - Add ncurses-devel to buildprereq
  - Remove perl from buildprereq, as gdb changed the way 
    version strings are generated


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Add patch from kevinb@redhat.com to fix floating point + thread 
    problem (#24310)
  - remove old workarounds
  - new snapshot


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - new snapshot which should fix some more IA64 problems (#29151)
  - remove IA64 patch, it's now integrated


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - add IA64 and Alpha patches from Kevin Buettner <kevinb@redhat.com>
  - use perl instead of patch for fixing the version string


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Link with ncurses 5.x even though we're using kgcc.
    No need to drag in requirements on ncurses4 (Bug #24445)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - new CVS snapshot
  - disable the patches
  - don't use %configure, as it confuses the autoconf script
  - enable SPARC, disable Alpha


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - use %configure, %makeinstall, %{_infodir}, %{_mandir},
    and %{_tmppath}
  - the install scripts  for info are broken(they don't care about
    you specify in the installstep), work around that.
  - don't build for IA64


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - upgraded to 5.0 - dump all patches. Reapply later if needed.
  - added the NEWS file to the %doc files
  - don't delete files which doesn't get installed (readline, texinfo)
  - let build system handle stripping and gzipping
  - don't delete libmmalloc
  - apply patch from jakub@redhat.com to make it build on SPARC


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix reading registers from core on sparc.
  - hack around build problems on i386 with glibc 2.1.3 headers


author: Jim Kingdon
changelog:
  - List files to install in /usr/info specifically (so we don't pick up
  things like info.info from GDB snapshots).


author: Jim Kingdon
changelog:
  - Update GDB to 19991004 snapshot.  This eliminates the need for the
  sigtramp, sparc, xref, and threads patches.  Update sparcmin patch.


author: Jim Kingdon
changelog:
  - Remove H.J. Lu's patches (they had been commented out).
  - Add sigtramp patch (from gdb.cygnus.com) and threads patch (adapted
  from code fusion CD-ROM).


author: Matthias Clasen <mclasen@redhat.com> - 1:0.22.0-17.el4.3
changelog:
  - Prevent another integer overflow in the xpm loader (#171900, CVE-2005-2976)
  - Prevent an infinite loop in the xpm loader (#171900, CVE-2005-2976)


author: Owen Taylor <otaylor@redhat.com> - 1:0.22.0-10.0.2E
changelog:
  - Fix problem with infinite loop on bad BMP data (#130455,
    test BMP from Chris Evans, fix from Manish Singh)


author: Havoc Pennington <hp@redhat.com>
changelog:
  - fix warnings about unpackaged files (originally I was also fixing 
    libpng stuff but realized there was nothing to fix)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Own /usr/lib/gdk-pixbuf, /usr/lib/gdk-pixbuf/loaders (#27423)
  - Add BuildPrereq on gnome-libs-devel (#49444)
  - Add --disable-gtk-doc (#48988)


author: Jeff Johnson <jbj@redhat.com> 1.0.20-1
changelog:
  - update to 1.0.20.
  - add --with-included-opencdk --with-included-libtasn1
  - add --with-included-libcfg --with-included-lzo
  - add --disable-srp-authentication.
  - do "make check" after build.


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.6-2
changelog:
  - back down to 1.2.6 for now
  - build assembly modules using CC instead of AS, so that flags such as -DPIC
    will be seen by the preprocessor
  - build assembly modules with -Wa,--noexecstack


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.7-4
changelog:
  - add patch from Werner Koch to error out on ambiguous armored signatures in
    message, with some more bits from Klaus Singvogel to handle argument parsing,
    backported (CVE-2006-0049, #184556)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.7-3
changelog:
  - add backport of patch from Werner Koch to fix the exit status when verifying
    signatures when no signature is provided (CVE-2006-0455, #183484)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.3-2
changelog:
  - incorporate patch from gnupg-announce which removes the ability to create
    ElGamal encrypt+sign keys or to sign messages with such keys


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.1-3
changelog:
  - modify g10defs to look for helpers in libexecdir, because that's where they
    get installed, per gnupg-users
  - actually drop updates for 1.0.7 which are no longer needed for 1.2.1


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.0-1
changelog:
  - update to 1.2.0
  - stop stripping files manually, let the buildroot policies handle it
  - add translations updates ca and fr


author: Nalin Dahyabhai <nalin@redhat.com> 1.0.7-4
changelog:
  - add and install info pages (#67931)
  - don't include two copies of the faq, add new doc files (#67931)


author: Nalin Dahyabhai <nalin@redhat.com> 1.0.6-3
changelog:
  - set message output encoding to match the message encoding, based on a
    patch by goeran@uddeborg.pp.se (#49182)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a security patch for a problem with detached signature verification...
    might hold off for an impending 1.0.5, though


author: Joe Orton <jorton@redhat.com> 2.0.52-22.ent
changelog:
  - worker MPM: add security fix for memory consumption DoS (CVE-2005-2970),
    and bug fixes for handling resource allocation failures (#173509)


author: Joe Orton <jorton@redhat.com> 2.0.52-21.ent
changelog:
  - mod_ssl: add security fix for HTTP-on-SSL-port handling (CVE-2005-3357)
  - mod_imap: add security fix for XSS issue (CVE-2005-3352)


author: Joe Orton <jorton@redhat.com> 2.0.52-19.ent
changelog:
  - mod_ssl: add security fix for SSLVerifyClient (#167194, CVE CAN-2005-2700)
  - add security fix for byterange filter DoS (#167102, CVE CAN-2005-2728)


author: Joe Orton <jorton@redhat.com> 2.0.52-18.ent
changelog:
  - mod_auth_ldap: fix issues with some authn/authz combinations
    (thanks to Jared Jennings, #159289)
  - mod_ldap: fix cache mutex permissions so that locking works
  - mod_ldap: fix child crashes if cache is disabled


author: Joe Orton <jorton@redhat.com> 2.0.52-14.ent
changelog:
  - mod_ssl: add security fix for CRL overflow (CVE CAN-2005-1268)
  - mod_ssl: add fix to enable buffering (upstream #35279)
  - mod_ssl: immediately catch aborted connections (upstream #32699)
  - add htdbm(1) man page (Matt Brubeck, #114080)
  - mod_userdir: add fix for possible memory corruption (upstream #34588)
  - fail build if PIE support could not be enabled


author: Joe Orton <jorton@redhat.com> 2.0.52-13.ent
changelog:
  - fix fd leak if using piped loggers (#157832)
  - fix error messages in piped loggers respawn failure case
  - in children, close read fd of pipe to piped loggers (Jeff Trawick, #127981)
  - mod_ssl: apply ssl-*-shutdown settings correctly (upstream #34452)


author: Joe Orton <jorton@redhat.com> 2.0.52-11.ent
changelog:
  - restore use of $OPTIONS in apachectl again (#115910)
  - mod_ssl: set user from SSLUserName in access hook (upstream #31418)


author: Joe Orton <jorton@redhat.com> 2.0.52-10.ent
changelog:
  - mod_proxy: notice aborted client-connection (#138359)
  - mod_include: fix off-by-one in variable expansion (upstream #32985)
  - require apr with sendfile support on s390 (#146891)


author: Joe Orton <jorton@redhat.com> 2.0.52-8.ent
changelog:
  - apachectl: fix for final RHEL4 libselinux tools location
  - mod_ssl: revert to use builtin passphrase prompt again (#128667)


author: Joe Orton <jorton@redhat.com> 2.0.52-5.ent
changelog:
  - update htsslpass to be a filter rather than exec:
  - refuse to "reload" from init script if $HTTPD -t fails


author: Joe Orton <jorton@redhat.com> 2.0.52-4.ent
changelog:
  - add security fix for CVE CAN-2004-0942 (memory consumption DoS)
  - fix SSLSessionCache comment for distcache in ssl.conf
  - restart using SIGHUP not SIGUSR1 after logrotate
  - add ap_save_brigade fix (upstream #31247)
  - add htsslpass(1) and configure as default SSLPassPhraseDialog (#128677)
  - apachectl: restore use of $OPTIONS
  - apachectl: refuse to restart if $HTTPD -t fails
  - apachectl: run $HTTPD -t in user SELinux context for configtest


author: Joe Orton <jorton@redhat.com> 2.0.50-8
changelog:
  - add improved child reclaim timing logic (#119128/#132360)
  - add BuildRequire zlib-devel for mod_deflate


author: Joe Orton <jorton@redhat.com> 2.0.50-6
changelog:
  - include /etc/sysconfig/httpd template (#112085)
  - pass $OPTIONS in httpd invocations in apachectl (#115910)
  - do not pass $OPTIONS to apachectl from init script
  - start httpd in C locale by default from apachectl


author: Joe Orton <jorton@redhat.com> 2.0.50-5
changelog:
  - move manual configuration into conf.d/manual.conf (#131208)
  - add test_hook from HEAD, -t -DDUMP_CERTS for mod_ssl
  - document AddDefaultCharset change since 1.3 in migration.html


author: Joe Orton <jorton@redhat.com> 2.0.50-4
changelog:
  - start httpd in the C locale by default (#128002)
  - fix CustomLog comments in default httpd.conf (#43223)
  - ensure correct mod_suexec vs mod_userdir hook ordering 
    (Joshua Slive, upstream #18156)


author: Joe Orton <jorton@redhat.com> 2.0.50-3
changelog:
  - update -proxy11 patch
  - explain where suexec went if SuexecUserGroup is used but
    /usr/sbin/suexec is not found


author: Joe Orton <jorton@redhat.com> 2.0.49-8
changelog:
  - split out suexec into httpd-suexec package (#77972)
  - link to system pcreposix.h to fix including httpd.h


author: Joe Orton <jorton@redhat.com> 2.0.49-7
changelog:
  - don't install or use bundled pcreposix.h
  - bump default MaxClients to 256
  - drop default Timeout to 2 minutes
  - merge from upstream:
   * add fix for VirtualHost multiple address handling (Jeff Trawick)


author: Joe Orton <jorton@redhat.com> 2.0.49-5
changelog:
  - remove comments about ScoreBoardFile in httpd.conf
  - avoid redundant name lookup in pod code
  - mod_headers: add %{...}s feature for using SSL variables
  - mod_autoindex: don't truncate output on stat() failure (#117959)
  - mod_ssl: fix shmcb corruption with small caches (Geoff Thorpe)
  - mod_ssl: security fix for overflow in FakeBasicAuth (CVE CAN-2004-0488)
  - mod_deflate: fix memory consumption for large responses
  - check that suexec is setuid root (André Malo)
  - worker: add ThreadStackSize (Jeff Trawick) and ThreadGuardSize directives


author: Joe Orton <jorton@redhat.com> 2.0.49-4
changelog:
  - make "noindex" page valid XHTML 1.1 (Pascal Volk, #122020)
  - fix SEGV with no Listen directives (Michael Corcoran)
  - mod_cgi: synch with 2.0 backport proposed upstream


author: Joe Orton <jorton@redhat.com> 2.0.49-3
changelog:
  - conflict with older pcre (#121531)
  - include mod_ext_filter
  - mod_cgi: handle concurrent stderr/stdout from script


author: Joe Orton <jorton@redhat.com> 2.0.49-2
changelog:
  - mod_ssl: fix session cache memory leak (Madhu Mathihalli)
  - mod_ssl: fix SEGV when trying to shutdown during pool cleanup
  - merge the mod_proxy HTTP/1.1-compliance fixes
  - apply fix for #118020


author: Joe Orton <jorton@redhat.com> 2.0.49-1
changelog:
  - update to 2.0.49 (#118798, thanks to Robert Scheck)
  - only link ab and mod_ssl against SSL_LIBS
  - open log files using APR_LARGEFILE where available


author: Joe Orton <jorton@redhat.com> 2.0.48-17
changelog:
  - use "SSLMutex default" in default ssl.conf
  - limit to 128K XML request bodies in default httpd.conf; fix to 
    give a 413 error not a 400 if the limit is exceeded
  - mod_rewrite: add %{SSL:...} and %{HTTPS} variable lookups
  - mod_dav: propagate executable property across COPY/MOVE
  - mod_dav: give 507 on out-of-space errors in more places
  - mod_ssl: add ssl_is_https optional function
  - mod_ssl: support indexed lookup of DN components
  - mod_ssl: optimised variable lookup
  - mod_ssl: install only minimal mod_ssl.h
  - worker: fix potential hang at restart


author: Joe Orton <jorton@redhat.com> 2.0.48-16
changelog:
  - fix apxs -q installbuilddir
  - really update to ab from HEAD
  - remove check that accept() returns an fd < FD_SETSIZE


author: Joe Orton <jorton@redhat.com> 2.0.48-14
changelog:
  - mod_dav: fix 401 on destination and reject unescaped fragment in URI
  - remove redundant ldconfig invocation from mod_ssl %post
  - remove unnecessary -headusage patch


author: Joe Orton <jorton@redhat.com> 2.0.48-13
changelog:
  - allow further customisation of init script (Peter Bieringer, #114619)
  - worker fixes from upstream
  - use basename(filename) in APLOG_MARK to reduce noise levels at 
    "LogLevel debug"


author: Joe Orton <jorton@redhat.com> 2.0.48-10
changelog:
  - update to ab from HEAD
  - remove dbmmanage man page (part of #114080)
  - mod_ssl: fix streaming nph- CGI scripts over SSL
  - mod_autoindex: fixes from 2.0 branch (André Malo)
  - add NameVirtualHost vs mod_ssl warning to httpd.conf (#114315)
  - mod_proxy: HTTP/1.1-compliance fixes from HEAD


author: Joe Orton <jorton@redhat.com> 2.0.48-9
changelog:
  - use a large BSS in the test PIE executable to trigger bugs early
  - tighten check on CPP output in MMN check (#113934)


author: Joe Orton <jorton@redhat.com> 2.0.48-8
changelog:
  - add man page fixes
  - mod_include: use parser rewrite+fixes from 2.0 branch (André Malo et al)
  - mod_ssl: add distcache support (Geoff Thorpe)
  - mod_ssl: SSL variable handling fixes for non-SSL connections (various)
  - allow linking modules against specific libraries found during configure


author: Joe Orton <jorton@redhat.com> 2.0.48-7
changelog:
  - hack to ensure that /usr/sbin/suexec gets stripped
  - merges from upstream:
   * fix for CVE CAN-2003-0020 (André Malo)
   * open log files read-only (Jeff Trawick)
   * mod_cgi: fix logging of script exec failure messages (Jeff Trawick)
   * mod_proxy: fix leak in request body handling (Larry Toppi)
  - merges from Taroon:
   * move away /var/www/html/index.html before upgrade from 1.3 (#70705)
   * allow upgrade from Stronghold 4.0
   * migration guide updates 
   * mod_log_config: fix logging of timezone (upstream #23642)
   * mod_ssl: restore readable error descriptions in error log


author: Joe Orton <jorton@redhat.com> 2.0.48-6
changelog:
  - fix httpd.init issues reported by Behdad Esfahbod
  - add fix for mod_usertrack (#113269)
  - automatically raise RLIMIT_CORE if CoreDumpDirectory is used
  - emit warning at end of %prep if PIE support is not enabled
  - add symlink to libtool script from build directory (#113720)
  - don't link suexec against the world


author: Joe Orton <jorton@redhat.com> 2.0.48-5
changelog:
  - use graceful restart in logrotate
  - bump default MaxRequestsPerChild for prefork to 4000
  - move vendor string for Server header into spec file
  - include mod_status extension hook and use it in mod_ssl to include
    SSL session cache statistics in server-status output


author: Joe Orton <jorton@redhat.com> 2.0.48-2
changelog:
  - update to 2.0.48
  - includes security fix for CVE CAN-2003-0542
  - include mpm*.h to fix mod_fastcgi build (#108080)
  - increase DYNAMIC_MODULE_LIMIT to 128
  - re-enable ap_hack_* export trimming patch
  - only use -export-dynamic when linking httpd, not suexec etc
  - don't load mod_unique_id by default


author: Joe Orton <jorton@redhat.com> 2.0.47-10
changelog:
  - httpd.conf: configure test page in welcome.conf, load suexec, 
   don't use custom error docs by default, sync with upstream.
  - add "Powered by Fedora" icon (Garrett LeSage)
  - migration guide updates
  - drop mod_cgid
  - enable SSL_EXPERIMENTAL_ENGINE (#106858)
  - drop minimum suexec gid to 100 (#74753, #107083)
  - speed up graceful restarts in prefork (#105725)
  - mod_ssl fixes


author: Joe Orton <jorton@redhat.com> 2.0.47-6
changelog:
  - update httpd.conf for manual changes (alietss@yahoo.com, #101015)
  - use anonymous shm for LDAP auth cache (#103566)


author: Joe Orton <jorton@redhat.com> 2.0.47-4
changelog:
  - add mod_include fixes from upstream
  - httpd.conf updates: wording fixes from upstream; load
    mod_deflate by default, update AddLanguage section (#98455)
  - don't add eNULL cipher in default ssl.conf (#98401)
  - only bind to IPv4 addresses in default config (#98916)


author: Joe Orton <jorton@redhat.com> 2.0.45-6
changelog:
  - don't load /usr/sbin/envvars from apxs
  - add fix for mod_dav_fs namespace handling
  - add fix for mod_dav If header etag comparison
  - remove irrelevant warning from mod_proxy
  - don't conflict with thttpd (#91422)


author: Joe Orton <jorton@redhat.com> 2.0.45-5
changelog:
  - don't package any XML sources in httpd-manual
  - fix examples in default httpd.conf for enabling caching


author: Joe Orton <jorton@redhat.com> 2.0.45-3
changelog:
  - update httpd.conf for changes from default in 2.0.45
  - include conf.d/*.conf after loading standard modules
  - include LDAP and cache modules (#75370, #88277)
  - run buildconf in %build not %prep


author: Joe Orton <jorton@redhat.com> 2.0.45-1
changelog:
  - update to 2.0.45 (#82227)
  - use separate apr, apr-util packages (#74951)
  - mark logrotate file as noreplace (#85654)
  - mark all of /var/www/error as %config-not-noreplace
  - remove dates from error pages (#86474)
  - don't enable mod_cgid for worker MPM (#88819)


author: Joe Orton <jorton@redhat.com> 2.0.40-21.1
changelog:
  - add security fixes for CAN-2003-0020, CAN-2003-0132, CAN-2003-0083
  - add security fix for file descriptor leaks, #82142
  - add bug fix for #82587


author: Joe Orton <jorton@redhat.com> 2.0.40-21
changelog:
  - add security fix for CAN-2003-0020; replace non-printable characters
    with '!' when printing to error log.
  - disable debuginfo on IA64.


author: Joe Orton <jorton@redhat.com> 2.0.40-17
changelog:
  - add mod_cgid and httpd binary built with worker MPM (#75496)
  - allow choice of httpd binary in init script
  - pick appropriate CGI module based on loaded MPM in httpd.conf
  - source /etc/sysconfig/httpd in apachectl to get httpd choice
  - make "apachectl status" fail gracefully when links isn't found (#78159)


author: Joe Orton <jorton@redhat.com> 2.0.40-15
changelog:
  - fix possible infinite recursion in config dir processing (#77206)
  - fix memory leaks in request body processing (#79282)


author: Joe Orton <jorton@redhat.com> 2.0.40-14
changelog:
  - remove unstable shmht session cache from mod_ssl
  - get SSL libs from pkg-config if available (Nalin Dahyabhai)
  - stop "apxs -a -i" from inserting AddModule into httpd.conf (#78676)


author: Joe Orton <jorton@redhat.com> 2.0.40-12
changelog:
  - pass libdir to configure; clean up config_vars.mk
  - package instdso.sh, fixing apxs -i (#73428)
  - prevent build if upstream MMN differs from mmn macro
  - remove installed but unpackaged files


author: Joe Orton <jorton@redhat.com> 2.0.40-9
changelog:
  - security fixes for CAN-2002-0840 and CAN-2002-0843
  - fix for possible mod_dav segfault for certain requests


author: Joe Orton <jorton@redhat.com> 2.0.40-7
changelog:
  - add LoadModule lines for proxy modules in httpd.conf (#73349)
  - fix permissions of conf/ssl.*/ directories; add Makefiles for
    certificate management (#73352)


author: Joe Orton <jorton@redhat.com> 2.0.40-4
changelog:
  - set SIGXFSZ disposition to "ignored" (#69520)
  - make dummy connections to the first listener in config (#72692)


author: Joe Orton <jorton@redhat.com> 2.0.40-3
changelog:
  - allow "apachectl configtest" on a 1.3 httpd.conf
  - add mod_deflate
  - enable LDAP support in apr-util
  - don't package everything in /var/www/error as config(noreplace)


author: Joe Orton <jorton@redhat.com> 2.0.36-7
changelog:
  - use /sbin/nologin as shell for apache user (#68371)
  - add patch from CVS to fix possible infinite loop when processing
    internal redirects


author: Gary Benson <gbenson@redhat.com> 2.0.36-5
changelog:
  - patch apachectl to detect 1.3.x httpd.conf's and direct users
    to the migration guide
  - ship the migration guide


author: Joe Orton <jorton@redhat.com>
changelog:
  - move /etc/httpd2 back to /etc/httpd
  - add noindex.html page and poweredby logo; tweak default config
    to load noindex.html if no default "/" page is present.
  - add patch to prevent mutex errors on graceful restart


author: Joe Orton <jorton@redhat.com>
changelog:
  - initial build; based heavily on apache.spec and mod_ssl.spec
  - fixes: #65214, #58490, #57376, #61265, #65518, #58177, #57245


author: Marco Pesenti Gritti <mpg@redhat.com> 2.8.1-1
changelog:
  - Update
  - Remove CAN-2004-0888, it's upstream now
  - Remove gnome-vfs-error-checking patch, upstream


author: Dan Williams <dcbw@redaht.com> 2.8.0-1
changelog:
  - Update to 2.8.0
  - Fix Gnome #153153/Red Hat #132469, patch works around a
  	gnome-vfs issue by issuing an error, rather than crashing


author: Jeremy Katz <katzj@redhat.com> - 2.4.13-13
changelog:
  - Run query scriptlets explicitly with /bin/sh so that i386 on ia64 
    executes with the right path (#133822)


author: Matthias Clasen <mclasen@redhat.com> - 2.4.13-7
changelog:
  - Include an upstream bugfix in the 
    gtk+-2.4.9-treeview-activate.patch. This fixes
    a crasher bug (#137461)


author: Owen Taylor <otaylor@redhat.com> - 2.4.7-2.2
changelog:
  - Fix problem with infinite loop on bad BMP data (#130450, 
    test BMP from Chris Evans, fix from Manish Singh)


author: Matthias Clasen <mclasen@redhat.com> - 2.4.1-3
changelog:
  - Don't install testgtk and testtext
  - Rename binaries to -32/-64 (#124478)
  - Move arch-dependent config files to /etc/gtk-2.0/$host (#124482)
  - Add wrappers for updating the arch-dependent config files


author: Mark McLoughlin <markmc@redhat.com> 2.3.4-1
changelog:
  - Update to 2.3.4
  - Remove the xft-prefs patch, its upstream now
  - Don't kill libtool's hardcode_libdir_flag_spec anymore


author: Owen Taylor <otaylor@redhat.com> 2.2.4-2.1
changelog:
  - Fix up tutorial in packaging (#90197), add FAQ 
  - Back out change to make KP_Decimal interpretation dependent on locale
    (#101046)


author: Owen Taylor <otaylor@redhat.com> 2.2.2-2.1
changelog:
  - XFlush() rather than XSync() at the end of process_all_updates()
    (big remote X anaconda speedup)
  - Add patch to fix frequent Red Hat 9 crash 
    http://bugzilla.gnome.org/show_bug.cgi?id=105745


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Fix postun to not try to run a script through ldconfig
  - Only remove the gtk.immodules and gdk-pixbuf.loaders files if uninstalling
    while not upgrading


author: Havoc Pennington <hp@redhat.com>
changelog:
  - 2.1.3
  - remove TODO from doc, no longer exists
  - remove 64bit patch, now upstream
  - comment out scroll_to patch, jrb has to deal with this
  - remove keycode patch now upstream
  - remove usintl patch now upstream
  - remove imenvar patch, now upstream
  - remove xftprefs patch now upstream
  - remove xftdraw patch now upstream
  - remove installdir patch (no longer applies) and do "makeinstall RUN_QUERY_IMMODULES_TEST=false"
  - remove extranotify patch, now upstream
  - add gdk-pixbuf-query-loaders to file list
  - remove gdk-pixbuf.loaders and gtk.immodules in postun as they are
    not owned by the package (these should probably live in /var since they 
    aren't config files and we overwrite them all the time)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Fix a memory leak in xftprefs.patch
  - Fix extra settings notifies on startup that were causing significant
    performance problems as fonts were reloaded.


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Fixes to GtkIMContextSimple compose table for us-intl keyboards
    (#70995, Alexandre Oliva)
  - Fix problem with keycodes passed to GtkIMContextXIM


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Remove fixed-ltmain.sh, no longer needed
  - Fix bug with GTK_IM_MODULE environment variable
  - Remove profile.d entries setting GDK_USE_XFT, since we now default to it on
  - Backport patch from CVS HEAD to get Xft to work on non-RENDER XServers
  - Version 2.0.6


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Add reference docs to -devel package (#61184)
  - Use GTK2_RC_FILES, not GTK_RC_FILES, since KDE points GTK_RC_FILES 
    to gtk-1.2 ~/.gtkrc


author: Havoc Pennington <hp@redhat.com>
changelog:
  - Version 1.3.11
  - check atk/pango versions explicitly prior to build,
    so that --nodeps tricks don't result in bad binary RPMs


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - PreReq specific pango and atk versions (#49434)
  - Don't package gtk.immodules (#49584)
  - Added BuildPrereq for libtiff-devel, libjpeg-devel, libpng-devel (#49495)
  - Configure with --disable-gtk-doc (#48987)
  - Package libgdk_pixbuf_xlib (#47753)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Version 1.3.1
  - move back to /usr
  - Remove gtk-config.1 manpage from build since
    it conflicts with gtk+-devel. When we go to 
    gtk+ gtk+1.2 setup, we should add it back


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Set the charset explicitely for the default font to avoid
    problems with XFree86-4.0 where the default charset is
    iso10646-1, not iso8859-1.
  - Fix problems with size requisitions for scrolled windows
    that was causing looping. (RH bug #7997)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Explicitely set the foreground of the tooltips to black
    to avoid bad interactions with themes that set a
    light foreground color.


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Upgrade to real 1.2.5pre2
  - Changed name so upgrade to 1.2.5 will work :-(
  - Add extra gtkrc files
  - Add examples and English language tutorial to -devel package


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Update for GTK+-1.2.3
  - Patches that will be in GTK+-1.2.4
  - Patch to keep GTK+ from coredumping on X IO errors
  - Patch to improve compatilibity with GTK-1.2.1 (allow
    event mask to be set on realized widgets)


author: Marc Ewing <marc@redhat.com>
changelog:
  - Added aclocal and bin stuff to file list.
  - Added -k to the SMP make line.
  - Added lib/glib to file list.


author: Marc Ewing <marc@redhat.com>
changelog:
  - Reworked to integrate into gtk+ source tree
  - Truncated ChangeLog.  Previous Authors:
    Trond Eivind Glomsrod <teg@pvv.ntnu.no>
    Michael K. Johnson <johnsonm@redhat.com>
    Otto Hammersmith <otto@redhat.com>


author: Joe Orton <jorton@redhat.com> 2.0.52-12.2.ent
changelog:
  - mod_ssl: add security fix for SSLVerifyClient (CVE CAN-2005-2700)
  - add security fix for byterange filter DoS (#167102, CVE CAN-2005-2728)


author: Joe Orton <jorton@redhat.com> 2.0.52-12.1.ent
changelog:
  - add security fix for C-L vs T-E handling (#162244, CVE CAN-2005-2088)
  - mod_ssl: add security fix for CRL overflow (CVE CAN-2005-1268)
  - mod_userdir: add fix for possible memory corruption (upstream #34588)


author: Bill Nottingham <notting@redhat.com> 7.93.21.EL-1
changelog:
  - rc.sysinit: add call to kpartx for multipath devices (#168538)
  - use multipath.static, not dynamic multipath (#168321)
  - don't fsck netdev filesystems in rc.sysinit (#172804)


author: Bill Nottingham <notting@redhat.com> 7.93.14.EL-1
changelog:
  - prefdm: fix prefdm arg handling (#154312, <khc@pm.waw.pl>)
  - sysconfig.txt: update route documentation (#154531, <link@pobox.com>)
  - fix mistranslation (#151120)
  - rc.sysinit: reinitialize LVM on top of RAID in the mdadm case (#149514)
  - don't run rngd (#130350, essentially)
  - init.d/functions: fix echo (#155270)
  - initlog: free some of the more egregious memory leaks (#85935)
  - initlog: fix potential memory overread (#153685, <in-redhat@baka.org>)
  - add proper ipsec route (#146169, #140654)
  - fix grep mismatching interfaces (#157252, #153669)
  - handle alternate vlan naming schemes (#115001)
  - netfs: handle lvm & fsck for network block devices (#148764, <alewis@redhat.com>)
  - support for diskdump on swap partitions (#160223)
  - ifup-routes: make sure commented lines are handled correctly (#154353,


author: Bill Nottingham <notting@redhat.com> 7.93.12.EL-1
changelog:
  - fix netfs w.r.t nfs root filesystem (#142169)
  - fix multiple scsi_hostadapter loads (#145432)
  - don't run the DDC probe in kmodule
  - fix ONxxx (#136531, <cww@redhat.com>)
  - fix various fgreps to not catch commented lines (#136531, expanded
    from <cww@redhat.com>)
  - kill dhcp client even if BOOTOPROTO is now static (#127726, others)
  - set ETHTOOL_OPTS on addressless devices (#144682, <mpoole@redhat.com>)
  - change setting of IPv6 default route (#142308, <pb@bieringer.de>)


author: Bill Nottingham <notting@redhat.com> 7.93.6.EL-1
changelog:
  - fix some of the rhgb fsck code (<laroche@redhat.com>)
  - fix module blacklisting to not mismatch (#137755)


author: Bill Nottingham <notting@redhat.com> 7.93.4.EL-1
changelog:
  - fix prefdm fallback to installed display managers (#137274)
  - fix incorrect rhgb temp path (#137391)


author: Bill Nottingham <notting@redhat.com> 7.91-1
changelog:
  - rc.d/rc.sysinit: remove devlabel call
  - mdadm support, now that raidtools is gone (#126636, #88785)
  - call ipv6to4 scripts in /etc/ppp/(ip-up|ip-down) (#124390, <dwmw2@redhat.com>)
  - cleanup a couple of nits that could affect bug #134754
  - make sure we return to rhgb after fsck (#133966, #112839, #134449)
  - automatically reboot when fsck calls for it, instead of requiring
    manual intervention (#117641 and duplicates)
  - ifup-wireless: fix key for open vs. restricted (#135235, <dax@gurulabs.com>)
  - translation updates


author: Bill Nottingham <notting@redhat.com>
changelog:
  - use runuser instead of su; require it
  - init.d/halt: use right file name for random seed (#134432)


author: Bill Nottingham <notting@redhat.com> - 7.86-1
changelog:
  - use /etc/hotplug/blacklist to blacklist modules in hardware init (#132719)
  - filter indic locales on the console (#134198)


author: Bill Nottingham <notting@redhat.com> - 7.85-1
changelog:
  - ifup, network-functions: fix worked-by-accident shell quoting
  - lang.csh: remove setting of dspmbyte (#89549, <mitr@redhat.com>)
  - SELinux fixes
  - clean up prefdm
  - init.d/functions: export LC_MESSAGES (#133786)
  - allow daemon to coredump if requested (#130175)
  - network-functions: be more liberal in what we accept for link types (#90602, #127984)
  - fix overzealousness with -range aliases (#65415)
  - rc.sysinit: use s-c-keyboard, not kbdconfig (#133929)
  - fix checkpid logic, clean up potential errors (#134030)
  - translation updates


author: Bill Nottingham <notting@redhat.com> - 7.82-1
changelog:
  - fix handling of nonexistent devices (#132839)
  - rhgb enhancements (<veillard@redhat.com>, #132665)
  - initscripts.spec: require nash (#132513)
  - translation updates


author: Dan Walsh <dwalshg@redhat.com> - 7.78-2
changelog:
  - fix setting SELinux contexts on udev-created-in-initrd devices
  - Let restorecon check if selinux is enabled.


author: Bill Nottingham <notting@redhat.com> - 7.77-1
changelog:
  - mount usbfs (#131347)
  - start any automatic raid devices
  - remove triggers for ancient releases, bulletproof remaining ones (#131356)


author: Jason Vas Dias <jvdias@redhat.com> 7.73-1
changelog:
  - Add support for running the DHCPv6 client to ifup 
  - (new DHCPV6C=yes/no ifcfg-${IF} variable) + update sysconfig.txt


author: Bill Nottingham <notting@redhat.com> 7.70-1
changelog:
  - autoload hardware modules on startup
  - minor fsck cleanup (#115028, <leonard-rh-bugzilla@den.ottolander.nl>)
  - ifup: support STP bridging (#123324)
  - rc.sysinit: do a SELinux relabel if forced
  - rc.sysinit: remove devfs compat and the remaining 2.4 compat
  - ifup-wireless: support multiple keys (#127957)
  - fix firmware loading (#129155, <bnocera@redhat.com>)


author: Jason Vas Dias <jvdias@redhat.com> 7.67-1
changelog:
  - fix change_resolv_conf: if pre-existing /etc/resolv.conf
  - non-existent or empty, replace with new file contents.


