# changelog

author: Brian N. Smith <brian@nuonce.net> 1.1.0-111BQ16
changelog:
  - Modified userMod.php - Added dnsAdmin checkbox
  - Modified userModHandler.php - Added handler to add dnsAdmin into Capabilities
  - Modified user.po - Added language entries for dnsAdmin


author: Michael Stauber <mstauber@solarspeed.net> 1.2.0-2008AV03
changelog:
  - Updated locale in regards to new password minumum length of six characters.
  - Fixed it so that the skel .bash* files are copied to user's home directories
  - fixed the issue that fail to add user and vsite with get_free_uid/gid.
  - fixed the issue that admin and root-admin password isn't able to be sync.
  - Small update in personalAccountHandler.php, userModHandler.php and userAddHandler.php
  - Now uses strcasecmp() to check if password equals username in upper and lower case.
  - fixed the issue that handler is in infinite loop when admin user is added.
  - it stores user information in shadow instead of pwdb.
  - removed almost all pwdb stuff.


author: Harald Hoyer <harald@redhat.com> 095-14.11
changelog:
  - moved "ignore_device" for dm devices to 90-dm.rules (rhbz#275441)
  - added cciss support (rhbz#250484)
  - support more than 10 nst devices in the persistent rules (rhbz#231990)
  - extra double check for symlinks improved (rhbz#217917)
  - Resolves: rhbz#217917, rhbz#231990, rhbz#250484, rhbz#275441


author: Harald Hoyer <harald@redhat.com> 095-14.12
changelog:
  - fix for looping vol_id, because of a malformed passwd (rhbz#425941)
  - revised fix for tape devices (rhbz#231990)
  - Resolves: rhbz#425941, rhbz#231990


author: Harald Hoyer <harald@redhat.com> 095-14.16
changelog:
  - set selinux context for .udev dirs and symlinks (rhbz#442886)
  - fixed rule for hp iLO2 virtual mouse device (rhbz#429215)
  - Resolves: rhbz#429215, rhbz#442886


author: Harald Hoyer <harald@redhat.com> 095-14.19
changelog:
  - removed zaptel rules (rhbz #294061)
  - fixed segfault for empty lines in passwd (rhbz#413831)
  - added patch for iscsi ids (Daniel Berrange) (rhbz#427640)
  - added /etc/sysconfig/udev-stw, which makes MODULES 
    configurable (Jeff Bastian) (rhbz#437979)
  - added ext4 support to vol_id (rhbz#444528)
  - updated dasd_id from dasdinfo of s390-tools-1.6.2 (rhbz#430532)
  - Resolves: rhbz#294061, rhbz#413831, rhbz#427640
  - Resolves: rhbz#437979, rhbz#444528, rhbz#430532


author: Hisao SHIBUYA <shibuya@alpha.or.jp> 1.1.0-120BQ12
changelog:
  - allow the BlueLinQ server is empty by Anders, BlackSun, Inc.
  - adds the extra option of doing Hourly package (PKG) updates by Anders, BlackSun, Inc.


author: Josef Bacik <josef@redhat.com> - 2.7.4-8
changelog:
  - use -fno-strict-aliasing in the build flags
  - add a fuse group and make sure fusermount belongs to that group for security
    reasons


author: Roland McGrath <roland@redhat.com> - 0.120-2
changelog:
  - Update to 0.120
    - License changed to GPL, with some exceptions for using
      the libelf, libebl, libdw, and libdwfl library interfaces.
      Red Hat elfutils is an included package of the Open Invention Network.
    - dwarf.h updated for DWARF 3.0 final specification.
    - libelf: Fix corruption in ELF_C_RDWR uses (#187618).
    - libdwfl: New function dwfl_version; fixes for offline.


author: Roland McGrath <roland@redhat.com> - 0.121-1
changelog:
  - Update to 0.121
    - libelf: bug fixes for rewriting existing files when using mmap (#187618).
    - make all installed headers usable in C++ code (#193153).
    - eu-readelf: better output format.
    - eu-elflint: fix tests of dynamic section content.
    - libdw, libdwfl: handle files without aranges info.


author: Roland McGrath <roland@redhat.com> - 0.122-3
changelog:
  - Update to 0.122
    - Fix libdwfl sorting of modules with 64-bit addresses (#198225).
    - libebl: add function to test for relative relocation
    - elflint: fix and extend DT_RELCOUNT/DT_RELACOUNT checks
    - elflint, readelf: add support for DT_GNU_HASH
    - libelf: add elf_gnu_hash
    - elflint, readelf: add support for 64-bit SysV-style hash tables
    - libdwfl: new functions dwfl_module_getsymtab, dwfl_module_getsym.


author: Roland McGrath <roland@redhat.com> 0.123-1
changelog:
  - Update to 0.123
    - libebl: Backend build fixes, thanks to Stepan Kasal.
    - libebl: ia64 backend support for register names, return value location
    - libdwfl: Handle truncated linux kernel module section names.
    - libdwfl: Look for linux kernel vmlinux files with .debug suffix.
    - elflint: Fix checks to permit --hash-style=gnu format.


author: Roland McGrath <roland@redhat.com> - 0.124-1
changelog:
  - eu-strip -f: copy symtab into debuginfo file when relocs use it (#203000)
  - Update to 0.124
    - libebl: fix ia64 reloc support (#206981)
    - libebl: sparc backend support for return value location
    - libebl, libdwfl: backend register name support extended with more info
    - libelf, libdw: bug fixes for unaligned accesses on machines that care
    - readelf, elflint: trivial bugs fixed


author: Roland McGrath <roland@redhat.com> - 0.125-1
changelog:
  - Update to 0.125
    - elflint: Compare DT_GNU_HASH tests.
    - move archives into -static RPMs
    - libelf, elflint: better support for core file handling
    - Really fix libdwfl sorting of modules with 64-bit addresses (#220817).
  - Resolves: RHBZ #220817, RHBZ #213792


author: Navid Sheikhol-Eslami <navid at redhat dot com> - 1.7-3
changelog:
  - added preliminary problem diagnosis support
  - better i18n initialization
  - better user messages
  - more progressbar fixes
  - catch and log python exceptions in report
  - use python native commands to create symlinks
  - limit concurrent running threads


author: Navid Sheikhol-Eslami <navid at redhat dot com> - 1.7-4
changelog:
  - catch KeyboardInterrupt when entering sosreport name
  - added color output for increased readability
  - list was sorted twice, removing latter .sort()


author: Navid Sheikhol-Eslami <navid at redhat dot com> - 1.7-5
changelog:
  - package obsoletes sysreport and creates a link pointing to sosreport
  - added some commands in cluster and process plugins
  - fixed html output (wrong links to cmds, thanks streeter)
  - process: back down sleep if D state doesn't change
  - Resolves: bz241277 Yum Plugin for sos
  - Resolves: bz247520 Spelling mistake in sosreport output
  - Resolves: bz247531 Feature: plugin to gather initial ramdisk scripts
  - Resolves: bz248252 sos to support language localization
  - Resolves: bz241282 Make SOS for RHEL 4


author: Navid Sheikhol-Eslami <navid at redhat dot com> - 1.7-6
changelog:
  - more language fixes
  - added arabic, italian and french
  - package prepared for release
  - included sysreport as sysreport.legacy


author: Navid Sheikhol-Eslami <navid at redhat dot com> - 1.7-7
changelog:
  - Resolves: bz251927 SOS errata needs to be respin to match 4.6 code base
  - added extras/rh-upload-core script from David Mair <dmair@redhat.com>


author: Michael Stauber <mstauber@solarspeed.net> 1.0-11BQ9
changelog:
  - Ability to set SSH to different ports, to allow root access, modify protocols and to edit /root/.bashrc.
  - Extended glue/schemas/ssh.schema with new entries.
  - Added constructor/import_sshd_settings.pl to determine current sshd config.
  - Extended glue/conf/ssh.conf to handle new events.
  - Extended ui/extensions/20_SSH.php.shell.System to provide UI for new switches.
  - Added glue/handlers/sshd_handler.pl to modify /etc/ssh/sshd_config and /root/.bashrc.
  - Modified English, German, Danish and Japanese locales for new strings.
  - German translation complete. Danish and Japanese have the new strings in English for now.


author: Michael Stauber <mstauber@solarspeed.net> 1.0-11BQ10
changelog:
  - Modified ui/extensions/20_SSH.php.shell.System to change output into a composite field. Looks better.


author: Michael Stauber <mstauber@solarspeed.net> 1.0-2008AV13
changelog:
  - Added missing glue/handlers/sshd_handler.pl
  - Extended glue/handlers/sshd_handler.pl to allow custom ports to be imported from sshd_config
  - Modified ui/extensions/20_SSH.php.shell.System to allow custom ports.


author: Paul Nasrat <pnasrat@redhat.com> - 3.3.6-1
changelog:
  - Update to 3.3.6
  - Fix typo  (#189647)
  - Enable threading fixes (#181298)
  - Conditionalize static library


author: David Zeuthen <davidz@redhat.com> - 0.5.8.1-27.el5
changelog:
  - Backport retain privileges patch to avoid relying on haldaemon user
  - (slightly mod. upstream commit e3996a7b5fa880657458494ef4a4f99ed6d4fe5e)
  - Resolves: #378621


author: David Zeuthen <davidz@redhat.com> - 0.5.8.1-34{?dist}
changelog:
  - Add some more quirks
  - Resolves: #435290
  - Resolves: #435292
  - Resolves: #435295
  - Resolves: #435296


author: Michael Stauber <mstauber@solarspeed.net>
changelog:
  - [1.0.68-2008AV09] Updated constructor/create_vserver_services.pl to create missing VserverMasterNode
  - Updated ui/web/vserverAdd.php to fix license related PHP5 display issue


author: Michael Stauber <mstauber@solarspeed.net>
changelog:
  - [1.0.69-2008AV01] Updated vserverInfo.php vserverRunHandler.php vserverList.php and vserver.schema for VPS AM details
  - Added /usr/sausalito/sbin/vps_disk_swatch.pl for VPS AM details
  - Updated locale for VPS AM details


author: Michael Stauber <mstauber@solarspeed.net>
changelog:
  - [1.0.69-2008AV04] Updated glue/handlers/update_conf.pl to set correct NS and IPs after config switch.


author: Michael Stauber <mstauber@solarspeed.net>
changelog:
  - [1.0.69-2008AV06] glue/handlers/mnbackup_info.pl fixed.
  - Didn't correctly parse local backup if we were not using /vz/backup.


author: Brian N. Smith <brian@nuonce.net> 1.3.0-0BQ22
changelog:
  - added a killall -9 in the restart script.  Also made it so it
  - stops and starts the service instead of just restarting it.


author: Michael Stauber <mstauber@solarspeed.net>
changelog:
  - [1.0.9] Updated module to incorporate more detailed graphs through /usr/sausalito/sbin/system_graphs.pl


author: Michael Stauber <mstauber@solarspeed.net>
changelog:
  - [1.0.16] Modified sbin/system_init.pl to change permissions on temporary directory and to no longer be silent.


author: Adam Tkac <atkac redhat com> 30:9.3.4-0.9.P1
changelog:
  - fixed building of SDB stuff (#240788)
  - fixed race condition during DBUS initialization (#240876)
  - initscript LSD standardization (#242734)
  - improved rndc freeze/thaw <zonename> command (#247148)
  - fixed wrong perms of named's ldap schema (#250118)
  - supressed errors from chroot's specfile scripts (#252334)
  - fixed ${chroot}/dev/random SELinux labelling
  - added configtest to usage report from named initscript (#250744)
  - fixed rndc stop return value handler (#250901)
  - fixed named.log sync in bind-chroot-admin (#247486)
  - rebased to latest 9.3 maintenance release (9.3.4-P1, #353741)
  - updated named.root file (new L.ROOT-SERVERS.NET, #363531)
  - added GSS-TSIG support to named (#251528)
    - dropped patches (upstream)
      - bind-9.3.4.P1-query-id.patch
      - bind-9.3.3rc2-dbus-0.6.patch
      - bind-9.3.4-validator.patch
      - bind-9.3.4-nqueries.patch
    - updated patches
      - bind-9.3.2-tmpfile.patch


author: Adam Tkac <atkac redhat com> 30:9.3.4-5.P1
changelog:
  - improved patch to handle D-BUS races (#240876)
  - updated named.root zone to affect root IPv6 migration


author: Michael Stauber <mstauber@solarspeed.net> 1.1.0-2008AV06
changelog:
  - Almost complete rewrite of ethernet.php due to PHP5 issues.
  - Can't redefine variables inside an array.
  - Limited to 4 interfaces for now.
  - Bugfix in ethernetHandler.php, which was still calling for 'base' instead of 'vz'.


author: Michael Stauber <mstauber@solarspeed.net> 1.1.0-2008AV07
changelog:
  - glue/handlers/rewrite-ifcfg.pl now restarts the VPS's forcefully on IP changes.
  - Added a reboot warning for the VPS's on ethernet.php
  - Extended locales for reboot warning texts.


author: Jakub Jelinek <jakub@redhat.com> 2.5-8
changelog:
  - fix setcontext on ppc32 (#219107)
  - fix wide stdio after setvbuf (#217064, BZ#2337)
  - fix {j,m}rand48{,_r} on 64-bit arches (BZ#3747)
  - handle power6x AT_PLATFORM (#216970)
  - fix a race condition in getXXbyYY_r (#219145)
  - fix tst-pselect testcase


author: Jakub Jelinek <jakub@redhat.com> 2.5-9
changelog:
  - make sure pthread_kill doesn't return EINVAL even if
    the target thread exits in between pthread_kill ESRCH check
    and the actual tgkill syscall (#220420)


author: Jakub Jelinek <jakub@redhat.com> 2.5-14
changelog:
  - add transliteration for <U2044> (BZ#3213)
  - fix *scanf with %f on hexadecimal floats without exponent (BZ#4342)
  - fix *printf with very large precisions for %s (#238406, BZ#4438)
  - fix inet_ntop size checking for AF_INET (BZ#4439)
  - for *printf %e avoid 1.000e-00, for exponent 0 always use + sign (#238431)
  - fix application crashes when doing NSS lookups through nscd
    mmapped databases and nscd decides to start garbage collection
    during the lookups (#219145, #225315)
  - fix NIS+ __nisfind_server (#235229)
  - assorted NIS+ speedups (#233460)
  - fix power6 libm compat symbols on ppc32 (#232633)
  - fix child refcntr in NPTL fork (#230198)
  - fix ifaddrs with many net devices on > 4KB page size arches (#230151)
  - fix pthread_mutex_timedlock on x86_64 (#228103)
  - fix HAVE_LIBCAP configure detection (#178934)
  - fix double free in fts_close (#222089)
  - fix vfork+execvp memory leak (#221187)
  - further localedef robustification (#203728)
  - fix printf with %g and values tiny bit smaller than 1.e-4 (#235864,
    BZ#4362, BZ#4070)
  - fix _XOPEN_VERSION (BZ#4364)
  - nexttoward*/nextafter* fixes (BZ#3306)
  - various fixes (BZ#3919, BZ#4101, BZ#4130, BZ#4181, BZ#4069, BZ#3458,
    BZ#3348, BZ#4344, BZ#4368, BZ#4305, BZ#4306)
  - fix nftw with FTW_CHDIR on / (BZ#4076)
  - nscd fixes (BZ#4074)
  - fix euidaccess (BZ#3842)
  - assorted locale data fixes (BZ#3322, BZ#3995, BZ#3884, BZ#3851, BZ#4411)
  - fix strptime (BZ#3944)
  - fix regcomp with REG_NEWLINE (BZ#3957)
  - fix %0lld printing of 0LL on 32-bit architectures (BZ#3902)
  - soft-fp fixes (BZ#2749)
  - further strtod fixes (BZ#3855)
  - update ru and sv translations
  - fix fesetround return value on ia64
  - fix nscd SIGHUP database invalidation