author: Jason Vas Dias <jvdias@redhat.com> 7.66-1
changelog:
  - Allow users to use generic /etc/dhclient.conf if per-device
  - /etc/dhclient-${DEVICE}.conf is non-existent or empty


author: Bill Nottingham <notting@redhat.com> 7.62-1
changelog:
  - fix up resolv.conf munging (#129921)
  - use rngd if available
  - run start_udev if necessary (#120605)
  - readonly root updates (#129893, <markmc@redhat.com>)
  - ifup-wireless: quote key (#129930)
  - remove rawdevices (#130048)
  - handle binfmt_misc in rc.sysinit for the case where it's built in (#129954)
  - remove mkkerneldoth
  - don't remove linguas in lang.* (part of #9733)
  - fix nfs unmounting (#129765)
  - fix URL (#129433)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix bonding + no IP (#127285)
  - wrap second LVM initialization in vgscan check to avoid extraneous messages (#127639)


author: Bill Nottingham <notting@redhat.com> 7.59-1
changelog:
  - set context on ICE directory after making it (#127099, <concert@europe.com>)
  - don't mount GFS filesystems in rc.sysinit


author: Bill Nottingham <notting@redhat.com> 7.58-1
changelog:
  - rc.d/rc.sysinit: hack: make ICE directory on boot (#86480)
  - set devicetype for xDSL (#126194)
  - ignore locking failures when starting lvm volumes (#126192, <radu@primit.ro>)
  - unset LC_MESSAGES for rhgb (#126020, <ynakai@redhat.com>)
  - bonding fixes
  - setsysfont: remove error (#100559)
  - remove duplicate setting of network routes (#125450)
  - vlan fixes (#107504, <hrunting@texas.net>)
  - ifup-aliases: remove bogus route setting (#120908)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix bridging confusing module order (#122848, <luto@myrealbox.com>)
  - rc.d/rc.sysinit: don't mount cifs (#122501)


author: Bill Nottingham <notting@redhat.com> 7.51-1
changelog:
  - get rid of LVM error when no volumes are defined (#121197)
  - fix selinux short-circuit test (#121143, <michal@harddata.com>)
  - /dev/mapper/control is a special file, check it accordingly (#121963)
  - support ETHTOOL_OPTS on bonding slaves (#119430, <hrunting@texas.net>)
  - handle multiple spaces correctly in rc.sysinit, network-functions
    (#118583, <pallas@kadan.cz>)
  - cleanup fd leaks, mem leaks, other bogosities
    (#119987, <linux_4ever@yahoo.com>)
  - rc.d/init.d/network: remove ipv6 bogosity (#114128)
  - translation updates


author: Bill Nottingham <notting@redhat.com> 7.50-1
changelog:
  - fix LVM issues in rc.sysinit (#120458, #119975)
  - deal with fixed racoon parser
  - translation updates from translators
  - fix USB loading (#120911)


author: Bill Nottingham <notting@redhat.com> 7.49-1
changelog:
  - use alsa for mixer saving in halt
  - don't umount /proc in halt (#118880)
  - various translation updates from translators


author: Bill Nottingham <notting@redhat.com> 7.47-1
changelog:
  - translation: catch more input strings (#106285, <mitr@volny.cz>)
  - remove autologin from prefdm (#108969)
  - return to rhgb after ./unconfigured (#109807, <jkeating@j2solutions.net>)
  - handle iso15 in setsysfont (#110243)
  - clean up samba & vmware in rc.sysinit (#113104)
  - some sysconfig.txt documentation (#110427, #118063)
  - fix bug in umount-on-halt (#113088, <giardina@airlab.elet.polimi.it>)
  - handle CIFS in netfs (#115691)
  - make sure hotplug isn't stuck unset (#116666, <aoliva@redhat.com>)
  - handle network fs better in rc.sysinit (#111290)
  - nomodules applies to usb/firewire too (#113278)
  - ipsec fix (#116922, <felipe_alfaro@linuxmail.org>)
  - make sure rc exits cleanly (#117827, <enrico.scholz@informatik.tu-chemnitz.de>)
  - fsck root FS from initrd, for dynamic majors (#117575, <sct@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 7.44-1
changelog:
  - NFSv4 support (<chucklever@bigfoot.com>, <steved@redhat.com>)
  - handle 2.6-style 'install ethX ...' lines correctly
  - mount sysfs by default
  - time to clean up the cruft. remove:
    - boot-time depmod
    - linking of /boot/System.map to /boot/System.map-`uname -r`
    - /var/log/ksyms.X
    - libredhat-kernel support


author: Bill Nottingham <notting@redhat.com> 7.31-1
changelog:
  - fix bonding + dhcp (#91399)
  - fix typo (#103781)
  - sysconfig/network-scripts/ifup: fix use of local

  - fix shutdown with NFS root (#100556, <Julian.Blake@cern.ch>)
  - remove /var/run/confirm when done with /etc/rc (#100898)
  - ipcalc: fix some memory handling (#85478, <miked@ed.ac.uk>)
  - handle sorting > 10 network devices (#98209)
  - unset ONPARENT after use (#101384)
  - random other fixes
  - bridging support (<dwmw2@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 7.29-1
changelog:
  - setsysfont: don't echo to /dev/console (#102004)
  - fix ethernet device renaming deadlock (#101566)
  - consoletype: don't return 'vt' on vioconsole (#90465)
  - ifup: fix short-circuit (#101445)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ifup-routes: pass the interface name to handle_file() so that we don't try
    to use the routes file's name as an interface name


author: Bill Nottingham <notting@redhat.com> 7.27-1
changelog:
  - add a check to consoletype for the current foreground console
  - use it when running unicode_start (#98753)


author: Bill Nottingham <notting@redhat.com> 7.26-1
changelog:
  - ipsec support (see sysconfig.txt, ifup-ipsec)
  - read $CONFIG.keys, for non-world-readable keys
  - allow default window size for routes to be set with WINDOW= (#98112)
  - support setting device options with ethtool opts
  - fix s390 bootup spew (#98078)
  - support renaming interfaces with nameif based on hwaddr


author: Bill Nottingham <notting@redhat.com> 7.25-1
changelog:
  - fix DNS punching in the case of other rules for the DNS server
    (#97686, <martin@zepler.org>)
  - initlog, ppp-watch, and usernetctl tweaks (<linux_4ever@yahoo.com>)
  - fix grep for mingetty (#97188)
  - fix rhgb-client bad syntax
  - change network device searching, use correct naming, fix route issues
    (<harald@redhat.com>)
  - other random tweaks


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - initscripts-s390.patch: remove not needed parts about PNP=
  - inittab.390: sync with normal version
  - rc.sysinit: remove two further calls to /sbin/consoletype with $CONSOLETYPE


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - sysconfig/init.s390: set LOGLEVEL=3 as for other archs
  - rc.d/init.d/network, rc.d/rc: change confirmation mode to
    not use an environment variable
  - rc.d/init.d/functions: make strstr() even shorter, remove old
    "case" version that has been already commented out
  - rc.d/rc.sysinit:
  	- no need to set NETWORKING=no, it is not used/exported
  	- do not export BOOTUP
  	- delete two "sleep 1" calls that wants to add time to go
  	  into confirmation mode. There is enough time to press a
  	  key anyway or use "confirm" in /proc/cmdline.
  	- read /proc/cmdline into a variable
  	- use strstr() to search in /proc/cmdline
  	- add "forcefsck" as possible option in /proc/cmdline
  	- while removing lock files, no need to call `basename`
  	- add unamer=`uname -r` and reduce number of forks
  	- do not fork new bash to create /var/log/ksyms.0


author: Karsten Hopp <karsten@redhat.de> 7.15-1
changelog:
  - Mainframe has no /dev/ttyX devices and no mingetty, don't 
    initialize them. This gave error messages during startup


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - init.d/network: don't advertise "probe: true" in the header if we don't
    recognize "probe" as an argument


author: Bill Nottingham <notting@redhat.com> 7.09-1
changelog:
  - initialize two ttys past # of mingettys (for GDM)
  - fix zeroconf route
  - redhat-config-network writes $NAME.route for some static routes
    (e.g., ppp); handle that (#84193)


author: Bill Nottingham <notting@redhat.com> 7.08-1
changelog:
  - load keybdev & mousedev even if hid is already loaded/static
  - run fewer scripts through action (#49670, #75279, #81531)


author: Bill Nottingham <notting@redhat.com> 7.07-1
changelog:
  - fix nicknames & profiles (#82246)
  - fix check_device_down (#83780, <pzb@datstacks.com>)
  - vlan fixes (<tis@foobar.fi>)
  - fix groff macros (#83531, <tsekine@sdri.co.jp>)
  - various updated translations
  - fix checkpid for multiple pids (#83401)


author: Bill Nottingham <notting@redhat.com> 7.04-1
changelog:
  - tweak some translatable strings
  - fix for rc.sysinit on machines that pass arguments to mingetty
    (<nalin@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 7.03-1
changelog:
  - move system font setting sooner (<milan.kerslager@pslib.cz>)
  - fix link checking for dhcp, use both ethtool and mii-tool
  - fix CJK text on the console, and locale-archive held open
    on shutdown
  - IPv6 updates <pekkas@netcore.fi>, <pb@bieringer.de>
  - speedup tweaks (<drepper@redhat.com>)
  - use glib2 for ppp-watch (#78690, <kisch@mindless.com>)
  - add zeroconf route (#81738)
  - fix ifup-ppp for dial-on-demand, and onboot (<goeran@uddeborg.pp.se>)
  - tweak raidtab parsing, don't worry about not-in-fstab RAID devices
    (#71087, #78467, <aja@mit.edu>)
  - don't automatically bring up aliases if 'ONPARENT=no' is set (#78992)
  - getkey cleanups/tweaks (#76071, <ben@enchantedforest.org>)
  - rework halt_get_remaining (#76831, <michal@harddata.com>)
  - ipcalc: fix calculation of /32 addresses (#76646)
  - various other tweaks and fixes


author: Bill Nottingham <notting@redhat.com> 7.00-1
changelog:
  - tweaks for potential GUI bootup
  - loop checking for network link state, don't unilterally wait five
    seconds


author: Bill Nottingham <notting@redhat.com> 6.97-1
changelog:
  - IPv6 update (<pekkas@netcore.fi>, <pb@bieringer.de>)
  - devlabel support (<Gary_Lerhaupt@Dell.com>)
  - do lazy NFS umounts


author: Bill Nottingham <notting@redhat.com> 6.96-1
changelog:
  - fix various static-routes brokeness (#74317, #74318, #74320, #76619,
    - fix handling of SYSFONTACM in setsysfont (#75662)
  - fix lang.csh for CJK (#76908, <ynakai@redhat.com>)
  - IPv6 update (<pekkas@netcore.fi>, <pb@bieringer.de>)
  - other minor tweaks


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't infinite loop on ifdown
  - remove disabling of DMA; this can cause problems
  - move swap startup to after LVM (#66588)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't cycle through eth0-eth9 on dhcp link check (#68127)
  - don't retry indefinitely on ppp startup
  - activate network profile passed on kernel commandline via netprofile=
  - fix iptables invocations again
  - translation refresh


author: Bill Nottingham <notting@redhat.com>
changelog:
  - require /etc/redhat-release (#68903)
  - fix tty2-tty6 (sort of)
  - fix iptables invocations (#70807, #71201, #68368)
  - other minor tweaks


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - /sbin/service: set PATH before calling startup scripts
    HOME and TERM are also set during bootup, but they should not make
    a difference for well-written daemons.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - /etc/init.d/functions:
  	daemon(): avoid starting another bash
  	killproc(): avoid starting another bash for the default case
  - do not call "insmod -p" before loading the "st" module


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - allow an option for ups poweroff  #68123
  - change grep for ONBOOT=  #63903
  - allow building with a cross-compiler  #64362,#64255
  - faster check in network-functions:check_default_route()
  - better checks for backup files
  - drastically reduce the number of consoletype invocations
  - do not export "GATEWAY" in network-functions
  - code cleanups in rc.sysinit


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - rc.sysinit: do not load raid modules unless /etc/raidtab exists
  - many cleanups for more consistent shell programming and also
    many smaller speedups within network scripts, no un-necessary sourcing
    of files etc
  - nearly re-code /etc/rc.d/rc


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - start some sh coding cleanups
  - change to /etc/init.d/functions
  - eliminate some un-necessary PATH settings
  - eliminate some TEXTDOMAIN settings


author: Bill Nottingham <notting@redhat.com> 6.64-1
changelog:
  - make sure chatdbg is set before using it (#63448, <Bertil@Askelid.com>)
  - allow tweaking of more devices with hdparm (#53511), and
    tweak non-disk devices iff they explicitly have a config file
    for that device (#56575, #63415)
  - some translation updates


author: Bill Nottingham <notting@redhat.com> 6.63-1
changelog:
  - ipcalc cleanups (#58410)
  - quit stripping binaries
  - do LVM init after RAID init too (#63238)
  - export all locale variables (#56142)
  - run sysctl -p after network init as well


author: Bill Nottingham <notting@redhat.com> 6.62-1
changelog:
  - delete X/VNC locks on startup (#63035)
  - shut up DMA disabling, move it to after ide-scsi (#62873, #62956)
  - use full path to /sbin/ifconfig (#59457)
  - /sbin/service: change to root directory before staring/stopping;
    also sanitize environment


author: Bill Nottingham <notting@redhat.com> 6.56-1
changelog:
  - use nameif for interfaces where we don't agree on HWADDR with the
    config file (<harald@redhat.com>)
  - LSB support tweaks


author: Mike A. Harris <mharris@redhat.com> 6.55-1
changelog:
  - Removed process accounting stuff from rc.sysinit and halt scripts as it is
    now handled by the psacct initscript in the psacct package


author: Than Ngo <than@redhat.com>
changelog:
  - add ISDN patches from pekkas@netcore.fi and pb@bieringer.de (bug #52491)
  - fix handling of ISDN LSZ Compresssion


author: Bill Nottingham <notting@redhat.com> 6.31-1
changelog:
  - message un-tweaks (<johnsonm@redhat.com>)
  - make getkey more useful, fix some of the autofsck stuff (<johnsonm@redhat.com>)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix a broken call to check_device_down
  - make all loopback addresses have host scope, not global scope.
    Fixes #49374, possibly others


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add is_available() network function, use it; cleans up ugly modprobe
    error messages
  - update translation info
  - fix #51787


author: Than Ngo <than@redhat.com>
changelog:
  - don't set MSN if it' empty (it's now optional)
  - don't give login name as a cmdline-option (Bug #23066)
  - remove peer device file if ppp connection is down
  - fix channel bundling


author: Bill Nottingham <notting@redhat.com>
changelog:
  - tweak raittab grep slightly (#51231)
  - allow resetting of default route for DHCP addresses (#48994)
  - save resolv.conf in ifup-ppp for restoration by ifdown-post (#50759)
  - when munging firewall rules for dns, only allow dest ports 1025-65535 (#44038, #40833)
  - allow shell characters in ppp names (#43719)
  - allow setting DHCP arguments, just kill dhcpcd instead of using -k (#46492)
  - behave sanely if ifup called when dhcpcd is running (#49392, #51038)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - honor HOTPLUG=no if running under hotplug (#47483)
  - use awk, not grep, for modprobe -c checks (#49616)
  - don't print ugly messages for the case where the device doesn't exist,
    and there is no alias (i.e., PCMCIA ONBOOT=yes (#various))
  - run kbdconfig in /.unconfigured mode (#43941)
  - use a bigger buffer size argument to dmesg (#44024)
  - detach loopback devices on shutdown (#43919, #45826)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't use kbd commands in setsysfont now that we've switched back to
    console-tools (#50075)
  - sleep in check_link_down; some devices require it
  - only bring link down if check_link_down fails


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update netdev stuff to use _netdev
  - IPv6 updates (<pekkas@netcore.fi>)
  - fix downing of devices with static IPs (#49777, #49783)
  - put ifcfg-lo back in the package


author: Bill Nottingham <notting@redhat.com>
changelog:
  - own some more directories
  - use -O nonetdev, require mount package that understands this
  - fix do_netreport when called as non-root
  - remove ip addresses from interfaces on ifdown
  - oops, fix ifup/ifdown


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix '--check'
  - prereq sh-utils (#43065)
  - fix some invocations of reboot/halt (#45966)
  - fix typo in ifup-wireless
  - don't muck with /etc/issue each boot
  - big IPv6 update (<pekkas@netcore.fi>)


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - disable hwclock on S390 (no such executable)
  - Fix up kernel versioning on binary-only modules (S390)
  - don't use newt scripts on S390 console


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - reenable pump, but make sure dhcpcd is the default. This
    way, upgrades of systems without dhcpcd has a better chance at
    working.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't run ifup ppp0 if ppp-watch gets SIGINT (#40585, ak@cave.hop.stu.neva.ru)
  - fix do_netreport (#37716, #39603 <crlf@aeiou.pt>)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - copyright: GPL -> license: GPL
  - fix a syntax error in lang.csh
  - skip commented-out i18n configuration lines in lang.csh


author: Bill Nottingham <notting@redhat.com>
changelog:
  - IPv6 fixes (#30506)
  - make static-routes handling more sane and consistent (#29500, #29549)
  - handle multiple USB controllers *correctly*


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - usernetctl, ppp-watch: cleanups
  - netreport: use O_NOFOLLOW
  - ifup-ppp: let ppp-watch watch over demand-dialed connections (#28927)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't run isapnp on isapnp-enabled 2.4 kernels (part of #29450)
  - disable hotplug during network initscript
  - don't munge wireless keys in ifup; that will be done with the
    PCMCIA wireless stuff
  - run sndconfig --mungepnp for non-native-isapnp soundcards
  - don't explicitly kill things in init.d/single, init will do it
  - don't explicitly load usb-storage; mount the usbdevfs before initializing
    host controller modules


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix some substitions in init.d/functions (fixes various killproc issues)
  - make sure ipv6 module alias is available if configured
  - fix initlog segfaults in popt when called with bogus stuff (#28140)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pidofproc() and killproc() try to use the PID associated with the full
    pathname first before killing the daemon by its basename (for daemons that
    share the same basename, i.e. "master" in postfix and cyrus-imapd) (#19016)
  - fix status() as well


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add all save changes for s390 s390x that won't break anything
    patches are from Oliver Paukstadt @ millenux.com


author: Bill Nottingham <notting@redhat.com>
changelog:
  - modify firewall on ifup to allow any new DNS servers through (#25951)
  - don't muck with the font in lang.csh/lang.sh (#26349)
  - don't display Japanese if we aren't on a pty (#25041)
  - load ide-scsi if passed on /proc/cmdline


author: Bill Nottingham <notting@redhat.com>
changelog:
  - various init.d/functions cleanups (#10761, from <mjt@tls.msk.ru>)
  - in daemon(), only look at pidfile to determine if process is running
    (#17244, others)
  - ifup-ppp enhancements (#17388, from <ayn2@cornell.edu>)
  - ipv6 support (#23576, originally by Peter Bieringer <pb@bieringer.de>)
  - lots of other minor fixes (see ChangeLog)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add plusb support (#18892, patch from <eric.ayers@compgen.com>)
  - don't ignore RETRYTIMEOUT when we never connect (#14071, patch from
    <ak@cave.hop.stu.neva.ru>)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - do LVM setup through normal initscripts mechanisms
  - ignore backup files in /etc/sysconfig/network-scripts
  - lots of .po file updates


author: Bill Nottingham <notting@redhat.com>
changelog:
  - only load sound if persistent DMA buffers are necessary
  - fix lots of bugs: #18619, #21187, #21283, #12097
  - integrate MAXFAIL option for ppp-watch
  - don't load keymaps/fonts on a serial console


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - changed hdparm section in rc.sysinit to allow different
    parameters for each disk (if needed) by copying 
    /etc/sysconfig/harddisks to /etc/sysconfig/harddiskhda (hdb,hdc..)
  - fix RFE #20967


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - handle "gw x.x.x.x" as the last pair of flags in ifup-routes (#18804)
  - fix top-level makefile install target
  - make usernetctl just fall-through if getuid() == 0


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add usleep after kill -KILL in pidofproc, works around lockd issues (#14847)
  - add some fallback logic to prefdm (#16464)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't load usb drivers if they're compiled statically
  - don't call ifdown-post twice for ppp (#15285)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - remove console-tools requirement
  - in netfs, start portmap if needed
  - cosmetic cleanups, minor tweaks
  - don't probe USB controllers


author: Matt Wilson <msw@redhat.com>
changelog:
  - kill all the PreTransaction stuff
  - directory ownership cleanups, add more LSB symlinks
  - move all the stuff back in to /etc/rc.d/


author: Bill Nottingham <notting@redhat.com>
changelog:
  - tweak %pre back to a mv (rpm is fun!)
  - do USB initialization before fsck, so keyboard works if it fails


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ifup-ppp: add hooks for demand-dialing PPP
  - functions: use basename of process when looking for its PID file


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't create resolv.conf 0600
  - don't run ps as much (speed issues)
  - allow setting of MTU
  - other minor fixes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - check that LC_ALL/LINGUAS and LANG are set before referencing them in lang.csh
  - fix check for /var/*/news, work around for bug #9140


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - attempt to restore default route if PPP takes it over
  - man page fix for ipcalc
  - shvar cleaning
  - automate maintaining /boot/System.map symlinks


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - improvements in clone device handling
  - better signal handling in ppp-watch
  - yet another attempt to fix those rare PAP/CHAP problems


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fix more possible failed CHAP authentication (with chat scripts)
  - fix ppp default route problem
  - added ppp-watch man page, fixed usernetctl man page
  - make ifup-ppp work again when called from netcfg and linuxconf
  - try to keep ppp-watch from filling up logs by respawning pppd too fast
  - handle all linuxconf-style alias files with linuxconf


author: Bill Nottingham <notting@redhat.com>
changelog:
  - load mixer settings for monolithic sound
  - man page for ppp-watch
  - add ARP variable for ifup
  - some i18n fixes


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fix some failed CHAP authentication
  - fix extremely unlikely, but slightly possible kill-random-process
    bug in ppp-watch
  - allow DNS{1,2} in any ifcfg-* file, not just PPP, and
    add nameserver entries, don't just replace them
  - don't use /tmp/confirm, use /var/run/confirm instead


author: Bill Nottingham <notting@redhat.com>
changelog:
  - assorted brown paper bag fixes
  - check for programs/files before executing/sourcing them
  - control stop-a like magic sysrq


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - ppp-watch now always kills pppd pgrp to make sure dialers are dead,
    and tries to hang up the modem


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - add --remotename option to wvdial code
  - make sure we do not have an earlier version of wvdial that doesn't
    know how handle --remotename
  - make ppp-watch background itself after 30 seconds even if
    connection does not come up, at boot time only, so that a
    non-functional PPP connection cannot hang boot.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - new NFS unmounting from Bill Rugolsky <rugolsky@ead.dsa.com> 
  - fix ifup-sl/dip confusion
  - more raid startup cleanup
  - make utmp group 22


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - use new linkname argument to pppd to make if{up,down}-ppp
    reliable -- requires ppp-2.3.9 or higher


author: Bill Nottingham <notting@redhat.com>
changelog:
  - stability fixes for initlog
  - initlog now has a config file
  - add alias speedup from dharris@drh.net
  - move netfs links
  - usleep updates


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't make module-info, System.map links
  - handle utmpx/wtmpx
  - fix lots of bugs in 4.21 release :)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - clean out /var better
  - let everyone read /var/run/ppp*.dev
  - fix network startup so it doesn't depend on /usr


author: Bill Nottingham <notting@redhat.com>
changelog:
  - load keymaps & console font early
  - fixes for channel bonding, strange messages with non-boot network interfaces


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't run linuxconf if /usr isn't mounted
  - set macaddr before bootp
  - zero in the /var/run/utmpx file (gafton)
  - don't set hostname on ppp/slip (kills X)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - doc updates
  - support for SYSFONTACM, other console-tools stuff
  - add net route for interface if it isn't there.
  - fix for a bash/bash2 issue


author: Bill Nottingham <notting@redhat.com>
changelog:
  - Mmm. Must always remove debugging code. before release. *thwap*
  - pump support
  - mount -a after mount -a -t nfs


author: Bill Nottingham <notting@redhat.com>
changelog:
  - bugfixes (ifup-ppp, kill -TERM, force fsck, hwclock --adjust, setsysfont)
  - add initlog support. Now everything is logged (and bootup looks different)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - rc.sysvinit should be working with all kernel versions now
  - requires e2fsprogs (for fsck)
  - set INPUTRC and LESSCHARSET on linux-lat


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - /etc/rc.d/rc: don't run /etc/rc.d/rcN.d/[KS]??foo.{rpmsave,rpmorig} scripts.
  - /etc/rc.d/rc.sysinit: raid startup (Nigel.Metheringham@theplanet.net).
  - /sbin/setsysfont: permit unicode fonts.


author: Erik Troan <ewt@redhat.com>
changelog:
  - ipcalc should *never* have been setgid anything
  - depmod isn't run properly for non-serial numbered kernels


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Added lots of linuxconf support.  Should still work on systems that
    do not have linuxconf installed, but linuxconf gives enhanced support.
  - In concert with linuxconf, added IPX support.  Updated docs to reflect it.


author: Erik Troan <ewt@redhat.com>
changelog:
  - touch /var/lock/subsys/kerneld after cleaning out /var/lock/subsys
  - the logic for when  /var/lock/subsys/kerneld is touched was backwards


author: Erik Troan <ewt@redhat.com>
changelog:
  - tried to get /proc stuff right one more time (uses -t nonfs,proc now)
  - added support for /fsckoptions
  - changed 'yse' to 'yes' in KERNELD= line


author: Erik Troan <ewt@redhat.com>
changelog:
  - set domainname to "" if none is specified in /etc/sysconfig/network
  - fix /proc mounting to get it in /etc/mtab


author: Erik Troan <ewt@redhat.com>
changelog:
  - fixed network-scripts to allow full pathnames as config files
  - removed some old 3.0.3 pcmcia device handling


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - /var/run/netreport needs to be group-writable now that /sbin/netreport
    is setguid instead of setuid.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Added network-functions to spec file.
  - Added report functionality to usernetctl.
  - Fixed bugs I introduced into usernetctl while adding clone device support.
  - Clean up entire RPM_BUILD_ROOT directory in %clean.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Clone device support in network scripts, rc scripts, and usernetctl.
  - Disassociate from controlling tty in PPP and SLIP startup scripts,
    since they act as daemons.
  - Spec file now provides start/stop symlinks, since they don't fit in
    the CVS archive.


author: Donnie Barnes <djb@redhat.com>
changelog:
  - reworked status() to adjust for processes that change their argv[0] in
    the process table.  The process must still have it's "name" in the argv[0]
    string (ala sendmail: blah blah).


author: Donald Barnes <djb@redhat.com>
changelog:
  - added status function to functions along with better killproc 
    handling.
  - added /sbin/usleep binary (written by me) and man page
  - changed BuildRoot to /var/tmp instead of /tmp


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - /sbin/netreport sgid rather than suid.
  - /var/run/netreport writable by group root.

  - /etc/ppp/ip-{up|down} no longer exec their local versions, so
    now ifup-post and ifdown-post will be called even if ip-up.local
    and ip-down.local exist.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Support for net event notification:
    Call /sbin/netreport to request that SIGIO be sent to you whenever
    a network interface changes status (won't work for brining up SLIP
    devices).
    Call /sbin/netreport -r to remove the notification request.
  - Added ifdown-post, and made all the ifdown scrips call it, and
    added /etc/ppp/ip-down script that calls /etc/ppp/ip-down.local
    if it exists, then calls ifdown-post.
  - Moved ifup and ifdown to /sbin


author: Erik Troan <ewt@redhat.com>
changelog:
  - Added DHCP support
  - Set hostname via reverse name lookup after configuring a networking
    device if the current hostname is (none) or localhost


author: Erik Troan <ewt@redhat.com>
changelog:
  - Got rid of xargs dependency in halt script
  - Don't mount /proc twice (unmount it in between)
  - sulogin and filesystem unmounting only happened for a corrupt root 
    filesystem -- it now happens when other filesystems are corrupt as well


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Added MTU for PPP.
  - Put PPPOPTIONS at the end of the options string instead of at the
    beginning so that they override other options.  Gives users more rope...
  - Don't do module-based stuff on non-module systems.  Ignore errors if
    st module isn't there and we try to load it.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Changed ifup-ppp and ifdown-ppp not to use doexec, because the argv[0]
    provided by doexec goes away when pppd gets swapped out.
  - ifup-ppp now sets remotename to the logical name of the device.
    This will BREAK current PAP setups on netcfg-managed interfaces,
    but we needed to do this to add a reasonable interface-specific
    PAP editor to netcfg.


author: Erik Troan <ewt@redhat.com>
changelog:
  - Added usernetctl wrapper for user mode ifup and ifdown's and man page
  - Rewrote ppp and slip kill and retry code 
  - Added doexec and man page


author: Bill Nottingham <notting@redhat.com> 0.3.3-5
changelog:
  - add patch for potential validation issue when parsing isakmp headers
  - correct handling of adminport on startup (#148950)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.1-7.EL4.1
changelog:
  - security fix [CAN-2005-1992]
  - ruby-1.8.2-tcltk-multilib.patch: applied to get tcltklib.so built.
  - ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: applied to fix the arbitrary command
    execution on XMLRPC server. (#161095)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.1-7.EL4.0
changelog:
  - security fix [CAN-2004-0983]
  - ruby-1.8.1-cgi-dos.patch: applied to fix a denial of service issue. (#138362)


author: Akira TAGOH <tagoh@redhat.com> 1.8.1-1
changelog:
  - New upstream release.
  - don't use any optimization for ia64 to avoid the build failure.
  - ruby-1.8.1-ia64-stack-limit.patch: applied to fix SystemStackError when the optimization is disabled.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-9
changelog:
  - ruby-1.6.8-castnode.patch: handling the nodes with correct cast.
    use this patch now instead of ruby-1.6.8-fix-x86_64.patch.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-7
changelog:
  - fix the gcc warnings. (#82192)
  - ruby-1.6.8-fix-x86_64.patch: correct a patch.
    NOTE: DON'T USE THIS PATCH FOR BIG ENDIAN ARCHITECTURE.
  - ruby-1.6.7-long2int.patch: removed.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-2
changelog:
  - ruby-1.6.8-require.patch: applied to fix the search bug in require.
  - don't apply long2int patch to s390 and s390x. it doesn't work.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-1
changelog:
  - New upstream release.
  - removed some patches. it's no longer needed.
    - ruby-1.6.7-100.patch
    - ruby-1.6.7-101.patch
    - ruby-1.6.7-102.patch
    - ruby-1.6.7-103.patch
    - 801_extmk.rb-shellwords.patch
    - 801_mkmf.rb-shellwords.patch
    - 804_parse.y-new-bison.patch
    - 805_uri-bugfix.patch
    - ruby-1.6.6-900_XXX_strtod.patch
    - ruby-1.6.7-sux0rs.patch
    - ruby-1.6.7-libobj.patch


author: Elliot Lee <sopwith@redhat.com> 1.6.7-13
changelog:
  - Remove ExcludeArch: x86_64
  - Fix x86_64 ruby with long2int.patch (ruby was assuming that sizeof(long) 
    == sizeof(int). The patch does not fix the source of the problem, just 
    makes it a non-issue.)
  - _smp_mflags


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-11
changelog:
  - use %configure macro instead of configure script.
  - use the latest config.{sub,guess}.
  - get archname from rbconfig.rb for %dir
  - applied some patches from Debian:
    - 801_extmk.rb-shellwords.patch: use Shellwords
    - 801_mkmf.rb-shellwords.patch: mkmf.rb creates bad Makefile. the Makefile
      links libruby.a to the target.
    - 803_sample-fix-shbang.patch: all sample codes should be
      s|/usr/local/bin|/usr/bin|g
    - 804_parse.y-new-bison.patch: fix syntax warning.
    - 805_uri-bugfix.patch: uri.rb could not handle correctly broken mailto-uri.
  - add ExcludeArch x86_64 temporarily to fix Bug#74581. Right now ruby can't be
    built on x86_64.


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-10
changelog:
  - moved sitedir to /usr/lib/ruby/site_ruby again according as our perl and
    python.
  - ruby-1.6.7-resolv1.patch, ruby-1.6.7-resolv2.patch: applied to fix 'Too many
    open files - "/etc/resolv.conf"' issue. (Bug#64830)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-2
changelog:
  - ruby-man-1.4.6-jp.tar.bz2: removed.
  - ruby-refm-rdp-1.4.7-ja-html.tar.bz2: uses it instead of.
  - ruby-1.6.7-500-marshal-proc.patch, ruby-1.6.7-501-class-var.patch:
    removed.
  - ruby-1.6.7-100.patch: applied a bug fix patch.
    (ruby-dev#16274: patch for 'wm state')
    (PR#206ja: SEGV handle EXIT) 
  - ruby-1.6.7-101.patch: applied a bug fix patch.
    (ruby-list#34313: singleton should not be Marshal.dump'ed)
    (ruby-dev#16411: block local var)
  - ruby-1.6.7-102.patch: applied a bug fix patch.
    (handling multibyte chars is partially broken)
  - ruby-1.6.7-103.patch: applied a bug fix patch.
    (ruby-dev#16462: preserve reference for GC, but link should be cut)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-1
changelog:
  - New upstream release.
  - ruby-1.6.6-100.patch, ruby-1.6.6-501-ruby-mode.patch:
    removed. these patches no longer should be needed.
  - ruby-1.6.7-500-marshal-proc.patch: applied a fix patch.
    (ruby-dev#16178: Marshal::dump should call Proc#call.)
  - ruby-1.6.7-501-class-var.patch: applied a fix patch.
    (ruby-talk#35157: class vars broken in 1.6.7)


author: Akira TAGOH <tagoh@redhat.com> 1.6.6-1
changelog:
  - New upstream release.
  - Applied bug fix patches:
    - ruby-1.6.6-501-ruby-mode.patch: ruby-talk#30479: disables font-lock
      coloring.
    - ruby-1.6.6-100.patch: ruby-talk#30203: Ruby 1.6.6 bug and fix
                            ruby-list#33047: regex bug
                            PR#230: problem with -d in 1.6.6
  - Added ruby-mode and ruby-mode-xemacs packages.
  - Ruby works fine for ia64. so re-enable to build with ia64.
    (probably it should be worked for alpha)


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.6.4-2
changelog:
  - Remove Japanese description and summaries; they belong in specspo and
    break rpm
  - Clean up specfile
  - Mark language specific files (README.jp) as such
  - bzip2 sources
  - rename the libruby package to ruby-libs for consistency
  - Exclude ia64 (doesn't build - the code doesn't seem to be 64-bit clean
    [has been excluded on alpha forever])


author: akira yamada <akira@vinelinux.org>
changelog:
  - fixed bad group for libruby.
  - Applied patch: upgraded to cvs version (2001-02-08):
    fixed minor bugs.


author: akira yamada <akira@vinelinux.org>
changelog:
  - Applied patch: upgraded to cvs version (2001-01-15):
    fixed minor bugs(e.g. ruby makes extention librares too large...).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000122019.patch, added ruby_cvs.2000122215.patch
    (upgraded ruby to latest cvs version, 1.6.2-preview4).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000121413.patch, added ruby_cvs.2000122019.patch
    (upgraded ruby to latest cvs version).
  - new package: libruby


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000101901.patch, added ruby_cvs.2000121413.patch
    (upgraded ruby to latest cvs version).
  - Removed ruby-dev.11262.patch, ruby-dev.11265.patch, 
    and ruby-dev.11268.patch (included into above patch).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000101117.patch and added ruby_cvs.2000101901.patch
    (upgraded ruby to latest cvs version).
  - Added ruby-dev.11262.patch.
  - Added ruby-dev.11265.patch.


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000101117.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000100313.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100218.patch and added ruby_cvs.2000100313.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000092718.patch and added ruby_cvs.2000100218.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Updated to upstream version 1.6.1.
  - Removed ruby_cvs.2000082901.patch and added ruby_cvs.2000092718.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.6.
  - removed ruby-dev.10123.patch(included into ruby-1.4.6).
  - Added ruby_cvs.2000082901.patch(upgraded ruby to latest cvs version).


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/22/2000 CVS).
  - Removed ruby-dev.10054.patch(included into ruby_cvs.patch).


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/20/2000 CVS).
  - Removed ruby-list.23190.patch(included into ruby_cvs.patch).
  - Added ruby-dev.10054.patch.


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/12/2000 CVS).
  - Added manuals and FAQs.
  - Split into ruby, ruby-devel, ruby-tcltk, ruby-docs, irb.


author: Toru Hoshina <hoshina@best.com>
changelog:
  - Modified SPEC in order to install libruby.a so that it should be used by
    another ruby entention.
  - 2nd release.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.1-7.EL4.2
changelog:
  - security fix [CAN-2005-2337]
  - ruby-1.8.1-safe-CAN-2005-2337.patch: a patch to preserve safe level in
    the environment where a method is defined. (#169575)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.1-7.EL4.3
changelog:
  - security fix [CVE-2006-1931]
  - ruby-1.8.2-webrick-dos-1.patch: a patch to read data with non-blocking I/O.
  - ruby-1.8.2-xmlrpc-dos-1.patch: a patch to use WEBrick's HTTPServer class to
    avoid the above issue as well.


author: Ville Skyttä <scop at jpackage.org> - 0:1.4.2_08-2jpp
changelog:
  - Fix/improve mailcap and mime.types modifications.
  - Avoid leaving *.files behind after build.
  - Change to i586 (because of plugin and upstream arch availability).
  - Some trivial syncs with other java-* packages.


author: Than Ngo <than@redhat.com> 3.1.2-4
changelog:
  - disable kpovmodeler temporary. waiting for freeglut
  - built with gcc-3.3-12
  - remove excludearch s390/s390x


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.2-0.cvs20010726.1
changelog:
  - The -devel package has kscan-related files -n only. Since kscan isn't built
    on s390/s390x, don't build the devel package there.


author: Than Ngo <than@redhat.com> 7:3.3.1-3.7
changelog:
  - apply patch to fix buffer overflow issue in the xpdf codebase
    when handling splash images CVE-2006-0301 (#179055)


author: Jason Baron <jbaron@redhat.com> [2.6.9-34.0.1]
changelog:
  -ipv6: fix possible infinite loop condition (Thomas Graf) [170772] {CVE-2005-2973}
  -fix incorrect inrement/decrement in atm module (Thomas Graf) [175769] {CVE-2005-3359}
  -fix for ELF exec vulnerability on EM64T (Ernie Petrides) [183489 175663] {CVE-2006-0741 CVE-2006-0744}
  -Keys: Fix oops when adding key to non-keyring (David Howells) [188466] {CVE-2006-1522}
  -fix lsof causes kernel oops under heavy load (Adam Stokes) [189260]
  -nfs: fix client panic using O_DIRECT (Steve Dickson) [181795] {CVE-2006-0555}
  -Fix panic in ip_route_input() via inet_rtm_getroute() (Thomas Graf) [189346] {CVE-2006-1525}
  -LSM: add missing hooks to readv/writev (James Morris) [191524]
  -fix smbfs chroot issue (Peter Staubach) [189435] {CVE-2006-1864}
  -sctp: fix fixes for various vulnerabilities (Neil Horman) [191201 191202 191258] {CVE-2006-2271 CVE-2006-2272 CVE-2006-2274}
  -fix local crash by dio/mmap sg/st driver (Doug Ledford) [168791]
  -remove incorrect choose_new_parent BUG() call (Jason Baron) [187841]
  -fix bridge poisoning (Thomas Graf) [171383] {CVE-2005-3272}
  -netfilter/sctp: fix lockup in sctp_new (Thomas Graf) [190460] {CVE-2006-1527}


author: Jason Baron <jbaron@redhat.com> [2.6.9-33]
changelog:
  -fixup kcopyd nr_jobs accouting (Jonathan Brassow) [181574]
  -fixup "noht" bootline command option (Jim Paradis) [181884]


author: Jason Baron <jbaron@redhat.com> [2.6.9-30.1]
changelog:
  -sky2: allow MAC address change w/o PHY re-init (John Linville) [177987]
  -fix kabi breakage in cpuinfo_ia64 (Geoff Gustafson) [180405]
  -automatic detection and initialization of bigsmp mode (Peter Martuccelli) [172992]
  -revert: wake-balance optimizations, fixes corner case performance issue [177634]
  -optimize kprobes fault handling (Anil Keshavamurthy) [177634]
  -fix NEC Express5800 not booting (Brian Maly) [178439]
  -e1000: omnibus fixes (John Linville) [165118]
  -device-mapper snapshots: fix snapshot kcopyd destructor [179751]


author: Jason Baron <jbaron@redhat.com> [2.6.9-29]
changelog:
  -tg3: add wmb() (John Linville) [178231]
  -sky2: updates from upstream (John Linville) [177882 178837]
  -HT sibling setup bug (Geoff Gustafson) [178740]
  -e1000: actually support 82571/2 (John Linville) [165118]


author: Jason Baron <jbaron@redhat.com> [2.6.9-28]
changelog:
  -s390: add qeth CDLC support (Jan Glauber) [170689]
  -s390: fix semaphore performance problem under LPAR (Jan Glauber) [171699]
  -s390: qeth driver fixes (Jan Glauber) [175726 175725 175723]
  -s390: fix swapped memset args (Dave Jones) [176825]
  -add SAS support (Jeff Garzik) [165134 177527]
  -fix ioctl compat for USBDEVFS_IOCTL (Pete Zaitcev) [158852]
  -device-mapper mirroring: Increment mirror version number (Alasdair Kergon) [176874]
  -device-mapper mirror log: avoid overrun while syncing (Alasdair Kergon) [177031]
  -bnx2: update to version 1.4.30 (John Linville) [164825]
  -add scsi2 support when pq3 is returned and fix regressions from scsi3 support (Mike Christie) [155725 177587]
  -fix dm-crypt key leak (James Morris) [177136] {CVE-2006-0095}
  -Bump MAX_APICS to support largesmp configs (Jim Paradis) [177561]
  -nfs: fix acl hang (Steve Dickson) [177522]
  -autofs4 regression: remove negative dentry caching (Jeff Moyer) [175687]
  -s390: fix hangcheck-timer (Jan Glauber) [175988]
  -device-mapper snapshots: Barriers are not supported (Alasdair Kergon) [177620]
  -device-mapper snapshots: fix origin_write pending_exception submission (Alasdair Kergon) [172839]
  -prevent LVM stripe on SATA resulting kernel panic (Larry Woodman) [166544]


author: Jason Baron <jbaron@redhat.com> [2.6.9-27.1]
changelog:
  -fix lease printk DoS (Peter Staubach) [174337] {CVE-2005-3857}
  -prevent panic caused by invalid arguments to set_mempolicy (Larry Woodman) [175683] {CVE-2005-3358}
  -fix dst_entry leak DoS (Thomas Graf) [174345] {CVE-2005-3848}
  -fix ip6_input_finish DoS (Thomas Graf) [174343] {CVE-2005-3858}
  -fix ipv6 flowlabel DOS (Thomas Graf) [174081] {CVE-2005-3806}
  -fix IGMP DoS (Thomas Graf) [174807] {CVE-2002-2185}
  -fix auto-reap DoS (Peter Staubach) [174078] {CVE-2005-3784}
  -fix kernel memory disclosure via /proc exploit (Jason Baron) [176812] {CVE-2005-4605}


author: Jason Baron <jbaro@redhat.com> [2.6.9-26]
changelog:
  -nfs: fix return value setxattr() (Steve Dickson) [175812]
  -revert: speedup raw dio and aio paths (Geoff Gustafson) [167645]
  -fix security_ops kabi breakage (Jason Baron) [175680]
  -set ipv6 fragment id correctly (David Miller) [173118]


author: Jason Baron <jbaron@redhat.com> [2.6.9-25]
changelog:
  -Keys: Permission checking fix for key update vs add (David Howells) [171705]
  -fix vmware mpt fusion regression (Mike Christie) [170985]
  -gfs: fix DirectIO Deadlock (Wendy Cheng) [173912]
  -Fix audit filtering on syscall failure (David Woodhouse) [175132]
  -Turn off PCI parity check by default (Alan Cox)
  -New range of userspace audit message types (David Woodhouse) [175415]
  -fix scsi_eh_tur retry logic (Pete Zaitcev) [175188 160308]
  -nfs: fix I/O stalls waiting on revalidation (Steve Dickson) [175236]
  -azx: update (John Linville) [171985 172129 172920]


author: Jason Baron <jbaron@redhat.com> [2.6.9-24.1]
changelog:
  -revert: aic94xx SAS driver [165134]
  -restore diskdump for SATA (Peter Martuccelli) [175123]
  -ia64: include iomap.h in io.h (Prarit Bhargava) [174734]
  -update Emulex FC lpfc driver (Mike Christie) [149294 163150 175136 175142]
  -ia64: Fix improper initcall loading on sn arch (Prarit Bhargava) [173523 174985]
  -fix potential cifs data corrupter in 1.34a update (Steve Dickson) [170498]
  -x86_64: fix random single bit corruption (Jason Baron) [175128 175292]
  -sky2: add new driver (John Linville) [168246 171060]
  -qlogic aen handling and jiffies fix (Mike Christie) [174427]
  -prevent system deadlock (Larry Woodman) [174895 161101 162759]
  -cciss: ioctl fixes (Tom Coughlan) [168571]
  -e1000: restore 8086:1099 to PCI ID table (John Linville) [175092]


author: Jason Baron <jbaron@redhat.com> [2.6.9-24]
changelog:
  -fix scsi delete timer race (Doug Ledford) [164629]
  -x86_64: include iomap.h in io.h (Peter Martuccelli) [174583]
  -fix powernow-k8 pending bit stuck (Brian Maly)


author: Jason Baron <jbaron@redhat.com> [2.6.9-22.26]
changelog:
  -ia64 diskdump using DUMP_EXCLUDE_FREE hangs when called from INIT (Keiichiro Tokunaga) [169519]
  -autofs4: fix broken expiry of negative dentries (Jeff Moyer) [172986]
  -netpoll: avoid calling the napi poll routine recursiviely (Jeff Moyer) [146164]
  -add dell_rbu driver for Dell BIOS image updates (Brian Maly) [170132]
  -fix Platform SMIs interfere with tsc based delay calibration (Brian Maly) [168811]
  -update sg_io verify_command list (Mike Christie) [158861] {CVE-2004-1190}
  -fix lost fput and sockfd_put could lead to DoS (Alexander Viro) [168659] {CVE-2005-3044}
  -SATA update (Jeff Garzik) [131889 145061 166862 166880 169488]
  -cciss: driver updates (Tom Coughlan) [168571]
  -add aic94xx SAS driver (Jeff Garzik) [165134]
  -add ATI RN50 ids to drivers/video/aty (Nathan Lynch)
  -updated i82593 file license (John Linville) [172663]
  -fix offb crash on IBM ppc blade (Nathan Lynch)
  -ixgb: update to version 1.0.100-k2 (John Linville) [168502]
  -fix memory mapped files not updating timestamps (Peter Staubach) [173226]
  -Prevent sn2 code from executing on all ia64 platforms (Prarit Bhargava) [173354]
  -Fix for SystemTap-  return probe on do_execve (Dave Anderson) [173304]


author: Jason Baron <jbaron@redhat.com> [2.6.9-22.25]
changelog:
  -Wacom driver update (Kristian Høgsberg) [158842]
  -fix endless loops in HID on disconnect (Pete Zaitcev) [167070]
  -Make DVD-RAM writable on legacy iSeries VIOCD (David Howells) [168816]
  -fix erratic behaviour when system fd limit reached (Peter Staubach) [166524]
  -fix 32-bit program can hang x86_64 kernel (David Woodhouse) [168374]
  -update MPT Fusion driver (Mike Christie) [168414]
  -nfs: fix hangs with directio and aio using NFS (Steve Dickson) [161362]
  -Fix "No such file or directory" errors when using autofs w/ghosting (Jeff Moyer) [173194]
  -fix Diskdump fails through ipr driver (Nobuhiro Tachino) [159869]
  -fix copy correct number of opcode bytes in sg_scsi_ioctl (Mike Christie) [169402]
  -x8664: set NR_CPUS to 64


author: Jason Baron <jbaron@redhat.com> [2.6.9-22.24]
changelog:
  -fix oops in raid1 code (Doug Ledford)
  -fix sysctl races (Alexander Viro) [168924] {CVE-2005-2709}
  -fix ia64 nested_dtlb_miss does not handle hugetlb address correctly (Dave Anderson) [168599]
  -fix incorrect BUG_ON in signal.c after do_coredump() (Dave Anderson) [165581]
  -speedup raw dio and aio paths (Geoff Gustafson) [167645]
  -diskdump - support compressing dump data (Akira Imamura) [171141]
  -fix kernel reporting init process cutime as very large negative value (Peter Staubach) [170146]
  -add host port id to fc transport class (Mike Christie) [163150]
  -add issue lisp fc class attribute (Mike Christie) [149294]
  -update qla2xxx driver version to 8.01.02-d3 (Mike Christie)
  -improve sctp receive buffer accounting (Neil Horman) [156602]
  -add pci ids for 915/945 graphics (Geoff Gustafson) [170517 173882]
  -ICH4L chipset support - pci id (Geoff Gustafson) [163171]
  -fix message queue refcounting (Alexander Viro) [169130] {CVE-2005-3356}
  -retry iscsi portal address after session address failure (Mike Christie) [170656]
  -qla2xxx: update qlogic update (Mike Christie) [168544]
  -fix /proc/scsi/scsi DoS (Doug Ledford) [167696] {CVE-2005-2800}
  -Keys: Fix missed "struct key" types in reiserfs (David Howells) [171765]
  -Keys: Permit key expiry time to be set (David Howells) [173486]
  -Keys: Discard duplicate keys from a keyring on link (David Howells) [173486]
  -fix  mount/umount can cause the block device reads to fail (Peter Staubach) [166589]
  -Fix syscall auditing success indication on IA64 (David Woodhouse) [173500]
  -Keys: Permit running process to instantiate keys (David Howells) [173493]
  -IPMI - bug fix for dmi table off by one erro (Peter Martuccelli) [173815]


author: Jason Baron <jbaron@redhat.com> [2.6.9-22.23]
changelog:
  -fix oops in gss_pipe_release() (Steve Dickson) [169149 171112]
  -NFSv3 locking misses important kernel patches (Steve Dickson) [167192]
  -Various Device Mapper updates (Alasdair Kergon) [168483 168824 170864 172892 173155 173156 173157 173158 173159 173161 173163 173164 173174 173206 173360]
  -Support more detailed setting on partial dump (Keiichiro Tokunaga) [168638]
  -fix HFS oops (Peter Staubach) [171002] {CVE-2005-3109}
  -fix Kernel PANIC - not syncing: fatal exception (Steve Dickson) [163738]
  -x64: x86_64: EDAC support (Alan Cox) [158247]
  -must And iscsi opcode header (Mike Christie) [172487]
  -prevent module unloading for ide-scsi (Tom Coughlan) [169648]
  -fix NFS Cache invalidation bug in nfs v3 (Steve Dickson) [170423]
  -ia64: fix access to extended config space (Jason Baron) [146516]


author: Jason Baron <jbaron@redhat.com> [2.6.9-22.22]
changelog:
  -js20++ cpu enablement (Nathan Lynch) [170542]
  -Generate a hotplug event when a CPU comes online (David Howells) [167469]
  -Eliminate "no IOMMU" panic on ASUS motherboards (Jim Paradis) [169115]
  -Update aacraid driver to 1.1-5[2412] (Tom Coughlan) [168567]
  -Cure IA64 unaligns in sk_filter() (David Miller) [169396]
  -ppc64: Assign CPUs to the correct NUMA node (David Howells) [164425]
  -Update powernow-k8.c to support RevF Opterons (Brian Maly) [162178 171058]
  -autofs4: don't expire in-use directory hierarchies (Jeff Moyer) [168431]
  -IPMI: various fixes (Peter Martuccelli) [168090 169629 168796 169859 168596 168558 173343]


author: Jason Baron <jbaron@redhat.com> [2.6.9-22.21]
changelog:
  -x86_64: set NR_CPUS to 255 for largesmp kernel
  -Add initial Open Infiniband support (Doug Ledford) [108827 168445]
  -Add megaraid_sas driver (Tom Coughlan) [167926]


author: Jason Baron <jbaron@redhat.com> [2.6.9-22.20]
changelog:
  -wake-balance optimizations (Ingo Molnar) [167645]
  -tg3: update to 3.43-rh (John Linville) [164892 165810 166111 167936 170527 168547]
  -add PQ3 scsi scanning support (Mike Christie) [155725]
  -add bnx2 driver (John Linville) [164825]
  -mii: update to support gigabit (John Linville) [164825]
  -Unisys Rascal Support (Brian Maly) [155017 137347 151986 157586 163847 167153 168604]


author: Jason Baron <jbaron@redhat.com> [2.6.9-22.19]
changelog:
  -s390: add vm watchdog driver (Jan Glauber) [170358]
  -s390: add vmcp device driver (Jan Glauber) [168513]
  -s390: stop debug feature on oops (Jan Glauber) [168546]
  -s390: add vm logreader driver (Jan Glauber) [168573]
  -fix exec_mmap race  DoS (Dave Anderson) [170262] {CAN-2005-3106}
  -s390: qeth driver layer 2 support (Jan Glauber) [168569 163741 168303]
  -CIFS upgrade from version 1.20 to 1.34a (Steve Dickson) [170502 166667 170498]
  -ppc64: inform hypervisor of VMX register use (Nathan Lynch) [170544]
  -USB deadlock fix (Kimball Murray) [171220]
  -fix calling disassociate ctty semantics (Jason Baron) [172740]
  -fix gdb crashes on hugemem (Dave Anderson) [171980]


author: Jason Baron <jbaron@redhat.com> [2.6.9-22.18]
changelog:
  -fix diskdump during OS_INIT (Norm Murray) [168262]
  -fix NaT bit corrupution with coredump (Dave Anderson) [168954]
  -fix ls hangs on krb5 mountd when user has not kinit-ed (Steve Dickson) [169184]
  -ide: serverworks ht1000 support (John Linville) [168478]
  -b44: alternate allocation option for DMA descriptors (John Linville) [161846]
  -x86_64: implement dma_sync_single_range_for_{cpu,device} (John Linville) [161846]
  -ia64: re-implement dma_get_cache_alignment to avoid EXPORT_SYMBOL (John Linville) [161846]
  -swiotlb: allow sync of DMA_BIDIRECTIONAL mappings (John Linville) [161846]
  -Fix missing finish_wait, resulting in OOPS (David Miller) [167211]
  -Power5+: Add power5+ CPU support (David Howells) [168566]
  -allow modules to load from prior kernel rpms (Jason Baron) [171989]
  -fix sys_get|setpriority() semantics fix (Ingo Molnar) [162731]
  -nfs: fix potential client oops when debugging is on (Steve Dickson) [169197]


author: Jason Baron <jbaron@redhat.com> [2.6.9-22.17]
changelog:
  -correct wrong CPU frequency in acpi-cpufreq (Geoff Gustafson) [150893]
  -add 'noht' boot option to disable hyper-threading (Jim Paradis) [165747]
  -i810_audio: re-order release_region calls in i810_probe (John Linville) [165154]
  -fixup usb-handoff for hotplug (Kimball Murray) [146859]
  -x86_64: make spinlocks work for > 128 cpus (Ingo Molnar) [170711]
  -update SCSI whitelist (Tom Coughlan) [167932 160082 170448 172214]


author: Jason Baron <jbaron@redhat.com> [2.6.9-22.16]
changelog:
  -pcnet32: fix leak in loopback test (John Linville) [163272]
  -bonding: replicate IGMP outbound traffic on inactive slaves (John Linville) [167630]
  -fix all-tasks-pinned (Ingo Molnar) [164444]
  -forcedeth: update to 0.41 (John Linville) [167927]
  -fix SHUTDOWN notification on 1:1 SCTP sockets (Neil Horman) [156785]
  -pcnet32: support ethtool set_ringparam (John Linville) [167729]
  -scheduler inlines (Geoff Gustafson) [167645]
  -noop merge optimizations (Geoff Gustafson) [167645]
  -ia64: hint@pause in udelay (Geoff Gustafson) [141699]
  -kprobes: scalability enhancements - lockless handler execution (Ananth Mavinakayanahalli) [170747]
  -cpu_relax on i386 and x86_64  (Geoff Gustafson) [141851]


author: Jason Baron <jbaron@redhat.com> [2.6.9-22.15]
changelog:
  -s390: correct wrong swap space offset (Jan Glauber) [171006]
  -aio run iocb optimization (Geoff Gustafson) [167645]
  -s390: fix kernel internal return values returned to userspace (Jan Glauber) [171374]
  -sym53c8xx_2 should only use PPR on LVD bus (Jeff Layton) [139949]
  -fix a null pointer dereference in netpoll (Jeff Moyer) [172595]
  -Add usb-handoff (Pete Zaitcev) [146859]
  -Use ethtool ops in VETH driver and name driver consistently (David Howells) [168129]
  -s390: fix cio path retry (Jan Glauber) [171013]


author: Jason Baron <jbaron@redhat.com> [2.6.9-22.14]
changelog:
  -fix error messages during install, CD-ROM sizing (Pete Zaitcev) [162122 143539]
  -fix kobject_register failed for sdb1 (-17) (Pete Zaitcev) [153971 166281]
  -hotplug: fix Slot powered off after enabling (Keiichiro Tokunaga) [157241]
  -SGI arch 2.6.13 backport (Prarit Bhargava) [158959 168953 168952]
  -fix netdump hangs in processing of CPU stop after diskdump failed (Keiichiro Tokunaga) [170427]
  -fix diskdump can generate a corrupted dump if dump_level=4 is used (Nobuhiro Tachino) [169522]
  -allow renaming of directories located in NFS mounts (Neil Horman) [172081]
  -remove i2o_config debug printk (Mike Christie) [169075]
  -x86_64 largesmp update (Jim Paradis)


author: Jason Baron <jbaron@redhat.com> [2.6.9-22.12]
changelog:
  -fix restarts for SCTP associations (Neil Horman) [167907]
  -x86_64 reboot fix (Jim Paradis) [166888 168229 171950]
  -Fix VFS readahead performance problems for random large IOs (Stephen Tweedie) [167233]
  -Fix log_do_checkpoint() assert failures (Stephen Tweedie) [162814]
  -Fix ext3 reservations performance problems (Stephen Tweedie) [156437 167231]
  -Keys: Remove incorrect obsolete '!' operators (David Howells) [171705]
  -s390: fix pfault interrupt race (Jan Glauber) [171008]
  -s390: fix ptrace peek and poke problem (Jan Glauber) [171373]
  -fix read() with count > 0xffffffff panics kernel (Peter Staubach) [162094]


author: Jason Baron <jbaron@redhat.com> [2.6.9-22.11]
changelog:
  -rename hugeproc kernels to largesmp
  -e1000: update to version 6.1.16-k2 (John Linville) [165118]
  -prevent BUG in prio_tree.c (Larry Woodman) [171778]
  -Fix locking bug in xmon (David Howells) [165584]
  -Evade hypervisor bug when setting the time during iSeries boot (David Howells) [168535]
  -Fix VSCSI client incorrect timeout in tape handling (David Howells) [164851]
  -Update qla2xxx driver version to 8.01.02-d2 (Mike Christie) [168544]
  -bonding: update docs (John Linville) [166603]


author: Jason Baron <jbaron@redhat.com> [2.6.9-22.10]
changelog:
  -Improvements for key management facility (David Howells) [171705]
   -add supplementary rights to the mask for processes/threads that possess a key in a keyring
   -export user-defined key type operations
   -move the permissions check function from a .h file into a .c file
   -improve the request-key documentation
   -make possessor permissions additive with normal UID/GID/Other permissions
   -remove the key duplication facility
   -add LSM hooks for key management
   -fix a warning in kmod.c if keys are disabled


author: Jason Baron <jbaron@redhat.com> [2.6.9-22.9]
changelog:
  -ia64: turn on SCHED_SMT (Geoff Gustafson) [158846]
  -Fix AVM B1 ISDN deadlock (David Woodhouse) [158848]
  -Fix usb keys (Pete Zaitcev) [160308]
  -typhoon: update to version 1.5.7 (John Linville) [167489]
  -fix blksectget 32-bit emulation breakage (Alexander Viro) [162906]
  -VETH: Reduce verbosity (David Howells) [145557]
  -Fix capifs oops (James Morris) [170487]
  -x86_64: add missing include/asm-i386/ files (David Woodhouse) [165115]


author: Jason Baron <jbaron@redhat.com> [2.6.9-22.8]
changelog:
  -ia64: multi-core / multi-thread detection (Geoff Gustafson) [164470]
  -NFS/RPC - fix timestamp conversion (Steve Dickson) [165959]
  -NFS/RPC - fix PANIC at rpc_wake_up_status (Steve Dickson) [164298 161617]
  -fix nfsd oops on module unload/reload (Neil Horman) [165232]
  -system accounting can not handle largefiles (Peter Staubach) [165741]
  -s2io: update to 2.0.8.1 (John Linville) [167730 170887]
  -fix i2o passthrough ioctl return value (Mike Christie) [160546]


author: Jason Baron <jbaron@redhat.com> [2.6.9-22.7]
changelog:
  -nfsd: clear signals before exiting the nfsd() thread (Steve Dickson) [171715]
  -add jasmine digi neo serial driver (Nathan Lynch) [168122 145370]
  -Keys: Fix key management syscall interface bugs (David Howells) [165092]
  -prevent panic in drop_buffers() (Larry Woodman) [162987]
  -bonding: ALB -- allow slave to use bond's MAC address if its own MAC address conflicts (John Linvile) [144477]
  -Fix netfilter reference bug in af_packet code (James Morris) [165744]
  -ia64: fix __copy_user for unaligned accesses (Neil Horman) [167634]


author: Jason Baron <jbaron@redhat.com> [2.6.9-22.6]
changelog:
  -fix dangling POSIX locks after close (Peter Staubach) [160844]
  -exec-shield updates (Ingo Molnar) [152569]
  -ia32 apps that are not large file aware can access files >= 4GB (Peter Staubach) [144703]
  -autofs4: fix panic when using bind mounts (Jeff Moyer) [145374]
  -fix memory leak with large sendmsg/rcvmsg calls in 32-bit apps (Jeff Layton) [169875]
  -fix packet corruption in ip_conntrack_amanda (Jeff Layton) [152036]
  -kNFSd/RPC - umount fails on nfs server side when nfs client does heavy io (Steve Dickson) [154387]
  -fix TUX/ftp crash (Ingo Molnar) [172598]


author: Jason Baron <jbaron@redhat.com> [2.6.9-22.5]
changelog:
  -create 'hugeproc' kernels: 512 cpus for ia64, 128 ppc64, 64 x86_64 (David Howells) [143166]
  -IPv6 address addition error handling fix (David Howells) [164547]


author: Jason Baron <jbaron@redhat.com> [2.6.9-22.4]
changelog:
  -orinoco: plug etherleak (John Linville) [170277] {CAN-2005-3180}
  -fix sys_set_mempolicy() bounds check (Larry Woodman) [168993] {CAN-2005-3053}
  -fix race in ebtables (James Morris) [170268] {CAN-2005-3110}
  -fix memory leak in key management (David Howells) [170274] {CAN-2005-3119}
  -fix names_cache memory leak (David Woodhouse) [170283] {CAN-2005-3181}
  -nfs: add missing unlock_kernel() (Larry Woodman) [170546]
  -fix gzip/zlib flaws (Peter Staubach) [165679] {CAN-2005-2458}


author: Jason Baron <jbaron@redhat.com> [2.6.9-22.3]
changelog:
  -veth: iSeries veth driver fixes (David Howells) [145557 157935]
  -Fix kallsyms vs insmod/rmmod race (David Howells) [145719]
  -net: Disable queueing when carrier is lost (John Linville) [165018 167115]
  -sys_get_thread_area has minor info leak (Larry Woodman) [168777] {CVE-2005-3276}
  -fix false ECHILD result from wait (Dave Anderson) [166454 168775]
  -Add EINVAL to sys_io_cancel (Wendy Cheng) [162732]
  -x86_64: iounmap fix [168217 160135 170264] {CAN-2005-3108 }
  -x86_64: add pageattr text mapping (Jim Paradis) [170154]


author: Jason Baron <jbaron@redhat.com> [2.6.9-22.2]
changelog:
  -fix NX text/large-page interaction [163238 168936]
  -Allow ICMP response source address configurable (David Miller) [164571]
  -fix oops in sysfs_remove_dir() (Pete Zaitcev) [161597]
  -fix ip_queue crash (James Morris)
  -bindresvport: Address already in use (Steve Dickson) [169042]
  -fix usb memory sticks, kabi fixes. (Pete Zaitcev) [167032]
  -Fix cpu sibling count with buggy BIOS on i686 (Eric Paris) [169472]
  -fix disassociate_ctty() vs. fork() race [165835]


author: Jason Baron <jbaron@redhat.com> [2.6.9-22.1]
changelog:
  -remove: fix for NX text/large-page interaction (Ingo Molnar) [163238]
  -update hangcheck-timer to 0.9.0 and add for ia64, ppc64 and s390 [167731]
  -fix usb memory sticks (Pete Zaitcev) [167032]


author: Jason Baron <jbaron@redhat.com> [2.6.9-18]
changelog:
  -fixup 4/4 split userspace bounds (Ingo Molnar) [167262]
  -fix Netfilter NAT memory corruption udp (David Miller) [164450]
  -Fix compat layer sendmsg() races (Alexander Viro, Dave Miller, David Woodhouse) [166248] {CAN-2005-2490}
  -Enable 32-bit kernel to boot on dualcore xw9300 (Jim Paradis) [166212]
  -Fix raw_sendmsg accesses (Alexander Viro) [166830] {CAN-2005-2492}
  -update OpenIPMI version number to 33.4 (Peter Martuccelli) [166861] 
  -dual-core detection gap for i386 (Geoff Gustafson) [167412]
  -turn debugging off in powernow-k8 (Brian Maly) [167711]
  -make sys_sigreturn() call audit (David Woodhouse) [166287]
  -Fix module verification size check (David Howells) [167126]
  -fix for pfn_valid() on x86_64 (Jim Paradis) [166785]
  -Fix kernel crash/hang when task functions and isrs are kprobed in conjunction (Ananth Mavinakayanahalli) [167225]
  -Fixup eip/rip on IA32/x86_64 during kprobe smp miss handling (Ananth Mavinakayanahalli) [167226]
  -fix oops when loading ipmi_si module (Brian Maly) [166781]
  -Identify and handle IA64 page_not_present fault in vmalloc/region-5 address space (Larry Woodman) [164823]
  -ppc64: iommu entry merge fix (David Howells) [166653]
  -fix ipt_recent integer handling (James Morris) [167703] {CAN-2005-2872}


author: Jason Baron <jbaron@redhat.com> [2.6.9-17]
changelog:
  -require CAP_NET_ADMIN when creating policies (John Linville) [166131]
  -cciss PCI ID additions (Tom Coughlan) [165762]


author: Jason Baron <jbaron@redhat.com> [2.6.9-16.1]
changelog:
  -x86_64: fix morrison dual core numa support (Jim Paradis) [160230]
  -fixup 4/4 split userspace bounds (Ingo Molnar)


author: Jason Baron <jbaron@redhat.com> [2.6.9-16]
changelog:
  -make sure loopback is available for ipv6 (David Miller) [165669]
  -device-mapper: fix read balancing (Jonathan Brassow) [165717]


author: Jason Baron <jbaron@redhat.com> [2.6.9-15.1]
changelog:
  -powernow-k8 cleanups (Brian Maly) [160011]
  -fix x86_64 crash in csum_partial_copy_generic (Wendy Cheng) [164483]
  -device-mapper multipath: Reinstate ability to set queue_if_no_path (Alasdair Kergon) [164822]
  -fix audit emits superfluous records (David Woodhouse) [165362]
  -device-mapper mirroring, properly handle -EWOULDBLOCK (Jonathan Brassow) [165242]
  -Handle NUMA-config case w/missing SRAT (Jim Paradis) [159983]
  -openipmi cleanups (Peter Martuccelli) [165731 165490 165466]


author: Jason Baron <jbaron@redhat.com> [2.6.9-15]
changelog:
  -fix kabi with respect to Intel dual-core support
  -add audit_panic() call when out of memory (David Woodhouse)


author: Jason Baron <jbaron@redhat.com> [2.6.9-12.2 2.6.9-14]
changelog:
  -fix kabi with respect to Intel dual-core support (Jim Paradis) [158070]
  -nfs: Retry lookups after ESTALES (Steve Dickson) [164173] 
  -add HP xw9300 DMI quirk to 32-bit (Jim Paradis) [146481]
  -fix acpi_processor_get_performance_states fails on empty table entries (Brian Maly) [165127]
  -update emulex lpfc to version 8.0.16.17 (Tom Coughlan)


author: Jason Baron <jbaron@redhat.com> [2.6.9-12.1]
changelog:
  -enable NUMA on dual-core x86_64 (Jim Paradis) [158074]
  -device-mapper mirroring - race condition fix (Jonathan Brassow) [164630]
  -Prevent key session join from hanging in D state (David Howells) [164979]
  -NFSv3 over Kerberos: gss_get_mic FAILED during xdm login attempt (Steve Dickson) [147233]
  -__bio_clone fix idx copy (Jonathan Brassow) [164696]
  -kNFSD: fixed '-p port' arg to rpc.nfsd and enables the defining prot (Steve Dickson) [154533]
  -audit speedups (David Woodhouse) [165163]


author: Jason Baron <jbaron@redhat.com> [2.6.9-11.43 2.6.9-12]
changelog:
  -fix IBM x236 for SHPC hotplugging (Brian Maly) [147831]
  -s390: crypto driver: add CEX2C and zero pad support (Jan Glauber) [163933]
  -change powernow-k8 to version 1.39.04 (Brian Maly) [158844]
  -additional x86_64 HPET fixes for (Brian Maly)
  -fix memset in ipw2100 driver (Dave Jones)
  -update Intel dual core support (Jim Paradis) [158070]


author: Jason Baron <jbaron@redhat.com> [2.6.9-11.42]
changelog:
  -x86_64 reboot fix (Dave Anderson) [144668]
  -Intel dual-core support (Jim Paradis) [158070]
  -Fix PCI BAR size interpretation on 64-bit arches (Nathan Lynch) [162734]


author: Jason Baron <jbaron@redhat.com> [2.6.9-11.41]
changelog:
  -fix "nfs bindresvport: Address already in use" messages for mounting (Steve Dickson) [141773]
  -enable CONFIG_QETH_IPV6 (Jan Glauber) [158778]
  -esb2 chipset support (Geoff Gustafson) [158849]
  -IBM active PCI support (Peter Martuccelli) [142504]
  -SATA update (Jeff Garzik) [164094]
  -Fix for HP xw9300 "acpi=off" issue (Jim Paradis) [162190]
  -allow a task with signals outstanding to be OOM killed (Larry Woodman) [158980]
  -fix ip6_queue deadlock (David Miller) 
  -fix Netfilter NAT memory corruption (David Miller)
  -Do not load IDE driver on ServerWorks CSB6 chipsets (Tom Coughlan) [137343]
  -fix socket filters issue (David Miller) [164450]
  -fix IPSEC socket array overflow (David Miller) [165560]
  -Handle failed keyring destructio (David Howells) [130914]
  -pci_scan_device causes master abort (Kimball Murray) [164628]
  -Driver update for OpenIPMI (Peter Martuccelli) [138592 155344 158792]
  -powernow-k8 support (Jim Paradis) [158844]


author: Jason Baron <jbaron@redhat.com> [2.6.9-11.39]
changelog:
  -improve exec-shield coverage (Ingo Molnar) [160812 161136]
  -Fix rmmod hang in the iSeries veth driver (David Howells) [157935]
  -pci: fix sysfs access to config space (John Linville) [145646]
  -ipw2100: update to version 1.1.0 (John Linville) [158775]
  -CAN-2005-0756 x86_64 crash (ptrace-check-segment) (Peter Staubach) [159918]
  -CAN-2005-1763 x86_64 crash (x86_64-ptrace-overflow) (Peter Staubach) [159921]
  -ia64: cache coherency fixes for Montecito (Geoff Gustafson) [152098]
  -no legacy time HPET fixes (Brian Maly) [158676]
  -ht active load balancing bugfix (Ingo Molnar)
  -nfs: intr flag prevents core dump (Steve Dickson)