author: Jakub Jelinek <jakub@redhat.com> 2.5-15
changelog:
  - robust mutex fixes (BZ#4512)
  - *printf fixes (BZ#4514)
  - as_IN updates (#218035)
  - use MADV_DONTNEED in malloc (#237711)
  - fix sem_timedwait on i?86 and x86_64
  - fix dladdr if some shared library is mapped into ld.so intersegment
    VM hole (#232224, BZ#4131)
  - fdatasync is a cancellation point (BZ#4465)
  - add a temporary hack to avoid reruning DSO initializers if dlopen
    is called from _dl_fini destructors (#234946)
  - build s390 31-bit libs with -march=z900, i.e. only support
    64-bit s390x CPUs (#228127)


author: Jakub Jelinek <jakub@redhat.com> 2.5-16
changelog:
  - only build 31-bit shared libraries with -march=z900, *.a and *.o
    in glibc-devel should still work with g5 and g6 CPUs (#228127)
  - build ppc and ppc64 base shared libraries with -mcpu=power4,
    i.e. only support power4 and newer CPUs, *.a and *.o in
    glibc-devel should still work on any powerpc CPU (#241003)
  - don't crash on pseudo-zero long double values passed to
    *printf on i?86/x86_64/ia64 (BZ#4586)
  - fix *printf %La and strtold with some hexadecimal floating point
    constants on ppc/ppc64
  - fix nextafterl on ppc/ppc64


author: Jakub Jelinek <jakub@redhat.com> 2.5-17
changelog:
  - fix copying of power4 ppc{,64} ld.so during %install
  - disable workaround for #210748 and #211133, instead backport
    ld.so locking fixes from the trunk (#235026)
  - Korean charsets additions (BZ#3954, BZ#3955)
  - fix handling of 2001::/32 IPv6 addresses in getaddrinfo (BZ#4102)
  - add inline optimization for fgetc_unlocked
  - fix handling of 172.{1[7-9],2[0-9],3[01]}/16 IPv4 addresses in
    getaddrinfo
  - make sure NULL checks in routines with nonnull attribute aren't
    optimized away
  - don't write uninitialized padding bytes to nscd socket
  - avoid misaligned reads/writes in gethostbyname_r (#243967, BZ#4381)
  - fix dl{,v}sym, dl_iterate_phdr and dlopen if some library is
    mapped into ld.so's inter-segment hole on x86_64 (#244545)
  - fix LD_AUDIT=a:b program (#180432)


author: Jakub Jelinek <jakub@redhat.com> 2.5-18.el5_1.1
changelog:
  - fix an ABBA deadlock in ld.so (#295891)
  - workaround for bugs in ia64 /emul/ia32-linux hack (#253961)
  - nis_list fix (#254115)


author: Kai Engert <kengert@redhat.com> - 3.11.7-1.1
changelog:
  - Fix rhbz#212077, use a workaround to avoid Mozilla.org bug 51429
  - Remove link time dependency on libsoftokn3
  - Update to 3.11.7, but freebl/softokn remain at 3.11.5


author: Kai Engert <kengert@redhat.com> - 3.12.0.3-1
changelog:
  - Update to NSS_3_12_RC4
  - Enable loading of external ECC modules
  - Include upstream fix for a deadlock in the certutil tool, bug 447431


author: Hisao SHIBUYA <shibuya@alpha.or.jp> 1.1.0-40BQ11
changelog:
  - remove cobalt specific constructor and modify the constructor to set default lang with /etc/sysconfig/i18n.


author: Johnny Hughes <johnny@centos.org> - 5.0.0-1
changelog:
  - bumped release to 5.0.0 for CentOS-5 Final
  - added langague support for en, de, fr, it, es, pt_BR, cz, ja, ru, nl for
    release notes


author: Michael Stauber <mstauber@solarspeed.net>
changelog:
  - [5.2-S2:] Dropped in replacement for /etc/init.d/functions
  - Added /usr/sausalito/sbin/crond_checker.sh and /etc/cron.d/vps-cronchecker.cron


author: Michael Stauber <mstauber@solarspeed.net>
changelog:
  - Handler savechanges.pl fixed to use just the hostname instead of the FQDN in drbd.conf in the failure notice.


author: Michael Stauber <mstauber@solarspeed.net>
changelog:
  - [1.0.4] Updated UI, Handlers and Constructors for coping with both DRBD 0.7 and 0.8 - depending on what's present.


author: 10:10:26 +0200 Philipp Reisner <phil@linbit.com>
changelog:
  - drbd (8.0.1-1)
   * Fixed some race conditions that could trigger an OOPS when the loca disk
     failes and DRBD detaches itself from the failing disk.
   * Added a missing call to drbd_try_outdate_peer().
   * LVM's LVs expose ambiguous queue settings. When a RAID-0 (md) PV is
     used the present a segment size of 64k but at the same time allow only
     8 sectors. Fixed DRBD to deal with that fact corretly.
   * New option "always-asbp" to also use the after-after-split-brain-policy
     handlers, even it is not possible to determine from the UUIDs that
     the data of the two nodes was related in the past.
   * More verbosity in case a bio_add_page() fails.
   * Replaced kmalloc()/memset() with kzmalloc(), and a wrapper for older kernls
   * A fast version of drbd_al_to_on_disk_bm(). This is necessary for short
     (even sub-second) switchover times while having large "al-extents" settings.
   * Fixed drbdadm's array overflows (of on stack objects)
   * drbdsetup can now dump its usage in a XML format
   * New init script for gentoo
   * Fixed Typos in the usage of /proc/sysrq-trigger in the example config.


author: 21:32:39 +0200 Philipp Reisner <phil@linbit.com>
changelog:
  - drbd (8.0.2-1)
   * Removed a bug that could cause an OOPS in drbd_al_to_on_disk_bm()
   * Improved the robustness of the UUID based algorithm that decides
     about the resync direction.
   * Fixed the error handling in case a the open() of a backing
     blockdevice fails.
   * Fixed a race condition that could cause a "drbdadm disconnect" to hang.
   * More verbosity in we can not claim a backing block device.
   * More verbosity and paranoia in the bitmap area.
   * On some vendor kernels 8.0.1 did not load because of kzalloc. fixed.
   * Fault injection can now not only be turned on or off, but can be 
     enabled on a per device basis.
   * Fixed the scripts and files needed to build drbd into a kernel.


author: 17:10:14 +0200 Philipp Reisner <phil@linbit.com>
changelog:
  - drbd (8.0.3-1)
   * Fixed a race condition that could cause us to continue to traverse a bio
     after it was freed. (led to an OOPS)
   * Fixed a race condition that could cause us to use members of an ee, after
     it was freed. (led to various weirdness)
   * Language fixes for the man pages.
   * The drbdsetup commands (events, wait-connect,...) release the lock now.
   * Minor fixes and updates to the user land tools and to the peer outdater.


author: Johnny Hughes <johnny@centos.org>
changelog:
  - upgraded to upstream version 8.0.8
  - added drbd-8.0.8-inint64_t-include.patch to fix this issue detailed here:
    http://lists.linbit.com/pipermail/drbd-user/2007-December/008028.html


author: Johnny Hughes <johnny@centos.org>
changelog:
  - created a new branch named drbd82 to allow running drbd-8.2.x
  - added permissions changes if haclient exists in post section
  - allow upgrade from centos-5, conflicts and manual upgrade for centos-4


author: Michael Stauber <mstauber@solarspeed.net> 0.1.2-87BQ11
changelog:
  - Added /etc/init.d/fix_grub - contributed by Rickard Osser.
  - Extended fix_grub with more checks for presence of Grub and RAID in general.


author: Michael Stauber <mstauber@solarspeed.net> 0.1.2-87BQ14
changelog:
  - RAID rebuilds were not working, as we are no longer using raidtools, but mdadm.
  - See ticket http://devel.blueonyx.it/trac/ticket/30
  - As a work around added glue/sbin/lsraid from raidtools RPM to be able to rebuild /etc/raidtab
  - Modified glue/etc/init.d/mdchk to rebuild failed RAID arrays using mdadm


author: Rickard Osser <rickard.osser@bluapp.com> 0.1.2-87BQ16
changelog:
  - Added support for reporting correct raid-level in the GUI
  - Changed the raid recognition in constructor addRAIDpkg.pl to not add the package
    but to only report the correct raid level. This also makes the ActiveMonitor show
    correct raid-level.
  - Added support for dynamic raid-levels to am_bin


author: Michael Stauber <mstauber@solarspeed.net> 0.1.2-87BQ18
changelog:
  - Switched glue/sbin/lsraid from compiled binary to a shell script supplied by Rickard Osser.
  - Modified the /sbin/lsraid line in glue/etc/init.d/mdchk to use the new script to re-create a missing /etc/raidtab


author: Michael Stauber <mstauber@solarspeed.net> 0.1.4-2009AV06
changelog:
  - Backported from BlueOnyx
  - Added requirement for raidtools
  - Renamed /sbin/lsraid to /sbin/lsraidbx


author: Michael Stauber <mstauber@solarspeed.net> 0.1.4-2009AV07
changelog:
  - Updated glue/etc/init.d/mdchk
  - Changed '<' in glue/etc/init.d/mdchk to use -lt instead as it throws an error when run.


author: Michael Stauber <mstauber@solarspeed.net> 1.1.0-2009AV06
changelog:
  - Modified glue/handlers/meminfo.pl to make sure that more than 4GB of RAM are shown if they're present.


author: Pete Graner <pgraner@redhat.com> - 3.2-15
changelog:
  - Update to the Improve bash $RANDOM pseudo RNG (bug #234906) 
    now works with subshells and make $RANDOM on demand thus reducing the 
    amount of AVCs thrown.


author: Pete Graner <pgraner@redhat.com> - 3.2-17
changelog:
  - Added bash32-018 upstream official patch
  - Added bash32-020 upstream official patch
  - Added bash32-019 upstream official patch


author: Pete Graner <pgraner@redhat.com> - 3.2-18
changelog:
  - Added bash32-021 upstream official patch
  - Added bash32-025 upstream official patch
  - Added bash32-024 upstream official patch
  - Added bash32-023 upstream official patch
  - Added bash32-022 upstream official patch


author: Tomas Janousek <tjanouse@redhat.com> - 3.2-20
changelog:
  - Define RECYCLES_PIDS on Linux as well, solving the #419831 regression
  - document special builtin differences in posix mode (#245641)
  - document alias expansion in non-interactive shells (#253673)
  - readline auditing support (#235021)


author: Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
changelog:
  + Version 1.1.1
    + Significant restructuring of the processes in heartbeat
    + Added a new feature to hb_standby which allows you to give up
  	  any specific category of resources:  local, foreign, or all.
  	The old behavior is "all" which is the default.
  	This allows you to put a nice_failback cluster into
  	  an active/active configuration
    + Enhancements to the ServeRAID code to make it work with the new
      (supported) version of IPSSEND from the ServeRAID folks...
    + Added STONITH code for the Dell remote access controller
    + Fixed a major bug which kept it from taking over correctly after 246
  	days or so
    + Fixed a major bug where heartbeat didn't lock itself into memory
  	properly
    + Added new ping node timeout directive "deadping"
    + Made sure heartbeat preallocated stack and heap, and printed a
  	message if we allocate heap once we're started up...
    + Minor heartbeat API bug fixes
    + Minor documentation fixes
    + Minor fix to allow IP addresses with /32 masks...
    + Fixed a timing window for !nice_failback resource acquisition
    + Added several CCM bug fixes
    + Made the APC smart UPS ups code compatible with more UPSes
    + Fixed a bug in respawn
    + Enhanced internal checking for malloc errors...
    + Added IP alias search optimization from Sean Reifscheneider


author: Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
changelog:
  + Version 1.1.2
    + Replaced the nice_failback option with the auto_failback option.
  	THIS OBSOLETES THE NICE_FAILBACK OPTION. READ THE DOCS FOR HOW
  	TO UPGRADE SMOOTHLY.
    + Changed IPaddr to not do ARPs in background, and shortened time 
  	between ARPs.  Also made these things tunable...
    + changed our comm ttys to not become our controlling TTYs
    + Enhanced the ServeRAID script to fix a critical bug by using a new feature
    + Added a new DirectoryMap to CVS - tells where everything is...
    + significantly enhanced the BasicSanityCheck script, and the tests
  	it calls.
    + added a new option to use a replacement poll function for improved
  	real-time performance.
    + added the ability to have a cluster node's name be different
  	from it's uname -n
    + Moved where CTS gets installed to /usr/lib/heartbeat/cts
    + Big improvements to the CTS README from IBM test labs in Austin.
    + bug fixes to the WTI NPS power switch
    + new client API calls:
  	return arbitrary configuration parameters
  	return current resource status
    + Added a new clplumbing function: mssleep()
    + added new capabilities for supporting pseudo-resources
    + added new messages which come out after initial takeover is done
  	 (improves CTS results)
    + LOTS of documentation updates.
    + fixed a security vulnerability
    + fixed a bug where heartbeat would shut down while in the middle
  	of processing resource movement requests.
    + changed compilation flags to eliminate similar future security
  	issues
    + went to even-more-strict gcc flags
    + fixed several "reload" bugs.  Now reload works ;-)
    + fixed STONITH bug when other node never heard from.
    + Minor bug fixes (cleaned up corrupted message)
    + Two different client API bugs fixed.
    + changed the configure script to test which warning flags are
  	supported by the current gcc.
    + enhanced the API test program to test new capabilities...


author: Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
changelog:
  + Version 1.1.3
    + Bugfix for heartbeat starting resources twice concurrently if
      auto_failback was set to "legacy".
    + Bugfix for messages getting lost if messages were sent in quick
      succession. (Kurosawa Takahiro)
    + Bugfix for Filesystem resource checking for presence of filesystem
      support before loading the module.
    + BasicSanityCheck extended to cover more basic tests.
    + Bugfix for findif not working correctly for CIDR netmasks.
    + Minor bugfix for ldirectord recognizing new schedulers correctly and
      timeout settings are now being honoured.
    + Enhanced the message giving a better explanation of how to set up node
      names properly when current node not found in the ha.cf file
    + Send a message to the cluster whenever we have a node which doesn't
      need STONITHing - even though it's gone down.  This fix needed
      by CCM, which is in turn needed by EVMS.
    + Enhanced the messages for missing ha.cf and missing haresources files
      explaining that sample config files are found in the documentation. 
    + Fix for memory leak from Forrest Zhao<forrest.zhao@intel.com>
    + Added a (preliminary?) ordered messaging facility from Yi Zhu
    + FAQ updates
    + Added Xinetd resource script
    + Added OCF (wrapper) resource script
    + Allow respawn programs to take arguments
    + Added pinggroups (where any node being up is OK)
    + fixed ldirectord negotiatetimeout for HTTP
    + fixed a bug which caused -d flag to be ignored
    + failing resource scripts are now ERRORs not WARNings
    + now shuts down correctly when auto_failback == legacy


author: Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
changelog:
  + Version 1.1.4
    + ipfail now works properly with auto_failback on (active/active)
    + Changed the API to use sockets (IPC library) instead of FIFOs.
    + Added new apiauth directives to provide authorization information
  	formerly provided by the FIFO permissions.
    + Added Intel's implementation of the SAF data checkpointing API and daemon
    + Added a cleanup suggested by Emily Ratliff.
    + IPMILan STONITH plugin added to CVS
    + Added IPaddr2 resource script
    + Various cleanups due to horms.
    + Fixed authentication to work on 64-bit platforms(!)
    + Fixed the cl_poll() code to handle corner cases better
    + Made heartbeat close watchdog device before re-execing itself
    + New CTS improvements from Mi, Jun <jun.mi@intel.com>
    + Various minor bug fixes.
        . Several shutdown bugs addressed
        . fixed sendarp to make a pid file, so we can shut it down
            when we shut everything else down in case it's still running.
        . Lots of minor bug fixes to IPC code
        . Lots of minor bug fixes to ipctest program
        . made BasicSanityCheck more tolerant of delays
        . Fixed IPC code to authenticate based on ints, not int*s.
        . Check properly for strnlen instead of strlen...
        . Several signed/unsigned fixes
        . A few uninitialized vars now are inited
        . Switched to compiling lex/yacc sources the automake way
        . Lots of minor CTS fixes...

    + ldirectord bug fixes:
      . When new real servers are added on initialisation or when
          the configuration file is reread they are marked with status
          of -1 (uninitialised) so they will be checked and inserted
          into the virtual service as required
      . All checks use the checkport if set, otherwise the port set for
          the individual real server. This was the case for http and
          connect checks, but others had variations on this theme.
      . When the configuration file is reread because it changed
          on disk and autoreload is set, check the real servers
          immediately rather than waiting for checkinterval to expire
      . Already running message sent to stderr instead of stdout
      . Support alternate server in real-server specific URL
      . Treat the same real server with different weights as a different
          real server. Fixes bug reported by Philip Hayward whereby the same
          real-server would always have the same weight, regardless of
          the ldirectord.cf


author: Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
changelog:
  + Version 1.1.5
    + ipfail now has "hysteresis" so that it doesn't respond immediately
  	to a network failure, but waits a little while so that the
  	damage can be properly assessed and extraneous takeovers avoided
    + Several fixes to cl_poll()
    + More fixes to the IPC code - especially handling data reception
  	after EOF
    + removed some unclean code from GSource for treating EOF conditions
    + Several bugs concerning hanging when shutting down early during startup
    + A few BasicSanityCheck bug fixes
    + CTS now allows a single machine to be able to monitor several clusters
    + Most former CTS options are now either unneeded or on the command line
    + Increased number of ARPs and how long they're being sent out
    + Fixed uncommon (authorization) memory leak
    + Some Solaris portability fixes.
    + Made init script handle standby correctly for new config files
    + Improved the fast failure detection test
    + Added some backwards compatibility for nice_failback and some default
  	authentication directives
    + Corrected the 1.1.4 change log


author: Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
changelog:
  + Version 1.2.0
    + Replaced the nice_failback option with the auto_failback option.
  	THIS OBSOLETES THE NICE_FAILBACK OPTION. READ THE DOCS FOR HOW
  	TO UPGRADE SMOOTHLY.
    + Added a new feature to hb_standby which allows you to give up
  	  any specific category of resources:  local, foreign, or all.
  	The old behavior is "all" which is the default.
  	This allows you to put a auto_failback no cluster into
  	  an active/active configuration on demand.
    + ipfail now works properly with auto_failback on (active/active)
    + ipfail now has "hysteresis" so that it doesn't respond immediately
  	to a network failure, but waits a little while so that the
  	damage can be properly assessed and extraneous takeovers avoided
    + Added new ping node timeout directive "deadping"
    + Made sure heartbeat preallocated stack and heap, and printed a
  	message if we allocate heap once we're started up...
    + IPMILan STONITH plugin added to CVS
    + Added IPaddr2 resource script
    + Made the APC smart UPS ups code compatible with more UPSes
    + Added a (preliminary?) ordered messaging facility from Yi Zhu
    + Changed IPaddr's method of doing ARPs in background so that
  	certain timing windows were closed.
    + Added OCF (wrapper) resource script
    + Allow respawn programs to take arguments
    + Added pinggroups (where any node being up is OK)
    + SIGNIFICANT amount of internal rearchitecture.
    + Many bug fixes.
    + Several documentation updates.


author: Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
changelog:
  + Version 1.2.2 (stable)
    + Fixed several format string errors in communication plugins
    + Fixed a bug which kept us from diagnosing errors in non-aliased interfaces
    + Fixed a bug in ipaddr which caused an infinite loop when auto_failback on
    + Updated Debian things...
    + Added IPv6addr resource agent
    + Added ibmhmc STONITH plugin
    + Added cl_status command
    + Fixed a bug regarding restarts when auto_failback is on...
    + Fixed a couple of bugs in sha1 authentication method for very long keys
    + Fixed a bug in the portblock resource agent so that it no longer blocks
            ports on the loopback interface
    + Increased the time allowed for split brain test before it declares failure

  + Version 1.2.1 (stable)
    + Netstrings can now be used for our on-the-wire data format
    + Perl/SWIG bindings added for some heartbeat libraries
    + Significant improvements to SAF data checkpointing API
    + Implemented unbuffered ipcsocket code for SAF APIs
    + Many Solaris fixes -- except for ipfail, Solaris works
    + Significant library restructuring
    + Watchdog device NOWAYOUT is now overridded if defaulted
    + Watchdog device now kills machine instantly after deadtime
   	instead of after one minute
    + Hostnames should now be treated case-independently...
    + Added new client status APIs - client_status() and cstatus_callback()
    + Fixed bug with auto_failback and quick full restarts
    + We now automatically reboot when resources fail to stop correctly...
    + We now check the status of the configured STONITH device hourly...
    + STONITH operations repeat after a 5 second delay, not immediately...
    + Added hb_takeover command - complement to hb_standby
    + Added documentation on how to use evlog/TCP to enable testing to
  	take place without losing messages due to UDP message forwarding
    + Several new tests from Mi, Jun - split brain, bandwidth, failure
  	detection time.
    + Fix to LVM resource from Harald Milz <hm@muc.de>
    + Fixed FreeBSD authentication problems breaking ipfail
    + Fixed .so loading on Debian
    + Fixed false complaints about resource scripts (from Jens Schmalzing)
    + Fixed false stop failure from LinuxSCSI  (from Jens Schmalzing <j.s@lmu.de>)

    +++ Version 1.3.0 fixes backported into 1.2.1 +++
    + Netstrings can now be used for our on-the-wire data format
    + Perl/SWIG bindings added for some heartbeat libraries
    + Significant improvements to SAF data checkpointing API
    + Implemented unbuffered ipcsocket code for SAF APIs
    + Many Solaris fixes -- except for ipfail, Solaris works
    + Significant library restructuring
    + Watchdog device NOWAYOUT is now overridded if defaulted
    + Watchdog device now kills machine instantly after deadtime
   	instead of after one minute
    + Hostnames should now be treated case-independently...
    + Added new client status APIs - client_status() and cstatus_callback()
    + Fixed bug with auto_failback and quick full restarts
    + We now automatically reboot when resources fail to stop correctly...
    + We now check the status of the configured STONITH device hourly...
    + STONITH operations repeat after a 5 second delay, not immediately...
    + Added hb_takeover command - complement to hb_standby
    + Added documentation on how to use evlog/TCP to enable testing to
  	take place without losing messages due to UDP message forwarding
    + Several new tests from Mi, Jun - split brain, bandwidth, failure
  	detection time.
    + Fix to LVM resource from Harald Milz <hm@muc.de>


author: Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
changelog:
  + Version 1.2.3 (stable)
    + fixed a serious error which causes heartbeat to misbehave after about
  	10 months of continuous operation
    + Made our ARP packets more RFC compliant
    + Extended apcmastersnmp code to deal with new devices
    + fixed a bug concerning simultaneous stops of both machines causing one
  	of them to not shut down.
    + added an option to suppress reporting on packet corruption
    + fixed it so that we don't create the FIFO by the RPM
    + made cl_status setgid so anyone can run it, and fixed exit codes
    + eliminated a serious memory leak associated with client code
    + packaged doc files which had been missed before
    + fixed many many small bugs and memory leaks detected by BEAM
    + added several new test cases
    + fixed longstanding bug in plugin unloading
    + fixed a shutdown hang problem
    + several fixes for Solaris, FreeBSD
    + Solaris packaging now included in base
    + fixed a bug related to the apache resource agent not handling
  	quoted parameters
    + added use_apphbd parameter to have heartbeat register
  	with apphbd instead of watchdog device when desired
    + changed apphbd to default its config file to /etc
    + added snmp subagent code
    + added hbaping communications plugin
    + added external STONITH plugin
    + ldirectord: fixed a bug where real servers that were are
  	present in multiple virtual services will only be added
  	to one virtual service.


author: Dave Blaschke <debltc@us.ibm.com> (see doc/AUTHORS file)
changelog:
  + Version 1.2.4 (stable)
    + Allowed heartbeat to dump cores under /var/lib/heartbeat/cores/ for debug
    + Fixed bug to give up partially-acquired resources groups after a failure
    + Omitted blank lines from output of allkeys
    + Ignored blank lines and comments and allowed mixed-case hostnames in 
  	haresources file
    + Removed mach_down shell global that could lead to errors if single letter
  	files in working directory
    + Fixed gcc-4.0 compile problems and signedness issues
    + Fixed temporary file vulnerabilities (CAN-2005-2231)
    + Fixed one security and a number of portability and logging issues
    + Prevented possible conflicts if two different uuid implementations present
    + Added cms code
    + Increased limits on maximum number of core child processes we can create
    + Provided various CTS and BSC fixes and improvements
    + Fixed bug related to repeat STONITHs failing because we freed some data we
  	shouldn't have
    + Fixed bug to call dead notice after node is really declared dead instead
  	of after receiving shutdown message from it
    + Changed IPC channel to be non-blocking from heartbeat to client so a
  	sending-only client cannot put heartbeat into infinite loop
    + Fixed bug to stop nodes waiting for other to become stable even after 
  	other is dead
    + Fixed bug to delay auto failback if going standby or either node is
  	unstable instead of ignoring it
    + Fixed bug to shutdown if needed if standby cancelled
    + Moved closing of some file descriptors earlier in code
    + Fixed bug involving extraneous s_send_msg() calls
    + Deliberately turned off alternative poll code in ipctest
    + Allowed ping readers to cope with non-ping icmp packets
    + Fixed minor memory leaks, double-frees and a memory usage error detected by
  	BEAM
    + Fixed reported socket_resume_io_write() error in IPC on Sun
    + Fixed checkpoint bug for fail over
    + Fixed typo where two LSB exit codes were using the same integer
    + Resource Agent changes:
      . Fixed typo in Delay RA that caused both stop and start to fail
      . Resolved issue that IPaddr/IPaddr2 RAs ping timeout option may be invalid
      . Fixed LVM RA compatibility problem between ipvsadm 1.21 (for 2.4 kernels)
  	and 1.24 (for 2.6 kernels)
      . Added LVS synchronization daemon RA
      . Fixed botched test-for-failure in apache RA
      . Fixed db2 RA bug with respect to status operations (ps grep done wrong)
      . Merged confdir changes from Linux-HA 2.x
    + Linux Director Daemon changes:
      . Fixed bug where -q is always returned by a child process if the SIGCHLD
  	handler is set to IGNORE
      . Added MySQL check, httpmethod, PosgreSQL check and ping check
      . Added first cut of SIP check
      . Merged http and https checks
      . Made start/stop/xxx actions LSB 2.0.1 compliant
      . Resolved problem where zombies may occur if wait interrupted by signal 
      . Used anonymous fd for ftp check rather than memory fd
      . Allowed https to actually detect failed servers
      . Failed if there are duplicate virtual services
      . Got rid of unused Parallel::UserAgent code
      . Allowed authenticated LDAP access
    + STONITH plugin changes:
      . Added plugins for Compaq's RILOE and Cyclades devices
      . Added support for newer hardware to apcsmart, ibmhmc and wti_nps
      . Synched up ipmilan with Linux-HA 2.x so now it builds with OpenIPMI 2.0.1
      . Fixed minor bugs in apcmastersnmp, apcsmart and external


author: Lars Marowsky-Bree <lmb@suse.de> (see doc/AUTHORS file)
changelog:
  + Version 1.2.5 (stable)
    - ldirectord enhancements.
    - Bugfixes to cl_status.
    - Fix Remote Denial of Service attack (#195068, CVE-2006-3121).
    - Fix Local Denial of Service attack (#194444, CVE-2006-3815).
    - Fix remote Denial of Service attack (CVE-2006-3121)
    - Various portability enhancements.


author: Jakub Jelinek <jakub@redhat.com> 2.5-20
changelog:
  - allow debugging of threaded statically linked binaries (#239653)
  - fix sscanf/swscanf if errno is set to EINTR on entry (BZ#4745)
  - fix forkpty error handling (BZ#4813)
  - fix popen if some active previous popen's stream has fd 0 or 1
    (#248281)
  - fix dlinfo RTLD_DI_SERINFO* with empty entry in DT_R*PATH or
    LD_LIBRARY_PATH (BZ#4776)
  - further gettext out of memory handling fixes (#247788)
  - fix i?86 pthread_rwlock_timed{rd,wr}lock
  - add SHA-256 and SHA-512 hashing to crypt(3) (#249477, #380751)
  - power6 updates (#253116)
  - support optimistic addresses in getaddrinfo (#259681)
  - si_LK fixes (#282201)
  - fix sporadic hangs in clntudp_call (#339821)
  - getaddrinfo sorting changes (not turned on by default, to enable
    them /etc/gai.conf needs to be present and with scopev4
    rules, #352021)
  - fix nscd paranoia restarting when one of the caches is
    disabled (#352321)
  - add sfence to x86_64 memset after movnti instructions (#371561)
  - fix iso-2022-jp//translit iconv bugs (#397021)
  - fix calloc with mlocked memory (#405781)
  - optimized x86_64 memcpy (#196882)
  - misc fixes (BZ#4858, BZ#4963, BZ#5028, BZ#5071, BZ#5225, BZ#5277,
    BZ#5375, BZ#5378, BZ#5424, BZ#5435, BZ#5451, BZ#5454, BZ#5541)


author: Jakub Jelinek <jakub@redhat.com> 2.5-23
changelog:
  - fix gettext race conditions (#439486, BZ#5058, BZ#5443)
  - fix x86_64 pthread_mutex_timedlock (#434601)
  - only service sshd condrestart if /etc/rc.d/init.d/sshd exists
    (#428859)


author: Jiri Moskovcak <jmoskovc@redhat.com> - 2.0.33-9.4.1
changelog:
  - security fixes
  - CVE-2006-4484 CVE-2007-0455 CVE-2007-2756 CVE-2007-3472 
  - CVE-2007-3473 CVE-2007-3475 CVE-2007-3476
  - Resolves: #432786


author: Michael Stauber <mstauber@solarspeed.net> 0.1.4-2009AV08
changelog:
  - Updated ui/web/raid.inc as it was using the wrong call for the System Object RAID
  - Updated ui/web/raid.inc with our supported RAID levels beyond the stock RAID0 / RAID1


author: Michael Stauber <mstauber@solarspeed.net>
changelog:
  - [1.0.0-SOL2:] Added PHPMailer
  - Added generic key for all Solarspeed.net products which do not require individual product key


author: Michael Stauber <mstauber@solarspeed.net>
changelog:
  - [1.0.0-SOL3:] Added /home/solarspeed/.distri directory
  - Added mcrypt.so to provide mcrypt support for onboard PHP
  - Moved php.ini additions to /etc/php.d/ for better maintainability
  - Added ioncube.hidden to SRPM for better code maintainability


author: Michael Stauber <mstauber@solarspeed.net>
changelog:
  - [3.1.31-SOL1:] Update of IonCube Loader to Version 3.1.31
  - Changed version numbering to reflect IonCube Loader version.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.3-1
changelog:
  - Upgrade to upstream
  	* Merged patch for matchpathcon utility to use file mode information
  	  when available from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.4-1
changelog:
  - Upstream wanted some minor changes, upgrading to keep api the same
  - Upgrade to upstream
  	* Merged selinux_check_securetty_context() and support from Dan Walsh.
  Resolves: #200110


author: Dan Walsh <dwalsh@redhat.com> - 1.33.4-3
changelog:
  - Fix python selinux module segfault in getfilecon
  - Fix get_default_context_with_level
  Resolves: #224637


author: Michael Stauber <mstauber@solarspeed.net> 1.20070410AV04
changelog:
  - Replaced CentOS-base.repo with Aventurin.repo
  - Reverted /etc/logrotate.d/syslog back to CentOS default


author: Michael Stauber <mstauber@solarspeed.net> 5.3.20090413AV01
changelog:
  - Updated for CentOS-5.3
  - Modified constructor/addPkg.pl to update version number in CCE, too.
  - Added /usr/sausalito/tmp as Wizard needs it now.