author: Jason Baron <jbaron@redhat.com> [2.6.9-11.38]
changelog:
  -fix sg oops (Wendy Cheng) [159937]
  -fix kernel BUG at tcp_output (David Miller) [150044]
  -fix 4/4 split userspace bounds (Ingo Molnar)
  -fix oops when removing symbolic link on tmpfs (Yuichi Nagahama) [158956]
  -Only access extended PCI config regs if available (David Howells) [158837]
  -VIOCD driver clean up patch (David Howells) [141958]
  -add /proc parameter to disable the OOM killer (Larry Woodman) [162238]
  -fix ide-scsi oops when highmem buffers in use (Doug Ledford) [149979]
  -fix NX text/large-page interaction (Ingo Molnar) [163238]
  -Update Emulex lpfc driver to 8.0.16.11 (Tom Coughlan) [158789]
  -Update megaraid_mbox driver (Tom Coughlan) [158824]
  -allow ACLs to expand to extended attributes limits (Peter Staubach) [161642]


author: Jason Baron <jbaron@redhat.com> [2.6.9-11.37]
changelog:
  -fix aio hang when reading beyond EOF (Jeff Moyer) [164338]
  -File system auditing support (David Woodhouse)
  -device-mapper: Event required on device removal (Alasdair Kergon) [144618]
  -device-mapper: mirroring support (Jonathan Brassow) [116817 116819]
  -SGI console driver interrupt fix (Prarit Bhargava)


author: Jason Baron <jbaron@redhat.com> [2.6.9-11.35]
changelog:
  -fix for prune_icache()/forced final iput() races (Alexander Viro) [145405]
  -Update Qlogic driver to 8.01.00b5-rh2 (Tom Coughlan) [138698]
  -s390: system hangs when cable pull on zfcp tape (Jan Glauber) [163087]
  -Export sys_recvmesg for cluster snapshot (Daniel Phillips) [164228]
  -fix ppc64 signal frame with 32 bit emulation (Wendy Cheng) [163719]
  -cciss update to 2.6.6 (Tom Coughlan) [159028]
  -scsi tape fixes (Tom Coughlan) [155354]
  -i20 fixes (Mike Christie) [158883 160882 155894 155894]


author: Jason Baron <jbaron@redhat.com> [2.6.9-11.34]
changelog:
  -fix sporadic NFS ENOENT on ext3 with htree (Stephen Tweedie) [158293]
  -fix ext2/3 xattr sharing bug (Stephen Tweedie) [155706] {CAN-2005-2801}
  -fix sub-second timestamp granlurity on ext2/3 (Stephen Tweedie) [145976]
  -fix O_SYNC error reporting (Stephen Tweedie) [149478]
  -backport current HD audio sources (John Linville) [162610]
  -ia64: perfmon update [136474, 154100]
  -rmp3 console support [151495]
  -ia64: identify sx2000 iommu chip [158850]
  -ia64: fix sigprocmask() race [160345]
  -fix tcsendbreak in compat mode [135669]


author: Jason Baron <jbaron@redhat.com> [2.6.9-11.33]
changelog:
  -Dirty page tracking for HA systems (Kimball Murray) [160006]
  -update dasd and cio drivers (Jan Glauber) [159910]
  -fix ide tape transform deficiency (Doug Ledford) [147496]
  -Make "mt -f /dev/st0 tell" work again (Doug Ledford) [161156]
  -audit: Fix livelock in audit_serial (David Woodhouse)
  -audit: Don't sleep in idle thread (David Woodhouse)
  -whitelist NEC iStorage to properly configure its LUNs (Doug Ledford) [145512]


author: Jason Baron <jbaron@redhat.com> [2.6.9-11.31]
changelog:
  -update IPR driver to 2.0.11.1 (David Howells) [158072]
  -fix jdb kjournald unmount race (Stephen Tweedie) [162728]
  -enable /proc/dasd/statistics (Jan Glauber) [163082]
  -increase NR_KEYS to 256 (Alan Cox) [158954]
  -export kallsyms_lookup_name (Ananth Mavinakayanahalli) [157239]
  -Fix POSIX_FADV_{DONTNEED,NOREUSE} for s390-64 (Ulrich Drepper)
  -ia64: fix ia64 kprobe removal race (Ananth Mavinakayanahalli) [157239]
  -enable CONFIG_MTD_ICHXROM to allow Intel BIOS motherboard flashes (Pete Zaitcev) [158831]
  -s390: qeth fix empty if_name in sysfs (Jan Glauber) [163095]
  -ia64: fix kabi breakage in mmiowb patch (Prarit Bhargava)  [161201]
  -make auditd checks multi-thread aware (David Woodhouse) [158794]


author: Jason Baron <jbaron@redhat.com> [2.6.9-11.30]
changelog:
  -set of device mapper changes: (Alasdair G Kergon)
   -fix dm_swap_table error cases
   -device-mapper multipath: Use private workqueue [154432]
   -device-mapper dm-emc: Fix a memset [154435]
   -device-mapper multipath: Flush workqueue when destroying [156412]
   -dm-raid1: Limit bios to size of mirror region
   -device-mapper snapshots: Handle origin extension
   -device-mapper dm.c - set of locking fixes [156569]
   -device-mapper multipath: Clean up presuspend hook
   -device-mapper multipath: Not every error is EIO [155427 151324]
   -device-mapper multipath: Fix pg initialisation races [154442]
   -device-mapper multipath: Default to SCSI error handler


author: Jason Baron <jbaron@redhat.com> [2.6.9-11.29]
changelog:
  -prevent Citrine chipset's SCSI controller from accessing config register 0xA0 (David Howells) [158836]
  -initialize wchan to ~0UL for multithread /proc entries (Ingo Molnar)
  -upgrade ibmvscsi driver to 1.5.5 (David Howells) [146674]
  -fix direct write vs truncate deadlock for out of tree filesystem (Prarit Bhargava) [160383]
  -2.6.12 arch/ia64/sn update (Prarit Bhargava)
  -Fix 32-bit BLKGETSIZE compatibility ioctl (Stephen Tweedie) [158930]
  -fix sysctl interfaces for lockd on 64-bit platforms (Steve Dickson) [159640]


author: Jason Baron <jbaron@redhat.com> [2.6.9-11.28]
changelog:
  -change next_tick of 3c59x.c from 60*HZ to 10*HZ
  -diskdump: add partial diskdumps
  -diskdump: allow diskdump to swap devices (#156010)
  -make smbfs honor uid and gid mount options (#157402)
  -s390: correctly read memory size (#162508)
  -fix diskdump hang on ia64/mptfusion (#162213)
  -observe O_SYNC semantics on block devices (#159765)
  -don't mmap a page at addr 0, unless MAP_FIXED is specified (#158878)


author: Jason Baron <jbaron@redhat.com> [2.6.9-11.27]
changelog:
  -add mmiowb, only implemented on ia64, and used by tg3 driver (#161201)
  -kprobes for ia64 (#157239)
  -Calculate keyring payload size properly
  -fix ia64 ptrace vulnerability CAN-2005-1761 (#159671)
  -export iucv_send2way_* symbols (#162761)


author: Jason Baron <jbaron@redhat.com> [2.6.9-11.26]
changelog:
  -add relayfs for use by systemtap (#157239)
  -update s390 zfcp driver
  -fix buffer overflow in selinux_sb_copy_data (#162196)
  -add support for Intel cpuid(4) (#158843)
  -increase range of reserved ports (#141773)
  -export generic_drop_inode (#161143)


author: Jason Baron <jbaron@redhat.com> [2.6.9-11.25]
changelog:
  -upstream kprobes merge: (#157239)
    -update kprobes infrastructure (x64, x86_64, ppc64)
    -allow one jprobe to coexist with other kprobes at a given address
    -transparent handling of re-entrant kprobes
    -support probes on return addresses to trace function return values


author: Jason Baron <jbaron@redhat.com> [2.6.9-11.24]
changelog:
  -set of audit updates:
    -call audit_log() correctly from selinux_nlmsg_perm()
    -ensure auditd can't be OOM killed
    -convert KERN_ERR to KERN_NOTICE
    -set maximum time-out for audit callers and fix apparent hang condition
    -use pid value from task_struct instead of audit_context


author: Jason Baron <jbaron@redhat.com> [2.6.9-11.22]
changelog:
  -make sctp honor SO_BINDTODEVICE option (#145659)
  -provide PCI EEH error recovery documentation (#161554)
  -change Serverwork IDE __init functions to __devinit for hotplug (#159739)
  -drop __initdata tag from qla1280 driver setup for hotplug (#160535)
  -fix GET_INDEX macro to use lower 3 bits of devfn (#161789)
  -change permissions on sys/net/ipv[4,6]/route/flush to write only (#157725)
  -prevent list corruption in ip_vs_conn_flush (#161947)
  -fix memory leaks - mount,selinux_sb_copy_data (#161390)


author: Jason Baron <jbaron@redhat.com> [2.6.9-11.20]
changelog:
  -add key management code (#130914)
  -make sure ACM driver interacts with line discipline properly (#147490)


author: Jason Baron <jbaron@redhat.com> [2.6.9-11.16]
changelog:
  -release resources upon controller timeout (#155198, #145645)
  -make qeth driver pick proper eui64 values (#158778)
  -improve support for alc260 codec (#158332)
  -set b44 link status properly during open (#160662)
  -ia64: properly map gate pages (#155278)
  -make sure ipv6 doesn't leak routes when brought down (#160010)


author: Jason Baron <jbaron@redhat.com> [2.6.9-11.14]
changelog:
  -ppc64: set pci iobase dynamically (#155198)
  -ppc64: skip ioports requests if no legacy ISA devices (#155198)
  -ppc64: allow eeh to be dynamically loaded (#155198)
  -make change_page_attr a symmetric api (#160028, #160135, #151315, #151323)
  -s390: fix qeth network stalls and update (#142112)
  -propogate specific bounce io errors on i/o completion (#149919)
  -s390: fix pagefault deadlock (#159909)
  -call __scsi_done in the SDEV_DEL state, since no timer has been added (#160548, #160547)


author: Jason Baron <jbaron@redhat.com> [2.6.9-11.12]
changelog:
  -enable sctp to honour IP_FREEBIND option/ip_nonlocal_bind sysctl (#145648)
  -update bonding.txt (#158841)
  -bounce page accouting (#158636)
  -adjust baud rate for serial ns16550a (#156705, #158107)


author: Jason Baron <jbaron@redhat.com> [2.6.9-11.11]
changelog:
  - make up_read, up_write safe to call from interrupt context
  - ia64: tollhouse support, map sn error codes to Linux error codes (#156206)
  - ia64: tollhouse support, update pci topology (#156206)
  - ia64: tollhouse support, fix infinite loop (#156206)
  - ia64: tollhouse support, add geoid information (#156206)
  - ia64: tollhouse support, update headers (#156206)


author: Dave Jones <davej@redhat.com> [2.6.9-11.10]
changelog:
  - x86_64: ptrace can induce double-fault (CAN-2005-1762) (#154451)
  - More md fixes.
    - Fix resync checkpoint at end of array cornercase.
    - Don't try to set a disk faulty if it's not in an active array.
  - Make SELinux allow unknown netlink message types. (#155480,IT#69501) 
  - Fix possible bonding with arp_ip_target failover failure. (#157576)
  - diskdump: hangs when SCSI drive is busy. (#155932)
  - ppc64: avoid probing pci devices marked as failed (#159391)
  - Implement module signing blacklist. (#146654)
    | This works around the problem with loading the bonding driver twice.
  - Fix call to ipv6_skip_exthdr with an incorrect length argument. (IT#71394)


author: Dave Jones <davej@redhat.com> [2.6.9-11.9]
changelog:
  - Various md layer thinkos.
    - Incorrect loop indexing in v1 superblock handling.
    - Incorrect struct size allocated in raid1_reshape()
    - Off by one error in super_1_sync()
    - Missing recalculation of checksum in super_1_sync()
  - Numerous ioremap() fixes. (#151315,#152429,IT69258)
    - Call change_page_attr correctly.
    - Fix a race during iounmap.
    - Handle mmio holes without mem_map correctly. 
    - Some cleanups.
    - Fix off by one.
  - Fix buffer leak in EXT3.


author: Dave Jones <davej@redhat.com> [2.6.9-11.8]
changelog:
  - x86: use the IRQ stack in APIC contexts too. (#151222)
  - ppc64: Tell the firmware what the kernels capabilities are. (#145739)
  - diskdump: signature check fails with large block_order. (#154926)
  - Add DDN S2A devices to SCSI sparse LUNs blacklist. (IT#72769)
  - Fix oops in keyring lookup for module insert (#158974, #156640)
  - Make SELinux honor the ATTR_FORCE flag. (#160112, IT#68393)


author: Dave Jones <davej@redhat.com> [2.6.9-11.6]
changelog:
  - Fix SELinux memory leak on error path of loading invalid policy.
  - ppc64: Implement correct logic for determining hotplug capabilities. (#146059)
  - Fix IPSEC output spinlock deadlock. (#154347)
  - Remove ip_conntrack proc files on module removal. (#154733)
  - NFSv4 callback authentication. (#150152)
  - Add 32-bit compat for NFS4 mount syscall. (#152982)


author: Dave Jones <davej@redhat.com> [2.6.9-11.5]
changelog:
  - Audit layer updates.
    - print return code correctly, specify error to netlink_ack() correctly.
    - Capabilities for audit control
    - audit congestion
    - clean up audit_log_lost() messages
    - Add /proc/$pid/loginuid
    - fix ppc64 syscall auditing
    - don't mask top bits of inode number
    - fix netlink reply misdirection
    - fix and improve inode audit records
    - CAPP-required auditing on SysV IPC objects


author: Dave Jones <davej@redhat.com> [2.6.9-11.4]
changelog:
  - snmp6: avoid crash on dev shutdown.
  - Add ability to clear setting in /proc/self/attr.
  - SCSI Fix oops with faulty DVD
  - Update E1000 driver to rev 6.0.54-k2 (#157533)
  - SELinux: Fix ability to mount partition with bad root context even
    with enforcing off.
  - Send IGMP traffic out only "active" link of bond+in ALB or TLB mode. (#145551)
  - fix driver name in dl2k as returned by ETHTOOL_GDRVINFO


author: Dave Jones <davej@redhat.com> [2.6.9-11.2]
changelog:
  - Add NOGET quirk for Chicony keyboards to usb input layer. (#146187)
  - Fix bogus level check in md resync code.
  - prevent OOM kills caused by lowmem exhaustion from wired page tables. (IT69919)
  - ppc64: Fix a dangling pointer in the IBM vscsi driver.
  - Fix panic in acpi_pci_root_add() (#158920)
  - Re-add 1620 byte slabcache. (Can't remove due to kabi).
  - vm: Prevent incrementing pte off end of kmap'd virtual page. (#158533)


author: Dave Jones <davej@redhat.com> [2.6.9-11.1]
changelog:
  - U2 begin.
  - Various network driver updates.
    - Update ixgb driver to upstream 2.6.11. (IT60082,IT68009)
    - Update E1000 driver to rev 5.7.6-k2 from upstream. (#149677)
    - Fix bounce buffer allocation in b44 driver. (#134790)
    - backport 3c59x driver from 2.6.12-rc2 (enhanced ethtool support)
    - Update tg3 to 3.27 (support xw4300) (#157900)
    - Update e100 driver to version 3.4.8. (#157887)
  - Update mpt fusion driver, include SAS support. (FZ107088)
  - ppc64: Move clearing of RI bit to after stack restoration. (IT69221)
  - SELinux fixes.
    - Fix case where invalid SELinux policy can still update
      policydb_loaded_version resulting in invalid or cleared policy.
    - Fix possible null dereference on kmalloc() failure path. (#155245)
  - SATA AHCI fixes. (Fix reset on error, ATA taskfile register
    reading, (and fixes a misleading error message).
  - Increase i2o_block timeout, fixing installs with Adaptec 2400A (#140002)
  - Remove the 1620 byte slab cache.
  - Sysrq enhancements. (alt-sysrq-w & serial console sysrq).
  - Support two new PCI IDs in ALSA VX222 driver. (IT #70160)
  - Fix statistic accounting in do_task_stat(). (#152430)


author: Dave Jones <davej@redhat.com> [2.6.9-10]
changelog:
  - Further fixing for the nVidia network controller problem.
  - Fix wait_task_inactive() race. (#157424)


author: Dave Jones <davej@redhat.com> [2.6.9-9]
changelog:
  - Fix data corruptor/local root in raw driver. (CAN-2005-1264)
  - Fix ELF core dump privilege elevation. (CAN-2005-1263) (#157450)
  - Avoid avc denial deadlock. (#154879)
  - Don't map objects to non-existent PPC64 NUMA nodes. (#149132)
  - Fix PPC64 NUMA's handling of memory nodes with holes in them.


author: Dave Jones <davej@redhat.com> [2.6.9-8]
changelog:
  - Fix ABI regression in IA64 ptrace fix.
  - Some nVidia network controllers show up as bridges. (#157240)
  - Fix SATA issue when master supports LBA48 but slave doesn't. (#156875)


author: Dave Jones <davej@redhat.com> [2.6.9-6.46]
changelog:
  - Fix regression with TEAC CD-210PU USB CD-ROM.  (#155870)
  - Don't mess with IRQs when doing BogoMIPS calculation.


author: Dave Jones <davej@redhat.com> [2.6.9-6.43]
changelog:
  - CAN-2005-0136 ptrace corner cases on ia64. (#155283)
  - Redo fix to avoid sleep in timer context in E1000. (#154880,#154944,#154951)


author: Dave Jones <davej@redhat.com> [2.6.9-6.42]
changelog:
  - Fix oopsable locking in NFS. (#152557)
  - Fix incorrect use of memset/memcpy in ia64 ia32 signal handling.
  - Cope with faults in iret/exec-shield bug (#154221, #154972)
  - Potential NULL mm in swap token code. (#154639)


author: Dave Jones <davej@redhat.com> [2.6.9-6.38]
changelog:
  - Fix possible corruption in mmap over NFS. (#151284)
  - Don't cache /proc/pid dentry for dead processes. (#147832)
  - Add Itanium ZX2 chipset identification (#150110)
  - Don't enable NUMA by default on dual core systems.


author: Dave Jones <davej@redhat.com> [2.6.9-6.36]
changelog:
  - Fix IP output route leak. (CAN-2005-0209)
  - Fix oops when mounting Solaris NFSv4 volumes. (#152102)
  - /proc/net/route stale pointer OOPS fix.


author: Dave Jones <davej@redhat.com> [2.6.9-6.34]
changelog:
  - Fix potential DoS in ELF loader. (CAN-2005-0749)
  - md: fix multipath assembly bug.
  - diskdump cannot I/O on megaraid when the tasklet is in use (#151325)
  - megaraid_diskdump_sleep actually sleeps for specified timeout (#151517)
  - Fix information leak in ext2. (CAN-2005-0400)
  - Further fixes to TCP BIC congestion handling.
  - Add missing range checking in bluetooth. (CAN-2005-0750)
  - Fix emulex lpfc driver LUN reset.
  - Fix missing variable initialisation in clustered APIC code.


author: Dave Jones <davej@redhat.com> [2.6.9-6.30]
changelog:
  - ia64 unwind stack DOS. (CAN-2005-0135).
  - Fix various ISO9660 handling flaws. (CAN-2005-0815)
  - Fix swapped memset arguments in ieee802.11 code.
  - e1000: avoid sleep in timer context.
  - e1000: flush workqueues on remove.


author: Dave Jones <davej@redhat.com> [2.6.9-6.28]
changelog:
  - Fix IPSEC SA sequence collision. (#145424)
  - Add missing crashdump_mode() check in x86_64 reboot code. (#151101)
  - Update Emulex lpfc driver to 8.0.16.6


author: Dave Jones <davej@redhat.com> [2.6.9-6.27]
changelog:
  - epoll: return proper error on overflow condition
  - Fix up might_sleep warnings in previous futex deadlock fix.
  - sctp: add receive buffer accounting to protocol.


author: Dave Jones <davej@redhat.com> [2.6.9-6.26]
changelog:
  - Fix DMA zone exhaustion problems. (#142465)
  - Fix IP fragment corruption. (#149589)
  - CAN-2005-0384: Remote DoS on ppp. (#151240)


author: Dave Jones <davej@redhat.com> [2.6.9-6.22]
changelog:
  - Various cleanup of several patches (S390 common io fixes, Emulex update).
  - Update megaraid driver. (#144810, #144902, #142539)
  - Fix leak in error path in autofs.
  - Fix release race in ext3. (#147443, #146037)


author: Dave Jones <davej@redhat.com> [2.6.9-6.20]
changelog:
  - avoid a bdget in device mapper.
  - IBM veth driver buffer starvation fix. (#147364)
  - raid5/raid6 bi_max_vec fixes.
  - Fix possible futex mmap_sem deadlock.
  - Update Emulex lpfc driver to 8.0.16.3


author: Dave Jones <davej@redhat.com> [2.6.9-6.18]
changelog:
  - Silence some cpufreq warnings. (#141983)
  - Fix VESAFB probe error. (#142929)
  - Add support for a bunch of Dell serial cards. (#146217)


author: Dave Jones <davej@redhat.com> [2.6.9-6.17]
changelog:
  - s390: Fix for various problems in common i/o layer. (#133992)
  - s390: common i/o layer vary on/off.
  - s390: qdio time delay missing interrupt problem. (#145150)
  - x86-64: Fix syscall/signal restart bug.
  - Various size_t fixes. (CAN-2005-0531)
  - ppc64: Fix race and memory leak in iSeries veth module unloading. (#144966)
  - ppc64: Prevent an iSeries partition oopsing with no CDROM drive. (#146809)
  - NFS: Fix O_DIRECT oops with oversized requests. (#148878)
  - Only root should be able to set the N_MOUSE line discipline. (CAN-2005-0839)
  - Fix tmpfs truncate BUG().
  - Fix signedness issue in sysfs. (CAN-2005-0867)
  - Remove Samsung SN-124 CD-ROM on DMA Blacklist. (#142937)
  - Remainder of the previous diskdump deadlock fix. (#142167)


author: Dave Jones <davej@redhat.com> [2.6.9-6.16]
changelog:
  - x86-64: Fix flush of multiple pages in change_page_attr
  - Fix 64 bit issues in device mapper.
  - dm multipath: fix infinite suspend requeueing


author: Dave Jones <davej@redhat.com> [2.6.9-6.15]
changelog:
  - dm multipath: export mapinfo
  - s390: qeth fake_ll fixes. (#136175)
  - s390: delay dasd retries to prevent i/o error (#145115)
  - s390: qdio didnt retry under some busy conditions. (#145116)
  - Fix the mincore syscall's error handling. (#140523)
  - ia64: wire up sys_waitid. (#137154)


author: Dave Jones <davej@redhat.com> [2.6.9-6.14]
changelog:
  - Additional fix for the earlier ACPI SRAT work.
  - Fix possible diskdump deadlock (#142167)
  - Intel HD audio support. (#146068, #146216)
  - x86-64 huge pages fix. (#143472)
  - device-mapper: Add dm_dev.name
  - dm multipath: bio details record/restore.
  - 802.11b/ipw2100/ipw2200 update. (#146763)


author: Dave Jones <davej@redhat.com> [2.6.9-6.13]
changelog:
  - Put right the previous fix to scsi_disk_put() which was incorrect.
  - Stop xmon=on from jumping immediately into xmon on ppc64. (#140751)
  - reworked s390 dasd fixed buffers. (#134338)
  - Fix oops in tg3_poll when using netconsole. (#143223)
  - diskdump: remove "device has no block attribute" warning. (#146144)
  - device-mapper: tidy error kprintfs
  - ACPI reset support for x86. (#139104)
  - Fix ia64 rx1600 pdh console. (#146274)
  - Discover x86-64 NUMA topology through ACPI SRAT table.
  - Silence additional deprecated SG_IO warning.
  - Fix incorrect hw segment counting in qla2x00 drivers. (#140472)
  - E100: fix state machine handling w/ NAPI (#140082)
  - E100: Add PCI IDs for ICH7. (#146137)
  - AHCI SATA fixes.
  - Remove unused 'commit' parameter from aacraid. (#140780)


author: Dave Jones <davej@redhat.com>
changelog:
  - avoid panic in e100_tx_timeout on ppc64. (#140116)
  - sk98lin: add MODULE_DEVICE_TABLE entry
  - Allow usb-storage to be reloaded. (#129165)
  - diskdump support for megaraid. (#142736)
  - ia64: Work around DMA timeouts on SGI IOC4 IDE. (#144265)
  - sk_forward_alloc() BUG assertion fix. (#139430)
  - Various ptrace fixes. (#143073,#146089,#132849,#133590,#140083,#147575)
  - diskdump: add module parameter to disable WCE. (#146412)
  - Clean up last remnants of kexec.
  - TCP BIC bug fix
  - Fix panic() w/panic_timeout hangs instead of rebooting. (#144668)
  - Set panic_on_oops=1 by default. (#144657, #143993)
  - tg3: update + support BCM5752. (#145105)
  - Fix ext2/3 maximum size limits. (#143907)
  - Fix shmget for ppc64, s390(64).
  - dm raid1: deadlock fix.
  - Implement h/w PPC64 CPU utilisation data gathering. (#144862)


author: Dave Jones <davej@redhat.com>
changelog:
  - Remove non-working kexec functionality.
  - bonding: avoid kernel panic when 802.3ad link brought down. (#146067)
  - Update E1000 to 5.6.10.1-k2 (#146115)
  - Update E100 to 3.3.6-k2 (#140082, #140116)
  - s390: introduces sequence numbers for lcs packets. (#145118)
  - Fixes to Intel Enhanced Speedstep support. (#138952)
  - ia64 OS_INIT switch support.
  - diskdump SATA support.
  - NMI switch support for x86-64.


author: Dave Jones <davej@redhat.com>
changelog:
  - Intel ICH7 hardware support (PCI ID additions) (#144741)
  - Fix HPET initialisation. (#147224, #134140)
  - dm multipath: Add target message ioctl
  - dm multipath: ioctl ref by device no
  - dm multipath: Split suspend hook
  - dm: fix mirror log refcount.
  - fix i386 vsyscall-sysenter unwind info
  - Add missing lock prefix to switch_to() on x86-64 (#146911)
  - Fix PPC64 pSeries VPA registration. (#142634)
  - Fix communication to PROM to close stdin on PPC64. (#145134)


author: Dave Jones <davej@redhat.com>
changelog:
  - Handle a 64-bit MM being torn down from a 32-bit process. (#144356)
  - Move idle loop setup to after main ppc64 arch setup init. (#142634)
  - invalidate page race fix. (#140383)
  - Fix up AGPGART PCI Posting bugs properly.
  - Provide 64-bit translations for 32-bit TIOCMIWAIT/TIOCGICOUNT ioctls
  - Fix race condition on s390 when going idle. (#142855, #144317)
  - Include watchdog config on s390. (#139836)
  - Suppress Error Message on IDE probe.
  - Add cpu_relax() calls for various ia64 loops. (#141699)
  - Fix oops when io_setup is called with unwritable addr. (#143050)


author: Dave Jones <davej@redhat.com>
changelog:
  - NLM (NFSv3) problems when mounting with "sec=krb5" (#146703)
  - Enable OProfile profile support for UP i686 kernel. (#139031)
  - Fix stack alignment for signal handlers on ppc64. (#145064)
  - Fix leak of percpu data structure on ext2/ext3 umount.
  - Fix & clean up zombie/dead task handling & preemption. (#141284)
  - Print some extra debugging info on oom_kill. (#142784)
  - Fix pty race condition on SMP machine. (#129725)
  - Fix up wrong argument order in dma_declare_coherent_memory()
  - Fix sysfs_dir_close memory leak.
  - Fix md bio refcount leak.
  - Fix "RPC: garbage, exit EIO" when using NFSv3 with Kerberos 5 (#142464)
  - Fix NFS Direct-IO stack usage. (#142857)


author: Dave Jones <davej@redhat.com>
changelog:
  - Fix shmctl SHM_LOCK perms. (#144471)
  - Various fixes from 2.6.10-ac (#146095, #146101)
  - OOM-killer tweak.


author: Dave Jones <davej@redhat.com>
changelog:
  - Drop the deprecated SG_IO warning. (#141390)
  - Close information leak in sysenter (#146083)
  - Fix race in expand stack (CAN-2005-0001) (#144412)


author: Dave Jones <davej@redhat.com>
changelog:
  - Fix flaws in IGMP code (CAN-2004-1137) (#142670)
  - Fix several corner cases in the 4g4g patch. (#144131, #144658)
  - Fix do_brk priveledge escalation. (CAN-2004-1235) (#144136)
  - Fix insuffient locking in DRM code. (CAN-2004-1056) (#144391)
  - Fix RLIMIT_MEMLOCK bypass and unpriveledged user DoS. (#144528)
  - Fix random poolsize sysctl handler integer overflow. (#144532)
  - Fix SCSI IOCTL integer overflow and information leak. (#144522)


author: Dave Jones <davej@redhat.com>
changelog:
  - Fix Tux crash if restarted with live connections that are in a particular
    state. (#140916)
  - Fix regression introduced by the recent CMSG security fixes. (#143975)
  - Various vm tuning to prevent possibility of OOM kill. (#141173)
    - Lower dirty limit for mappings which can't be cached in highmem
    - Don't oomkill when congested
    - Increment total_scanned var to throttle kswapd
  - Prevent panic with CD errors.
  - Enable SL82C104 IDE driver as built-in on PPC64 (#131033)


author: Dave Jones <davej@redhat.com>
changelog:
  - Call module_upgrade in post stage of of kernel rpm installation.
  - Fix bad diskdump interaction with recent sysfs update. (#142321)
  - Fix refcounting order in sd/sr, fixing cable pulls on USB storage.


author: Dave Jones <davej@redhat.com>
changelog:
  - Prevent kernel panic if an application issues an ioctl with an unrecognized subopcode.
  - fix false ECHILD result from wait* with zombie group leader. (#142518)


author: Dave Jones <davej@redhat.com>
changelog:
  - Update yesterdays SELinux fix. (#142353)
  - E1000 64k-alignment fix. (#140047)
  - Disable tiglusb module. (#142102)
  - ID updates for cciss driver.
  - Fix overflows in USB Edgeport-IO driver. (#142258)
  - Fix wrong TASK_SIZE for 32bit processes on x86-64. (#141737)
  - Fix ext2/ext3 xattr/mbcache race. (#138951)
  - Fix bug where __getblk_slow can loop forever when pages are partially mapped. (#140424)
  - Add missing cache flushes in agpgart code.


author: Dave Jones <davej@redhat.com>
changelog:
  - Prevent block device queues from being shared in viocd. (#139018)
  - Libata updates. (#138405)
  - aacraid: remove aac_handle_aif (#135527)
  - fix uninitialized variable in waitid(2). (#142505)
  - Fix CMSG validation checks wrt. signedness.
  - Fix memory leak in ip_conntrack_ftp
  - [IPV4]: Do not leak IP options. (#142251)
  - ppc64: Align PACA buffer for hypervisor's use. (#141817)
  - ppc64: Indicate that the veth link is always up. (#135402)
  - ppc64: Quiesce OpenFirmware stdin device at boot. (#142009)
  - SELinux: Fix avc_node_update oops. (#142353)
  - Fix CCISS ioctl return code.
  - Make ppc64's pci_alloc_consistent() conform to documentation. (#140047)


author: Dave Jones <davej@redhat.com>
changelog:
  - Workaround E1000 post-maturely writing back to TX descriptors. (#133261)
  - Fix the previous E1000 errata workaround.
  - Several IDE fixes from 2.6.9-ac
  - vm pageout throttling. (#133858)


author: Dave Jones <davej@redhat.com>
changelog:
  - Fix Tux from oopsing. (#140918)
  - Fix Tux/SELinux incompatability (#140916)
  - Fix Tux/IPV6 problem. (#140916)
  - ide: Fix possible oops on boot.
  - Make spinlock debugging panic instead of printk.
  - Update Emulex lpfc driver to 8.0.16
  - Selected patches from 2.6.9-ac12
  - ppc64: Fix inability to find space for TCE table (#138844)
  - Fix compat fcntl F_GETLK{,64} (#141680)
  - blkdev_get_blocks(): handle eof


author: Dave Jones <davej@redhat.com>
changelog:
  - Introduce infrastructure for supporting kabi.
  - Disable Centrino Speedstep driver.
  - Change ACPI cpufreq driver from modular to built-in. (#138952)


author: Dave Jones <davej@redhat.com>
changelog:
  - XFRM layer bug fixes
  - ppc64: Convert to using ibm,read-slot-reset-state2 RTAS call
  - ide: Make CSB6 driver support configurations.
  - ide: Handle early EOF on CDs.
  - Fix sx8 device naming in sysfs
  - e100/e1000: return -EINVAL when setting rx-mini or rx-jumbo. (#140793)


author: Dave Jones <davej@redhat.com>
changelog:
  - Workaround for the E1000 erratum 23 (#140047)
  - Remove bogus futex warning. (#138179)
  - x86_64: Fix lost edge triggered irqs on UP kernel.
  - x86_64: Reenable DRI for MGA.
  - Workaround E1000 post-maturely writing back to TX descriptors (#133261)
  - 3c59x: add EEPROM_RESET for 3c900 Boomerang
  - Fix buffer overrun in arch/x86_64/sys_ia32.c:sys32_ni_syscall()
  - ext3: improves ext3's error logging when we encounter an on-disk corruption.
  - ext3: improves ext3's ability to deal with corruption on-disk
  - ext3: Handle double-delete of indirect blocks.
  - Disable SCB2 flash driver for RHEL4. (#141142)


author: Dave Jones <davej@redhat.com>
changelog:
  - x86_64: add an option to configure oops stack dump
  - x86[64]: display phys_proc_id only when it is initialized
  - x86_64: no TIOCSBRK/TIOCCBRK in ia32 emulation
  - via-rhine: references __init code during resume
  - Add barriers to generic timer code to prevent race. (#128242)
  - ppc64: Add PURR and version data to /proc/ppc64/lparcfg
  - Prevent xtime value becoming incorrect.
  - scsi: return full SCSI status byte in SG_IO
  - Fix show_trace() in irq context with CONFIG_4KSTACKS
  - Adjust alignment of pagevec structure.
  - md: make sure md always uses rdev_dec_pending properly.
  - Make proc_pid_status not dereference dead task structs.
  - sg: Fix oops of sg_cmd_done and sg_release race (#140648)
  - fix bad segment coalescing in blk_recalc_rq_segments()
  - fix missing security_*() check in net/compat.c
  - ia64/x86_64/s390 overlapping vma fix
  - Update Emulex lpfc to 8.0.15


author: Dave Jones <davej@redhat.com>
changelog:
  - Add another card reader to whitelist. (#141022)
  - Fix possible hang in do_wait() (#140042)
  - Fix ps showing wrong ppid. (#132030)
  - Print advice to use -hugemem if >=16GB of memory is detected.
  - Enable ICOM serial driver. (#136150)
  - Enable acpi hotplug driver for IA64.
  - SCSI: fix USB forced remove oops.
  - ia64: add missing sn2 timer mask in time_interpolator code. (#140580)
  - ia64: Fix hang reading /proc/pal/cpu0/tr_info (#139571)
  - ia64: bump number of UARTS. (#139100)
  - Fix ACPI debug level (#141292)
  - Make EDD runtime configurable, and reenable.
  - ppc64: IBM VSCSI driver race fix. (#138725)
  - ppc64: Ensure PPC64 interrupts don't end up hard-disabled. (#139020, #131590)
  - ppc64: Yet more sigsuspend/singlestep fixing. (#140102, #137931)
  - x86-64: Implement ACPI based reset mechanism. (#139104)
  - Backport 2.6.10rc sysfs changes needed for IBM hotplug driver. (#140372)
  - Update Emulex lpfc driver to v8.0.14
  - Optimize away the unconditional write to debug registers on signal delivery path.
  - Fix up scsi_test_unit_ready() to work correctly with CD-ROMs.
  - md: fix two little bugs in raid10
  - Remove incorrect ELF check from module loading. (#140954)
  - Plug leaks in error paths of aic driver.
  - Add refcounting to scsi command allocation.
  - Taint oopses on machine checks, bad_page()'s calls and forced rmmod's.
  - Share Intel cache descriptors between x86 & x86-64.
  - rx checksum support for gige nForce ethernet
  - vm: vm_dirty_ratio initialisation fix


author: Dave Jones <davej@redhat.com>
changelog:
  - Update -ac patch to 2.6.9-ac11
  - make tulip_stop_rxtx() wait for DMA to fully stop. (#138240)
  - ACPI: Make LEqual less strict about operand types matching.
  - scsi: avoid extra 'put' on devices in __scsi_iterate_device() (#138135)
  - Fix bugs with SOCK_SEQPACKET AF_UNIX sockets
  - Reenable token ring drivers. (#119345)
  - SELinux: Map Unix seqpacket sockets to appropriate security class
  - SELinux: destroy avtab node cache in policy load error path.
  - AF_UNIX: Serialize dgram read using semaphore just like stream.
  - lockd: NLM blocks locks don't sleep
  - NFS lock recovery fixes
  - Add more MODULE_VERSION tags (#136403)
  - Update qlogic driver to 2.6.10rc2 level.
  - cciss: fixes for clustering
  - ieee802.11 update.
  - ipw2100: update to ver 1.0.0
  - ipw2200: update to ver 1.0.0
  - Enable promisc mode on ipw2100
  - 3c59x: reload EEPROM values at rmmod for needy cards
  - ppc64: Prevent sigsuspend stomping on r4 and r5
  - ppc64: Alternative single-step fix.
  - fix for recursive netdump oops on x86_64
  - ia64: Fix IRQ routing fix when booted with maxcpus=  (#138236)
  - ia64: search the iommu for the correct size
  - Deal with fraglists correctly on ipv4/ipv6 output
  - Various statm accounting fixes (#139447)


author: Dave Jones <davej@redhat.com>
changelog:
  - e100: fix improper enabling of interrupts. (#139706)
  - autofs4: allow map update recognition 
  - Various TCP fixes from 2.6.10rc
  - Various netlink fixes from 2.6.10rc
  - [IPV4]: Do not try to unhash null-netdev nexthops.
  - ppc64: Make NUMA map CPU->node before bringing up the CPU (#128063)
  - ppc64: sched domains / cpu hotplug cleanup. (#128063)
  - ppc64: Add a CPU_DOWN_PREPARE hotplug CPU notifier (#128063)
  - ppc64: Register a cpu hotplug notifier to reinitialize the
    scheduler domains hierarchy (#128063)
  - ppc64: Introduce CPU_DOWN_FAILED notifier (#128063)
  - ppc64: Make arch_destroy_sched_domains() conditional (#128063)
  - ppc64: Use CPU_DOWN_FAILED notifier in the sched-domains hotplug code (#128063)
  - Various updates to the SCSI midlayer from 2.6.10rc.
  - vlan_dev: return 0 on vlan_dev_change_mtu success. (#139760)
  - Update Emulex lpfc driver to v8.0.13
  - Fix problem with b44 driver and 4g/4g patch. (#118165)
  - Prevent oops when loading aic79xx on machine without hardware. (#125982)
  - Use correct spinlock functions in token ring net code. (#135462)
  - scsi: Add reset ioctl capability to ULDs
  - scsi: update ips driver to 7.10.18
  - Reenable ACPI hotplug driver. (#139976, #140130, #132691)


author: Dave Jones <davej@redhat.com>
changelog:
  - Implement an RCU scheme for the SELinux AVC
  - Improve on the OOM-killer taming patch.
  - device-mapper: Remove duplicate kfree in dm_register_target error path.
  - Make SHA1 guard against misaligned accesses
  - ASPM workaround for PCIe. (#123360)
  - Hot-plug driver updates due to MSI change (#134290)
  - Workaround for 80332 IOP hot-plug problem (#139041)
  - ExpressCard hot-plug support for ICH6M (#131800)
  - Fix boot crash on VIA systems (noted on x86-64)
  - PPC64: Store correct backtracking info in ppc64 signal frames
  - PPC64: Prevent HVSI from oopsing on hangup (#137912)
  - Fix poor performance b/c of noncacheable mapping in 4g/4g (#130842)
  - Fix PCI-X hotplug issues (#132852, #134290)
  - Re-export force_sig() (#139503)
  - Various fixes for more security issues from latest -ac patch.


author: Dave Jones <davej@redhat.com>
changelog:
  - Fix d_find_alias brokenness (#137791)
  - tg3: Fix fiber hw autoneg bounces (#138738)
  - diskdump: Fix issue with NMI watchdog. (#138041)
  - diskdump: Export disk_dump_state. (#138132)
  - diskdump: Tickle NMI watchdog in diskdump_mdelay() (#138036)
  - diskdump: Fix mem= for x86-64 (#138139)
  - diskdump: Fix missing system_state setting. (#138130)
  - diskdump: Fix diskdump completion message (#138028)
  - Re-add aic host raid support.
  - Take a few more export removal patches from 2.6.10rc
  - SATA: Make AHCI work
  - SATA: Core updates.
  - S390: Fix Incorrect registers in core dumps. (#138206)
  - S390: Fix up lcs device state. (#131167)
  - S390: Fix possible qeth IP registration failure.
  - S390: Support broadcast on z800/z900 HiperSockets
  - S390: Allow FCP port to recover after aborted nameserver request.
  - Flush error in pci_mmcfg_write (#129338)
  - hugetlb_get_unmapped_area fix (#135364, #129525)
  - Fix ia64 cyclone timer on ia64 (#137842, #136684)
  - Fix ipv6 MTU calculation. (#130397)
  - ACPI: Don't display messages about ACPI breakpoints. (#135856)
  - Fix x86_64 copy_user_generic (#135655)
  - lockd: remove hardcoded maximum NLM cookie length
  - Fix SCSI bounce limit


author: Dave Jones <davej@redhat.com>
changelog:
  - NFS: Fix dentry refcount accounting error
  - Make sure that modules get signed with the right key.
  - Remove SG_IO deprecation warning (#136179)
  - s390: Fix fake_ll for qeth device. (#136175)
  - s390: User process executing in wrong address-space mode
  - s390: zfcp: Kernel stack frame for zfcp_cfdc_dev_ioctl() is too big
  - s390: Use slab allocator for DASD I/O pages.
  - PPC64: HVSI udbg support
  - PPC64: Make HVSI console survive FSP reset
  - PPC64: Make PCI hostbridge hotplugging work
  - PPC64: Fix IBM VSCSI problems (#138124)


author: Dave Jones <davej@redhat.com>
changelog:
  - SELinux: netif fixes.
  - SELinux: add DAC check to setxattr() hook.
  - SELinux: sidtab locking fix.
  - SELinux: mediate send_sigurg().
  - SELinux: fix setscheduler hook deadlock.
  - ide-floppy: Supresses error messages resulting from Medium not present


author: Dave Jones <davej@redhat.com>
changelog:
  - Various IA64 updates from 2.6.10rc1
  - nfsd: make sure getxattr inode op is non-NULL before calling it.


author: Dave Jones <davej@redhat.com>
changelog:
  - Handle NULL dev->dev_addr in SIOCGIFHWADDR correctly. (#137648)
  - Fix NFSD domainname size limit.
  - nfsd4: nfsd oopsed when encountering a conflict with a local lock
  - nfsd4: fix putrootfh return
  - nfsd: Insecure port warning shows decimal IPv4 address
  - Disable sw irqbalance/irqaffinity for e7520/e7320/e7525 (#136419)
  - RAID1 failover hang fix (#136485)
  - Add MODULE_VERSION to ixgb driver. (#136399, #137911)


author: Dave Jones <davej@redhat.com>
changelog:
  - Fix exec-shield non-PIE/non-prelinked bug.
  - ext3 reservations: fix goal hit accounting.
  - Fix problems with non-power-of-two sector size discs. (#135094)
  - Fix possible oops in netpoll (#132153)
  - Add missing MODULE_VERSION tags to various modules. (#136399)
  - Add USB card reader de jour. (#124048)


author: Dave Jones <davej@redhat.com>
changelog:
  - Fix memory leak on x86-64 in mixed 32/64 mode. (#132947)
  - Yet another USB card reader for the whitelist. (#137722)
  - Remove a bunch of exports that went away in 2.6.10rc1.


author: Dave Jones <davej@redhat.com>
changelog:
  - Stop E820 entries in zero page getting corrupted by EDID info. (#137510)
  - Fix raid5 oops (#127862)
  - Remove the possibility of some false OOM kills. (#131251)


author: Dave Jones <davej@redhat.com>
changelog:
  - Fix PPC NUMA (#130716).
  - Fix autoraid for S390 (#123842/#130339)
  - Selected bits from 2.6.9-ac3
    - Fix syncppp/async ppp problems with new hangup
    - Fix broken parport_pc unload
    - Stop i8xx_tco making some boxes reboot on load
    - Fix cpia/module tools deadlock
    - Security fix for smbfs leak/overrun


author: Dave Jones <davej@redhat.com>
changelog:
  - Fix NFS badness (#132726)
  - Enable discontigmem for PPC64
  - Disable a bunch of irrelevant options for PPC64
  - Drop bogus USB workaround. (#131127)


author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.9-rc4-bk3
  - Fix up a bunch of unresolved symbols that crept in recently.
  - Remove bogus O_NONBLOCK patch which broke lots of userspace.
  - Fix booting on PPC64 by reserving initrd pages.


author: Dave Jones <davej@redhat.com>
changelog:
  - Rebase to 2.6.9-rc4-bk2
  - librtas needs to work around the /dev/mem restrictions.
  - EXT3 reservations use-before-initialised bugfix.
  - Merge Emulex LightPulse FC driver.
  - support O_NONBLOCK for read,pread,readv of regular files.
  - EDD blows up some x86-64's. Disable again.
  - Resurrect the hugemem kernel for performance comparisons
    between 3G:1G and 4G:4G address space layouts.
    All non-hugemem kernels are now 3G userspace layout.


author: Dave Jones <davej@redhat.com>
changelog:
  - Make EDD driver modular on x86-64 too.
  - Various mkinitrd spec changes (Jeremy Katz)
  - Enable a bunch more PPC64 config options. (Dave Howells)
  - Enable ACPI cpufreq driver for x86-64 too.


author: Dave Jones <davej@redhat.com>
changelog:
  - Rebase to 2.6.9-rc4-bk1
  - Tux update.
  - Update netdump/diskdump patches
  - PowerPC 64 netboot changes.
  - Various CONFIG_ option diddling.
  - Fix up the find_isa_irq_pin() oops on reboot for x86-64 too.


author: Dave Jones <davej@redhat.com>
changelog:
  - Rebase to 2.6.9-rc3-bk7
  - Fix up PPC/PPC64 compilation failures due to new binutils. (David Woodhouse)


author: Arjan van de Ven <arjanv@redhat.com>
changelog:
  - disable online resize again
  - hopefully fix Quake3 interaction with execshield
  - add Alan's borken-bios-IRQ workaround patch


author: Arjan van de Ven <arjanv@redhat.com>
changelog:
  - Add the flex-mmap bits for s390/s390x (Pete Zaitcev)
  - Add flex-mmap for x86-64 32 bit emulation
  - 2.6.8-rc3


author: Arjan van de Ven <arjanv@redhat.com>
changelog:
  - 2.6.7-bk7
  - Add wli's patch to allocate memory bottom up not top down
  - change some config options in the kernel-sourcecode package that are
    good for rpm kernel builds but not for custom user builds to more appropriate 
    default values.
  - reenable kernel-sourcecode again for a few builds


author: Arjan van de Ven <arjanv@redhat.com>
changelog:
  - make kernel-doc and kernel-sourcecode builds independent of eachother
  - disable kernel-sourcecode builds entirely, we'll be replacing it with documentation
    on how to use the src.rpm instead for building your own kernel.


author: Arjan van de Ven <arjanv@redhat.com>
changelog:
  - disable mlock-uses-rlimit patch, it has a security hole and needs more thought
  - revert airo driver to the FC2 one since the new one breaks


author: Arjan van de Ven <arjanv@redhat.com>
changelog:
  - update to 2.6.6-bk3
  - made kernel-source and kernel-doc noarch.rpm's since they are not
    architecture specific.


author: Arjan van de Ven <arjanv@redhat.com>
changelog:
  - fix bug 122504
  - convert b44 to ethtool ops (jgarzik)
  - make IDE do a cache-flush on shutdown (me/Alan)


author: Arjan van de Ven <arjanv@redhat.com>
changelog:
  - 2.6.5-bk2
  - disable DISCONTIGMEM on ia64 for performance
  - fix sleep_on use in reiserfs (Chris Mason)


author: Arjan van de Ven <arjanv@redhat.com>
changelog:
  - 2.6.5-mc4
  - reenable sg driver for scsi tape changers and such
  - the sk98lin driver oopses on module unload, preven that


author: Arjan van de Ven <arjanv@redhat.com>
changelog:
  - 2.6.5-mc3
  - finish up the -mc2 merge
  - latest 4g/4g patch from Ingo
  - latest execshield patch from Ingo
  - fix a few framebuffer bugs


author: Arjan van de Ven <arjanv@redhat.com>
changelog:
  - renable sonypi driver that was off accidentally
  - 2.6.4-final 
  - fix the oops on alsa module unloads


author: Arjan van de Ven <arjanv@redhat.com>
changelog:
  - re-add and enable the Auditing patch
  - switch several cpufreq modules to built in since detecting in userspace
    which to use is unpleasant


author: Than Ngo <than@redhat.com> 6:3.3.1-3.11
changelog:
  - Kate backup file permission leak, apply patch to fix this vulnerabilities
    CAN-2005-1920, #163130


author: Than Ngo <than@redhat.com> 6:3.3.1-3.8
changelog:
  - backport the patch to fix kimgio input validation vulnerabilities,
    CAN-2005-1046, #152092, thanks to KDE security team


author: Than Ngo <than@redhat.com> 6:3.3.1-3.3
changelog:
  - Applied patch to fix Konqueror Java Vulnerability, CAN-2004-1145
  - Applied patch to fix ftp kioslave command injection, CAN-2004-1165


author: Than Ngo <than@redhat.com> 6:3.3.1-3.2
changelog:
  - apply the patch to fix Konqueror Window Injection Vulnerability #142510
    CAN-2004-1158,  Thanks to KDE security team


author: Than Ngo <than@redhat.com> 6:3.2.3-4
changelog:
  - built with libpcre support, it's needed for using regular expressions in Javascript code bug #125264


author: Warren Togami <wtogami@redhat.com> 3.2.2-2
changelog:
  - #120265 #119642 -devel req alsa-lib-devel esound-devel fam-devel
                               glib2-devel libart_lgpl-devel
  - #88853 BR autoconf automake libpng-devel libvorbis-devel
              glib2-devel libtiff-devel
  - cups-libs explicit epoch, some cleanups


author: Than Ngo <than@redhat.com> 6:3.1.93-0.1
changelog:
  - 3.2 Beta 1
  - remove many patches, which are now in upstream
  - adjust many redhat specific patch files
  - cleanup rpm file list


author: Than Ngo <than@redhat.com> 6:3.1.1-2
changelog:
  - add patch file from CVS to fix: https authentication through proxy fails
  - add patch file from CVS to fix: KZip fails for some .zip archives


author: Than Ngo <than@redhat.com> 6:3.1-3
changelog:
  - add patch to set correct default encoding, bug #82539
  - don't overwrite defaultstyle, bug #74795, #80103


author: Than Ngo <than@redhat.com> 3.0.4-1
changelog:
  - 3.0.4
  - Added 2 patch files for built-in tests from AndreyPozdeev@rambler.ru (bug #75003)
  - Added KDE Url (bug #54592)


author: Than Ngo <than@redhat.com> 3.0.3-10
changelog:
  - Added fix to get correct Lib directory name on 64bit machine
  - New fix to handle desktop file renames (bug #74071)


author: Than Ngo <than@redhat.com> 3.0.2-4
changelog:
  - Added system tray dock patch from Harald Hoyer
  - Added Buildrequires audiofile-devel (bug #69983)
  - Added Buildrequires openssl-devel (bug #64858)
  - Rebuild against qt 3.0.5 (bug #70379)
  - Added patch to remove "about KDE" menu item from help menu (bug #67287)
  - Fixed dependencies bug by update (bug #69798)
  - Added some bugfixes from 3.0.2 stable branches


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-10
changelog:
  - Change sonames to something indicating the compiler version if a compiler
    < gcc 3.1 is used
  - Add compat symlinks for binary compatibility with other distributions


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-7
changelog:
  - Merge the following fixes from KDE_3_0_BRANCH:
    - RFC 2818 compliance for KSSL
    - Detect premature loss of connection in http ioslave (this may have
      been the cause of the bugzilla CGI.pl:1444 issue)
    - Don't send SIGHUP to kdesu child applications
    - Fix KHTML form rendering problems


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-2
changelog:
  - Add a khtml fix from KDE_3_0_BRANCH, prevents form content from
    being submitted twice, which probably caused the CGI.pl:1444 bug
    some people have noted with Bugzilla.


author: Than Ngo <than@redhat.com> 3.0.0-0.cvs20020326.2
changelog:
  - scale down icons for submenus pointing to legacy
    applications rather than keeping them at 32x32 (bug #61506)


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-0.cvs20020107.1
changelog:
  - arts-devel provides kdelibs-sound-devel for backwards compatibility
  - Update, rebuild with gcc 3.1-0.15


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-0.cvs20020104.1
changelog:
  - Update
  - Make sure we aren't built with gcc 3.1 prior to -0.14
  - Remove -O0 hack, no longer needed with gcc 3.1-0.14
  - Adapt spec file to base changes (good-bye, libkfile, libkssl and libksycoca!)


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-0.cvs20011214.1
changelog:
  - Update
  - Update Japanese patches
  - Temporarily exclude alpha (compiler bugs)
  - Add workaround for gcc bug #57502


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.1.1-5
changelog:
  - Merge fixes from current KDE_2_1_BRANCH - fixes 2 memory leaks and
    makes kio_http more tolerant to broken Auth requests sent by some
    servers
  - Add missing mcop{class,type} files in arts package
  - Handle PATH changes in kdesu, some KControl modules need /sbin in the
    PATH... (#34209)
  - Add KDE2PORTING.html file in /usr/share/docs/kdelibs-devel-3.3.1,
    it's quite useful...


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.1.1-3
changelog:
  - Fix up kded to watch directories we can't write to
  - Use mkstemp() rather than tmpfile() for xauth file generation
    in kdesu


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.1.1-2
changelog:
  - Fix up cookie escaping (this should finally fix bugzilla for good)
  - Security: cookies shouldn't be world readable, some websites store
    login information


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.1-10
changelog:
  - Don't crash in KProcess if getpwuid() returns NULL, happens with
    LDAP authentication
  - Require qt >= 2.3.0 (#31770)
  - Fix crash in KURLCompletion


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.1-9
changelog:
  - Add some more fixes and <layer> support from KDE_2_1_BRANCH
  - Patch KService to not add K menu entries if the desktop files
    aren't readable by the user we're running at (removes bogus
    timetool, control-panel etc. entries; I'd still prefer running
    those through consolehelper over hiding them from users...)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Revert to putting config files in /usr/share/config
  - Fix up cookie handling when combined with JavaScript (#30577)
  - Add some html rendering fixes from KDE_2_1_BRANCH


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Add khtml+DOM fixes from KDE_2_1_BRANCH
  - BuildPrereq docbook stuff so we don't get broken kdb2html stuff


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix klauncher escape sequence handling (#25307, Patch from Tim Waugh)
  - Fix krun escape sequence handling (#25134, Patch from Tim Waugh)
  - Make /usr/share/doc/HTML/en/kspell/common symlink relative (#24793)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Apply patch from CVS to fix up Cookie handling in Konqueror.
    Finally Bugzilla works perfectly in Konqueror.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - kdelibs-sound-devel requires audiofile-devel, kdelibs-sound doesn't.
  - Update, fixes various HTML rendering bugs


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - remove the Java hacks; KDE now requires a Java 2 compliant
    environment, so there's no chance to get any of it to run
    with current kaffe.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Move libkmedia2_idl to arts; it's needed there
  - Fix up the Java stuff. The new stuff is ugly, but seems to work
  - Get rid of the compiler bug workaround: the ICE was triggered by
    unclean code
  - Change the description of the arts package for translation purposes


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Work around compiler bugs (sigh)
  - Fix specfile (added files)
  - Split arts into a separate package; it's required by SDL,
    and depending on kdelibs-sound (which requires kdelibs)
    is overkill


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update CVS - security fix in Java/Javascript code.
    There seems to be some conspiracy going on - "commit important
    fixes right after Red Hat built new RPMs" or the likes. :>


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - update to current KDE_2_0_BRANCH, now that most of the ".0 release"
    bugs are fixed
  - fix typo in specfile: it's mitshm, not libshm
  - Add ksendbugmail, required for the "Report Bug" feature to work


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Move back to /usr
  - New CVS snapshot
  - Clean up specfile
  - Use %defines so we can build CVS snapshots and releases from the same
    specfile


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - new snapshot, new Qt
  - various fixes to spec file
  - get rid of -O0, no longer required with gcc 2.96-41 (except on alpha)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - new snapshot
  - split: move sound support to a separate package, suggestion from
    David Faure <david@linux-mandrake.com>


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - move programming docs to /usr/share/doc/kdelibs-devel-3.3.1-3.14
    and to kdelibs-devel package
  - new snapshot


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Add qt version number in Requires, add kdoc HTML help
    (patch from David Faure <david@mandrakesoft.com>)
  - Actually use the %clean section


author: Bernhard Rosenkraenzer <bero@redhat.de>
changelog:
  - 2.0 snapshots
  - Change prefix to respect %{prefix} so we can coexist with KDE 1.x
  - kdelibs-devel requires kdelibs


author: Preston Brown <pbrown@redhat.com>
changelog:
  - remove linking to qimgio from kdecore, moved to kpanel/kfm directly
  - renamed "lowcolor" directory to "locolor"


author: Preston Brown <pbrown@redhat.com>
changelog:
  - added lowcolor icons directory and /usr/share/pixmaps to icon search path
  - hacking to recognize .desktop files as application/x-kdelnk


author: Preston Brown <pbrown@redhat.com>
changelog:
  - updated to KDE 1.1.2.
  - use /usr/lib/qt-1.44 as qt root.
  - separate devel subpackages; include documentation and kdoc.
  - added KDE icon.
  - relocated includes to /usr/include/kde


author: Jason Baron <jbaron@redhat.com> [2.6.9-22.0.1]
changelog:
  -orinoco: plug etherleak (John Linville) [170277] {CAN-2005-3180}
  -fix sys_set_mempolicy() bounds check (Larry Woodman) [168993] {CAN-2005-3053}
  -fix race in ebtables (James Morris) [170268] {CAN-2005-3110}
  -fix memory leak in key management (David Howells) [170274] {CAN-2005-3119}
  -fix names_cache memory leak (David Woodhouse) [170283] {CAN-2005-3181}
  -fix ip_queue crash (James Morris) [167389]
  -x86_64: iounmap fix [168217 160135 170264] {CAN-2005-3108}
  -x86_64: add pageattr text mapping (Jim Paradis) [170154]
  -fix NX text/large-page interaction [163238 168936]


author: Jason Baron <jbaron@redhat.com> [2.6.9-22.0.2]
changelog:
  -prevent panic caused by invalid arguments to set_mempolicy (Larry Woodman) [175683] {CVE-2005-3358}
  -fix auto-reap DoS (Peter Staubach) [174078] {CVE-2005-3784}
  -fix kernel memory disclosure via /proc exploit (Jason Baron) [176812] {CVE-2005-4605}


author: Jason Baron <jbaron@redhat.com> [2.6.9-22.0.1.1]
changelog:
  -sys_get_thread_area has minor info leak (Larry Woodman) [168777] {CVE-2005-3276}
  -fix gzip/zlib flaws (Peter Staubach) [165679] {CAN-2005-2458}
  -fix exec_mmap race  DoS (Dave Anderson) [170262] {CAN-2005-3106}
  -fix sysctl races (Alexander Viro) [168924] {CVE-2005-2709}
  -fix HFS oops (Peter Staubach) [171002] {CVE-2005-3109}
  -update sg_io verify_command list (Mike Christie) [158861] {CVE-2004-1190}
  -fix message queue refcounting (Alexander Viro) [169130] {CVE-2005-3556}
  -fix lost fput and sockfd_put could lead to DoS (Alexander Viro) [168659] {CVE-2005-3044}
  -fix gdb crashes on hugemem (Dave Anderson) [171980]
  -fix /proc/scsi/scsi DoS (Doug Ledford) [167696] {CVE-2005-2800}
  -fix lease printk DoS (Peter Staubach) [174337] {CVE-2005-3857}
  -fix dst_entry leak DoS (Thomas Graf) [174345] {CVE-2005-3848}
  -fix ip6_input_finish DoS (Thomas Graf) [174343] {CVE-2005-3858}
  -fix ipv6 flowlabel DOS (Thomas Graf) [174081] {CVE-2005-3806}
  -fix IGMP DoS


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.0-0rc6.8.SL
changelog:
  - latest release candidate, possibly the last one before 1.4.0
  - added man pages (like "official" spec, but add those from RT #19268 
    and prefer them over the default ones where duplicate)
  - added openafs-LICENSE.Sun (from "official" package)
  - removed unused source6 openafs-modname helper
  - add x-bit to kernel module to get it stripped
  - really do not turn off __check_files
  - remove all unpackaged files
  - added xstat_*_test to debug package
  - added -authlibs and -authlibs-devel packages (like "official" package,
    but keep static libs in -devel to make updates painless)
  - added patch for those to correct sonames (RT #18767)
  - added copyauth, kseal, vsys to main package
  - added ka-forwarder to -krb5 package
  - added bos_util, voldump to -server package
  - added des_prototypes.h to -devel package
  - updated CellServDB to latest version from grand.central.org (June 1)
    and added hepix.org cell


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.3.82-3.SL
changelog:
  - added a patch (1001) from Jason McCormick <jasonmc@cert.org> to fix
    cache coherence issues with this release


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.3.82-2.SL
changelog:
  - added missing ia64 changes by Jarek from 1.3.80-2.SL (kernel requirement,
    module built is .mp.ko, not .ko)
  - turned off leftover debugspec


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.3.82-1.SL
changelog:
  - new upstream release fixing linux 2.6 issues including the first write
    access hanging on x86/UP
  - hopefully guessed right about the fix for ia64 module build (by Jarek
    for 1.3.80-2.SL, but could not find the srpm)
  - made the init script a separate source file
  - in init script, do not run the on_network check if ENABLE_DYNROOT=1
  - package the LWP builds of fileserver & volserver (which are built but
    not installed by default) in addition to the default pthreaded ones,
    with suffix ".lwp"
  - package the pthread build of butc in addition to the default LWP one,
    with suffix ".pthread"
  - disable patch101 (obsoleted by upstream hack)
  - removed the build hack from 1.3.80-1.SL, fixed upstream


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.3.80-1.SL
changelog:
  - new upstream version supposed to fix many problems on linux 2.6
  - notice the default afsd behaviour finally has changed to -nosettime;
    add -settime to your afsd options to get back the old behaviour
  - added an ugly hack to get the kernel modules built
  - updated CellServDB to version from grand.central.org as of today


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.3.79-4.SL
changelog:
  - made default cache location and size macros, removed cacheinfo source5,
    generate cacheinfo in install instead
  - fixed default cache size to 100MB again, resurrected the message
    in -client's post, changed default location to /var/cache/openafs
  - removed unused source21 (kernel-version.sh)
  - changed last afs-krb5 build patch (patch configure, not configure.in,
    and do not wipe out 64bit patch to configure by rerunning autoconf)


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.3.79-3.SL
changelog:
  - this version is SL4/1.3 only
  - get afs-krb5 going
  - removed tons of old cruft & patches no longer used
  - adapt module build to kernel[-smp]-devel: we now require this to be
    installed, and will only build the module package for a single kernel
    defined on the command line, or the running one in none is defined
    (this gets rid of all that redhat-buildsys voodoo which seems broken
     on SL4 anyway)
  - added livesys & kdump executables to main package
  - added optional openafs-debug package with additional tools
  - made module name in package & init script libafs instead of openafs,
    since that's what the module registers as anyway (modprobe -r openafs
    would fail)
  - added a patch (101) to fix the CACHESIZE=AUTOMATIC behaviour when the cache
    is mounted on some device with a long name


author: Troy Dawson <dawson@fnal.gov> 15.12.SL
changelog:
  - All changes came from Stephan Wiesand.  Many thanks for his pointers
  - afsd options chaned in spec file
  - /etc/sysconfig/afs set to be %config(noreplace)
  - requires wget
  - removed openafs-compat %pre scripts
  - Added CellAlias file, with commented out example


author: Troy Dawson <dawson@fnal.gov> 15.11.SL
changelog:
  - Put LC_ALL=C into the startup server test. This helps with 
    internationalization. Submitted by Jaroslaw Polok


author: Jaroslaw.Polok@cern.ch
changelog:
  - changed packaging of modules again: to followup Fedora Core
    (draft) rules and allow yum/apt/up2date to handle these


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - obey CFLAGS set at configure-time on i386/x86_64 linux
  - openafs-krb5: look in $krb5_prefix/lib64 for Kerberos libraries if they are
    not found in $krb5_prefix/lib
  - build the modules for PAM on x86_64
  - when checking for res_search, try to link with it instead of checking for it
    in libraries, in case it's a macro or redefined by a macro
  - use %{ix86} instead of %{all_x86} where appropriate
  - install AFS libraries into %{_libdir} instead of %{_prefix}/lib


author: Kaj J. Niemi <kajtzu@fi.basen.net> 2002e-4
changelog:
  - Use CFLAGS (and RPM_OPT_FLAGS) during the compilation
  - Build the .so through gcc instead of directly calling ld


author: Joe Orton <jorton@redhat.com> 2002e-3
changelog:
  - install .so with permissions 0755
  - make auth_md5.c functions static to avoid symbol conflicts
  - remove Epoch: 0


author: Kaj J. Niemi <kajtzu@fi.basen.net> 0:2002e-0.1
changelog:
  - c-client 2002e is based on imap-2002d
  - Build shared version, build logic is copied from FreeBSD net/cclient


author: Matthias Clasen <mclasen@redhat.com> 2:1.2.5-7
changelog:
  - Replace the patches for individual security problems with the
    cumulative patch issued by the png developers. 
  - Build for FC1


author: Matthias Clasen <mclasen@redhat.com> - 2:1.2.5-3
changelog:
  - Reinstate and improve the transfix patch which got lost sometime ago, 
    but is still needed for CAN-2002-1363 (#125934)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - s/Copyright/License/
  - fix weird versioning system (epoch was set to "2" in the main
    package, serial to "1" in the devel package. Huh?)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Remove the workaround for Bug #20018 (from Oct 30).
    Qt 2.2.2 fixes the problem the workaround addressed.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Work around a problem causing konqueror to segfault in image preview
    mode (Bug #20018)
  - Copy SuSE 7.0's patch to handle bad chunks


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - we are Serial: 1 now because we are reverting the 1.0.2 version from 5.2
    beta to this prior one
  - install man pages; set defattr defaults


author: Phil Knirsch <phil@redhat.de>
changelog:
  - Fixed ia64 problem with tiffinfo. Was general 64 bit arch problem where s390x
    and ia64 were missing (#52129).


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move man pages from devel package to the regular one
  - integrate Frank Warmerdam's fixed .fax handling code (keep until next release
    of libtiff)
  - fix fax2ps breakage (bug #8345)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - enable zip and jpeg codecs
  - change defattr in normal package to 0755
  - add defattr to -devel package


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Make the subpackages require the base package (Bug #14697)
  - update URL
  - add fixes from the homepage


author: Elliot Lee <sopwith@redhat.com> 4.1.0-4
changelog:
  - Add giflibcvs-small2crash.patch, which changes lib/dgif_lib.c to be
    whatever is currently in the libungif CVS, thus fixing bug number 9315.


author: Toshio Kuratomi <badger@prtr-13.ucsc.edu>
changelog:
  - Upgrade to version 3.1.0 (which incorporates the patches in 3.0-4)
  - Updated Source: and URL: to reflect change in directories/pages.


author: Marc Ewing <marc@redhat.com>
changelog:
  - Made it obsolete giflib and provide libgif.so and giflib (previous
    giflib packages were built incorrectly and packages built against
    it require libgif.so but work fine with this package)
  - cleaned buildroot
  - Removed Toshio as packager so he doesn't get yelled at when Red Hat
    breaks it :-)


author: Harald Hoyer <harald@redhat.com> 2.8.7-2
changelog:
  - added initial /etc/sysconfig/lm_sensors
  - added initscript
  - MAKEDEV the initial i2c devices in initscript and sensors-detect


author: Phil Knirsch <pknirsch@redhat.com> 2.8.3-5
changelog:
  - Fixed initscript to work with 2.6 kernel and made it more quiet (#112286).
  - Changed proposed location of sensors (#116496).
  - Fixed rpath issue.


author: Phil Knirsch <pknirsch@redhat.com> 2.8.2-1
changelog:
  - Update to latest upstream version 2.8.2
  - Fixed wrong & usage in if expression.
  - Included several new perl tools.


author: Phil Knirsch <pknirsch@redhat.com> 2.6.5-6
changelog:
  - Included prog/init scripts and README (#90606).
  - Require kernel-utils for dmidecode (#88367, #65057).


author: Matt Wilson <msw@redhat.com>
changelog:
  - added patch to not include sys/perm.h, as it's gone now.
  - added alpha to ExclusiveArch
  - use make "LINUX_HEADERS=/usr/include" to get kernel headers


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to 2.5.5 which includes the Serverworks drivers. Kernel modules are
    not included though es they have to go into the kernel package
  - Had to remove all references to I2C_SMBUS_I2C_BLOCK_DATA from
    kernel/busses/i2c-i801.c and prog/dump/i2cdump.c as this is not defined in
    our current kernel package


author: Tim Waugh <twaugh@redhat.com> 2.8.5-14
changelog:
  - Updated to dev16, fixing bug #110196.
  - No longer need crlf patch.
  - Use shipped ja translations.
  - Use %find_lang.
  - Default config file now sets UTF-8 (bug #110986).