author: Michael Stauber <mstauber@solarspeed.net> 5.3.20090413AV03
changelog:
  - Added constructor/fix_repos.pl to delete CentOS repo files
  - Added triggers for centos-release-5 which delete CentOS repo files, too
  - Added CCEd restart in post RPM install to delete CentOS repo files, too


author: Jens Petersen <petersen@redhat.com> - 0.14.6-1
changelog:
  - update to 0.14.6
  - include preloadable_libintl.so again (Roozbeh Pournader, #149809)
  - remove .la files (Kjartan Maraas, #172624)
  - cleanup spec file


author: Jens Petersen <petersen@redhat.com> - 0.14.6-4.el5
changelog:
  - reset timestamp of examples ChangeLog for brp-java-repack-jars to really fix
    libintl.jar multilib conflict (#222156)


author: Brian N. Smith <brian@nuonce.net> 1.20060618BQ69
changelog:
  - Removed "-t" from sendmail.mc line: FEATURE(local_procmail.  Would leave emails stranded in Mail Queue.
  - Added blackwholes into sendmail.mc.  They are commented out, but have directions on how to set them up


author: Michael Stauber <mstauber@solarspeed.net> 1.20080906AV05
changelog:
  * Sun Jun 07 2008 Brian Smith <brian@nuonce.net> 1.20080607BQ82 
  - Removed initPam.sh 
  - Removed enablePwdb.pl


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-8.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_2
  - Resolves bz #219804
  - filesystems made on dasd devices may need to be rebuild after upgrading
    to this version.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-10.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_5
  - Resolves: #214838, #223146, #223150, #223762, #231545, #241189, #242723, #243483


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-12.el5_1.1
changelog:
  - multipath.conf now has a new config option "bindings_file", which allows
    you to specify the bindings file location
  - Resolves: bz #426287


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-12.el5_1.2
changelog:
  - multipathd now creates its own ramfs cache for all callout programs.  This
    means that once multipathd starts, it never needs to access the underlying
    filesystem, so I won't hang if it looses access to the root device.
  - Resolves: bz #428338


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-12.el5_1.3
changelog:
  - All of the non-static path priority callout functions are now symlinks to
    the static versions.
  - Resolves: bz #431947


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.8-12.el5_1.4
changelog:
  - Instead of using clone() to get a new namespace, use fork() and unshare(),
    which fixes an selinux caused crash.
  - Resolves: bz #438150


author: Miloslav Trmac <mitr@redhat.com> - 1.12-19
changelog:
  - Ship "el" translation instead of the obsolete "gr" translation
    Resolves: #210749
  - Fix % quoting in %changelog


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.12-20
changelog:
  - Fix ro.map.gz, add ro_std.map.gz, drop ro_win.map.gz,
    add Lat2-Terminus16.psf console font (many thanks to Alexandru Szasz
    <alexxed@gmail.com>)
    Resolves: #294471


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-2
changelog:
  - New upstream release
  - Include the gethostbyname_r patch so that nss_ldap won't hang
    on recursive attemts to ldap_initialize.


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-3
changelog:
  - Include --enable-multimaster to close
    bz#185821: adding slapd_multimaster to the configure options
  - Upgade guide.html to the correct one for openladp-2.3.27, closing
    bz#190383: openldap 2.3 packages contain the administrator's guide for 2.2
  - Remove the quotes from around the slaptestflags in ldap.init
    This closes one part of
    bz#204593: service ldap fails after having added entries to ldap
  - include __db.* in the list of files to check ownership of in
    ldap.init, as suggested in
    bz#199322: RFE: perform cleanup in ldap.init


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-5
changelog:
  - Include the -getdn patch to close
    bz#214768: CVE-2006-5779 Specially crafted authcid makes OpenLDAP fail an assertion
    Resolves: rhbz#214768


author: Jan Safranek <jsafranek@redhat.com> 2.3.27-6
changelog:
  - Include sals patch to close #230395
  - Include manual bind timeout patch to close #230388
  - Include patch to allow write access to ldap socket to close #237417
  - Fix the upgrade logic so database is not deleted on upgrade (#240834)
  - Fix the memory leak on ACL rules (#241636)
  - Fix initscript return codes (#242665)


author: Jeremy Katz <katzj@redhat.com> - 3.0.1-4
changelog:
  - revert to older version of rpmsack to not repeatedly open the rpmdb to 
    avoid problems (Related: #217285, #213963)


author: James Antill <jantill@redhat.com> - 3.2.8-4
changelog:
  - Workaround the worst behaviour of yum install kernel.
  - Import Fedora 8 yum base.
  - Add lots of small bug fix patches from 3.2.9
  - Resolves: rhbz#384691


author: James Antill <jantill@redhat.com> - 3.2.8-5
changelog:
  - Import some of the returnPackages() changes, to fix len() == -1 bug with
  - some repos. And missing import sqlutils.
  - Resolves: rhbz#429751


author: James Antill <jantill@redhat.com> - 3.2.8-6
changelog:
  - Tweak config. file for 3.2.8
  - Resolves: rhbz#237773
  - Set HTTP user-agent to specify this is yum, and which verison
  - Resolves: rhbz#319461
  - Create logdir if it doesn't exist.
  - Resolves: rhbz#253960
  - Add committer/comittime
  - Relates: rhbz#319491


author: James Antill <jantill@redhat.com> - 3.2.8-8
changelog:
  - Re-add the ssl-ca-cert patch
  - Resolves: rhbz#436804
  - Add unused patterns argument
  - Resolves: rhbz#319491


author: Michael Stauber <mstauber@solarspeed.net> 0.1.4-2009AV09
changelog:
  - Removed dependency for raidtools and switched it to mdadm for now.
  - May need further investigations.


author: Michael Stauber <mstauber@solarspeed.net> 2.0.0-2008AV06
changelog:
  - Updated serverDiskUsage.php for VPS disk usage and added encoding.
  - Updated locale for VPS disk usage.


author: Tom Lane <tgl@redhat.com> 2:1.2.10-7.0.3
changelog:
  - Back-port critical fixes from libpng 1.2.22, primarily to fix CVE-2007-5269
  Resolves: #337521
  - Update License tag and some other obsolete bits in specfile


author: Michael Stauber <mstauber@solarspeed.net>
changelog:
  - [1.0.14-2009AV02] Modified ui.hidden/web/onepageHandler.php
  - Fixed missing array definition of $error, makes an error go away!


author: Michael Stauber <mstauber@solarspeed.net>
changelog:
  - [1.0.14-2009AV03] Added Clustering-Demo-5 license type.
  - Modified ui.hidden/web/license_validator.class for new license type.


author: Michael Stauber <mstauber@solarspeed.net>
changelog:
  - [1.0.14-2009AV04] Added Blade-Edition and Blade-Cluster license type.
  - Modified ui.hidden/web/license_validator.class for new license types.


author: Michael Stauber <mstauber@solarspeed.net>
changelog:
  - [1.0.14-2009AV05] Added provisions for CW exception.
  - Modified ui.hidden/web/registration_inline.php and ui.hidden/web/license_validator.class


author: Michael Stauber <mstauber@solarspeed.net>
changelog:
  - [1.0.14-2009AV06] Modified provisions for CW exception.
  - Modified ui.hidden/web/license_validator.class again.


author: Andy Shevchenko <andriy@asplinux.com.ua> - 3.0.17-1
changelog:
  - fixed according to Fedora Packaging Guidelines:
    - use dist tag
    - added URL tag
    - use full url for source
    - changed BuildRoot tag


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-20
changelog:
  - Add iSCSI Boot Firmware Table support
    Resolves: rhbz#307771
  - Handle empty dm rules better
    Resolves: rhbz#244202
  - Load usb modules in correct order
    Resolves: rhbz#234847
  - Fix multipath on iscsi
    Resolves: rhbz#428723


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-21
changelog:
  - Fix firmware loader completion logic
    Resolves: rhbz#235277
  - Support spaces in the kernel command line
    Resolves: rhbz#240779
  - Clarify module option documentation
    Resolves: rhbz#241763


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-27
changelog:
  - Fix initialization of "withusb" on s390/s390x
    Resolves: rhbz#432776
  - Fix application of patch 15
    Resolves: rhbz#428723
  - Fix netdev naming with drivers specified on the command line
    Resolves: rhbz#436509


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-28
changelog:
  - Fix bad regexp in devicemapper dependency resolution code
    Resolves: rhbz#439371
  - Re-do workaround for gfs2/lock_nolock dep brokenness
    Resolves: rhbz#438743


author: Ivana Varekova <varekova@redhat.com> 7.2.1-1
changelog:
  - update to 7.2.1
  - update nosegfault, pam_unix, http patches
  - added sshd, smart, named, audit, secure and mountd services
    patches


author: Ivana Varekova <varekova@redhat.com> 7.3-2
changelog:
  - added tests to file creation and access, clean up 
  resulting files when logwatch fails (upstream change) 
  (#190498)


author: Marcela Maslanova <mmaslano@redhat.com> 7.3-4
changelog:
  - add audit patch for SElinux (#200116)
  - add patch for sshd (#200105)
  - add patch from bugzilla, made by Allen Kistler (#200147)


author: Ivana Varekova <varekova@redhat.com> 7.3-6
changelog:
  - Resolves: #307281
    logwatch HTML output
  - Resolves: #249792
    option --usage deleted from the man page
  - Resolves: #296001
    Logwatch is unable to handle e.g. postfix 2.3 mail logs
  - Resolves: #230974
    add no-oldfiles-log option


author: Tomas Mraz <tmraz@redhat.com> - 1:5.33-5
changelog:
  - add default /etc/sysconfig/smartmontools file
  - ignore errors on startup (#186130)
  - test drive for SMART support before adding it to smartd.conf


author: Tomas Mraz <tmraz@redhat.com> - 1:5.36-2
changelog:
  - kudzu is deprecated, replace it with HAL (#195752)
  - moved later in the boot process so haldaemon is already running
    when drives are being detected


author: Tomas Mraz <tmraz@redhat.com> - 1:5.36-3.1
changelog:
  - set cloexec on device descriptor so it doesn't leak to sendmail (#214182)
  - fixed minor bug in initscript (#213683)
  - backported SATA disk detection from upstream


author: Tomas Smetana <tsmetana@redhat.com> - 1:5.36-4
changelog:
  - fix #232168 - wrong exit status of the init script
  - fix #326551 - smartctl hangs the system when run on PERC controller


author: Michael Stauber <mstauber@solarspeed.net> 5.3.20090524AV04
changelog:
  - Updated glue/configs/sendmail/sendmail.mc to remove majordomo aliasses from sendmail.mc
  - Bumped Version Number


author: Michael Stauber <mstauber@solarspeed.net> 5.3.20090524AV05
changelog:
  - Updated glue post install script to fix typo in regexp
  - Updated glue post install script to remove majordomo aliasses from sendmail.mc via perl search and replace.


author: Michael Stauber <mstauber@solarspeed.net> 5.4.20091110AV06
changelog:
  - Bumped Version Number for CentOS 5.4
  - Updated version number in constructor/addPkg.pl and glue/Makefile


author: Alasdair Kergon <agk@redhat.com> - 1.02.10-1.0
changelog:
  - Add dm_snprintf(), dm_split_words() and dm_split_lvm_name() to libdevmapper.
  - Reorder mm bounds_check code to reduce window for a dmeventd race.
  - Make dmeventd start/end messages LOG_INFO instead of LOG_DEBUG.
  - Check thread_registry_unused when checking for registered dmeventd device.


author: Alasdair Kergon <agk@redhat.com> - 1.02.12-1.0
changelog:
  - Avoid deptree attempting to suspend a device that's already suspended.
  - Smaller upstream source tarball with files for 2.4 kernel removed.


author: Alasdair Kergon <agk@redhat.com> - 1.02.13-1
changelog:
  - Update dmsetup man page (setgeometry & message).
  - Suppress encryption key in 'dmsetup table' output unless --showkeys supplied.


author: Milan Broz <mbroz@redhat.com> - 1.02.20-1
changelog:
  - Update to latest upstream release.
  - Add tree-based and dependency fields to dmsetup reports.
    Resolves: #168533


author: Michael Stauber <mstauber@solarspeed.net> 2.0.0-2009AV01
changelog:
  - Updated ui/web.hidden/serverDiskUsage.php to hide Disk space info for VPS's that are no longer present.


author: Michael Stauber <mstauber@solarspeed.net> 1.0.2-2008AV06
changelog:
  - Modified am_disk.pl to incorporate VPS disk usage. 
  - Email notification for that is not yet implemented.


author: Jason Vas Dias <jvdias@redhat.com> - 4:5.8.8-6
changelog:
  - Fix upstream perl bug #38454:
    'rindex corrects for $[ on bytes rather than UTF-8'
    apply upstream patch #27116
  - Fix upstream perl bug 24816:
    'Magic vars seem unsure if they are purely numeric' 
    ( perl -wle 'print $? = $? ^ "3"' -> 'Argument "^C" isn't numeric' )
    apply upstream patch #27391
  - Avoid writing over the input string in the case 'F' in moreswitches.
    apply upstream patch #27426
  - Fix upstream perl bug 34925 - 'overload and rebless' -
    apply upstream patches #27509, #27512
  - Fix upstream perl bug 3038 - '$qr = qr/^a$/m; $x =~ $qr; fails'
    apply upstream patch #27604
  - apply upstream patch #27605 - 'Fix off-by-one in $0 set magic.'
  - Fix upstream perl bug 23141 - '($_) = () fails to set $_ to undef'
    apply upstream patch #27914
  - Fix upstream perl bug #38619 - 
    'Bug in lc and uc (interaction between UTF-8, substr, and lc/uc)'
    apply upstream patch #27329
  - Give users the '-R' option to disable the Red Hat
    module compatibility default search path extension (incpush.patch).


author: Jason Vas Dias <jvdias@redhat.com> - 4:5.8.8-8
changelog:
  - Fix upstream perl bug #34297:
    'utf8 overload stringify bug (utf8 caching maybe)'
    upstream patch #28006 applied


author: Tom Lane <tgl@redhat.com> 5.0.18-4
changelog:
  - Modify multilib header hack to not break non-RH arches, per bug #181335
  - Remove logrotate script, per bug #180639.
  - Add a new mysql-test RPM to carry the regression test files;
    hack up test scripts as needed to make them run in /usr/share/mysql-test.


author: Tom Lane <tgl@redhat.com> 5.0.22-1
changelog:
  - Update to MySQL 5.0.22 (fixes CVE-2006-2753)
  - Install temporary workaround for gcc bug on s390x (bz #193912)


author: Tom Lane <tgl@redhat.com> 5.0.22-2
changelog:
  - Work around brew's tendency not to clean up failed builds completely,
    by adding code in mysql-testing.patch to kill leftover mysql daemons.


author: Joe Orton <jorton@redhat.com> 5.1.6-12.el5
changelog:
  - add security fix for CVE-2007-1864, SOAP redirect handling issue,
    FTP CRLF injection issue (#235016)


author: Joe Orton <jorton@redhat.com> 5.1.6-13.el5
changelog:
  - add security fixes for CVE-2007-2756, CVE-2007-2872, 
    CVE-2007-3799, CVE-2007-3996, CVE-2007-3998, CVE-2007-4658,
    CVE-2007-4670 (#278411)


author: Joe Orton <jorton@redhat.com> 5.1.6-16.el5
changelog:
  - add dbase extension in -common (#161639)
  - add /usr/share/php to builtin include_path (#238455)
  - ext/ldap: enable ldap_sasl_bind (#336221)
  - ext/libxml: reset stream context (#298031)


author: Michael Stauber <mstauber@solarspeed.net> 1.0.1-0BQ12
changelog:
  - Added PHP5 and Apache-2.2.6 related provisions for 5106R
  - httpd.conf, php.ini and php.conf have been modified for usage on CentOS5 only.
  - httpd.conf was changed because some modules on the newer Apache have been renamed.
  - php.conf was of course modified because we now use PHP5 instead of PHP4.
  - php.ini was changed to switch the extension_dir path from ...
  - extension_dir = /usr/lib/php4
  - ... to ..
  - extension_dir = /usr/lib/php/modules
  - ALL THIS IS NO LONGER COMPATIBLE WITH CENTOS4 !!!


author: Michael Stauber <mstauber@solarspeed.net> 1.0.1-2009AV06
changelog:
  - Modified glue/etc/admserv/conf.d/ssl.conf
  - Disabled SSLv2, so that the more secure SSLv3 or TLSv1 are used for AdmServ-SSL instead.
  - Edited glue/etc/admserv/php.ini to raise memory_limit and to set the right error_reporting.


author: Roman Rakus <rrakus@redhat.com> - 3.2-28
changelog:
  - Fix the memory leak in read builtin
    Resolves: #618393
  - Don't append slash to non-directories
    Resolves: #583919


author: Roman Rakus <rrakus@redhat.com> - 3.2-33
changelog:
  - Fixed a bug that caused trap handlers to be executed recursively,
    corrupting internal data structures.
    Resolves: #964753


author: Karsten Hopp <karsten@redhat.de> 1.5.22-1
changelog:
  - update to 1.5.22, most prominent fixes are:
    - Fix 1.5 regression that caused linking a program `-static' to also
      link statically against installed libtool libraries, contrary to
      documented (and actual 1.4.x) behavior.
    - Fix silent failure of `libtoolize --ltdl' if libltdl files not present.


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2-48
changelog:
  - Don't show errors twice on non-existent files (#215712)
  - Update scriptlet names to match what's available (#248128)


author: Joe Orton <jorton@redhat.com> 5.1.6-20.el5_2.1
changelog:
  - add security fixes for CVE-2007-5898, CVE-2007-4782, CVE-2007-5899,
    CVE-2008-2051, CVE-2008-2107, CVE-2008-2108 (#445923)


author: Doug Ledford <dledford@redhat.com> - 2.5.4-1
changelog:
  - Update to 2.5.4 (listed as a bugfix update by upstream)
  - Remove previous bitmap patch that's now part of 2.5.4


author: Doug Ledford <dledford@redhat.com> - 2.6.4-1
changelog:
  - Update to 2.6.4
  - Fix init script issues
  - Remove patches accepted upstream
  - Fix mdadm -Q output
  - Resolves: bz242686, bz335911, bz233372


author: Steve Conklin <sconklin@redhat.com> - 0.2.7-1
changelog:
  - Fixed a translation error
  - Folded the init script patch into the source tarball.
  - Fixed a memory leak I found
  Resolves: #339951


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-4
changelog:
  - Updated Xen partial checksums patch using PACKET_AUXDATA
  - Resolves: rhbz#221964
  - Related: rhbz#219681


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-9
changelog:
  - Updated dhcpd init script to conform to script guidelines
    Resolves: rhbz#237978
  - Updated dhcrelay init script to conform to script guidelines
    Resolves: rhbz#237980


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-12
changelog:
  - Avoid printing two OK/FAILURE messages when the stop() function runs
    in the dhcpd and dhcrelay init scripts
    Resolves: rhbz#439800


author: Michael Stauber <mstauber@solarspeed.net> 0.3.3-2008AV05
changelog:
  - Moved leading comments in /usr/sausalito/ui/style/Merlot.xml to end of file
  - Wouldn't compile the /usr/sausalito/ui/style/Merlot.xml.compiled... otherwise.


author: Michael Stauber <mstauber@solarspeed.net> 0.5.1-2008AV05
changelog:
  - Updated for 6105R
  - fix for Safari 3.0 missing menus by Anders, BlackSun Inc. 
  - fixed small bug in; ClassicList.inc .. php5 doesn't like how a variable was escaped line: 182  
  - fixed small bug in; ScrollList.php .. php5 doesn't like how a variable was escaped line: 769


author: Petr Rockai <prockai@redhat.com> - 4.0.2-11
changelog:
  - change the default lockscreen shortcut to ^aX to make
    it harder to hit by accident, as per BR 157821


author: Petr Rockai <prockai@redhat.com> - 4.0.2-14
changelog:
  - put /usr/share/screen into the package (so the package owns the
    directory as well, not only the files below); fixes BR 192852


author: Petr Rockai <prockai@redhat.com> - 4.0.2-15
changelog:
  - bump MAXSTR (string buffer size) to 4k (from 256 bytes), fixes
    status line issues with window list in status line and too many
    windows (and possibly other issues with long strings)


author: Jesse Keating <jkeating@redhat.com> - 4.0.2-16
changelog:
  - Don't use %makeinstall, instead make install.
  - Change DDESTDIR to DESTDIR to do the right thing.
  - Comment out utf patch as it is no longer necessary.
  - Add dist tag
  - Change PreReq to correct Requires(pre), Requires(post), Requires(preun) 
  - Don't use RPM_SOURCE_DIR, reference the source file directly
  - Do the compiling (make) in %build, not %install
  - Don't replace /etc/screenrc if the user has modified it
  - Ditto /etc/pam.d/screen
  - Change the buildroot to follow guidelines


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-21
changelog:
  - fix an information leak in Kerberos password authentication (CVE-2006-5052)
    (#234638)
  - correctly setup context when empty level requested (#234951)


author: Thomas Woerner <twoerner@redhat.com> 1.3.4-1
changelog:
  - new version 1.3.4
  - dropped free_opts patch (upstream fixed)
  - made libipq PIC (#158623)
  - additional configuration options for iptables startup script (#172929)
    Thanks to Jan Gruenwald for the patch
  - spec file cleanup (dropped linux_header define and usage)


author: Thomas Woerner <twoerner@redhat.com> 1.3.4-2
changelog:
  - fix for plugin problem: link with "gcc -shared" instead of "ld -shared" and 
    replace "_init" with "__attribute((constructor)) my_init"


author: Thomas Woerner <twoerner@redhat.com> 1.3.5-4.el5
changelog:
  - fixed man page for dscp extension max value
    Resolves: rhbz#239383
  - fixed missing extension modules, because of build problems
    Resolves: rhbz#244047


author: Michael Stauber <mstauber@solarspeed.net> 0.1.4-2009AV02
changelog:
  - RAID rebuilds were not working, as we are no longer using raidtools, but mdadm.
  - As a work around added glue/sbin/lsraid from raidtools RPM to be able to rebuild /etc/raidtab
  - Modified glue/etc/init.d/mdchk to rebuild failed RAID arrays using mdadm


author: Michael Stauber <mstauber@solarspeed.net> 1.1.1-2010AV06
changelog:
  - Backported Rickard Ossers changes from BX to AVE:
  - Changed the way the ssl_check_days_valid function works. Returns valid days now.
  - Changed the way adm_certs are generated in the constructor, use y2038 bug - todays date to calculate a valid expiration. If this is more than 9995 use 9995 days.


author: Joe Orton <jorton@redhat.com> 2.2.3-8.el5
changelog:
  - add 'ServerTokens Full-Release' config option (#240857)
  - use init script in logrotate postrotate (#241680)
  - fix mod_proxy option inheritance (#245719)
  - fix ProxyErrorOverride to only affect 4xx, 5xx responses (#240024)
  - bump logresolve line buffer length to 10K (#245763)
  - add security fixes for CVE-2007-1863, CVE-2007-3304,
    and CVE-2006-5752 (#244666)


author: Joe Orton <jorton@redhat.com> 2.2.3-11.el5_1.1
changelog:
  - add security fixes for CVE-2007-6388, CVE-2007-6421
    and CVE-2007-6422 (#427240)
  - add security fix for CVE-2007-4465, CVE-2007-5000 (#421631)
  - add security fix for mod_proxy_ftp UTF-7 XSS (#427745)


author: Tom Lane <tgl@redhat.com> 8.1.3-1
changelog:
  - Update to PostgreSQL 8.1.3 (fixes bug #180617, CVE-2006-0553)
  - Update to jdbc driver build 405
  - Modify multilib header hack to not break non-RH arches, per bug #177564


author: Tom Lane <tgl@redhat.com> 8.1.4-1
changelog:
  - Update to PostgreSQL 8.1.4 (includes fixes for CVE-2006-2313, CVE-2006-2314;
    see bug #192173)
  - Update to PyGreSQL 3.8
  - Suppress noise from chcon, per bug #187744


author: Tom Lane <tgl@redhat.com> 8.1.7-1
changelog:
  - Update to PostgreSQL 8.1.7 to fix CVE-2007-0555, CVE-2007-0556
  Resolves: #225496
  - Sync init script and Makefile.regress with current Fedora scripts


author: Tom Lane <tgl@redhat.com> 8.1.11-1.el5_1.1
changelog:
  - Update to PostgreSQL 8.1.11 to fix CVE-2007-4769, CVE-2007-4772,
    CVE-2007-6067, CVE-2007-6600, CVE-2007-6601
  Resolves: #427137
  - Use tzdata package's data files instead of private copy, so that
    postgresql-server need not be turned for routine timezone updates


author: James Antill <jantill@redhat.com> - 1.0.4-3
changelog:
  - Re-integrate older security info printing.
  - kabi patch for ClusterStorage, as it uses the new kABI
  - Upload new tarball.
  - Resolves: rhbz#251542


author: James Antill <james.antill@redhat.com> - 1.1.10-6
changelog:
  - Rename yum groups <=> rpm groups
  - Add yum groups, what was actually wanted.
  - Fixup minor doc problems
  - Resolves: rhbz#319491


author: Jakub Jelinek <jakub@redhat.com> 4.1.1-47
changelog:
  - fix ia64 prologue generation (Andreas Schwab, #219594, PR target/29166)
  - fix ppc64 divdi3 (PR target/30185)


author: Jakub Jelinek <jakub@redhat.com> 4.1.1-48
changelog:
  - update from gcc-4_1-branch (-r119833:120062)
    - PRs libstdc++/11953
  - fix ia64 EH region boundaries where last br.call in the region
    is not at the end of a bundle (#219596, PR target/30230)
  - fix DI resp. TImode __sync_*_compare_and_swap on i?86 resp. x86_64
    (Kazu Hirata, #220258, PR target/27266)
  - fix asm vs. nested functions or OpenMP (#220250, PRs middle-end/30262,
    middle-end/30263)
  - fix handling of complex shared OpenMP vars (Andrew Pinski,
    PR middle-end/30143)
  - don't include gappletviewer and libgcjwebplugin.so (#220135)


author: Jakub Jelinek <jakub@redhat.com> 4.1.1-49
changelog:
  - update from gcc-4_1-branch (-r120062:120325)
    - PRs debug/26964, fortran/30200, libfortran/30145
  - fix endless recursion in negate_expr/fold_unary (PR middle-end/30286)
  - fix cpp problem on empty source files (Tom Tromey, PR preprocessor/30001)
  - improve constructor disambiguation (Mark Mitchell, PR c++/28261,
    PR c++/29535)
  - fix handling of non-NULL attribute on nested functions (Andrew Pinski,
    PR tree-opt/30045)
  - fix ICE with friend templatized static member function (PR c++/29054)


author: Jakub Jelinek <jakub@redhat.com> 4.1.1-50
changelog:
  - backwards compatibility with old layout of struct _Unwind_Context
    (#220627)
  - fix preprocessor defines in assembly preprocessed with -std=...
    (Steven Bosscher, PR c/25993)
  - fix PCH creation with templates (Jason Merrill, PR c++/28217)
  - fix dwarf2out ICE (Alexandre Oliva, #217529, PR debug/30189)


author: Jakub Jelinek <jakub@redhat.com> 4.1.1-51.el5
changelog:
  - update from gcc-4_1-branch (-r120325:120507)
    - PRs c++/30382, middle-end/27826, middle-end/28116,
  	tree-optimization/30212


author: Jakub Jelinek <jakub@redhat.com> 4.1.1-52.el5.2
changelog:
  - add gnu.java.util.ZoneInfo class, use tzdata files for libgcj
    timezone stuff instead of builtin simple and outdated rules (#227888)


author: Jakub Jelinek <jakub@redhat.com> 4.1.2-13.el5
changelog:
  - update from gcc-4_1-branch (-r120507:126008)
    - GCC 4.1.2 release
    - PRs inline-asm/32109, rtl-optimization/28011, target/32389,
  	libfortran/31409, libfortran/31880, libfortran/31964,
  	rtl-optimization/31691, target/31022, target/31480, target/31701,
  	target/31876, target/32163, tree-optimization/26998, c++/30016,
  	c++/30221, middle-end/30761, target/18989, target/28675,
  	tree-optimization/29446, tree-optimization/31698, middle-end/31448,
  	preprocessor/30468, target/28623, target/31641, c++/30168, c++/31074,
  	c++/31449, c++/31517, c/31520, middle-end/30729, target/25448,
  	target/30289, target/30483, target/31361, target/31582,
  	testsuite/31578, target/31137, target/31380, fortran/31184,
  	target/31245, tree-optimization/30590, debug/29906, middle-end/30364,
  	middle-end/30433, target/31123, c++/30852, c++/30895,
  	classpath/28550, fortran/29441, fortran/30400, libgcj/17002,
  	libgfortran/30910, libgfortran/30918, other/31050,
  	rtl-optimization/30931, target/30848, tree-optimization/29925,
  	ada/30684, fortran/30478, fortran/30799, middle-end/24427,
  	other/27843, rtl-optimization/28173, rtl-optimization/28772,
  	rtl-optimization/29599, rtl-optimization/30787, target/19087,
  	tree-optimization/30823, fortran/24783, testsuite/30649,
  	middle-end/30313, c++/29487, target/29487, target/30370,
  	c++/28988, fortran/30278, libstdc++/30586, middle-end/29683,
  	objc/27438, c++/28999, libgfortran/30435, objc/30479,
  	rtl-optimization/29329, target/30173, testsuite/12325, target/24036
    - reenable memory CSE (Alexandre Oliva, #229366, PR rtl-optimization/30643)
  - backported OpenMP fixes from trunk and gcc-4_2-branch
    - PRs middle-end/32362, tree-optimization/31769, c++/32177, c++/30703,
  	middle-end/27416, middle-end/30421, middle-end/30494
  - on ppc{,64} when tuning for power6{,x}, try to put the base
    register as first operand in instructions to improve
    performance (Peter Bergner, #225425, PR middle-end/28690)
  - on ppc64 emit nop after a call and disallow sibling calls
    if the target function is not defined in the same object file
    (David Edelsohn, #245424)
  - gomp parallel sections fix and fix for checking whether combined
    parallel can be used (PR libgomp/32468)
  - don't set TREE_READONLY on C++ objects that need runtime initialization
    (PRs c++/31806, c++/31809)
  - fix computation of common pointer type (PR tree-optimization/32139)
  - precompute const and pure fn calls inside another fn call arguments
    with accumulating outgoing args
    (PRs middle-end/32285, tree-optimization/30493)
  - fix handling of RESULT_DECLs in points-to analysis
    (#243438, PR tree-optimization/32353)
  - don't increase alignment of TLS variables too much
  - __do_global_dtors_aux hardening (#240422)
  - allow libgomp to be dlopened (PR libgomp/28482)
  - speed up and improve libgomp omp_get_num_procs and dynamic
    thread count computation
  - GOMP_CPU_AFFINITY support
  - fix ICE on C++ type passed as OpenMP clause variable (PR c++/31748)
  - fix a couple of translation bugs that could lead to ICEs (#235008)
  - fix ICE with #pragma omp parallel inside of a try catch construct
    (PR tree-optimization/30558)
  - fix OpenMP clause handling in templates (PR c++/31598)
  - fix folding of comparisions against min, min+1, max-1, max
    (#236711, PR tree-optimization/31632)
  - fix _mm_cmpord_ss on i?86/x86_64 (#237067)
  - deque::erase fix (Steve LoBasso, Paolo Carlini, #234515)
  - fix a regression caused by C++ visibility fixes (Jason Merrill,
    PR c++/31187)
  - fix C++ ICE on i ? j : k = (void) 0; (PR c++/30847)
  - fix C++ accepts invalid bug (Mark Mitchell, PR c++/30863)
  - fix random seed handling with -frepo (Alexandre Oliva, #228769)
  - fix fortran OPEN without ACTION on read-only filesystem (#231134)
  - fix fortran module writer ICEs on implicit conversions (#231261)
  - fix !$omp space space parsing in Fortran
  - fix Fortran -ff2c (Tobias Schlueter, #229110, PR fortran/25392)
  - fix ICE in dwarf2out with limbo die nodes in namespace context
    (Alexandre Oliva, #240503, #227376)
  - fix a SRA bug with bitfields (Alexandre Oliva, #223576)
  - package up ammintrin.h on i386/x86_64
  - fix AMDfam10 testcases (H.J. Lu)
  - fix f951 assert accessing memory after free (H.J. Lu, PR fortran/27351)
  - add AMDfam10 support (Harsha Jagasia, #222897)
  - add -march=core2 and -mtune=core2 support (Vlad Makarov)
  - fix sprintf builtin (PR middle-end/30473)
  - fix ICE on invalid __thread register on fields (PR c++/30536)
  - ignore install-info errors in scriptlets (#223687)
  - rename MNI and mni to SSSE3 and ssse3, keep -m{,no-}mni option and
    __MNI__ macro for compatibility
  - combiner fixes (Richard Sandiford, PR rtl-optimization/25514,
    PR rtl-optimization/27736)
  - fix build against post RHEL5 GA firefox-devel (#234435)