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - dev20
  - Add ipv6 patches from Pekka Savola <pekkas@netcore.fi>:
    - enable ipv6, patch for missing sockaddr sa_len
    - buildrequires: slang-devel, zlib-devel
    (Bug #35644)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 2.8.4dev16
  - Fix up the i18ncfg patch - segfaulting on startup is not exactly
    a nice feature.
  - Mark locale related files as such
  - Mark /etc/lynx.cfg.ja as %lang(ja)
  - Add BuildRequires


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update build URL
  - Fix help (Bug #18394)
  - Replace the "index page link" (pointing to a Mosaic site with thousands
    of dead links) with a link to Google


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix up location of standard page and help page in lynx.cfg (still
    pointed at /usr/doc instead of /usr/share/doc, Bug #13227)


author: Tim Powers <timp@redhat.com>
changelog:
  - fixed man page lolcation to be FHS compliant
  - use predefined RPM macros wherever possible
  - use %makeinstall
  - cleaned up files list


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - version 2.8.3dev18
  - drop the RFC compliance patch - they seemed to have done theiir own
  - pray that ported patches are okay


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Add "passive mode ftp" option, activated by PASSIVE:TRUE in /etc/lynx.cfg
  - turn on "PASSIVE:TRUE" by default
  - deal with the fact that RPM compresses man pages.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - apply some update patches from the lynx folks
  - set user's TEMP dir to their home dir to avoid /tmp races


author: Donnie Barnes <djb@redhat.com>
changelog:
  - updated from 2.6 to 2.7.1
  - moved /usr/lib/lynx.cfg to /etc/lynx.cfg
  - build with slang instead of ncurses
  - made default startup file be file:/usr/doc/HTML/index.html


author: Harald Hoyer <harald@redhat.com> - 3:2.1.5-34.rhel4.1
changelog:
  - fix for bug #173139 (CVE-2005-3573 Mailman Denial of Service)
  - fix for bug #176089 (CVE-2005-4153 Mailman Denial of Service)


author: John Dennis <jdennis@redhat.com> - 3:2.1.5-32.rhel4
changelog:
  - fix bug #132750, add daemon to mail-gid so courier mail server will work.
  - fix bug #143008, wrong location of mailmanctl in logrotate
  - fix bug #142605, init script doesn't use /var/lock/subsys


author: John Dennis <jdennis@redhat.com> 3:2.1.5-26
changelog:
  - fix typo in install documentation
  - fix error in templates/Makefile.in, bad install args, fixes bug #136001,
    thank you to Kaj J. Niemi for spotting this.


author: John Dennis <jdennis@redhat.com> 3:2.1.5-21
changelog:
  - move list data dir to /var/lib/mailman to conform to FHS
    move lock dir to /var/lock/mailman to conform to FHS
    move config dir (VAR_PREFIX/data) to /etc/mailman to conform to FHS
    Thanks to Matt Domsch for pointing this out.


author: John Dennis <jdennis@redhat.com> 3:2.1.5-20
changelog:
  - fix bug #132732, security policy violations,
  - bump release verison
    move non-data installation files from /var/mailman to /usr/lib/mailman,
    update documentation


author: John Dennis <jdennis@redhat.com> 3:2.1.5-15
changelog:
  - fix bug #117615, don't overwrite user modified templates on install
    made template directory "config noreplace"


author: John Dennis <jdennis@redhat.com> 3:2.1.5-14
changelog:
  - add comments into the crontab files so users know the /etc/cron.d
    file is volitile and will edit the right file.
    Also make the master crontab file "config noreplace" so edits are preserved.


author: John Dennis <jdennis@redhat.com> 3:2.1.5-10
changelog:
  - fix bug #129492 and bug #120912
    stop using crontab to setup mailman's cron jobs,
    instead install cron script in /etc/cron.d


author: John Dennis <jdennis@redhat.com> 3:2.1.5-9
changelog:
  - apply patch to elminate "-1 LISTNAME moderator request(s) waiting" messages
    problem desciption here:
    http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq03.038.htp


author: John Dennis <jdennis@redhat.com> - 3:2.1.5-6
changelog:
  - fix bug in pre scriplet, last command had been "service mailman stop"
    which should have been harmless if mailman was not installed except
    that it left the exit status from the script as non-zero and rpm
    aborted the install.


author: John Dennis <jdennis@redhat.com> - 3:2.1.5-5
changelog:
  - add status reporting to init.d control script
    stop mailman during an installation
    restart mailman if it had been running prior to installation


author: John Dennis <jdennis@redhat.com> 3:2.1.5-1
changelog:
  - bring up to latest 2.1.5 upstream release
    From Barry Warsaw: Mailman 2.1.5, a bug fix release that also
    contains new support for the Turkish language, and a few minor new
    features. Mailman 2.1.5 is a significant upgrade which should
    improve disk i/o performance, administrative overhead for discarding
    held spams, and the behavior of bouncing member disables.  This
    version also contains a fix for an exploit that could allow 3rd
    parties to retrieve member passwords.  It is thus highly recommended
    that all existing sitesupgrade to the latest version


author: Warren Togami <wtogami@redhat.com> 3:2.1.4-4
changelog:
  - #105638 fix bytecompile and rpm -V
  - postun /etc/postfix/aliases fix
  - clean uninstall (no more empty dirs)
  - #115378 RedirectMatch syntax fix


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - fix bug 72004, 74483, 74484, 87856 - improper log rotation
  - fix bug 88083 - mailman user/group needed to exist during build
  - fix bug 88144 - wrong %file attributes on mm_cfg.py
  - fix bug 89221 - mailman user not created on install
  - fix bug 89250 - wrong pid file name in initscript


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - various small tweaks to the spec file to make installation cleaner
  - use /usr/bin/python when compiling, redirect compile output to /dev/null,
  - don't run update in %post, let the user do it, remove the .pyc files in %postun,
  - add setting of MAILHOST and URLHOST to localhost.localdomain, don't let
  - configure set them to the build machine.


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - 1) remove config patch, mailmanctl was not the right file to install in init.d,
  - it needed to be scripts/mailman
  - 2) rename httpd-mailman.conf to mailman.conf, since the file now lives
  - in httpd/conf.d directory the http prefix is redundant and inconsistent
  - with the other file names in that directory.


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - Bring package up to date with current upstream source, 2.1
  - Fix several install/packaging problems that were in upstream source
  - Add multiple mail group functionality
  - Fix syntax error in fblast.py
  - Remove the forced setting of mail host and url host in mm_cfg.py


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.9-1
changelog:
  - include README.QMAIL in with the docs (#58887)
  - include README.SENDMAIL and README.EXIM in with the docs
  - use an included httpd.conf file instead of listing the configuration
    directives in the %description, which due to specspo magic might look
    wrong sometimes (part of #51324)
  - interpolate the DEFAULT_HOST_NAME value in mm.cfg into both the DEFAULT_URL
    and MAILMAN_OWNER (#57987)
  - move logs to /var/log/mailman, qfiles to /var/spool/mailman, rotate
    logs in the log directory (#48724)
  - raise exceptions when someone tries to set the admin address for a list
    to that of the admin alias (#61468)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a default permissions problem in /var/mailman/archives/private,
    reported by Johannes Erdfelt
  - update to 2.0.9


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.8-1
changelog:
  - set FQDN and URL at build-time so that they won't be set to the host the
    RPM package is built on (#59177)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.0.5
  - change the default hostname from localhost to localhost.localdomain in the
    default configuration
  - chuck configuration file settings other than those dependent on the host name
    (the build system's host name is not a good default)  (#32337)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make the default owner root again so that root owns the docs
  - update to 2.0beta5, which fixes a possible security vulnerability
  - add smrsh symlink


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to beta4
  - change uid/gid to apache.apache to match apache (#13593)
  - properly recompile byte-compiled versions of the scripts (#13619)
  - change mailman alias from root to postmaster


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move web files to reside under /var/www
  - move files from /usr/share to /usr/share
  - integrate spot-fixes from mailman lists via gnome.org


author: Peter Jones <pjones@redhat.com> - 4.2.1.4-1
changelog:
  - close /init just after reading the file, instead of after runStartup()
    finishes, so it gets closed before we exec() /sbin/init . (#145601)


author: Peter Jones <pjones@redhat.com> - 4.2.1.2-1
changelog:
  - Fix clustered volume group locking in the initrd during vgscan/vgchange,
    and only activate the volume group / lives on (#151172)


author: Peter Jones <pjones@redhat.com> - 4.2.1.1-1
changelog:
  - Make getArg return NULL on cmd=NULL, fixing #144472 .  Based on a
    patch from Kasper Dupont.
  - Make nash expand environment variables on command lines (#144474)
  - Make nash check pids returned from wait*() (#145660)


author: Jeremy Katz <katzj@redhat.com> - 4.1.17-1
changelog:
  - run udevstart again instead of sleeping, this will ensure all 
    devices are created in all cases after modules have been 
    loaded (thanks to notting)


author: Jeremy Katz <katzj@redhat.com> - 4.1.15-1
changelog:
  - new-kernel-pkg: set new kernels as default (#135161) when
    a) /etc/sysconfig/kernel contains UPDATEDEFAULT=yes
    b) --package foo is passed in and foo matches DEFAULTKERNEL 
       in /etc/sysconfig/kernel


author: Jeremy Katz <katzj@redhat.com> - 4.1.12-1
changelog:
  - update to work with udev 032, conflict with old udev
  - if udev is present, use it.  trying to avoid the use of udev if it's 
    installed is the road to things not working


author: Jeremy Katz <katzj@redhat.com> - 4.1.0-1
changelog:
  - mkinitrd: if using udev for the initrd, set things up appropriately 
    (based on patches from Harald Hoyer and Thomas Woerner)
  - nash: support for echo -n
  - nash: better error message on exec failures
  - nash: exec udev if we're called as a hotplug handler


author: Jeremy Katz <katzj@redhat.com> - 4.0.6-1
changelog:
  - various fixes from a code review by Steve Grubb which should fix 
    some of the lingering problems (#129673)
  - nash: warning fix from Michal Jaegermann (#129673)
  - grubby: removal with (hd0,0)


author: Jeremy Katz <katzj@redhat.com> - 4.0.4-1
changelog:
  - nash: fix mounting by label in some cases (tracked down by 
    Erik Jacobson, #129581, #129673, #129667, #129635)


author: Jeremy Katz <katzj@redhat.com> 4.0.3-1
changelog:
  - grubby: more (hd0,0) support (#125156)
  - mkinitrd.8: update manpage (#129585)
  - nash: fix some warnings


author: Jeremy Katz <katzj@redhat.com> 4.0.2-1
changelog:
  - nash: support bind mounting
  - grubby: support the (hd0,0)/path syntax for kernels and initrds in
    grub.conf (#114758, #125156, #120906)


author: Jeremy Katz <katzj@redhat.com> - 4.0.0-1
changelog:
  - create an initramfs on 2.6 kernels instead of an initrd
  - use new mount magic instead of pivot_root 
    on 2.6 kernels
  - try to handle the case of modules going away on kernel upgrades a 
    little bit more nicely (#123994)
  - avoid over-zealous creation of /dev/mapper/control (#127115)
  - improve nash(8) manpage (#127413)


author: Jeremy Katz <katzj@redhat.com> - 3.5.21-1
changelog:
  - new-kernel-package: add patch from Ryan Tilder to allow setting new 
    kernel as default (#117605)
  - mkinitrd: i2o_pci isn't in 2.6 (#120827)
  - new-kernel-pkg: conditionalize kernel binary name for 2.6 vs 2.4 
    on ppc/ppc64 (as it's vmlinuz in 2.6 instead of the 
    vmlinux from 2.4) (#120868)


author: Jeremy Katz <katzj@redhat.com> - 3.5.19-1
changelog:
  - nash/mkinitrd: quiet mode for nash and necessary mkinitrd changes 
    to work with it
  - mkinitrd: add lxo's patch for copying lvm.conf (#112099)
  - new-kernel-pkg: allow specifying the banner used in the boot loader config
    on the command line (#114809)


author: Jeremy Katz <katzj@redhat.com> 3.5.17-1
changelog:
  - mkinitrd: handle multiple spaces in modules.conf (from Lubomir Bulej)
  - nash: rebuild against new dietlibc fixing problems with root=LABEL= (#112623)
  - mkinitrd: determine kernel version and adjust modulefile appropriately 
    so that we look at /etc/modprobe.conf for 2.6 kernels
  - mkinitrd: first pass at getting lvm working on 2.4 -> 2.6 upgrade


author: Jeremy Katz <katzj@redhat.com> 3.5.16-1
changelog:
  - fixing handling of non-lvm case when /dev/mapper/control isn't present
  - add patch from Al Viro to get root dev in numeric form by grokking sysfs


author: Jeremy Katz <katzj@redhat.com> 3.5.15-1
changelog:
  - mkinitrd: add support for lvm2 (note: will not currently handle being
    on a running 2.4 kernel and installing 2.6 with lvm rootfs)


author: Jeremy Katz <katzj@redhat.com> 3.5.10-1
changelog:
  - clean up bogus warning in installkernel
  - only try to do grub configs on arches which support grub (#103261)


author: Matt Wilson <msw@redhat.com> 3.5.9-1
changelog:
  - add \n to error messages in grubby
  - NUL terminate buffer returned from readlink properly
  - symlinks are most likely relative, chdir to / before trying to
    follow them
  - yaboot needs boot prefix
  - silo needs boot prefix too


author: Jeremy Katz <katzj@redhat.com> 3.5.7-1
changelog:
  - pick modules from /lib/modules/$(uname -r)/updates first
  - be less confused by more than one module of a name


author: Jeremy Katz <katzj@redhat.com> 3.5.3-1
changelog:
  - mkinitrd: fix copying of pvs (#97314, #97289)
  - mkinitrd: use pvscan instead of lvmdiskscan to find PVs to work 
    better on other arches
  - mkinitrd: better check for dasd existence
  - mkinitrd: make certain lvm-mod is included if root on lvm


author: Jeremy Katz <katzj@redhat.com> 3.5.2-1
changelog:
  - mkinitrd: revert use of modprobe -c.  it breaks in the installer when we 
    don't have a modules.dep for the BOOT kernel
  - nash: return pivot_root call correctly (#97753)


author: Jeremy Katz <katzj@redhat.com> 3.5.0-1
changelog:
  - mkinitrd: add patch from gc@mandrakesoft.com to determine module 
    deps from modules.dep (#87873)
  - tweak patch to not break weird cases where module deps aren't all 
    you need :/
  - grubby: don't remove the last kernel (#60041)
  - mkinitrd: use modprobe -c to find module options (#89794)


author: Jeremy Katz <katzj@redhat.com> 3.4.51-1
changelog:
  - grubby: error out gracefully if we run out of space (#85424)
  - mkinitrd: copy parent dirs for pvs (#88962)
  - mkinitrd: exit with an exit status if tar fails (#90123)
  - new-kernel-pkg: only use the first entry for / (#90155)
  - grubby: fix a buffer overflow  (#90444)


author: Jeremy Katz <katzj@redhat.com> 3.4.49-1
changelog:
  - new-kernel-pkg: on iSeries, we don't have a boot loader, just make the 
    kernel + initrd combo file (/boot/vmlinux-version.img)


author: Jeremy Katz <katzj@redhat.com> 3.4.47-1
changelog:
  - mkinitrd: fix using options for loading modules
  - mkinitrd: don't use kernel parameters for dasd at mkinitrd time, 
    use what's in modules.conf


author: Jeremy Katz <katzj@redhat.com> 3.4.46-1
changelog:
  - new-kernel-pkg: add necessary bits for s390, some logic cleanups
  - grubby: fix root detection for s390{,x}


author: Jeremy Katz <katzj@redhat.com> 3.4.45-1
changelog:
  - grubby: add silo support (sparc)
  - grubby: add zipl support (s390{,x})
  - add grubby test cases for zipl support


author: Jeremy Katz <katzj@redhat.com> 3.4.43-1
changelog:
  - apply ppc patches for new-kernel-pkg and installkernel from Dan 
    Burcaw <dburcaw@terrasoftsolutions.com>
  - man page tweak (#85471)


author: Jeremy Katz <katzj@redhat.com> 3.4.40-1
changelog:
  - fix i2o module ordering (#83447)
  - ifarch'd build requires of dietlibc now that the build system has a way to
    handle these


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - change one test from a number to a string test that could otherwise
    fail in not properly setup chroot environments


author: <ewt@redhat.com>
changelog:
  - added support for yaboot
  - test script runs tests for all platforms
  - separated elilo configuration from lilo mode, allowing elilo specific
    tests to be run on any platform


author: <ewt@redhat.com>
changelog:
  - grubby now shortens lilo titles to ensure they are less then 16 characters
    long (76236)
  - mkinitrd would only turn on /dev/md0 if raid was needed; now it enables
    all raid devices listed in /proc/mdstat (82209)
  - use product name from /etc/redhat-release to generate label in grub.conf
    (82352)


author: <ewt@redhat.com>
changelog:
  - all mkdev() actions will create directories as needed (some code in
    mkdevices is now obsolete; I'll remove it later) (#73317)
  - added mkdev command to test the above
  - support diratime/nodiratime mount options (#78738)
  - grubby will follow symlinks when writing new config file (#78713)
  - don't depend on raidtab, use /proc/mdstat instead (#80424) this covers
    both mkinitrd and grubby


author: Jeremy Katz <katzj@redhat.com> 3.4.34-1
changelog:
  - grubby: fix segfault finding default if default doesn't have a root= (#66000)
  - don't include usb modules by default.  pass --with-usb to get usb modules
  - make sure kudzu exists before trying to exec it
  - handle multiple scsi hosts being present (#77422)
  - add /usr/sbin to default path (#79581)
  - fix using --builtin= (#80448)
  - grubby: preserve the mode on config files (#80776)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - mkinitrd: add support for finding gzipped modules
  - mkinitrd: don't be noisy if we don't have lvm-mod loaded


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - grubby: don't bail when looking for root in appends of lilo-style configs
  - include grubby on x86_64


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix some syntax errors
  - use grep's -q flag to save a redirect in places where we're not redirecting
    stderr


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - grubby could segfault by going into its lilo checking if it couldn't find 
    a default to copy (default had no root= and --bad-image-okay wasn't 
    being used)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - nash: create directories if needed in mkdevices command (#73090)
  - grubby: handle lilo case of non-linux default (#72202)


author: Erik Troan <ewt@redhat.com>
changelog:
  - --ifneeded is obsolete; we always need initrds
  - grubby lets you specify multiple indexes for --info
  - grubby lets you select kernels by title
  - added showlabels to nash
  - new-kernel-pkg sets the root device from /etc/fstab rather then inheriting it
  - new-kernel-pkg removes all entries w/ a duplicate label (67459)


author: Erik Troan <ewt@redhat.com>
changelog:
  - added loadinitrd (used by mkbootdisk) on ia32 and sparc
  - modules "off" and "null" should be ignored (67086)
  - mkrootdev looks for root=LABEL=/ in /proc/cmdline, so root by label
    works again (fully determined by root= kernel parameter)
  - added --update-kernel and --remove-args arguments to grubby
  - kernel specification of ALL supported by grubby
  - DEFAULT accepted much more consistently
  - grubby --info displays info on all kernels specified, not just the first
  - ext3 need mbcache now (67354)
  - grubby allows config file entry numbers to be used as kernel paths
  - support /etc/sysconfig/grub.conf
  - display lba info from lilo.conf file in --info


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - don't run lilo twice on kernel removal in new-kernel-pkg
  - don't run grubby to add/remove kernels from new-kernel-pkg if 
    bootloader config doesn't


author: Erik Troan <ewt@redhat.com>
changelog:
  - added --bootloader-probe to grubby
  - wrote a man page for grubby
  - include grubby on ia64
  - updated new-kernel-pkg to work with lilo/elilo
  - added --info=DEFAULT option


author: Erik Troan <ewt@redhat.com>
changelog:
  - added --grub option so grub tests could run on ia64
  - added some basic tests of lilo default directive handling


author: Erik Troan <ewt@redhat.com>
changelog:
  - added --nopivot (53679)
  - honor INSTALL_PATH in installkernel (32833)
  - installkernel versions old kernels as well (52756)
  - lilo support added to grubby


author: Erik Troan <ewt@redhat.com>
changelog:
  - cleaned up usage message
  - added --omit-lvm-modules to man page
  - added --builtin option (65250)
  - skip comments in fstab (65249)
  - added findlodev to nash, use that to pick block device (63421)
  - support -o option in nash's mount (59185)
  - look for xfs_dmapi (60066)
  - added > support for executed commands (61180)
  - grubby copies permissions from old config file (59227)
  - use options from fstab for root filesystem (56071)
  - try and be better about returning nonzero on error (60203)
  - make modprobe symlink properly to avoid kernel message (62145)
  - support linear raid (12775)
  - support fallback option in grub config (54794)
  - comments in template entries not handled quite right (65198)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - fix probing for LVM usage to require a volume group to exist before adding
    the module
  - --omit-lvm-modules will omit LVM modules
  - add support for root device being LVM


author: Erik Troan <ewt@redhat.com>
changelog:
  - look for a non /tmpfs directory
  - added support for xfs
  - use with raid md.o if it exists
  - fixed bug in echo
  - use find form nash rather then /usr (mkinitrd shouldn't need /usr
    mounted)


author: Erik Troan <ewt@redhat.com>
changelog:
  - added support for mounting root filesystem by label
  - switched to dietlibc from minilibc
  - fix so --preload= works [33675,57560,44377]
  - added info on --image-version and --nocompress to man page [57560]
  - set fileystem check interval to 0 in case the system clock
    is borked [51454]
  - give a proper error when run by a user other then root [27218,53159]
  - grubby statically linked against popt [55305]
  - cleaned up verbose output a bit [21791]


author: Erik Troan <ewt@redhat.com>
changelog:
  - fixed bug handling invalid default (MF #52889)
  - in some cases we would set the default to point at a removed image


author: Matt Wilson <msw@redhat.com>
changelog:
  - make consoles with the correct minor numbers
  - applied patch from hjl to fix fstab parsing (#50819)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - skip errors finding jbd as a module if we're skipping them trying to find
    ext3 so that you can build a kernel with ext3 built-in and still use an
    initrd


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't print errors if /etc/raidtab doesn't exist
  - or /etc/{modules.conf,conf.modules}, for that matter


author: Matt Wilson <msw@redhat.com>
changelog:
  - don't dig through /etc/fstab to find out if we have a filesystem on
    a RAID device, it's usually mounted by label so /dev/mdN isn't there
    at all (#46525)


author: Erik Troan <ewt@redhat.com>
changelog:
  - let nash be invoked as modprobe to avoid a modprobe failure to exec
  - nash will try to run arbitrary commands now (removing insmod as a special 
    case)


author: Matt Wilson <msw@redhat.com>
changelog:
  - added patch from twaugh to avoid blindly adding scsi_mod
    and sd_mod to initrd if they are not needed (#24114)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Enlarge initrds, needed for systems with both IDE and SCSI
    (Bug #23846)
  - Version 2.[6789] probably shouldn't identify itself as 2.6
    with --version. ;)
  - bzip2 source


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - now works when /usr is not mounted (do not rely on /usr/bin/install)
  - slight cleanups, better usage message


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Now automatically includes necessary raid modules
  - --omit-raid-modules now omits raid modules
  - tiny doc updates


author: Matt Wilson <msw@redhat.com>
changelog:
  - --omit-scsi-modules now omits all scsi modules
  - updated documentation
  - mkinitrd now grabs scsi_hostadapter modules from anywhere -
    some RAID controller modules live in block/


author: Matt Wilson <msw@redhat.com>
changelog:
  - Ignore the absence of scsi modules, include them if they are there, but
    don't complain if they are not.
  - changed --no-scsi-modules to --omit-scsi-modules (as it should have been)


author: Jakub Jelinek <jj@ultra.linux.cz>
changelog:
  - fix for combined sparc/sparc64 insmod, also pluto module is really
    fc4:soc:pluto and we don't look at deps, so special case it.


author: Erik Troan <ewt@redhat.com>
changelog:
  - added 'make archive' rule to Makefile
  - rewrote install procedure for more robust version handling
  - be smarter about grabbing options from /etc/conf.modules


author: Erik Troan <ewt@redhat.com>
changelog:
  - Only use '-s' to install binaries if /usr/bin/strip is present.
  - Use an image size of 2500 if binaries can't be stripped (1500 otherwise)
  - Don't use "mount -o loop" anymore -- losetup the proper devices manually
  - Requires losetup, e2fsprogs


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Fixed a bug in parsing options.
  - Changed to use a build tree, then copy the finished tree into the
    image after it is built.
  - Added patches derived from ones written by Christian Hechelmann which
    add an option to put the kernel version number at the end of the module
    name and use install -s to strip binaries on the fly.


author: Joe Orton <jorton@redhat.com> 2.0.1-5
changelog:
  - merge from Taroon:
   * don't re-use database connections (#115496)
   * make functions static
   * downgrade "not configured" log message from warning to debug


author: Gary Benson <gbenson@redhat.com> 0.9.12-6
changelog:
  - port to httpd-2.0
  - add the config file
  - put the manual in with the Apache manual
  - license is Apache Software License


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.8-1
changelog:
  - update to 0.9.8, fixing problems detailed at
    http://cert.uni-stuttgart.de/advisories/apache_auth.php


author: Christopher Aillon <caillon@redhat.com> 37:1.7.3-18
changelog:
  - Prevent inlining of stack direction detection (#135255)
  - Fix problem where default apps aren't showing up in the download
    dialog (#136261)


author: Christopher Blizzard <blizzard@redhat.com> 37:1.7.3-2
changelog:
  - Remove the entries for mozilla-compose.desktop and the image file
  - Move mozilla.desktop to mozilla package
  - don't use the desktop-menu-patches link for mozilla.desktop


author: Christopher Aillon <caillon@redhat.com> 37:1.7.3-1
changelog:
  - Update to 1.7.3
  - Add temporary patch to compile against newer freetype.
    See bugzilla.mozilla.org 234035
  - Remove ppc temporarily; since it doesn't compile.
    See bugzilla.redhat.com 133316


author: Christopher Blizzard <blizzard@redhat.com>
changelog:
  - Update to 1.7
  - New psfonts patch that includes new paths
  - don't need the x86-64 patch anymore - it's been merged upstream
  - don't need patch to unblock port 1080 - merged upstream
  - don't need dnscache patch - merged upstream
  - don't need screensize patch - merged upstream
  - don't need the xremote patches anymore


author: Christopher Blizzard <blizzard@redhat.com> 37:1.6-7
changelog:
  - Add a -a mozilla to the client in the startup script so that it will
    only talk to mozilla instances


author: Christopher Aillon <caillon@redhat.com> 37:1.6-4
changelog:
  - Added patch to no longer block port 1080
  - Added patch to fix the DNS cache
  - Added patch to correctly get the avail screen size
  - Added patches to make x-remote aware of profiles, programs and usernames


author: Christopher Blizzard <blizzard@redhat.com>
changelog:
  - Use the components/*.dat files instead of component.reg both in
  rebuild-databases.pl and in packaging.


author: Christopher Aillon <caillon@redhat.com> 37:1.7.12-1.4.1
changelog:
  - Update to 1.7.12, containing fixes for:
    CAN-2005-2701 CAN-2005-2702 CAN-2005-2703 CAN-2005-2704
    CAN-2005-2705 CAN-2005-2706 CAN-2005-2707 CAN-2005-2968


author: Tom Lane <tgl@redhat.com> 4.1.12-2.RHEL4.1
changelog:
  - Update to MySQL 4.1.12 (includes fixes for bz#158688, bz#163694,
    and a real fix for bz#152911).
  - Enable SSL (bz#159967)
  - Add --with-isam to re-enable the old ISAM table type, per bz#159262
  - Remove manual.txt, as upstream decided not to ship it anymore;
    it was redundant with the mysql.info file anyway.
  - Fix buffer overflow newly exposed in isam code; it's the same issue
    previously found in myisam, and not very exciting, but I'm tired of
    seeing build warnings.


author: Tom Lane <tgl@redhat.com> 4.1.10a-2.RHEL4.1
changelog:
  - Apply a band-aid patch for bz#152911; it seems too late in the RHEL4-U1
    cycle to do the right thing of upgrading to 4.1.11.
  - Back-patch devel tip removal of use of <asm/atomic.h> and LinuxThreads;
    this is necessary for correct operation on s390x (bz#143537), and it
    also seems to cure semi-repeatable regression test failures on ppc64.
  - At last we can enable "make test" on all arches
  - Move perl-DBI, perl-DBD-MySQL dependencies to server package (bz#154123)
  - Might as well turn on --disable-dependency-tracking


author: Tom Lane <tgl@redhat.com> 4.1.10a-1.RHEL4.1
changelog:
  - Update to MySQL 4.1.10a to fix security vulnerabilities (bz#150868,
    for CAN-2005-0711, and bz#150871 for CAN-2005-0709, CAN-2005-0710).
  - Run make test on all archs except s390x (which seems to have a bdb issue)
  - Fix init script to honor settings appearing in /etc/my.cnf (bz#76051)
  - Fix package Requires: interdependencies.


author: Tom Lane <tgl@redhat.com> 4.1.7-5.RHEL4.1
changelog:
  - Add a restorecon to keep the mysqld.log file in the right context (bz#143887)
  - Fix init script to not need a valid username for startup check (bz#142328)
  - Don't assume /etc/my.cnf will specify pid-file (bz#143724)


author: Tom Lane <tgl@redhat.com> 4.1.7-4
changelog:
  - Turn off old_passwords in default /etc/my.cnf file, for better compatibility
    with mysql 3.x clients (per suggestion from Joe Orton).


author: Tom Lane <tgl@redhat.com> 3.23.58-13
changelog:
  - fix security issues CAN-2004-0835, CAN-2004-0836, CAN-2004-0837
    (bugs #135372, 135375, 135387)
  - fix privilege escalation on GRANT ALL ON `Foo\_Bar` (CAN-2004-0957)


author: Tom Lane <tgl@redhat.com> 3.23.58-12
changelog:
  - fix multilib problem with mysqlbug and mysql_config
  - adjust chkconfig priority per bug #128852
  - remove bogus quoting per bug #129409 (MySQL 4.0 has done likewise)
  - add sleep to mysql.init restart(); may or may not fix bug #133993


author: Tom Lane <tgl@redhat.com> 3.23.58-11
changelog:
  - fix low-priority security issues CAN-2004-0388, CAN-2004-0381, CAN-2004-0457
    (bugs #119442, 125991, 130347, 130348)
  - fix bug with dropping databases under recent kernels (bug #124352)


author: Tom Lane <tgl@redhat.com> 3.23.58-8
changelog:
  - repair logfile attributes in %files, per bug #102190
  - repair quoting problem in mysqlhotcopy, per bug #112693
  - repair missing flush in mysql_setpermission, per bug #113960
  - repair broken error message printf, per bug #115165
  - delete mysql user during uninstall, per bug #117017
  - rebuilt


author: Patrick Macdonald <patrickm@redhat.com> 3.23.57-1
changelog:
  - revert to prior version of MySQL due to license incompatibilities 
    with packages that link against the client.  The MySQL folks are
    looking into the issue.


author: Trond Eivind Glomsrød <teg@redhat.com> 3.23.52-2
changelog:
  - Add --enable-local-infile to configure - a new option
    which doesn't default to the old behaviour (#72885)


author: Trond Eivind Glomsrød <teg@redhat.com> 3.23.49-3
changelog:
  - Add the various .cnf examples as doc files to mysql-server (#60349)
  - Don't include manual.ps, it's just 200 bytes with a URL inside (#60349)
  - Don't include random files in /usr/share/mysql (#60349)
  - langify (#60349)


author: Trond Eivind Glomsrød <teg@redhat.com> 3.23.47-4
changelog:
  - Use kill, not mysqladmin, to flush logs and shut down. Thus, 
    an admin password can be set with no problems.
  - Remove reload from init script


author: Trond Eivind Glomsrød <teg@redhat.com> 3.23.46-1
changelog:
  - 3.23.46
  - use -fno-rtti and -fno-exceptions, and set CXX to increase stability. 
    Recommended by mysql developers.


author: Trond Eivind Glomsrød <teg@redhat.com> 3.23.41-1
changelog:
  - 3.23.41 bugfix release
  - disable innodb, to avoid the broken updates
  - Use "mysqladmin flush_logs" instead of kill -HUP in logrotate 
    script (#51711)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Reenable test, but don't run them for s390, s390x or ia64
  - Make /etc/my.cnf config(noplace). Same for /etc/logrotate.d/mysqld


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Make it obsolete our 6.2 PowerTools packages
  - 3.23.36 bugfix release - fixes some security issues
    which didn't apply to our standard configuration
  - Make "make test" part of the build process, except on IA64
    (it fails there)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - gettextize
  - move the items in Requires(post): to Requires: in preparation
    for an errata for 7.0 when 3.23.31 is released
  - 3.23.31


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - add the log file to the rpm database, and make it 0640
    (#24116)
  - as above in logrotate script
  - changes to the init sequence - put most of the data
    in /etc/my.cnf instead of hardcoding in the init script
  - use /var/run/mysqld/mysqld.pid instead of 
    /var/run/mysqld/pid
  - use standard safe_mysqld
  - shut down cleaner


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - 3.23.30
  - do an explicit chmod on /var/lib/mysql in post, to avoid 
    any problems with broken permissons. There is a report
    of rm not changing this on its own (#22989)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - bzipped source
  - changed from 85 to 78 in startup, so it starts before
    apache (which can use modules requiring mysql)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - check for negative niceness values, and negate it
    if present (#17899)
  - redefine optflags on IA32 FTTB


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - 3.23.26, which among other fixes now uses mkstemp()
    instead of tempnam().
  - revert changes made yesterday, the problem is now
    isolated


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - rename config file to /etc/my.cnf, which is what
    mysqld wants... doh. (#17432)
  - include a changed safe_mysqld, so the pid file option
    works. 
  - make mysql dir world readable to they can access the 
    mysql socket. (#17432)
  - 3.23.24


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - don't run ldconfig -n, it doesn't update ld.so.cache
    (#16034)
  - include some missing binaries
  - use safe_mysqld to start the server (request from
    mysql developers)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - don't build the SQL daemon statically (glibc problems)
  - fix the logrotate script - only flush log if mysql
    is running
  - change the reloading procedure 
  - remove icon - glint is obsolete a long time ago


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - try the new compiler again
  - build the SQL daemon statically
  - add compile time support for complex charsets
  - enable assembler
  - more cleanups in initscript


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - 3.23.21
  - remove file from /etc/sysconfig
  - Fix initscript a bit - initialization of databases doesn't
    work yet
  - specify the correct licenses
  - include a /etc/my.conf (empty, FTTB)
  - add conditional restart to spec file


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - update to 3.23.20
  - use %configure, %makeinstall, %{_tmppath}, %{_mandir},
    %{_infodir}, /etc/init.d
  - remove the bench package
  - change some of the descriptions a little bit
  - fix the init script
  - some compile fixes
  - specify mysql user
  - use mysql uid 27 (postgresql is 26)
  - don't build on ia64


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.32 release XOS.1 for LinuX/OS 1.8.0
  - Upgrade from version 3.22.27 to 3.22.32.
  - Do "make install" instead of "make install-strip", because "install -s"
    now appears to fail on various scripts.  Afterwards, strip manually.
  - Reorganize subpackages, according to common Red Hat packages: the client
    program and shared library become the base package and the server and
    some accompanying files are now in a separate server package.  The
    server package implicitly requires the base package (shared library),
    but we have added a manual require tag anyway (because of the shared
    config file, and more).
  - Rename the mysql-benchmark subpackage to mysql-bench.


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.27 release XOS.2 for LinuX/OS 1.7.1
  - Add post(un)install scripts for updating ld.so.conf (client subpackage).