author: Jakub Jelinek <jakub@redhat.com> 4.1.2-14.el5
changelog:
  - fix simplify_plus_minus with ppc{,64} power6 tuning (regression from
    4.1.1-52.el5.2, #247586)
  - fix OpenMP handling of Fortran POINTER non-array vars (PR fortran/32550)


author: Jon Masters <jcm@redhat.com>
changelog:
  - Update to microcode 1.15 for real this time (now kernel patch is in and we
    - both RH and Intel - think this should be ok to go now).
  - Resolves: #214807, #209455.


author: Jarod Wilson <jwilson@redhat.com>
changelog:
  - Spec cleanup and macro standardization.
  - Update microcode data file to 20080131 revision.
  - Resolves: #431566.


author: Dave Anderson <anderson@redhat.com> - 4.0-3.1
changelog:
  - Updated crash.patch to match upstream version 4.0-3.1.
  - Added kdump reference to description.
  - Added s390 and s390x to ExclusiveArch list.  BZ #199125
  - Removed LKCD v1 pt_regs references for s390/s390x build.
  - Removed LKCD v2_v3 pt_regs references for for s390/s390x build.


author: Dave Anderson <anderson@redhat.com> - 4.0-3.3
changelog:
  - Updated crash.patch to match upstream version 4.0-3.3.
  - Support for x86_64 relocatable kernels.  BZ #204557


author: Dave Anderson <anderson@redhat.com> - 4.0-3.10
changelog:
  - Updated crash.patch to match upstream version 4.0-3.9, bumped
    by 1 to differentiate from RHEL4-5 errata version.
  - Fixes for x86_64 "bt" command for tasks that have transitioned
    to the IRQ stack from the process stack via hardware interrupt
    or call_softirq entry point, and to the NMI stack from the 
    process stack.
  - Resolves: rhbz#213929


author: Dave Anderson <anderson@redhat.com> - 4.0-3.11
changelog:
  - Revisited fix for BZ #213929; when crash is run in a small
    terminal window, gdb does line-wrapping that breaks the fix
    for x86_64 backtraces.


author: Dave Anderson <anderson@redhat.com> - 4.0-3.12
changelog:
  - Fix for ia64 kdump vmcore backtraces when crash was generated
    via INIT switch or due to an MCA exception.
  - Resolves: rhbz#216037


author: Dave Anderson <anderson@redhat.com> - 4.0-3.14
changelog:
  - Fix for s390x live system analysis to recognize debuginfo vmlinux
    file that contains an ASCII char adjacent to the Linux version
    string.
  - Resolves: rhbz#216973


author: Dave Anderson <anderson@redhat.com> - 4.0-4.3.1
changelog:
  - Fix for "dev -p" command for ppc64 machines with virtual devices
    and for kernels that don't have the "pci_device" symbol.
  - Resolves: rhbz#220929 
  - Fix for "crash: cannot resolve "init_task_union" errors due to
    to "__per_cpu_start" and "__per_cpu_end" symbols changing from
    type 'A' to type 'D'.
  - Resolves: rhbz#221901 
  - Fix for segmentation fault when attempting to read a xen core dump
    from a 6 GB guest.
  - Resolves: rhbz#224535 
  - Fix for crash session initialization failure indicating "crash:
    cannot read/find cr3 page" in xendumps where the cr3 register
    value in the dumpfile header is overloaded to be able to use
    page directory pages that are greater than 4GB.
  - Resolves: rhbz#223454 
  - Support for determining the physical base address in FV relocatable
    x86_64 xendump dumpfiles run as xen guests. 
  - Resolves: rhbz#233151 
    Create a new crash-devel package for extension modules, which installs
    defs.h in /usr/include/crash. 
  - Resolves: rhbz#241045 
    Reasonable backtraces for x86_64.
  - Resolves: rhbz#221355


author: Dave Anderson <anderson@redhat.com> - 4.0-4.6.1
changelog:
  - Fix for "bt" command segmentation violation when run against
    an x86 xen-syms hypervisor.
  - Resolves: rhbz#252198


author: Michael Stauber <mstauber@solarspeed.net> 1.1.0-2009AV01
changelog:
  - Extended the GUI with provisions for the three separate Aventurin{e} repositories.
  - Can show, enable and disable all three repositories through the GUI.
  - Updates for disabled repositories are still shown under 'Available Updates'.
  - Updated glue/schemas/yum.schema with new database fields.
  - Added constructor/import_yumconf.pl to read in existing repository config status.
  - Updated glue/handlers/yum-update_repos.pl glue/handlers/yum-update.sh glue/handlers/yum-checker.sh to check disabled repos, too.
  - Modified ui/web/yum.php for the new input / output.
  - Added glue/handlers/yum-update_repos.pl to write off the GUI changest to the repo files.
  - Updated glue/conf/yum.conf to call glue/handlers/yum-update_repos.pl when needed.
  - Updated locale/en/yum.po with new locale strings.
  - Added conditional restart of CCEd to glue post install.


author: Michael Stauber <mstauber@solarspeed.net> 1.1.0-2009AV02
changelog:
  - Updated glue/schemas/yum.schema to add the userwish switch
  - Updated ui/web/yum.php for the new userwish switch
  - The userwish switch allows us to selectively disable OS template YUM repo on secondary nodes of clusters


author: Stepan Kasal <skasal@redhat.com> - 6.6-2.5
changelog:
  - Improve the fix for CVE-2006-7224 by updating
    pcre-6.6-CVE-2006-7224.patch and adding pcre-6.4-fix1.patch
    and pcre-6.4-posix.diff
  - Related: #373441


author: Stepan Kasal <skasal@redhat.com> - 6.6-2.7
changelog:
  - Fix the names of the pacthes added in 6.6-2.5:
    mv pcre-6.4-posix.diff pcre-6.6-CVE-2006-7225.patch
    mv pcre-6.4-fix1.patch pcre-6.6-CVE-2006-7226.patch
  - Update pcre-6.6-CVE-2007-1659.patch
  - Update pcre-6.6-CVE-2007-1660.patch
  - Add pcre-6.6-CVE-2006-7230.patch
  - Resolves: #380531


author: Don Zickus <dzickus@redhat.com> [2.6.18-49.el5]
changelog:
  - [sata] libata probing fixes and other cleanups (Jeff Garzik ) [260281]
  - [net] cxgb3: backport fixups and sysfs corrections (Andy Gospodarek ) [252243]


author: Don Zickus <dzickus@redhat.com> [2.6.18-50.el5]
changelog:
  - Revert: [net] bonding: convert timers to workqueues (Andy Gospodarek ) [210577]
  - [pata] enable IDE (siimage) DRAC4 (John Feeney ) [212391]
  - [GFS2] gfs2_writepage(s) workaround (Wendy Cheng ) [252392]
  - [scsi] aacraid: Missing ioctl() permission checks (Vitaly Mayatskikh ) [298381] {CVE-2007-4308}
  - [GFS2] Solve journaling/{release|invalidate}page issues (Steven Whitehouse ) [253008]
  - [x86_64] syscall vulnerability (Anton Arapov ) [297881] {CVE-2007-4573}
  - [GFS2] Fix i_cache stale entry (Wendy Cheng ) [253756]
  - [GFS2] deadlock running revolver load with lock_nolock (Benjamin Marzinski ) [288581]
  - [net] s2io: check for error_state in ISR (more) (Scott Moser ) [276871]


author: Don Zickus <dzickus@redhat.com> [2.6.18-51.el5]
changelog:
  - [GFS2] dlm: schedule during recovery loops (David Teigland ) [250464]
  - Revert: [pata] IDE (siimage) panics when DRAC4 reset (John Feeney ) [212391]


author: Don Zickus <dzickus@redhat.com> [2.6.18-52.el5]
changelog:
  - [net] iwlwifi: avoid BUG_ON in tx cmd queue processing (John W. Linville ) [306831]
  - [GFS2] Get super block a different way (Steven Whitehouse ) [306621]


author: Don Zickus <dzickus@redhat.com> [2.6.18-53.el5]
changelog:
  - [GFS2] handle multiple demote requests (Wendy Cheng ) [295641]
  - [scsi] megaraid_sas: kabi fix for /proc entries (Chip Coldwell ) [323231]
  - [sound] allow creation of null parent devices (Brian Maly ) [323771]


author: Anton Arapov <aarapov@redhat.com> [2.6.18-53.1.2.el5]
changelog:
  - [net] bnx2: Add PHY workaround for 5709 A1 (Andy Gospodarek ) [345131]
  - [cifs] fix memory corruption due to bad error handling (Jeff Layton ) [345171]
  - [audit] improper handling of audit_log_start return values (Eric Paris ) [345151]
  - [fs] jbd: wait for t_sync_datalist buffer to complete (Eric Sandeen ) [345141]
  - [mm] ia64: flush i-cache before set_pte (Luming Yu ) [345161]
  - [x86] Fixes for the tick divider patch (Chris Lalancette ) [305011]
  - [alsa] Convert snd-page-alloc proc file to use seq_file (Jerome Marchand ) [297761] {CVE-2007-4571}


author: Anton Arapov <aarapov@redhat.com> [2.6.18-53.1.3.el5]
changelog:
  - [fs] missing dput in do_lookup error leaks dentries (Eric Sandeen ) [363481] {CVE-2007-5494}
  - [ppc] System cpus stuck in H_JOIN after migrating (Scott Moser ) [381151]
  - [scsi] ibmvSCSI: Unable to continue migrating lpar after errors (Scott Moser ) [381141]
  - [scsi] ibmvSCSI: client can't handle deactive/active device from server (Scott Moser ) [381121]
  - [audit] still allocate contexts when audit is disabled (Alexander Viro ) [381001]
  - [autofs4] fix race between mount and expire (Ian Kent ) [381071]
  - [net] ieee80211: off-by-two integer underflow (Anton Arapov ) [346391] {CVE-2007-4997}
  - [fs] sysfs: fix race condition around sd->s_dentry (Eric Sandeen ) [245777] {CVE-2007-3104}
  - [fs] sysfs: fix condition check in sysfs_drop_dentry() (Eric Sandeen ) [245777] {CVE-2007-3104}
  - [fs] sysfs: store inode nrs in s_ino (Eric Sandeen ) [245777] {CVE-2007-3104}
  - [nfs] v4: umounts oops in shrink_dcache_for_umount (Steve Dickson ) [381111]
  - [net] forcedeth: MSI interrupt bugfix (Andy Gospodarek ) [381131]
  - [ppc] kexec/kdump kernel hung on Power5+ and Power6 (Scott Moser ) [381101]


author: Anton Arapov <aarapov@redhat.com> [2.6.18-53.1.4.el5]
changelog:
  - Revert: [fs] sysfs: fix race condition around sd->s_dentry (Eric Sandeen ) [245777] {CVE-2007-3104}
  - Revert: [fs] sysfs: fix condition check in sysfs_drop_dentry() (Eric Sandeen ) [245777] {CVE-2007-3104}
  - Revert: [fs] sysfs: store inode nrs in s_ino (Eric Sandeen ) [245777] {CVE-2007-3104}
  - [net] tg3: Fix performance regression on 5705 (Andy Gospodarek ) [381021]


author: Anton Arapov <aarapov@redhat.com> [2.6.18-53.1.5.el5]
changelog:
  - [ia64] ptrace: access to user register backing (Roland McGrath ) [259801]
  - [fs] cifs: buffer overflow due to corrupt response (Jeff Layton ) [372991]
  - [net] s2io: correct VLAN frame reception (Andy Gospodarek ) [426289]
  - [net] s2io: allow VLAN creation on interfaces (Andy Gospodarek ) [426289]
  - [misc] tux: get rid of O_ATOMICLOOKUP (Michal Schmidt ) [426494]
  - [x86_64] fix race conditions in setup_APIC_timer (Geoff Gustafson ) [424181]
  - [fs] core dump file ownership (Don Howard ) [396991]
  - [nfs] let rpciod finish sillyrename then umount (Steve Dickson ) [414041]
  - [nfs] fix a race in silly rename (Steve Dickson ) [414041]
  - [nfs] clean up the silly rename code (Steve Dickson ) [414041]
  - [nfs] infrastructure changes for silly renames (Steve Dickson ) [414041]
  - [nfs] introduce nfs_removeargs and nfs_removeres (Steve Dickson ) [414041]
  - [ia64] remove stack hard limit (Aron Griffis ) [412091]
  - [fs] sysfs: fix race condition around sd->s_dentry (Eric Sandeen ) [245777] {CVE-2007-3104}
  - [fs] sysfs: fix condition check in sysfs_drop_dentry() (Eric Sandeen ) [245777] {CVE-2007-3104}
  - [fs] sysfs: store inode nrs in s_ino (Eric Sandeen ) [245777] {CVE-2007-3104}
  - [xen] ia64: vulnerability of copy_to_user in PAL emu (Jarod Wilson ) [425938]


author: Michael Stauber <mstauber@solarspeed.net>
changelog:
  - [1.0.15-2011AV02] The last IonCube update dropped the mailer stuff.
  - Pulled in ui/web/phpmailer.lang-en.php ui/web/class.phpmailer.php and 
    ui/web/class.smtp.php and fixed the paths in Wizard accordingly.


author: Michael Stauber <mstauber@solarspeed.net> 0.5.1-2008AV06
changelog:
  - Tab positions in navigation menu (tab.js) fixed for Chrome and Safari.
  - Contributed by Jeremy Knope from rainstormconsulting.com


author: Jakub Jelinek <jakub@redhat.com> 2.17.50.0.6-1.el5
changelog:
  - update to 2.17.50.0.6
    - fix for section relative linker script defined symbols in
      empty sections (#212032, BZ#3267)
    - fix handling of DW_CFA_set_loc in .eh_frame optimizations
    - fix R_PPC_{PLT,GOT{,_TLSGD,_TLSLD,_TPREL,_DTPREL}}16_HA relocation
      handling with weak undefined symbols (Alan Modra, #211094)
    - fix --cref (#212099)
    - fix --emit-relocs on ppc64 (#211991)


author: Jakub Jelinek <jakub@redhat.com> 2.17.50.0.6-4.el5
changelog:
  - 10x linking speedup on large C++ apps (#223181)
  - fix tekhex reader
  - SSE4 support in gas and objdump (H.J.Lu, #223120)
  - compile binutils with -D_FILE_OFFSET_BITS=64 (#215514)
  - fix ld --emit-relocs on ppc64 (Alan Modra, #235221)
  - fix ppc32 ld segfault with -msecure-plt (Alan Modra, BZ#4267)


author: Jakub Jelinek <jakub@redhat.com> 2.17.50.0.6-5.el5
changelog:
  - fix ld --unique with new DWARF3 sections .debug_ranges and .debug_pubtypes
    (Alan Modra, #241252)
  - fix segfault in ppc64 version script handling (Andreas Schwab)


author: Jakub Jelinek <jakub@redhat.com> 2.17.50.0.6-6.el5
changelog:
  - full power6 support (Alan Modra, Peter Bergner, Ben Elliston,
    Anton Blanchard, #253108)
  - demangle ppc64 dot symbols in gprof (Jan Kratochvil, #242057)
  - SSE5 support in gas and objdump (Michael Meissner, Dwarakanath Rajagopal,
    Tony Linthicum, H.J.Lu, #426906)


author: Michael Stauber <mstauber@solarspeed.net> 0.80.2-1BQ38
changelog:
  - Modified basetypes.schema again to change minimum password length back to six characters.
  - New defaults: min: 6, max: 24.


author: Michael Stauber <mstauber@solarspeed.net> 0.80.3-1BQ39
changelog:
  - Merged changes from 5100R. 
  - Needed to bump version number to 0.80.3 or virtual BlueQuartz cannot be updated.


author: Michael Stauber <mstauber@solarspeed.net> 0.80.2-2009AV01
changelog:
  - Rebuild because /usr/sausalito/bin/ccewrap had wrong GID 
  - Reason was wrong HTTPD_USER reported in /usr/sausalito/devel/defines.mk


author: Michael Stauber <mstauber@solarspeed.net> 0.80.4-1BQ42
changelog:
  - Added pam_abl directory to include pam_abl by default
  - Modified server/system-auth-cce.pam to add pam_abl related rules
  - Added pam_abl.readme with some extra info into the build directory


author: Michael Stauber <mstauber@solarspeed.net> 0.80.4-1BQ43
changelog:
  - Output of /usr/bin/pam_abl is very difficult to parse for GUI usage.
  - Created modified pam_abl CLI named /usr/sausalito/bin/pam_abl_gui with carriage return and verbosity ripped out.
  - New supplemental CLI sources reside in pam_abl/gui-tools
  - Updated toplevel Makefile to also build the new pam_abl/gui-tools


author: Michael Stauber <mstauber@solarspeed.net> 0.80.4-1BQ44
changelog:
  - Removed pam_abl database clearing from cced.init
  - Added RC script for pam_abl that clears blocks and databases on server reboot and allows to unblock and purge from the command line.
  - Modified pam_abl/conf/pam_abl.conf to disable user_rule blocks by default to prevent Denial of Service attacks.


author: Michael Stauber <mstauber@solarspeed.net> 0.80.4-2010AV05
changelog:
  - Modified codb/src/impl/oid.c as per [Devel:00390] posted by Greg Kuhnert and [Devel:00385] as per Taco Scargo
  - This isn't perfect, but may help to mitigate CODB corruption problems as it improves the existing abyssmal file locking procedure somewhat.
  - More permanent fix needs to be worked out.


author: Michael Stauber <mstauber@solarspeed.net> 0.80.2-1BQ34
changelog:
  - Modified basetypes.schema to change minimum/maximum password length to more secure defaults (min:6, max: 24). 
  - Modified rules.mk to comment out 'ifdefined' for GLIB_GHASH to eleminate build errors on CentOS-4 
  - Added README to build tree to remind people which BuildRequires this package has.


author: Michael Stauber <mstauber@solarspeed.net> 0.80.2-1BQ36
changelog:
  - Fixed function array_to_scalar in CceClient.php to add a check if the argument IS an array to begin with.


author: Michael Stauber <mstauber@solarspeed.net> 0.80.2-1BQ37
changelog:
  - Fixed /etc/pam/cced and added /etc/pam/system-auth-cce as we cannot use the regular /etc/pam/system-auth


author: Michael Stauber <mstauber@solarspeed.net> 0.80.2-2008AV06
changelog:
  - Added 'Requires: httpd' to make sure that RPM install order will install CCE after Apache. Otherwise we get UID/GID issues.
  - Fixed locales.
  - Set minimum password length from four to six.


author: Michael Stauber <mstauber@solarspeed.net> 0.80.2-2009AV01
changelog:
  - Rebuild because /usr/sausalito/bin/ccewrap had wrong GID
  - Reason was wrong HTTPD_USER reported in /usr/sausalito/devel/defines.mk


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:3.9.4-9.el5
changelog:
  - fix buffer overflow in 802.11 printer (#232347, CVE-2007-1218)
  - fix return codes in arpwatch init script (#237779)


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:3.9.4-12.el5
changelog:
  - use LINUX_SLL or RAW as data link types when qeth device is not
    in layer2 mode (#281241)
  - require /usr/sbin/sendmail (#259301)
  - enable crypto support on 64-bit architectures (#345041)
  - support decoding IKEv2 packets (#290131)


author: Tomas Smetana <tsmetana@redhat.com> - 3.7.4-8
changelog:
  - fix #247410 - logrotate does not honor size directive
  - fix #250059 - logrotate manual page bug
  - fix #259281 - logrotates default config rotates wtmp irrationally often


author: Miloslav Trmac <mitr@redhat.com> - 0.54.6-1
changelog:
  - Fix bugs in handling of invalid lines in the files and shadow modules
  - Fix pattern matching in lu_*_enumerate_full in the files and shadow modules
  - Add more error reporting, return non-zero exit status on error from utils
  - Use the skeleton directory specified in libuser.conf by Python
    admin.createHome and admin.addUser, add parameter skeleton= to admin.addUser
    (#189984)


author: Miloslav Trmač <mitr@redhat.com> - 0.54.7-2.el5.3
changelog:
  - When changing passwords, only silently ignore known shadow markers, not all
    invalid hashes
    Resolves: #225495
  - Update the last password change date field when changing passwords
    Resolves: #243854


author: Michael Stauber <mstauber@solarspeed.net> 3.0.2-0BX02
changelog:
  - Copied 'en' locale to 'en_US'
  - Changed lang in conf/swatch.conf from 'en' to 'en_US'
  - Added /usr/sausalito/sbin/swatch.sh with hotwired exports for locales
  - Modified /etc/cron.d/swatch.cron to call /usr/sausalito/sbin/swatch.sh instead
  - Added pre and post scripts to deal with config file updates


author: Michael Stauber <mstauber@solarspeed.net> 3.0.2-0BX04
changelog:
  - Modified /usr/sausalito/sbin/swatch.sh again to prevent multiple execution of /usr/sbin/swatch
  - Removed CCEd restart and some other things that didn't work.
  - Added post install 5106R locale fix for /etc/swatch.conf to set it back to 'en'.
  - Modified swatch-cobalt.pl yet again to try to keep it at honouring the set locales.


author: Michael Stauber <mstauber@solarspeed.net> 3.0.2-0BX06
changelog:
  - Updated swatch-cobalt.pl for a more platform specific check on the forced locale change
    from 'ja' to 'en_US' or 'en' for MIME::Lite emails of Swatch.


author: Michael Stauber <mstauber@solarspeed.net> 3.0.2-0BX07
changelog:
  - Added hotfixes.sh to automatically run a couple of hotfixes on an as needed basis.
  - Modified swatch.sh to call hotfixes.sh whenever CROND fires up swatch.


author: Steve Grubb <sgrubb@redhat.com> - 1.5.5-7
changelog:
  resolves: #251327 swig was incorrectly incoporating a variable in ppc's
  python bindings causing python tracebacks.


author: Steve Grubb <sgrubb@redhat.com> 1.6.5-1
changelog:
  resolves: #234663, #244349
  - auparse library has been updated
  - system-config-audit has added
  - auditd now supports group permissions on audit logs
  - audit by TTY support added
  - New multi-threaded audit event dispatcher supporting plugins
  - node/machine field can be added to audit events
  - RACF zos remote logging plugin from IBM
  - week-ago keyword added to aureport/ausearch
  - auditctl supports errno abbreviation as syscall exit code (-F exit=-EPERM)
  - audit logging can be resumed with SIGUSR2
  - New aulastlog utility


author: Steve Grubb <sgrubb@redhat.com> 1.6.5-2
changelog:
  resolves: #432866
  - Fix leaked descriptors in audispd
  - aureport does not work when run from a cron job
  - ausearch -m ANOM_PROMISCUOUS did not work because of parse error
  - ausearch recent keyword was searching since midnight instead of last 10 min
  - man page updates


author: Steve Grubb <sgrubb@redhat.com> 1.6.5-6
changelog:
  resolves: #438844 buffer overflow in audit_log_user_command
  - Also removed lsb headers from init script


author: Steve Grubb <sgrubb@redhat.com> 1.6.5-7
changelog:
  resolves: #438844 buffer overflow in audit_log_user_command
  - Update ausearch with fixes from auparse, 440086


author: Steve Grubb <sgrubb@redhat.com> 1.6.5-9
changelog:
  resolves: #442556 audit rules with >= get corrupted
  resolves: #438844 buffer overflow in audit_log_user_command, better fix


author: Harald Hoyer <harald@redhat.com> - 1.3.99.2-1
changelog:
  - added support for s390 qeth devices (rhbz#184734)
  - removed CTC and IUCV support (rhbz#219180)
  - preserve or add ::1 to /etc/hosts (rhbz#213709)
  - do not touch ifcfg-*-range config files (rhbz#221292)
  - default to static if BOOTPROTO unset and IP set (rhbz#227673)
  - Resolves: rhbz#184734, rhbz#219180, rhbz#213709, rhbz#221292, rhbz#227673


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.79
changelog:
  - Bug 426220: CVE-2007-6285 autofs default doesn't set nodev in /net [rhel-5.2]
    - use mount option "nodev" for "-hosts" map unless "dev" is explicily specified.
  - Related: rhbz#426220


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.80
changelog:
  - Bug 336961: Reloading autofs map incorrectly removes all map entries
    - add missed case for this correction.
  - Related: rhbz#336961


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.81
changelog:
  - Bug 336961: Reloading autofs map incorrectly removes all map entries
    - correct patch for the missed case.
  - Related: rhbz#336961


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.82
changelog:
  - Bug 426412 Processed: autofs segfaults (possibly from autofs_sasl_unbind)
    - fix race during sub-mount shutdown.
  - Resolves: rhbz#426412


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.83
changelog:
  - Bug 426412 Processed: autofs segfaults (possibly from autofs_sasl_unbind)
    - correction for "fix race during sub-mount shutdown" patch.
  - Related: rhbz#426412


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.84
changelog:
  - Bug 298171: Allows autofs to do automount lookups via nscd through LDAP
    - add error message to notify when no valid URIs found in configured list.
    - fix base dn search not trying all configured search bases.
  - Related: rhbz#298171


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.85
changelog:
  - 350171: /etc/init.d/autofs does not handle basedns with spaces
    - yet another correction to the patch.
  - Related: rhbz#350171


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.86
changelog:
  - 254226: autofs reload and condrestart fail if map is originally empty
    - another fix for don't fail on empty master map.
  - Related: rhbz#254226


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.87
changelog:
  - Bug 336961: Reloading autofs map incorrectly removes all map entries
    - fix incorrect initialization which causes unpredictable behavior.
  - Related: rhbz#336961


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.88
changelog:
  - Bug 298171: Allows autofs to do automount lookups via nscd through LDAP
    - init SASL callbacks on every ldap lookup library load.
  - Related: rhbz#298171


author: Karel Zak <kzak@redhat.com> 2.13-0.40
changelog:
  - fix Makefile.am in util-linux-2.13-mount-context.patch
  - fix #201343 - pam_securetty requires known user to work
                  (split PAM login configuration to two files)
  - fix #203358 - change location of taskset binary to allow for early affinity work


author: Karel Zak <kzak@redhat.com> 2.13-0.41
changelog:
  - fix #205038 - mount not allowing sloppy option (exports "-s"
    to external /sbin/mount.nfs(4) calls) 
  - fix minor bug in util-linux-2.13-mount-twiceloop.patch
  - fix #188193- util-linux should provide plugin infrastructure for HAL


author: Karel Zak <kzak@redhat.com> 2.13-0.42
changelog:
  - remove obsolete NFS code and patches (we use /sbin/mount.nfs
    and /sbin/umount.nfs from nfs-utils now)
  - move nfs.5 to nfs-utils


author: Karel Zak <kzak@redhat.com> 2.13-0.43
changelog:
  - fix #209911 - losetup.8 updated (use dm-crypt rather than deprecated cryptoloop)
  - fix #210338 - spurious error from '/bin/login -h $PHONENUMBER' (bug in IPv6 patch)
  - fix #208634 - mkswap "works" without warning on a mounted device


author: Karel Zak <kzak@redhat.com> 2.13-0.43.1
changelog:
  - fix #211827 - Can't mount with additional contexts
  - fix #213127 - mount --make-unbindable does not work
  - fix #216489 - SCHED_BATCH option missing in chrt
  - fix #216712 - issues with raw device support
    (disable raw0 usage, move the raw command to /bin, update man page)
  - fix #216664 - we need to the raw script and configuration file


author: Karel Zak <kzak@redhat.com> 2.13-0.43.3
changelog:
  - fix #219569 - smbfs -> cifs (upgrade from -pre6 to -pre7 upstream version)
  - fix #218915 - fdisk -b 4K
  - remove unused patches


author: Karel Zak <kzak@redhat.com> 2.13-0.45
changelog:
  - fix #237659 - add -r option to losetup to create a read-only loop
  - fix #235495 - mount -f does not work with NFS-mounted file system
  - fix #234303 - src.rpm does't build
  - fix #228731 - sfdisk doesn't support DM-MP device (add default heads and sectors)
  - fix #231192 - ipcs is not printing correct values on pLinux
  - fix #245533 - translation files exist, but are not being used


author: Karel Zak <kzak@redhat.com> 2.13-0.45.el5_1.1
changelog:
  - fix #324461 - CVE-2007-5191 util-linux (u)mount doesn't drop
                  privileges properly when calling helpers


author: Jarod Wilson <jwilson@redhat.com>
changelog:
  - Turn on ia64 builds (#216702)
  - Fix status on xen kernels
  - Move config file to /etc/sysconfig/cpuspeed, more
    appropriate for initscript configs (#152305)
  - Manify 'cpuspeed --help' along with other details (#172655)
  - Tweak cpuspeed default thresholds (#147565)
  - Let non-centrino/powernow-k8 systems also use other
    validated governors (#219926)
  - Fix cpuspeed daemon options settings (#221829)
  - Fix status and condrestart for centrino/powernow-k8 (#219926)
  - Give feedback when loading/unloading a cpufreq governor
  - Rework config file and initscript to make it much easier
    for end-users to adjust frequency scaling setup (#151761)
  - Log start/stop events with useful info
  - Don't start on xen kernels (freq scaling not supported)
  - Set lock file for centrino/powernow-k8 so status 
    indicates we do have scaling working 
  - Fix up centrino/powernow-k8 stop function (#213999)


author: Jarod Wilson <jwilson@redhat.com>
changelog:
  - Fix up documentation in config file (#219926)
  - Fall back cleanly to userspace governor on
    non-centrino/powernow-k8/p4-clockmod systems
  - Update description to reflect support for
    kernel-space freq scaling


author: Jarod Wilson <jwilson@redhat.com>
changelog:
  - Fix error-suppression for systems that report support
    for est, but have it disabled in the bios (#220200)


author: Jarod Wilson <jwilson@redhat.com>
changelog:
  - Fix up exit codes for LSB compliance (#237940)
  - Try loading acpi-cpufreq even on systems that don't
    report enhanced speedstep support (#216702)
  - Indentation and variable usage cleanup


author: Jarod Wilson <jwilson@redhat.com>
changelog:
  - Disable freq scaling by default on AMD rev F and earlier
    cpus when running xen, due to clock instability (#435321)


author: Michael Stauber <mstauber@solarspeed.net> 0.80.2-2008AV06
changelog:
  - Added 'Requires: httpd' to make sure that RPM install order will install CCE after Apache. Otherwise we get UID/GID issues.