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.27 release XOS.1 for LinuX/OS 1.7.0
  - Initial version.
  - Some ideas borrowed from Red Hat Powertools 6.1, although this spec
    file is a full rewrite from scratch.


author: Tom Lane <tgl@redhat.com> 4.1.20-1.RHEL4.1
changelog:
  - Update to MySQL 4.1.20 (fixes CVE-2006-2753, CVE-2006-1517, CVE-2006-1516,
    CVE-2006-0903, bugs #193827, #190743, #190863, #183260, #191181, #183277).
  - Remove broken logrotate script, per bugs #180639, #182025.
  - Add EXCEPTIONS-CLIENT license info to the shipped documentation
  - Make stop script wait for daemon process to disappear (bz#172426)


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-9.RHEL4.1
changelog:
  - fixed possible libXpm overflows (#151641)
  - Upstream Fix: Multiscreen mode
  - Upstream Fix: Crash when restarting by a session manager (motifzone#1193)
  - Upstream Fix: Crash when duplicating a window menu containing f.circle_up
    (motifzone#1202)
  - fixed divide by zero error in ComputeVizCount() (#144420)
  - Xpmcreate: define LONG64 on 64 bit architectures (#143689)


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-6
changelog:
  - fixed CAN-2004-0687 (integer overflows) and CAN-2004-0688 (stack overflows)
    in embedded Xpm library


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-5
changelog:
  - libXp now moved to xorg-x11-deprecated-libs, therefore no compatibility 
    with XFree86 packages anymore.


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-3
changelog:
  - fixed popup menus fail on Tarantella/VNC (#123027)
  - fixed character not supported problem (#124960)
  - fixed data out of bounds bug (#124961)


author: Thomas Woerner <twoerner@redhat.com> 2.2.2-13
changelog:
  - fix for Xmu/EditRes conflict (bug #80777)
  - fix for wml and utf-8 (bug #80271)
  - fix for Ext18List (bug #74502)


author: Than Ngo <than@redhat.com>
changelog:
  - add 3 official motif patches 
  - add rm -rf $RPM_BUILD_ROOT in install section
  - remove some old patches which are now in official patches


author: Than Ngo <than@redhat.de>
changelog:
  - fix imake to built with gcc-2.96 (thanks Jakup)
  - put bitmaps in /usr/X11R6/include/X11/bitmaps
  - put bindings in /usr/X11R6/lib/Xm/bindings
  - add define -D_GNU_SOURCE to build Motif
  - gzip man pages
  - cleanup specfile


author: Radek Vokal <rvokal@redhat.com> 5.1.2-11.EL4.6
changelog:
  - agentx leak patches
  - return IP address instead of MAC address (#167588)
  - changes in tcp_dos patch


author: Radek Vokal <rvokal@redhat.com> 5.1.2-11.EL4.3
changelog:
  - snmpd reports gigabit Ethernet speeds using ethtool (#152480)
  – fixed doublefree error (#157539)
  - CAN-2005-1740 fixed insecure temporary file usage (#158769) <suse.de>


author: Radek Vokal <rvokal@redhat.com> 5.1.2-11.EL4.1
changelog:
  - lmSensors correctly recognized (#150199)
  - fixed retreiving swap size (#150084)
  - net-snmp no longer dies when querying hrSWInstalledLastUpdateTime (#155038)
  - Fixed error building ASN.1 representation (#154421)
  - 64bit network counters correctly wrap (#154455)
  - net-snmp properly deals with large partitions (#153101) <jryska@redhat.com>
  - unexpected length for type ASN_UNSIGNED fixed (#151892)
  - snmptrapd initscript reads correctly options from /etc/snmp/snmptrapd.options (#154798)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.2-9
changelog:
  - Droped obsolete lm-sensors patch and enabled lmSensors module
  - Marked several patches to be removed for 5.1.3


author: Radek Vokal <rvokal@redhat.com> 5.1.2-4
changelog:
  - New prereq for net-snmp-devel
  - lelf check removed from configure.in (#128748)
  - fixed snmpd coredump when sent SIGHUP (#127314)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.1-2
changelog:
  - Added Kaj J. Niemi that fixes ipAdEntIfIndex problem (#119106)
  - Added Kaj J. Niemi to shut up memshared message for 2.6 kernel (#119203)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-12
changelog:
  - Hacked an ugly perl hack to get rid of perl RPATH problems.
  - Fixed 64bit patch and applied it. ;-)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-9
changelog:
  - Reverted removal of _includir redefiniton due to php-snmp dependancy.
  - Remove SO_BSDCOMPAT setsockopt() call, deprecated.


author: Phil Knirsch <pknirsch@redhat.com> 5.1-3
changelog:
  - Removed snmpcheck again, needs perl(Tk) which we don't ship (#111194).
  - Fixed getopt definition in include file (#111209).
  - Included Kaj J. Niemi's patch for broken perl module (#111319).
  - Included Kaj J. Niemi's patch for broken async getnext perl call (#111479).
  - Included Kaj J. Niemi's patch for broken hr_storage (#111502).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-2
changelog:
  - Included BuildPrereq on lm_sensors-devel on x86 archs (#110616).
  - Fixed deprecated initscript options (#110618).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-1
changelog:
  - Updated to latest net-snmp-5.1 upstream version.
  - Tons of specfile and patch cleanup.
  - Cleaned up perl stuff (mib2c etc, see #107707).
  - Added lm_sensors support patch for x86 archs from Kaj J. Niemi (#107618).
  - Added support for custom mib paths and mibs to snmptrapd initscript (#102762)


author: Phil Knirsch <pknirsch@redhat.com> 5.0.9-1
changelog:
  - Updated to latest upstream version net-snmp-5.0.9
  - Added patch to fix net-snmp-perl problems (#105842).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.8-2
changelog:
  - Hack to make it build on 64bit platforms with /usr/lib64 correctly.
  - Fixed bug #85071 (leak of open descriptors for ipv6).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.1-5
changelog:
  - Added --enable-ucd-snmp-compatibility for compatibility with older version
    and fixed installation thereof.
  - Got rid of the perl(Tk) dependancy by removing snmpcheck.
  - Include /usr/include/ucd-snmp in the filelist.
  - Fixed a problem with the ucd-snmp/version.h file.


author: Phil Knirsch <pknirsch@redhat.com> 4.2.3-4
changelog:
  - Added the snmptrapd init script as per request (#49205)
  - Fixed the again broken rpm query stuff (#57444)
  - Removed all old and none-used db related stuff (libs and header checks/files)


author: Phil Knirsch <phil@redhat.de> 4.2.3-1
changelog:
  - Update to 4.2.3 final.
  - Fixed libtool/rpath buildroot pollution problem.
  - Fixed library naming problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a server segfault for snmpset operation (#53640). Thanks to Josh Giles
    and Wes Hardaker for the patch.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Final bcm5820 fix. Last one was broken.
  - Fixed bugzilla bug (#51960) where the binaries contained rpath references.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a couple of security issues:
    o /tmp race and setgroups() privilege problem
    o Various buffer overflow and format string issues.
    o One signedness problem in ASN handling.
  - Fixed an important RFE to support bcm5820 cards. (#51125)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Removed tkmib from the package once again as we don't ship the Tk.pm CPAN
    perl module required to run it (#49363)
  - Added missing Provides for the .so.0 libraries as rpm doesn't seem to find
    those during the build anymore (it used to) (#46388)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Enabled IPv6 support (RFE #47764)
  - Hopefully final fix of snmpwalk problem (#42153). Thanks to Douglas Warzecha
    for the patch and Matt Domsch for reporting the problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to 4.2.1. Removed 2 obsolete patches (fromcvs and #18153)
  - Include /usr/share/snmp/snmpconf in %files


author: Matt Wilson <msw@redhat.com>
changelog:
  - configure with --enable-reentrant and added "smux" and "agentx" to
    --with-mib-modules= argument (#29626)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - don't depend on /etc/init.d so that package will work with 6.2.
  - perl path fiddles no longer needed.
  - rely on brp-compress frpm rpm to compress man pages.
  - patch from ucd-snmp CVS (Wes Hardaker).
  - configure.in needs to check for rpm libraries correctly (#23033).
  - add simple logrotate script (#21399).
  - add options to create pidfile and log with syslog with addresses (#23476).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - tkmib doco had #!/usr/bin/perl55
  - include snmpcheck and tkmib again (still needs some CPAN module, however).


author: Jindrich Novy <jnovy@redhat.com> 10.25-1
changelog:
  - update to latest upstream 10.25
  - drop initvar patch
  - update security, misc patch
  - add bmpbpp patch to use only appropriate bit depths for BMP (#135675)


author: Jindrich Novy <jnovy@redhat.com> 10.23-1
changelog:
  - updated to netpbm-10.23 upsteam (and removed jbig, hpcd)
  - $TMPDIR patch removed, obsolete
  - updated gcc34 patch
  - removed nestedfunc patch, already applied in upstream version
  - updated security patch to conform to 10.23 (mostly in ppmtompeg/frame.c)


author: Phil Knirsch <pknirsch@redhat.com> 10.22-2
changelog:
  - Fixed Zero byte allocation error in bmptopnm (#123169)
  - Honour the $TMPDIR in ppmfade (#117247)
  - Fixed nested function bug (#117377)
  - Fixed several uninitialized variables (#117377)


author: Phil Knirsch <pknirsch@redhat.com> 10.22-1
changelog:
  - Update to latest upstream version 10.22 (also for docs).
  - Removed jbig and hdcp code from tarball.


author: Phil Knirsch <pknirsch@redhat.com> 10.19-4
changelog:
  - Fixed several tmp vulnerabilities in scripts and apps. Based on Debian
    security fix for netpbm-9.24.


author: Phil Knirsch <pknirsch@redhat.com> 10.19-3
changelog:
  - Included doc tarball with manpages (#114755).
  - Fixed small manpage incorrectness (#84922).
  - Fixed message from giftopnm (#114756).


author: Phil Knirsch <pknirsch@redhat.com> 9.24-3
changelog:
  - Fixed a possible gcc compiler problem for inline struct parameters (#62181).
  - Added missing .map files to progs files selection (#61625).


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to netpbm version 9.14
  - Removed pnmtotiff resize patch as it is now part of the original package
  - Removed pstopnm csh fix as it is now part of the original package
  - Removed asciitopgm memcpy fix as it is now part of the original package
  - Removed manpages patch as it is now part of the original package


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed bugzilla bug #19487 where asciitopgm dumped core on Alpha. Actually
    dumped core everywhere


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - update to 9.9
  - Due to patent infringement problems removed the jbig support from the tarball
    (pnm/jbig + Makefile changes) and created a new tarball


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 9.8
  - make sure shhopt.h is included in the -devel package (#19672)
  - rename shhopt.h to pbmshhopt.h because it's not the same as the normal
    shhopt.h that other things (like util-linux) expect


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move netpbm-progs to the Applications/Multimedia group
  - reintroduce patches from the old libgr package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make sure all man pages are included (#9328)
  - fix pstopnm bomb when xres == yres (#9329)
  - add libjpeg and libz because libtiff now needs them


author: Michael Johnson <johnsonm@redhat.com>
changelog:
  - removed old png.h header file that was causing png utils to die
  - build png in build instead of install section...


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - altered install so that the package installs now even if a previous
    version was not installed on the system


author: Donnie Barnes <djb@redhat.com>
changelog:
  - changed copyright from "distributable" to "freeware"
  - added some missing scripts that existed in netpbm
  - added some binaries that weren't getting built
  - added patch to build tiff manipulation progs (requires libtiff)


author: Donnie Barnes <djb@redhat.com>
changelog:
  - updated to 2.0.13
  - dropped libjpeg and libtiff (those should come from home sources)
  - removed glibc patch (new version appears to have it!)
  - added i686 as a valid arch type to config.guess


author: Nalin Dahyabhai <nalin@redhat.com> 226-10
changelog:
  - backport fix from nss_ldap 242 to issue a start_tls exop when chasing
    referrals received over a connection on which we used start_tls
    (#162482, CAN-2005-2069, upstream #211)
  - backport fix from pam_ldap 180 to issue a start_tls exop when chasing
    referrals received over a connection on which we used start_tls
    (#162482, CAN-2005-2069, upstream #210)


author: Nalin Dahyabhai <nalin@redhat.com> 226-8
changelog:
  - add fix for stripping off the last ldap.secret character, even if it's not
    a newline (#166647, upstream #138,#199)


author: Nalin Dahyabhai <nalin@redhat.com> 226-7
changelog:
  - backport fix from pam_ldap 180 to fix vulnerability when parsing password
    policy controls which don't contain error numbers (#166163, CAN-2005-2497)


author: Nalin Dahyabhai <nalin@redhat.com> 226-3
changelog:
  - fix misleading doc comment in /etc/ldap.conf -- the checkpeer setting follows
    libldap's default, which is dependent on the version of OpenLDAP which which
    this package is linked (part of #143622)
  - force nss_ldap to mimic pam_ldap's behavior when the tls_checkpeer setting is
    unconfigured in ldap.conf


author: Nalin Dahyabhai <nalin@redhat.com> 226-1
changelog:
  - update to nss_ldap 226, pam_ldap 176
  - rework pam_ldap dns autoconfig patch
  - require automake instead of automake15, because autoreconf uses the current
    version (#129877)


author: Nalin Dahyabhai <nalin@redhat.com> 212-1
changelog:
  - update to 212, pam_ldap 167
  - link nss_ldap with libgssapi_krb5, the static libsasl2 includes the gssapi
    mech, at least for now, and we pick up its unresolved symbols at link-time
  - fix out-of-bounds error at initialization-time (part of #101269)
  - include pam_ldap's authorization schema files for slapd as a doc file


author: Nalin Dahyabhai <nalin@redhat.com> 207-5
changelog:
  - fix objectclass and attribute mapping, which failed due to uninitialized
    fields in mapping index structures, fixed upstream in 210 (#110547)


author: Nalin Dahyabhai <nalin@redhat.com> 207-3
changelog:
  - link dynamically with libcom_err if it isn't in /usr/kerberos/lib (which
    we assume means that it's in /lib)


author: Nalin Dahyabhai <nalin@redhat.com> 207-1
changelog:
  - update to build with newer OpenLDAP
  - add README.TLS to remind people that in order for TLS support to be usable,
    the server's certificate has to pass validation checks made by the client


author: Nalin Dahyabhai <nalin@redhat.com> 202-4
changelog:
  - rework static link order to account for libssl requiring libkrb5
  - force assembly locking on %ix86 systems
  - link with libz, which libssl also requires


author: Nalin Dahyabhai <nalin@redhat.com> 202-2
changelog:
  - apply DB patches from sleepycat.com
  - correctly point nss_ldap at the bundled DB library
  - create /%{_lib} instead of /lib to install into


author: Nalin Dahyabhai <nalin@redhat.com> 202-1
changelog:
  - update to nss_ldap 202, pam_ldap 153
  - update DB from 4.0.14 to 4.1.24.NC
  - try to address multilib path changes


author: Nalin Dahyabhai <nalin@redhat.com> 188-0.6
changelog:
  - rebuild for RHL 6.2
  - change dependency on pam-devel to /usr/include/security/pam_modules.h
  - drop build deps on cyrus-sasl-devel and openldap >= 2.x
  - modify pam_ldap versions file so that binutils from RHL 6.2 can parse it
  - update to nss_ldap 188
  - update to pam_ldap 144


author: Nalin Dahyabhai <nalin@redhat.com> 184-1
changelog:
  - update to pam_ldap 138
  - enable rfc2307bis schema support
  - version the pam_ldap module
  - add the proper soname to the nss_ldap module and remove the symlink
  - add a trigger to run ldconfig again when an upgrade removes the symlink,
    which used to be in this package (doh!)
  - fix the symlink from %{_libdir} to the module (for linking directly to it)


author: Nalin Dahyabhai <nalin@redhat.com> 173-1
changelog:
  - update to nss_ldap 173, which includes doc updates
  - update to pam_ldap 133, which simplifies the dnsconfig patch quite a bit


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - link statically with libldap again, because libldap is linked with other
    shared libraries now (keeping us from having files in /usr open when we
    go to shut the system down)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 172, fixing schema mapping code
  - update to pam_ldap 124, incorporating TLS default option and doc fixes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 164, fixing the timeout problem correctly
  - update to pam_ldap 122, fixing escaping of user name in filters


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 163, fixing the timeout problem
  - update to pam_ldap 120
  - add gdbm-devel as a buildprereq, because we list it in $LIBS (#48999)
  - add db3-devel as a buildprereq (#48999)
  - add pam-devel as a buildprereq (#48999)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make nss_ldap fail when attempting to startup TLS fails, because that's what
    we do when LDAPS doesn't work (and what pam_ldap does already)
  - add DNS autoconfiguration to pam_ldap


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 149, minor fixes for compile glitches
  - update to pam_ldap 105, minor fixes (as above) and handles shadow expiration


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 138, which folds in our patch for initgroups
  - change the default search base in ldap.conf to dc=example,dc=com


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - version the NSS module so that it works properly with programs which have
    been linked statically to a different version of an LDAP library, like
    Netscape Communicator


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - BuildPrereq gdbm-devel
  - pass RPM_OPT_FLAGS as CFLAGS to %configure
  - if protocol version is 2, explicitly set protocol version to 3 before trying
    to start TLS
  - add STARTTLS support to nss_ldap
  - work around a build-time problem on ia64


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 122
  - link statically with libsasl, require the first devel package that supplied it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to pam_ldap 67 to fix a bug in template user code
  - convert symlink in /usr/lib to a relative one (#16132)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - use the ldap.conf file as an external source
  - don't forcibly build the support for version 3
  - imported the default spec file from the tarball and fixed it up for RH 6.1


author: Thomas Woerner <twoerner@redhat.com> 2.1.30-11.RHEL4.2
changelog:
  - allow to write XPM files with absolute path names again (#140815)
  - new patch for tmpnam in imake (only used for build)


author: Thomas Woerner <twoerner@redhat.com> 2.1.30-11.RHEL4.1
changelog:
  - latest Xpm patches: CAN-2004-0914 (#134631)
  - fixed CAN-2004-0687 (integer overflows) and CAN-2004-0688 (stack overflows)
    in embedded Xpm library (#134631)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-8.RHEL4.10
changelog:
  - don't use system() in scp (#170466)
  - kill only the main daemon in the init script (#170468)
  - add patch for user login auditing by Steve Grubb (#170568)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-8.RHEL4.5
changelog:
  - don't deadlock on exit with multiple X forwarded channels (#152432)
  - allow ssh-ing from root account with nondefault group (#155220)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-8.RHEL4.3
changelog:
  - enable trusted forwarding by default if X11 forwarding is
    required by user (#137685 and duplicates)
  - discard the previous patch and remove the logging from sigalarm 
    handler completely as syslog is not signal handler safe anyway (#143929)


author: Nalin Dahyabhai <nalin@redhat.com> 3.9p1-8
changelog:
  - add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
    to enable display of a vendor patch level during version exchange (#120285)
  - configure with --disable-strip to build useful debuginfo subpackages


author: Nalin Dahyabhai <nalin@redhat.com> 3.8.1p1-1
changelog:
  - request gssapi-with-mic by default but not delegation (flag day for anyone
    who used previous gssapi patches)
  - no longer request x11 forwarding by default


author: Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-34
changelog:
  * Wed Mar 03 2004 Phil Knirsch <pknirsch@redhat.com> 3.6.1p2-33.30.1
  - Built RHLE3 U2 update package.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - additional fix for apparently-never-happens double-free in buffer_free()
  - extend fix for #103998 to cover SSH1


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-11
changelog:
  - apply patch to store the correct buffer size in allocated buffers
    (CAN-2003-0693)
  - skip the initial PAM authentication attempt with an empty password if
    empty passwords are not permitted in our configuration (#103998)


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-6
changelog:
  - modify patch which clears the supplemental group list at startup to only
    complain if setgroups() fails if sshd has euid == 0
  - handle krb5 installed in %{_prefix} or elsewhere by using krb5-config


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-6
changelog:
  - move scp to the -clients subpackage, because it directly depends on ssh
    which is also in -clients (#84329)


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-2
changelog:
  - patch PAM configuration to use relative path names for the modules, allowing
    us to not worry about which arch the modules are built for on multilib systems


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-2
changelog:
  - rework the close-on-exit docs
  - include configuration file man pages
  - make use of nologin as the privsep shell optional


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-1
changelog:
  - update to 3.3p1
  - merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
  - disable gtk2 askpass
  - require pam-devel by filename rather than by package for erratum
  - include patch from Solar Designer to work around anonymous mmap failures


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-4
changelog:
  - drop buildreq on db1-devel
  - require pam-devel by package name
  - require autoconf instead of autoconf253 again


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-3
changelog:
  - pull patch from CVS to avoid printing error messages when some of the
    default keys aren't available when running ssh-add
  - refresh to current revisions of Simon's patches


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-2gss
changelog:
  - reintroduce Simon's gssapi patches
  - add buildprereq for autoconf253, which is needed to regenerate configure
    after applying the gssapi patches
  - refresh to the latest version of Markus's patch to build properly with
    older versions of OpenSSL


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-1
changelog:
  - require sharutils for building (mindrot #137)
  - require db1-devel only when building for 6.x (#55105), which probably won't
    work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
  - require pam-devel by file (not by package name) again
  - add Markus's patch to compile with OpenSSL 0.9.5a (from
    http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
    building for 6.x


author: Nalin Dahyabhai <nalin@redhat.com> SNAP-20020220
changelog:
  - update to SNAP-20020220 for testing purposes (you've been warned, if there's
    anything to be warned about, gss patches won't apply, I don't mind)


author: Nalin Dahyabhai <nalin@redhat.com> 3.0.2p1-3
changelog:
  - add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
    exchange, authentication, and named key support


author: Nalin Dahyabhai <nalin@redhat.com> 3.0p1-1
changelog:
  - merge some of Damien Miller <djm@mindrot.org> changes from the upstream
    3.0p1 spec file and init script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 3.0p1
  - update to x11-ssh-askpass 1.2.4.1
  - change build dependency on a file from pam-devel to the pam-devel package
  - replace primes with moduli


author: Nalin Dahyabhai <nalin@redhat.com> 2.9p2-7
changelog:
  - fix scp's server's reporting of file sizes, and build with the proper
    preprocessor define to get large-file capable open(), stat(), etc.
    (sftp has been doing this correctly all along) (#51827)
  - configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
  - pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
  - mark profile.d scriptlets as config files (#42337)
  - refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
  - change a couple of log() statements to debug() statements (#50751)
  - pull cvs patch to add -t flag to sshd (#28611)
  - clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull cvs patch to add session initialization to no-pty sessions
  - pull cvs patch to not cut off challengeresponse auth needlessly
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed (#49263)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change Copyright: BSD to License: BSD
  - add Markus Friedl's unverified patch for the cookie file deletion problem
    so that we can verify it
  - drop patch to check if xauth is present (was folded into cookie patch)
  - don't apply gssapi patches for the errata candidate
  - clear supplemental groups list at startup


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix an error parsing the new default sshd_config
  - add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
    dealing with comments right


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
    to be removed before the next beta cycle because it's a big departure
    from the upstream version


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - finish marking strings in the init script for translation
  - modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
    at startup (change merged from openssh.com init script, originally by
    Pekka Savola)
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed


author: Preston Brown <pbrown@redhat.com>
changelog:
  - remove explicit openssl requirement, fixes builddistro issue
  - make initscript stop() function wait until sshd really dead to avoid 
    races in condrestart


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - mention that challengereponse supports PAM, so disabling password doesn't
    limit users to pubkey and rsa auth (#34378)
  - bypass the daemon() function in the init script and call initlog directly,
    because daemon() won't start a daemon it detects is already running (like
    open connections)
  - require the version of openssl we had when we were built


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make do_pam_setcred() smart enough to know when to establish creds and
    when to reinitialize them
  - add in a couple of other fixes from Damien for inclusion in the errata


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p2
  - call setcred() again after initgroups, because the "creds" could actually
    be group memberships


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
  - don't enable challenge-response by default until we find a way to not
    have too many userauth requests (we may make up to six pubkey and up to
    three password attempts as it is)
  - remove build dependency on rsh to match openssh.com's packages more closely


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Revert the patch to move pam_open_session.
  - Init script and spec file changes from Pekka Savola. (#28750)
  - Patch sftp to recognize '-o protocol' arguments. (#29540)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Chuck the closing patch.
  - Add a trigger to add host keys for protocol 2 to the config file, now that
    configuration file syntax requires us to specify it with HostKey if we
    specify any other HostKey values, which we do.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Redo patch to move pam_open_session after the server setuid()s to the user.
  - Rework the nopam patch to use be picked up by autoconf.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.1p1.
  - Add init script mods from Pekka Savola.
  - Tweak the init script to match the CVS contrib script more closely.
  - Redo patch to ssh-add to try to adding both identity and id_dsa to also try
    adding id_rsa.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.0p1.
  - Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
  - Resync with parts of Damien Miller's openssh.spec from CVS, including
    update of x11 askpass to 1.2.0.
  - Only require openssl (don't prereq) because we generate keys in the init
    script now.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't open a PAM session until we've forked and become the user (#25690).
  - Apply Andrew Bartlett's patch for letting pam_authenticate() know which
    host the user is attempting a login from.
  - Resync with parts of Damien Miller's openssh.spec from CVS.
  - Don't expose KbdInt responses in debug messages (from CVS).
  - Detect and handle errors in rsa_{public,private}_decrypt (from CVS).


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - More gettextizing.
  - Close all files after going into daemon mode (needs more testing).
  - Extract patch from CVS to handle auth banners (in the client).
  - Extract patch from CVS to handle compat weirdness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
    succeeded, to allow public-key authentication after a failure with "none"
    authentication.  (#21268)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to x11-askpass 1.1.1. (#21301)
  - Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge multiple PAM text messages into subsequent prompts when possible when
    doing keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Disable the built-in MD5 password support.  We're using PAM.
  - Take a crack at doing keyboard-interactive authentication with PAM, and
    enable use of it in the default client configuration so that the client
    will try it when the server disallows password authentication.
  - Build with debugging flags.  Build root policies strip all binaries anyway.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add the primes file from the latest snapshot to the main package (#20884).
  - Add the dev package to the prereq list (#19984).
  - Remove the default path and mimic login's behavior in the server itself.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Resync with conditional options in Damien Miller's .spec file for an errata.
  - Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to OpenSSH 2.3.0p1.
  - Update to x11-askpass 1.1.0.
  - Enable keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
    build PAM authentication in.
  - Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
  - Clean out no-longer-used patches.
  - Patch ssh-add to try to add both identity and id_dsa, and to error only
    when neither exists.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update x11-askpass to 1.0.2. (#17835)
  - Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
    always find them in the right place. (#17909)
  - Set the default path to be the same as the one supplied by /bin/login, but
    add /usr/X11R6/bin. (#17909)
  - Try to handle obsoletion of ssh-server more cleanly.  Package names
    are different, but init script name isn't. (#17865)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 20000823 snapshot.
  - Change subpackage requirements from %{version} to %{version}-%{release}
  - Back out the pipe patch.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 2.1.1p4, which includes fixes for config file parsing problems.
  - Move the init script back.
  - Add Damien's quick fix for wackiness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Move condrestart to server postun.
  - Move key generation to init script.
  - Actually use the right patch for moving the key generation to the init script.
  - Clean up the init script a bit.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Patch to build with neither RSA nor RSAref.
  - Miscellaneous FHS-compliance tweaks.
  - Fix for possibly-compressed man pages.


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-43.4
changelog:
  - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
    disables the countermeasure against man in the middle attack in SSLv2
    (#169863)
  - more fixes for constant time/memory access for DSA signature algorithm


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-43.2
changelog:
  - fix CAN-2005-0109 - use constant time/memory access mod_exp
    so bits of private key aren't leaked by cache eviction (#157631)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-33
changelog:
  - add an intermediate <openssl/opensslconf.h> which points to the right
    arch-specific opensslconf.h on multilib arches


author: Joe Orton <jorton@redhat.com> 0.9.7a-27
changelog:
  - updated ca-bundle.crt: removed expired GeoTrust roots, added
    freessl.com root, removed trustcenter.de Class 0 root


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-25
changelog:
  - add dependency on zlib-devel for the -devel package, which depends on zlib
    symbols because we enable zlib for libssl (#102962)


author: Phil Knirsch <pknirsch@redhat.com> 0.9.7a-24
changelog:
  - Use /dev/urandom instead of PRNG for libica.
  - Apply libica-1.3.5 fix for /dev/urandom in icalinux.c
  - Use latest ICA engine patch from IBM.


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-22
changelog:
  - add -Wa,--noexecstack to RPM_OPT_FLAGS so that assembled modules get tagged
    as not needing executable stacks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add security fixes for protocol parsing bugs (CAN-2003-0543, CAN-2003-0544)
    and heap corruption (CAN-2003-0545)
  - update RHNS-CA-CERT files
  - ease back on the number of threads used in the threading test


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport fix for engine-used-for-everything from 0.9.7b
  - backport fix for prng not being seeded causing problems, also from 0.9.7b
  - add a check at build-time to ensure that RSA is thread-safe
  - keep perlpath from stomping on the libica configure scripts


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-5
changelog:
  - add patch to harden against Klima-Pokorny-Rosa extension of Bleichenbacher's
    attack (CAN-2003-0131)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-8
changelog:
  - add fix to guard against attempts to allocate negative amounts of memory
  - add patch for CAN-2003-0078, fixing a timing attack


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-6
changelog:
  - EVP_DecryptInit should call EVP_CipherInit() instead of EVP_CipherInit_ex(),
    to get the right behavior when passed uninitialized context structures
    (#83766)
  - build with -mcpu=ev5 on alpha family (#83828)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-30
changelog:
  - add configuration stanza for x86_64 and use it on x86_64
  - build for linux-ppc on ppc
  - start running the self-tests again


author: Gary Benson <gbenson@redhat.com> stronghold-0.9.6c-1
changelog:
  - upgrade to 0.9.6c
  - bump BuildArch to i686 and enable assembler on all platforms
  - synchronise with shrimpy and rawhide
  - bump soversion to 3


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-4
changelog:
  - move man pages back to %{_mandir}/man?/foo.?ssl from
    %{_mandir}/man?ssl/foo.?
  - add an [ engine ] section to the default configuration file


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-3
changelog:
  - add patches for AEP hardware support
  - add patch to keep trying when we fail to load a cert from a file and
    there are more in the file
  - add missing prototype for ENGINE_ubsec() in engine_int.h


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a script for creating dummy certificates
  - move man pages from %{_mandir}/man?/foo.?ssl to %{_mandir}/man?ssl/foo.?


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6a
  - use the build-shared target to build shared libraries
  - bump the soversion to 2 because we're no longer compatible with
    our 0.9.5a packages or our 0.9.6 packages
  - drop the patch for making rsatest a no-op when rsa null support is used
  - put all man pages into <section>ssl instead of <section>
  - break the m2crypto modules into a separate package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6
  - enable MD2
  - use the libcrypto.so and libssl.so targets to build shared libs with
  - bump the soversion to 1 because we're no longer compatible with any of
    the various 0.9.5a packages circulating around, which provide lib*.so.0


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - re-disable MD2 -- the EVP_MD_CTX structure would grow from 100 to 152
    bytes or so, causing EVP_DigestInit() to zero out stack variables in
    apps built against a version of the library without it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable some inline assembly, which on x86 is Pentium-specific
  - re-enable MD2 (see http://www.ietf.org/ietf/IPR/RSA-MD-all)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove -Wa,* and -m* compiler flags from the default Configure file (#20656)
  - add the CA.pl man page to the perl subpackage


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - byte-compile python extensions without the build-root
  - adjust the makefile to not remove temporary files (like .key files when
    building .csr files) by marking them as .PRECIOUS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.5a, modified for U.S.
  - add perl as a build-time requirement
  - move certificate makefile to another package
  - disable RC5, IDEA, RSA support
  - remove optimizations for now


author: Bernhard Rosenkrdnzer <bero@redhat.de>
changelog:
  - inital packaging
  - changes from base:
    - Move /usr/local/ssl to /usr/share/ssl for FHS compliance
    - handle RPM_OPT_FLAGS


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-12
changelog:
  - backport from Joe Orton for changes in OpenSSL 0.9.6e and later, removing
    die-on-error code and replacing with error reporting
  - only parse a client cert if one was requested


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add security fixes for protocol parsing bugs (CAN-2003-0543, CAN-2003-0544)
  - ease back on the number of threads used in the threading test


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-8
changelog:
  - ubsec: don't stomp on the output in case it's also the input
  - thread-safety fix for RSA blinding
  - backport fix for prng not being seeded causing problems from 0.9.7b
  - add a check at build-time to ensure that RSA is thread-safe


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-6
changelog:
  - add backported patch to harden against Klima-Pokorny-Rosa extension
    of Bleichenbacher's attack (CAN-2003-0131)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-5
changelog:
  - add patch to enable RSA blinding by default, closing a timing attack
    (CAN-2003-0147)
  - excludearch: s390x which never had 0.9.6b as its primary version


author: Tomas Mraz <tmraz@redhat.com> 0.9.6b-22.42
changelog:
  - fix CVE-2004-0079 - prevent a null pointer assignment in
    do_change_cipher_spec()
  - add security fix for CVE-2003-0851 to sync with 2.1AS


author: Tomas Mraz <tmraz@redhat.com> 0.77-66.11
changelog:
  - link pam_loginuid to audit library now that it is called from it
  - don't return error if kernel is compiled without audit support


author: Tomas Mraz <tmraz@redhat.com> 0.77-66.8
changelog:
  - #152331 allow larger buffer for getgr* functions
  - #158272 flush input first, then print the prompt


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - ALLGROUP and ALL limits weren't correctly applied by pam_limits
  - Fix a typo in pam_localuser README


author: Tomas Mraz <tmraz@redhat.com> 0.77-66.2
changelog:
  - #115309 prefer changing local password instead of NIS one for local users
  - Fix PAM_IGNORE return value handling and correct the grubb_leak patch
    to fix #143750


author: Tomas Mraz <tmraz@redhat.com> 0.77-66.1
changelog:
  - add argument to pam_console_apply to restrict its work to specified files
  - #140451 parse passwd entries correctly and test for failure


author: Tomas Mraz <tmraz@redhat.com> 0.77-66
changelog:
  - #77646 log failures when renaming the files when changing password
  - Log failure on missing /etc/security/opasswd when remember option is present


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - #87628 pam_timestamp remembers authorization after logout
  - #116956 fixed memory leaks in pam_stack


author: Tomas Mraz <tmraz@redhat.com> 0.77-63
changelog:
  - Fix checking of group Development/Debug syntax in pam_limits
  - Drop fencepost patch as it was already fixed 
    by upstream change from 0.75 to 0.77
  - Fix brokenshadow patch


author: Tomas Mraz <tmraz@redhat.com> 0.77-61
changelog:
  - #129328 pam_env shouldn't abort on missing /etc/environment
  - #126985 pam_stack should always copy the conversation function 
  - #127524 add /etc/security/opasswd to files


author: Tomas Mraz <tmraz@redhat.com> 0.77-56
changelog:
  - #75454 fixed locking when changing password
  - #127054 
  - #125653 removed unnecessary getgrouplist call
  - #124979 added quiet option to pam_succeed_if


author: Dan Walsh <dwalsh@redhat.com> 0.77-19.sel
changelog:
  - Change unix_chkpwd to handle unix_passwd and unix_acct
  - This eliminates the need for pam modules to have read/write access to /etc/shadow.


author: Nalin Dahyabhai <nalin@redhat.com> 0.77-15
changelog:
  - don't install _pam_aconf.h -- apps don't use it, other PAM headers which
    are installed don't use it, and its contents may be different for arches
    on a multilib system
  - check for linkage problems in modules at %install-time (kill #107093 dead)
  - add buildprereq on flex (#101563)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pam_pwdb.so link with libnsl again so that it loads (#107093)
  - remove now-bogus buildprereq on db4-devel (we use a bundled copy for
    pam_userdb to avoid symbol collisions with other db libraries in apps)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_succeed_if: fix thinko in argument parsing which would walk past the
    end of the argument list


author: Nalin Dahyabhai <nalin@redhat.com> 0.77-0
changelog:
  - update to 0.77 upstream release
    - pam_limits: limits now affect root as well
    - pam_nologin: returns PAM_IGNORE instead of PAM_SUCCESS unless "successok"
      is given as an argument
    - pam_userdb: correctly return PAM_AUTH_ERR instead of PAM_USER_UNKNOWN when
      invoked with the "key_only" argument and the database has an entry of the
      form "user-<wrongpassword>"
  - use a bundled libdb for pam_userdb.so because the system copy uses threads,
    and demand-loading a shared library which uses threads into an application
    which doesn't is a Very Bad Idea


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-49
changelog:
  - modify calls to getlogin() to check the directory of the current TTY before
    searching for an entry in the utmp/utmpx file (#98020, #98826, CAN-2003-0388)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-46
changelog:
  - pam_xauth: reintroduce ACL support, per the original white paper
  - pam_xauth: default root's export ACL to none instead of everyone


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-45
changelog:
  - create /lib/security, even if it isn't /%{_lib}/security, because we
    can't locate /lib/security/$ISA without it (noted by Arnd Bergmann)
  - clear out the duplicate docs directory created during %install


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-44
changelog:
  - fix syntax errors in pam_console's yacc parser which newer bison chokes on
  - forcibly set FAKEROOT at make install time


author: Elliot Lee <sopwith@redhat.com> 0.75-42
changelog:
  - Since cracklib-dicts location will not be correctly detected without 
    that package being installed, add buildreq for cracklib-dicts.
  - Add patch57: makes configure use $LIBNAME when searching for cracklib 
    dicts, and error out if not found.


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-40
changelog:
  - pam_timestamp_check: check that stdio descriptors are open before we're
    invoked
  - add missing chroot.conf


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-36
changelog:
  - pam_timestamp: chown intermediate directories when creating them
  - pam_timestamp_check: add -d flag to poll


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-31
changelog:
  - libpam_misc: fix possible infinite loop in misc_conv (#62195)
  - pam_xauth: fix cases where DISPLAY is "localhost:screen" and the xauth
    key is actually stored using the system's hostname (#61524)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-20
changelog:
  - pam_stack: fix some memory leaks (reported by Fernando Trias)
  - pam_chroot: integrate Owl patch to report the more common causes of failures


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-19
changelog:
  - fix a bug in the getpwnam_r wrapper which sometimes resulted in false
    positives for non-existent users


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-16
changelog:
  - pam_xauth: always return PAM_SUCCESS or PAM_SESSION_ERR instead of PAM_IGNORE,
    matching the previous behavior (libpam treats PAM_IGNORE from a single module
    in a stack as a session error, leading to false error messages if we just
    return PAM_IGNORE for all cases)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-15
changelog:
  - reorder patches so that the reentrancy patch is applied last -- we never
    came to a consensus on how to guard against the bugs in calling applications
    which this sort of change addresses, and having them last allows for dropping
    in a better strategy for addressing this later on


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_rhosts: allow "+hostname" as a synonym for "hostname" to jive better
    with the hosts.equiv(5) man page
  - use the automake install-sh instead of the autoconf install-sh, which
    disappeared somewhere between 2.50 and now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_tally: don't try to read past the end of faillog -- it probably contains
    garbage, which if written into the file later on will confuse /usr/bin/faillog


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_limits: don't just return if the user is root -- we'll want to set the
    priority (it could be negative to elevate root's sessions)
  - pam_issue: fix off-by-one error allocating space for the prompt string


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_mkhomedir: recurse into subdirectories properly
  - pam_mkhomedir: handle symlinks
  - pam_mkhomedir: skip over special items in the skeleton directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add cracklib as a buildprereq
  - pam_wheel: don't ignore out if the user is attempting to switch to a
    unprivileged user (this lets pam_wheel do its thing when users attempt
    to get to system accounts or accounts of other unprivileged users)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_xauth: close a possible DoS due to use of dotlock-style locking in
    world-writable directories by relocating the temporary file to the target
    user's home directory
  - general: include headers local to this tree using relative paths so that
    system headers for PAM won't be pulled in, in case include paths don't
    take care of it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_xauth: rewrite to skip refcounting and just use a temporary file
    created using mkstemp() in /tmp


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_userdb: fix the key_only flag so that the null-terminator of the
    user-password string isn't expected to be part of the key in the db file,
    matching the behavior of db_load 3.2.9


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_unix: use crypt() instead of bigcrypt() when salted field is less than
    the critical size which lets us know it was generated with bigcrypt()
  - use a wrapper to handle ERANGE errors when calling get....._r functions:
    defining PAM_GETPWNAM_R and such (for getpwnam, getpwuid, getgrnam,
    getgrgid, and getspnam) before including _pam_macros.h will cause them
    to be implemented as static functions, similar to how defining PAM_SM_xxx
    is used to control whether or not PAM declares prototypes for certain
    functions


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-12
changelog:
  - noreplace configuration files in /etc/security
  - pam_console: update pam_console_apply and man pages to reflect
    /var/lock -> /var/run move


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modules: use getpwnam_r and friends instead of non-reentrant versions
  - pam_console: clear generated .c and .h files in "clean" makefile target


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_stack: perform deep copy of conversation structures
  - include the static libpam in the -devel subpackage (#52321)
  - move development .so and .a files to %{_libdir}
  - pam_unix: don't barf on empty passwords (#51846)
  - pam_unix: redo compatibility with "hash,age" data wrt bigcrypt (#42394)
  - console.perms: add usb camera, scanner, and rio devices (#15528)
  - pam_cracklib: initialize all options properly (#49613)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-10
changelog:
  - pam_xauth: fix errors due to uninitialized data structure (fix from Tse Huong
    Choo)
  - pam_xauth: random cleanups
  - pam_console: use /var/run/console instead of /var/lock/console at install-time
  - pam_unix: fix preserving of permissions on files which are manipulated


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: use /var/run/console instead of /var/lock/console for lock files
  - pam_issue: read the right number of bytes from the file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_wheel: don't error out if the group has no members, but is the user's
    primary GID (reported by David Vos)
  - pam_unix: preserve permissions on files which are manipulated (#43706)
  - pam_securetty: check if the user is the superuser before checking the tty,
    thereby allowing regular users access to services which don't set the
    PAM_TTY item (#39247)
  - pam_access: define NIS and link with libnsl (#36864)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: fix logic bug when changing permissions on single
    file and/or lists of files
  - pam_console: return the proper error code (reported and patches
    for both from Frederic Crozat)
  - change deprecated Copyright: tag in .spec file to License:


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - console.perms: change js* to js[0-9]*
  - include pam_aconf.h in more modules (patches from Harald Welte)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - console.perms: add apm_bios to the list of devices the console owner can use
  - console.perms: add beep to the list of sound devices


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_access: compare IP addresses with the terminating ".", as documented
    (patch from Carlo Marcelo Arenas Belon, I think) (#16505)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - merge up to 0.75
  - pam_unix: temporarily ignore SIGCHLD while running the helper
  - pam_pwdb: temporarily ignore SIGCHLD while running the helper
  - pam_dispatch: default to uncached behavior if the cached chain is empty


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove /dev/dri from console.perms -- XFree86 munges it, so it's outside of
    our control (reminder from Daryll Strauss)
  - add /dev/3dfx to console.perms


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_wheel: make 'trust' and 'deny' work together correctly
  - pam_wheel: also check the user's primary gid
  - pam_group: also initialize groups when called with PAM_REINITIALIZE_CRED


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: error out on undefined classes in pam_console config file
  - console.perms: actually change the permissions on the new device classes
  - pam_console: add an fstab= argument, and -f and -c flags to pam_console_apply
  - pam_console: use g_log instead of g_critical when bailing out
  - console.perms: logins on /dev/vc/* are also console logins, from Douglas
    Gilbert via Tim Waugh


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add pam_console_apply
  - /dev/pilot's usually a serial port (or a USB serial port), so revert its
    group to 'uucp' instead of 'tty' in console.perms
  - change pam_console's behavior wrt directories -- directories which are
    mount points according to /etc/fstab are taken to be synonymous with
    their device special nodes, and directories which are not mount points
    are ignored


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - own /etc/security
  - be more descriptive when logging messages from pam_limits
  - pam_listfile: remove some debugging code (#28346)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_limits: change the documented default config file to reflect the defaults
  - pam_limits: you should be able to log in a total of maxlogins times, not
    (maxlogins - 1)
  - handle group limits on maxlogins correctly (#25690)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - actually time out when attempting to lckpwdf() (#25889)
  - include time.h in pam_issue (#25923)
  - update the default system-auth to the one generated by authconfig 4.1.1
  - handle getpw??? and getgr??? failures more gracefully (#26115)
  - get rid of some extraneous {set,end}{pw,gr}ent() calls


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - merge to 0.74
  - make console.perms match perms set by MAKEDEV, and add some devfs device names
  - add 'sed' to the buildprereq list (#24666)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix handling of "nis" when changing passwords by adding the checks for the
    data source to the password-updating module in pam_unix
  - add the original copyright for pam_access (fix from Michael Gerdts)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix similar() function in pam_cracklib (#14740)
  - fix example in access.conf (#21467)
  - add conditional compilation for building for 6.2 (for pam_userdb)
  - tweak post to not use USESHADOW any more


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add RLIMIT_LOCKS to pam_limits (patch from Jes Sorensen) (#20542)
  - link pam_userdb to Berkeley DB 2.x to match 6.2's setup correctly


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak pre script to be called in all upgrade cases
  - get pam_unix to only care about the significant pieces of passwords it checks
  - add /usr/include/db1/db.h as a build prereq to pull in the right include
    files, no matter whether they're in glibc-devel or db1-devel
  - pam_userdb.c: include db1/db.h instead of db.h


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch from Dmitry V. Levin to have pam_stack propagate the PAM fail_delay
  - roll back the README for pam_xauth to actually be the right one
  - tweak pam_stack to use the parent's service name when calling the substack


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modify the files list to make sure #16456 stays fixed
  - make pam_stack track PAM_AUTHTOK and PAM_OLDAUTHTOK items
  - add pam_chroot module
  - self-hosting fixes from the -devel split
  - update generated docs in the tree


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix problems when looking for headers in /usr/include (#17236)
  - clean up a couple of compile warnings


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - give users /dev/cdrom* instead of /dev/cdrom in console.perms (#16768)
  - add nvidia control files to console.perms


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move pam_filter modules to /lib/security/pam_filter (#16111)
  - add pam_tally's application to allow counts to be reset (#16456)
  - move README files to the txts subdirectory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a broken_shadow option to pam_unix
  - add all module README files to the documentation list (#16456)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - need to make pam_console's checking a little stronger
  - only pass data up from pam_stack if the parent didn't already define it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pam_console's extra checks disableable
  - simplify extra check to just check if the device owner is root
  - add a debug log when pam_stack comes across a NULL item
  - have pam_stack hand items up to the parent from the child


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix installation of pam_xauth man pages (#12417)
  - forcibly strip helpers (#12430)
  - try to make pam_console a little more discriminating


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - symlink libpam.so to libpam.so.0.77, and likewise for libpam_misc
  - reverse order of checks in _unix_getpwnam for pam_unix


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add account management wrappers for pam_listfile, pam_nologin, pam_securetty,
    pam_shells, and pam_wheel


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add system-auth control file
  - let gethostname() call in pam_access.c be implicitly declared to avoid
    conflicting types if unistd.c declares it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add new pam_stack module.
  - Install pwdb_chkpwd and unix_chkpwd as the current user for non-root builds


author: Elliot Lee <sopwith@redhat.com>
changelog:
  - Add a patch to accept 'pts/N' in /etc/securetty as a match for tty '5'
    (which is what other pieces of the system think it is). Fixes bug #7641.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.72
  - fix pam_unix password-changing bug
  - fix pam_unix's cracklib support
  - change package URL


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - many bug fixes in pam_xauth
  - pam_console can now handle broken applications that do not set
    the PAM_TTY item.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fixed glob/regexp confusion in pam_console, added kbd and fixed fb devices
  - added pam_xauth module


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - changed /dev/cdrom default user permissions back to 0600 in console.perms
    because some cdrom players open O_RDWR.


author: Nalin Dahyabhai <nalin@redhat.com> - 2.1.8-1
changelog:
  - backport ccache-refresh-on-setcred-with-reinitialize from HEAD (#153257)
  - return PAM_USER_UNKNOWN from account management if we didn't participate in
    authenticating the user (#164794)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.1.7-1
changelog:
  - update to 2.1.7
    - install afs5log and its man page
    - fix detection of the realm of foreign cells with newer OpenAFS
    - also try AFS principal = afs@REALM for foreign cells in foreign realms


author: Nalin Dahyabhai <nalin@redhat.com> 1.57-1
changelog:
  - force -fPIC
  - add --with-moduledir, --with-krb5-libs, --with-krbafs-libs to configure
  - add per-user stashes and return values


author: Nalin Dahyabhai <nalin@redhat.com> 1.49-1
changelog:
  - set PAM_USER using the user's parsed name, converted back to a local name
  - add account management service (checks for key expiration and krb5_kuserok())
  - handle account expiration errors


author: Nalin Dahyabhai <nalin@redhat.com> 1.46-1
changelog:
  - link with libresolv to get res_search, tip from Justin McNutt, who
    built it statically
  - explicitly link with libdes425
  - handle cases where getpwnam_r fails but still sets the result pointer
  - if use_authtok is given and there is no authtok, error out


author: Nalin Dahyabhai <nalin@redhat.com> 1.43-1
changelog:
  - add minimum UID support (#52358)
  - don't link pam_krb5 with libkrbafs
  - make all options in krb5.conf available as PAM config arguments


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - note that we had to prepend the current directory to a given path in
    dlopen.c when we had to (noted by Onime Clement)


author: Nalin Dahyabhai <nalin@redhat.com> 1.42-1
changelog:
  - return PAM_NEW_AUTHTOK_REQD when attempts to get initial credentials
    fail with KRB5KDC_ERR_KEY_EXP (noted by Onime Clement)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add info about accessing the CVS repository to the README
  - parser cleanups (thanks to Dane Skow for a more complicated sample)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't set forwardable and assorted other flags when getting password-
    changing service ticket (noted, and fix supplied, by Onime Clement)
  - try __posix_getpwnam_r on Solaris before we try getpwnam_r, which may
    or may not be expecting the same number/type of arguments (noted by
    Onime Clement)
  - use krb5_aname_to_localname to convert the principal to a login name
    and set PAM_USER to the result when authenticating
  - some autoconf fixes for failure cases


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't call initialize_krb5_error_table() or initialize_ovk_error_table()
    if they're not found at compile-time (reported for RHL 6.x by Chris Riley)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - note that [pam] is still checked in addition to [appdefaults]
  - note that AFS and Kerberos IV support requires working Kerberos IV
    configuration files (i.e., kinit -4 needs to work) (doc changes
    suggested by Martin Schulz)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add max_timeout, timeout_shift, initial_timeout, and addressless options
    (patches from Simon Wilkinson)
  - fix the README to document the [appdefaults] section instead of [pam]
  - change example host and cell names in the README to use example domains


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't delete tokens unless we're also removing ticket files (report and
    patch from Sean Dilda)
  - report initialization errors better


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - treat semicolons as a comment character, like hash marks (bug reported by
    Greg Francis at Gonzaga University)
  - use the [:blank:] equivalence class to simplify the configuration file parser
  - don't mess with the real environment
  - implement mostly-complete aging support


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't fail to fixup the krb5 ccache if something goes wrong obtaining
    v4 credentials or creating a krb4 ticket file (#33262)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fixup the man page
  - log return code from k_setpag() when debugging
  - create credentials and get tokens when setcred is called for REINITIALIZE


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't twiddle ownerships until after we get AFS tokens
  - use the current time instead of the issue time when storing v4 creds, since
    we don't know the issuing host's byte order
  - depend on a PAM development header again instead of pam-devel


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a separate config file parser for compatibility with settings that
    predate the appdefault API
  - use a version script under Linux to avoid polluting the global namespace
  - don't have a default for afs_cells
  - need to close the file when we succeed in fixing permissions (noted by
    jlkatz@eos.ncsu.edu)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use the appdefault API to read krb5.conf if available
  - create v4 tickets in such a way as to allow 1.2.2 to not think there's
    something fishy going on


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - only try to delete ccache files once
  - ignore extra data in v4 TGTs, but log that we got some
  - require "validate" to be true to try validating, and fail if validation fails


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix prompting when the module's first in the stack and the user does not have
    a corresponding principal in the local realm
  - properly implement TGT validation
  - change a few non-error status messages into debugging messages
  - sync the README and the various man pages up


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add Seth Vidal's no_user_check flag
  - document no_user_check and skip_first_pass options in the man pages
  - rebuild against Kerberos 5 1.2 (release 15)


author: Joe Orton <jorton@redhat.com> 4.3.9-3.10
changelog:
  - add security fixes from upstream:
   * XSS issues in "html_errors" mode (CVE-2006-0208, #178028)
   * mbstring header validation (CVE-2005-3383, #174463)
  - add bug fix for gd tempfile use (#182719)


author: Joe Orton <jorton@redhat.com> 4.3.9-3.9
changelog:
  - add security fixes from upstream:
   * XSS issues in phpinfo() (CVE-2005-3388, #172212)
   * GLOBALS handling (CVE-2005-3390, #172207)
   * parse_str() enabling register_globals (CVE-2005-3389, #172209)
   * exif: infinite recursion on corrupt JPEG (CVE-2005-3353)


author: Joe Orton <jorton@redhat.com> 4.3.9-3.8
changelog:
  - add security fixes for XML_RPC (Stefan Esser, CAN-2005-2498, #165846)
  - fix build if TMPDIR is set (#162749)


author: Joe Orton <jorton@redhat.com> 4.3.9-3.7
changelog:
  - add security fixes:
   * shtool temp file handling (CAN-2005-1751, #159000)
   * XML_RPC command injection (Stefan Esser, CAN-2005-1921, #162045)
  - fix ncurses/gd package descriptions (#158904)


author: Joe Orton <jorton@redhat.com> 4.3.9-3.4
changelog:
  - don't configure with --enable-safe-mode (#148969)
  - add unserialize() fixes from 4.3.11
  - drop Zend double->long conversion change to regain compatibility
    with upstream


author: Joe Orton <jorton@redhat.com> 4.3.9-3.3
changelog:
  - add security fixes from upstream:
   * getimagesize seek() loops (CAN-2005-0524, CAN-2005-0525, #153140)
   * exif issues (CAN-2005-1042, CAN-2005-1043, #154021, #154025)
  - adapt oci8 to use Instant Client libraries (Kai Bolay, #149873)
  - fix mssql build for lib64 platforms (#153108)
  - fixes to the apache2handler SAPI:
   * fix virtual() flushing-too-early regression (upstream #31645)
   * reject PATH_INFO if configured with "AcceptPathInfo off" (upstream #31717)
   * set response status line correctly in more cases (upstream #31519)


author: Joe Orton <jorton@redhat.com> 4.3.9-3.2
changelog:
  - add security fixes from Stefan Esser et al (#141136):
   * unserializer issues (CAN-2004-1019)
   * overflow in exif image parsing (CAN-2004-1065)
   * integer overflows in pack, shomp_write (CAN-2004-1018)
  - add bug fixes:
   * missing flush before virtual() in sapi/a2h (upstream #30446)
   * curl POST field handling on 64-bit platforms (upstream #31413)
  - enable pcntl extension in /usr/bin/php


author: Joe Orton <jorton@redhat.com> 4.3.9-3.1
changelog:
  - rebuild for new mysql-devel (#140652)
  - workaround (spurious?) test failure breaking rebuilds (#140676)
  - add patch for upstream #25570


author: Joe Orton <jorton@redhat.com> 4.3.8-10
changelog:
  - do apply the Zend double->long conversion fix
  - run make test in %check and fail build on test failure


author: Joe Orton <jorton@redhat.com> 4.3.8-8
changelog:
  - fix -select patch bug which broke stream_select on s390
  - add an FD_SETSIZE check to php_sock_stream_wait_for_data


author: Joe Orton <jorton@redhat.com> 4.3.8-6
changelog:
  - fix phpize for libdir=lib64
  - "fix" round() fudging for recent gcc on x86
  - drop unnecessary gd-devel build dependency again
  - use RTLD_GLOBAL to load extensions again (#127518)


author: Joe Orton <jorton@redhat.com> 4.3.8-5
changelog:
  - add fix for bundled libgd symbol conflicts (#124530)
  - enable mime_magic extension and Require: file (#130276)
  - disable bug22414 test again (#130317) 
  - fix gettimeofday tests on x86_64


author: Joe Orton <jorton@redhat.com> 4.3.7-3
changelog:
  - add gmp_powm fix (Oskari Saarenmaa, #124318)
  - split mbstring, ncurses, gd, openssl extns into subpackages
  - fix memory leak in apache2handler; use ap_r{write,flush}
    rather than brigade interfaces


author: Joe Orton <jorton@redhat.com> 4.3.6-6
changelog:
  - buildrequire smtpdaemon (#124430)
  - try switching to system libgd again (prevent symbol conflicts
    when e.g. mod_perl loads the system libgd library.)


author: Joe Orton <jorton@redhat.com> 4.3.4-7
changelog:
  - gd fix for build with recent Freetype2 (from upstream)
  - remove easter egg (Oden Eriksson, Mandrake)


author: Joe Orton <jorton@redhat.com> 4.3.4-6
changelog:
  - php-pear requires php
  - also remove extension=imap from php.ini in upgrade trigger
  - merge from Taroon: allow upgrade from Stronghold 4.0


author: Joe Orton <jorton@redhat.com> 4.3.4-5
changelog:
  - add defattr for php-pear subpackage
  - restore defaults: output_buffering=Off, register_argc_argv=On
  - add trigger to handle php.ini upgrades smoothly (#112470)


author: Joe Orton <jorton@redhat.com> 4.3.4-4
changelog:
  - conditionalize support for imap extension for the time being
  - switch /etc/php.ini to use php.ini-recommended (but leave
    variables_order as EGPCS) (#97765)
  - set session.path to /var/lib/php/session by default (#89975)
  - own /var/lib/php{,/session} and have apache own the latter
  - split off php-pear subpackage (#83771)


author: Joe Orton <jorton@redhat.com> 4.3.4-2
changelog:
  - rebuild for new libxslt (#110658) 
  - use --with-{mssql,oci8} for enabling extensions (#110482)
  - fix rebuild issues (Jan Visser, #110274)
  - remove hard-coded LIBS
  - conditional support for mhash (Aleksander Adamowski, #111251)


author: Joe Orton <jorton@redhat.com> 4.3.3-6
changelog:
  - use bundled libgd (#107407)
  - remove manual: up-to-date manual sources are no longer DFSG-free;
    it's too big; it's on the web anyway; #91292, #105804, #107384


author: Joe Orton <jorton@redhat.com> 4.3.3-3
changelog:
  - split domxml extension into php-domxml subpackage
  - enable xslt and xml support in domxml extension (#106042)
  - fix httpd-devel build requirement (#104341)
  - enable recode extension (#106755)
  - add workaround for #103982


author: Joe Orton <jorton@redhat.com> 4.3.2-2
changelog:
  - update the -tests and -lib64 patches
  - fixes for db4 detection
  - require aspell-devel >= 0.50.0 for pspell compatibility


author: Joe Orton <jorton@redhat.com> 4.3.1-3
changelog:
  - link odbc module correctly
  - patch so that php -n doesn't scan inidir
  - run tests using php -n, avoid loading system modules


author: Joe Orton <jorton@redhat.com> 4.2.2-18
changelog:
  - rebuild to use aspell (#89925)
  - patch to work round conditional AC_PROG_CXX break in autoconf 2.57
  - fix dba build against db >= 4.1


author: Joe Orton <jorton@redhat.com> 4.2.2-16
changelog:
  - prevent startup if using httpd.worker to avoid thread-safety issues.
  - fix parsing private keys in OpenSSL extension (#83994)
  - fixes for SNMP extension (backport from 4.3) (#74761)


author: Joe Orton <jorton@redhat.com> 4.2.2-12
changelog:
  - backport "ini dir scanning" patch from CVS HEAD; /etc/php.d/*.ini
    are now loaded at startup; each subpackage places an ini file
    in that directory rather than munging /etc/php.ini in post/postun.
  - default config changes: enable short_open_tag; remove settings for
    php-dbg extension


author: Joe Orton <jorton@redhat.com> 4.2.2-10
changelog:
  - remove ldconfig invocation in post/postun
  - fixes for #73516 (partially), #78586, #75029, #75712, #75878


author: Joe Orton <jorton@redhat.com> 4.2.2-9
changelog:
  - fixes for libdir=/usr/lib64, based on SuSE's patches.
  - add build prereqs for zlib-devel, imap-devel, curl-devel (#74819)
  - remove unpackaged files from install root
  - libtoolize; use configure cache to speed up build


author: Philip Copeland <bryce@redhat.com> 4.2.2-8.0.6
changelog:
  - PHP cannot determine which UID is being used, so safe
    mode restrictions were always applied. Fixed. (#74396)


author: Philip Copeland <bryce@redhat.com> 4.2.2-8.0.4
changelog:
  - zts support seems to crash out httpd on a *second* sighup
    ie service httpd start;
    apachectl restart ; (ok)
    apachectl restart ; (httpd segv's and collapses)
    removed --enable-experimental-zts which this seems related to.
  - Small patch added because some places need to know that they
    aren't using the ZTS API's (dumb)


author: Philip Copeland <bryce@redhat.com> 4.2.2-8.0.3
changelog:
  - fixup /etc/httpd/conf.d/php.conf to limit largest amount
    of data accepted (#73254) Limited to 512K (which seems a
    little excessive but anyway,..)
    Note: php.conf is part of the srpm sources not part of the
    php codebase.
  - ditched extrenious --enable-debugger (was for php-dbg)
  - When upgrading we tend not to modify /etc/php.ini if it exists,
    instead we create php.ini.rpmnew. Modified the post scripts to
    edit php.ini.rpmnew if it exists, so that people can copy
    over the php.ini.rpmnew as php.ini knowing that it will
    be an edited version, consistant with what modules they
    installed #72033


author: Philip Copeland <bryce@redhat.com> 4.2.2-8.0.1
changelog:
  - URLS would drop the last arguments #72752
          --enable-mbstring
          --enable-mbstr-enc-trans
    These were supposed to help provide multibyte language
    support, however, they cause problems. Removed. Maybe in
    a later errata when they work.
  - added small patch to php_variables.c that allows
    $_GET[<var>] to initialise properly when
    --enable-mbstr-enc-trans is disabled.
  - Be consistant with errata naming (8.0.x)


author: Philip Copeland <bryce@redhat.com> 4.2.2-5
changelog:
  - Shuffled the php/php-devel package file manifest
    with respect to PEAR (PHP Extension and Application
    Repository) #70673


author: Philip Copeland <bryce@redhat.com> 4.2.2-4
changelog:
  - #67815, search path doesn't include the pear directory
  - pear not being installed correctly. Added --with-pear=
    option.


author: Philip Copeland <bryce@redhat.com> 4.2.1-9
changelog:
  - Reminder to self that mm was pushed out because it's
    NOT thread safe.
  - Updated the manuals (much to Bills horror)


author: Philip Copeland <bryce@redhat.com> 4.2.1-8
changelog:
  - php.ini alteration to fit in with the install/uninstall
    of various php rpm based installable modules


author: Philip Copeland <bryce@redhat.com> 4.2.1-8
changelog:
  - php -v showing signs of deep unhappiness with the world
    added  --enable-experimental-zts to configure to make it
    happy again (yes I know experimental sounds 'dangerous'
    it's just a name for an option we need)


author: Philip Copeland <bryce@redhat.com> 4.2.1-5
changelog:
  - Ah,.. seems httpd2 has been renamed to just plain
    ol' httpd. Fixed spec file to suit.
  - ucd-snmp changed to net-snmp overnight...
    temporarily disabled snmp while I work out the
    impact of this change and if it is safe


author: Philip Copeland <bryce@redhat.com> 4.2.1-4
changelog:
  - openldap 2.1.x problem solved by Nalin. Sure the ldap
    API didn't change,... <mutter>. Added TSRMLS_FETCH()
    to ldap_rebind_proc().
  - Removed the php-dbg package as thats going to be provided
    elsewhere


author: Philip Copeland <bryce@redhat.com> 4.2.1-0
changelog:
  - Initial pristine build of php-4.2.1
  - Minor patch to get around a 64 bitism
  - Added in the dgb debugging hooks


author: Tom Lane <tgl@redhat.com> 7.4.13-2.RHEL4.1
changelog:
  - Prevent libpython from being statically linked into plpython.so.
    Not sure why this wasn't happening before, but it's a problem now.


author: Tom Lane <tgl@redhat.com> 7.4.13-1.RHEL4.1
changelog:
  - Update to PostgreSQL 7.4.13 (includes fixes for CVE-2006-2313, CVE-2006-2314,
    CVE-2006-0553, CVE-2006-0591; see bugs #192169, 180536); also various
    data-loss-grade bugs


author: Tom Lane <tgl@redhat.com> 7.4.8-1.RHEL4.1
changelog:
  - Update to PostgreSQL 7.4.8 (includes security and data-loss fixes; see
    bz#156726, CAN-2005-1409, CAN-2005-1410)


author: Tom Lane <tgl@redhat.com> 7.4.7-5.RHEL4.2
changelog:
  - Recreate postgres user after superseding an rh-postgresql install (bug #151911)
  - Ensure postgresql server is restarted if running during an upgrade


author: Tom Lane <tgl@redhat.com> 7.4.7-4.RHEL4.1
changelog:
  - Attach Obsoletes: declarations for rh-postgresql to subpackages (bz#144435)
  - Make Requires: and Prereq: package linkages specify release not only
    version, as per recent mailing list discussion.


author: Tom Lane <tgl@redhat.com> 7.4.7-3.RHEL4.1
changelog:
  - Work around selinux <<EOF problem during initdb (bug #149237).
  - Repair improper error message in init script when PGVERSION doesn't match.
  - Arrange for auto update of version embedded in init script.
  - Fix improper call of strerror_r, which leads to junk error messages in libpq.


author: Tom Lane <tgl@redhat.com> 7.4.7-1.RHEL4.1
changelog:
  - Update to PostgreSQL 7.4.7 (fixes CAN-2005-0227, CAN-2005-0244,
    CAN-2005-0245, CAN-2005-0246, and other issues).
  - Update to PyGreSQL 3.6.1 (to fix bug #142711)
  - Add versionless symlinks to jar files (bz#145744)
  - Add restorecon to postgresql.init in order to restore database to correct
    SELinux context.
  - Adjust a few file permissions (bug #142431)
  - Assign %{_libdir}/pgsql to base package instead of -server (bug #74003)
  - Put regression tests under /usr/lib64 on 64-bit archs, since .so files
    are not architecture-independent.


author: Tom Lane <tgl@redhat.com> 7.4.6-1
changelog:
  - Update to PostgreSQL 7.4.6 (bugs 136947, 136949)
  - Make init script more paranoid about mkdir step of initializing a new
    database (bugs 136947, 136949)


author: Tom Lane <tgl@redhat.com> 7.4.5-4
changelog:
  - Remove contrib/oidjoins stuff from installed fileset; it's of no use
    to ordinary users and has a security issue (bugs 136300, 136301)
  - adjust chkconfig priority (bug 128852)


author: Tom Lane <tgl@redhat.com> 7.4.5-3
changelog:
  - Solve the stale lockfile problem (bugs 71295, 96981, 134090)
  - Use runuser instead of su for SELinux (bug 134588)


author: Tom Lane <tgl@redhat.com> 7.4.5-1
changelog:
  - Update to PostgreSQL 7.4.5.
  - Update JDBC jars to driver build 215.
  - Add Obsoletes: entries for rh-postgresql packages, per bug 129278.


author: Tom Lane <tgl@redhat.com> 7.4.3-3
changelog:
  - Undo ill-considered chkconfig change that causes server to start
    immediately upon install.  Mea culpa (bug 127552).


author: Tom Lane <tgl@redhat.com> 7.4.3-1
changelog:
  - Update to PostgreSQL 7.4.3.
  - Uninstalling server RPM stops postmaster first, per bug 114846.
  - Fix su commands to not assume PG user's shell is sh-like, per bug 124024.
  - Fix permissions on postgresql-python doc files, per bug 124822.
  - Minor postgresql.init improvements.


author: Tom Lane <tgl@redhat.com> 7.4.2-1
changelog:
  - Update to PostgreSQL 7.4.2; sync with community SRPM as much as possible.
  - Support PGOPTS from /etc/sysconfig/pgsql, per bug 111504.
  - Fix permissions on /etc/sysconfig/pgsql, per bug 115278.
  - SELinux patch in init file: always su </dev/null, per bug 117901.
  - Rebuilt


author: Lamar Owen <lowen@pari.edu>
changelog:
  - 7.4.1-1PGDG
  - Merge Sander Steffann's changes up to 7.4-0.5PGDG
  - Proper 7.4.1 JDBC jars this time.
  - Patch for no pl/python from Alvaro


author: David Jee <djee@redhat.com> 7.4-4
changelog:
  - Add PyGreSQL patch for deprecated column pg_type.typprtlen [Bug #111263]
  - Add headers patch which moves ecpg headers to /usr/include/ecpg
    [Bug #111195]


author: Lamar Owen <lowen@pari.edu> <lamar.owen@wgcr.org>
changelog:
  - 7.4-0.1PGDG
  - Development JDBC jars in addition to the 7.3 jars; will replace the
  - 7.3 jars once 7.4 official jars are released.
  - Changed to use the bzip2 source to save a little size.
  - Removed some commented out portions of the specfile.
  - Removed the 7.3.4 PDF docs.  Will replace with 7.4 PDF's once they
  - are ready.


author: Kaj J. Niemi <kajtzu@fi.basen.net> 7.4-0.1
changelog:
  - 7.4
  - Fixed Patch #1 (now rpm-pgsql-7.4.patch)
  - Fixed Patch #2 (now rpm-multilib-7.4.patch):
  - Patch #4 is unnecessary (upstream)
  - Fixed Patch #6 (now postgresql-7.4-src-tutorial.patch)
  - Added Patch #8 (postgresql-7.4-com_err.patch) as com_err()
    is provided by e2fsprogs and CPPFLAGS gets lost somewhere
    inside configure (bad macro?)
  - No 7.4 PDF docs available yet (Source #17)
  - PyGreSQL is separated from the upstream distribution but
    we include it as usual (Source #18)
  - Default to compiling libpq and ECPG as fully thread-safe

  - 7.4 Origin.  See previous spec files for previous history. Adapted
  - from Red Hat and PGDG's 7.3.4 RPM, directly descended from 
  - postgresql-7.3.4-2 as shipped in Fedora Core 1.


author: Petr Rockai <prockai@redhat.com> - 3:5.8.5-14.RHEL4
changelog:
  - remove the suidperl .1 release tag munging (from FC-3)
  - fix for BR127023 using the patch from the report (by Jose Pedro Oliveira)
    (perl fails "lib/FindBin" test (breaks MRTG), from FC-3)
  - apply fix for CAN-2004-0452 (#156128, #146774) - from FC-3,
    required by following
  - fix for CAN-2005-0448 - patch by Brendan O'Dea from Debian, backported
    by myself (from FC-3)