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-10
changelog:
  - add a patch to allow applications to try to use a key with kvno=0, if
    found, in place of the "right" version for a request (Luke Howard, #230379)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-11
changelog:
  - login: change to the user's home directory after dropping privileges,
    not before (#248050)
  - turn off the ldap features


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-13
changelog:
  - add preliminary patch to fix buffer overflow in rpcsec_gss implementation
    in libgssrpc (#250973, CVE-2007-3999) and write through uninitialized
    pointer in kadmind (#250976, CVE-2007-4000)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-14
changelog:
  - make krb5-workstation depend on the PAM configuration file used by login.krb5
  - fix omission of kadmin log file when labeling (#253558)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-17
changelog:
  - ftpd: also do PAM session and credential management when ftp clients use
    strong authentication (#286291)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix storage of delegated krb5 credentials when they've been wrapped up in
    spnego (#436460)
  - return a delegated credential handle even if the application didn't pass a
    location to store the flags which would be used to indicate that credentials
    were delegated (#436465)
  - add patch to fall back to TCP kpasswd servers for kdc-unreachable,
    can't-resolve-server, and response-too-big errors (#436467)
  - use the right sequence numbers when generating password-set/change requests
    for kpasswd servers after the first one (#436468)
  - backport from 1.6.3 to initialize a library-allocated get_init_creds_opt
    structure the same way we would one which was allocated by the calling
    application, to restore kinit's traditional behavior of doing a password
    change right when it detects an expired password (#436470)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-17.el5_1.1
changelog:
  - add preliminary patch to fix use of uninitialized pointer / double-free in
    KDC (CVE-2008-0062,CVE-2008-0063) (#432620, #432621)
  - add backported patch to fix use-after-free in libgssapi_krb5 (CVE-2007-5901)
    (#415321)
  - add backported patch to fix double-free in libgssapi_krb5 (CVE-2007-5971)
    (#415351)
  - add preliminary patch to fix incorrect handling of high-numbered descriptors
    in the RPC library (CVE-2008-0947) (#433596)


author: Dan Walsh <dwalsh@redhat.com> 1.12.24-1
changelog:
  - Upgrade to latest from NSA
  	* Merged libsepol unit tests from Joshua Brindle.
  	* Merged symtab datum patch from Karl MacMillan.
  	* Merged netfilter contexts support from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.12.25-1
changelog:
  - Upgrade to latest from NSA
  	* Merged conditionally expand neverallows patch from Jeremy Mowery.
  	* Merged refactor expander patch from Jeremy Mowery.


author: Dan Walsh <dwalsh@redhat.com> 1.12.26-1
changelog:
  - Upgrade to latest from NSA
  	* Merged range transition enhancements and user format changes
  	  Darrel Goeddel


author: Dan Walsh <dwalsh@redhat.com> 1.12.27-1
changelog:
  - Upgrade to latest from NSA
  	* Merged mls user and range_transition support in modules
  	  from Darrel Goeddel


author: Dan Walsh <dwalsh@redhat.com> 1.15.1-1
changelog:
  - Upgrade to latest from NSA
  	* Merged fix for version comparison that was preventing range
  	  transition rules from being written for a version 5 base policy
  	  from Darrel Goeddel.


author: Dan Walsh <dwalsh@redhat.com> 1.15.2-1.el5
changelog:
  - Upgrade to latest from NSA
  	* Merged fix from Karl MacMillan for a segfault when linking
  	  non-MLS modules with users in them.


author: Karel Zak <kzak@redhat.com> 3.2.7-8
changelog:
  - remove zombie patch (needs more investigation)
  - fix #208100 - top command with '-c' option become not to display list of tasks
  - fix #199174 - top returns with exit code 1 even if no error occurs


author: Tomas Smetana <tsmetana@redhat.com> 3.2.7-9
changelog:
  - fix #217142 - "sysctl -a" generates kernel warnings (by documenting the
    behavior), drop previous patch
  - fix #184335 - enhance top to display in MB vs KB
  - fix #233962 - buffer owerflow in sysctl


author: Ivana Varekova <varekova@redhat.com> 1.3.5-8
changelog:
  - fix bug 204676 (patches by Tavis Ormandy)
    - cve-2006-4334 - null dereference problem
    - cve-2006-4335 - buffer overflow problem
    - cve-2006-4336 - buffer underflow problem
    - cve-2006-4338 - infinite loop problem
    - cve-2006-4337 - buffer overflow problem


author: Martin Bacovsky <mbacovsk@redhat.com> - 4.17-10
changelog:
  - resolves: #241027: CVE-2007-2799 file integer overflow
  - Resolves: #233337: CVE-2007-1536: file 4.20 fixes a heap overflow 
    in that can result in arbitrary code


author: Behdad Esfahbod <besfahbo@redhat.com> - 2.4.0-1
changelog:
  - Update to 2.4.0
  - Rename/order our configuration stuff to match the new scheme.
    Breaks expected :-(


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.1
changelog:
  - moved mwmrc to /etc/X11/mwm
  - moved bindings to /usr/share/X11
  - fixed paths in man pages containing /usr/X11R6


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.9
changelog:
  - new CVS version 2006-02-02
  - fixed CVE-2005-3964: libUil buffer overflows (#174814)
  - fixed XmList out of bound accesses (#167701)
  - fixed pasting into TextField (#179549)


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.5
changelog:
  - fixed SEGV error moving mouse over window related to XmToolTipGetLabel
    (MotifZone bug fix #1388)
    Resolves: rhbz#277381


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-15
changelog:
  - fix sending SNMPv1 traps on v2 connections (#236933)
  - fix ugly error messages when more interfaces share one IP addr.
    (#223236)
  - build with rpm-devel to support HOST-RESOURCES-MIB::hrSWInstalled
    (#232870)
  - store pid in /var/run/snmpd.pid (240470)
  - fix wrong sprintf in path generation (#240609)
  - fix too verbose snmpassert (#239083)
  - fix perl bulkwalk (#238145)
  - extend ipv6 support of some MIBs (#242483)


author: Bill Nottingham <notting@redhat.com> - 1.2.57.1.9-1
changelog:
  - fix crash on powermac (#216173)
  - fix network configuration for devices that have firmware (#214235)


author: Bill Nottingham <notting@redhat.com> - 1.2.57.1.12-1
changelog:
  - treat qla4xxx devices as HBAs, even if their PCI class is network (#216881)
  - sync translation (#216600)
  - don't leak fds in scsi probe (#214878, #217742)
  - fix segfault (#217818, #217823)


author: Bill Nottingham <notting@redhat.com> - 1.2.57.1.14-1
changelog:
  - add support for FBA-DASD (#215423, <dlehman@redhat.com>)
  - forward-port EHEA ethernet support (#226600)


author: Bill Nottingham <notting@redhat.com> - 1.2.57.1.16-1
changelog:
  - don't edit/move/etc. network configurations with no HWADDR (#288441)
  - handle quoted HWADDR, SUBCHANNELS (#243653)


author: Jason Vas Dias <jvdias@redhat.com> - 4:5.8.8-6
changelog:
  - Fix bug 191416: make h2ph generate correct code for cpp statements
    like: '#if defined A || defined B'
  - Fix 172396.patch for non-threaded builds


author: David Cantrell <dcantrell@redhat.com> - 1.8.1-11
changelog:
  - Do not crash when trying to detect a disk label on /dev/md* devices on s390x
    Related: rhbz#227324


author: David Cantrell <dcantrell@redhat.com> - 1.8.1-13
changelog:
  - Modify parted man page to indicate which flags are valid for which
    disk labels
    Resolves: rhbz#242771
  - Add KNOWN ISSUES section to parted(8) man page explaining that we cannot
    currently do ext3 resizing inside parted
    Resolves: rhbz#367101


author: David Cantrell <dcantrell@redhat.com> - 1.8.1-14
changelog:
  - Fix parted print command crashing with Xen xvd disks
    Resolves: rhbz#366971
  - Disable disk loss warnings in script mode (-s)
    Resolves: rhbz#244668
  - Decrement exception counter correctly in the mkpart command
    Related: rhbz#244668
  - Fix block number used when checking state on ext2 filesystems
    Related: rhbz#244668
  - Enable experimental ext2 resize support with warning
    Related: rhbz#244668


author: Karsten Hopp <karsten@redhat.com> 0.212-1
changelog:
  - pull new upstream pci.ids, usb.ids
  - Resolves: #300831
  - added HP TFT5600 LCD Monitor
  - Resolves: #250569
  - added Acer AL1916W, Eizo L568/L568D, Samsung 795DF
  - Resolves: #250582
  - Add Samsung 205BW/206BW/225BW/226BW
  - Resolves: #250584
  - Add Samsung 931BF
  - Resolves: #250587


author: Dag Wieers <dag@wieers.com> - 0.999-2
changelog:
  - Removed Conflicts: pine as RPM bug causes package to conflict with itself. (Bart Schaefer)
  - ...
  - Changelog trimmed, see http://svn.rpmforge.net/svn/trunk/rpms/alpine/alpine.spec


author: Dag Wieers <dag@wieers.com> - 1.10-1 - 6062+/dag
changelog:
  - Updated to release 1.10.
  - Included original pine.conf, lacking anything better.
  - Disable --passfile, use platform-specific password caching.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - set errno to ENOENT by default so that we don't leave stale errno values
    around in error cases (#152467)
  - clear the entire key DBT before handing it to a get() function


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-33
changelog:
  - update to db 4.3.28
  - correct a use of uninitialized memory in the bundled libdb (Arjan van de Ven)
  - obsolete the compat package, which is useless because current glibc wouldn't
    use it anyway


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2-35
changelog:
  - add missing 'ed' builddep
  - set LDFLAGS and CPPFLAGS so that our local copy of DB is more likely to be
    found by the configure script


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2-35.2
changelog:
  - when setting file contexts for creation of new files, only fail outright
    if we were in enforcing mode and the file needed to be given a specific
    label (#368281)


author: Daniel Reed <djr@redhat.com> - 1.9.1-1
changelog:
  - version bump
    - Adjust #line directives in `parser.h' (when ylwrap is not used). (PR/432)
    - Fix definition of YLWRAP when ylwrap is installed in a default aux directory found in a parent package.
    - Properly recognize AC_CANONICAL_BUILD and AC_CANONICAL_TARGET.


author: Daniel Reed <djr@redhat.com> - 1.9.2-1
changelog:
  - version bump
    - Sort rm commands output for mostlyclean-generic, clean-generic, distclean-generic and maintainer-clean-generic, so that the produced Makefile is not sensitive to the way Perl sorts its hashes.
    - Support `+' in the name of directories given to `include'.
    - Preserve spaces in the arguments of `compile'.
    - `missing' will no longer try to emulate a tool that is run with `--version' or `--help' as argument.
    - There is a new chapter about the history of Automake.


author: Daniel Reed <djr@redhat.com> 1.9.3-1
changelog:
  - version bump
    - Dependency tracking using mode "dashmstdout" or "dashXmstdout" did not work for libtool objects compiled with --tag (i.e., compiled with Libtool 1.5 or later). The compilation would succeed, but `depcomp' would emit a warning and not output any dependency information.
    - Ignore comments from augmented variables ...
    - `install-sh -d a/b/' failed to create `a/b/' because of the trailing `/'.
    - _PROGRAMS now always create programs. Before 1.9 it would mistakenly create a libtool library if the name of the program ended in `.la'.
    - `compile' now handles `*.obj' objects.
    - `aclocal' recognizes AC_DEFUN_ONCE.


author: Daniel Reed <djr@redhat.com> 1.9.4-1
changelog:
  - version bump
    - Portability nits in install-sh and mdata-sh.
    - Don't let `make install' fails if a _JAVA primary becomes empty
      because of conditionals.
    - Do not confuse CHANGELOG with ChangeLog on case-insensitive
      case-preserving file systems (likewise for all automatically
      distributed files).
    - Do not embed $DESTDIR in Python's byte-code files.
    - Work around programs that read stdin when checking for --version
      and --help options (when the `std-options' is used).
    - Fix AM_PATH_PYTHON to correctly define PYTHON as `:' when no minimum
      version was supplied and no interpreter is found.


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta8.2
changelog:
  - put back pop3_uidl_format default that got lost
    in the beta2->beta7 upgrade (would cause pop3 to not work
    at all in many situations)


author: Brian Smith <brian@nuonce.net> 1.rc32.BQ
changelog:
  - Updated to rc32
  - Made some configuration changes to the main configuration file
  - Also changed the PAM settings


author: Michael Stauber <mstauber@solarspeed.net> 1.0.12.0BQ02
changelog:
  - Post install script modified disable_plaintext_auth in all instances, not only at beginning of the line. That caused issues.


author: Karel Zak <kzak@redhat.com> 22.1.03072006cvs-1
changelog:
  - update to new upstream CVS version 
  - enable new fuser version
  - fix fuser return code 
  - fix #183897 - "pstree -a" call results in segmentation fault


author: Tim Waugh <twaugh@redhat.com> 5.97-10
changelog:
  - Ignore 'cifs' filesystems for 'df -l' (bug #183703).
  - Include -g/-G in runuser man page (part of bug #199344).
  - Corrected runuser man page (bug #200620).


author: Tim Waugh <twaugh@redhat.com> 5.97-12.1
changelog:
  - Fixed stat's 'C' format specifier (bug #216676).
  - Misleading 'id -Z root' error message (bug #211089).


author: Ondrej Vasik <ovasik@redhat.com> 5.97-13
changelog:
  - Prevent a cut(1) crash (bug #222117).
  - allow cp -a to rewrite file on NFS filesystem(#320771)
  - fixed du output for unaccesible dirs(#250087)
  - fixed displaying dangling symlinks with full path(#236721)
  - fixed rm race(#235994)


author: Ondrej Vasik <ovasik@redhat.com> 5.97-14
changelog:
  - apropos selinux should display runcon and chcon(#217881)
  - fixed bug in handling YYYYMMDD date format with relative
    signed offset(#377821)


author: Milan Broz <mbroz@redhat.com> - 2.02.26-1
changelog:
  - Update to latest upstream release.
  - Add conflict with lvm2-cluster package from different update.
    Resolves: #210365 #224468 #232238 #203745 
    Resolves: #244791 #244792 #244793 #244794 #244795 #244796


author: Milan Broz <mbroz@redhat.com> - 2.02.26-2
changelog:
  - Fix spec to create /etc/lvm/cache correctly.
  - Fix warning for unsupported mirror configuration.
  - Fix lvm2-monitor initscript to not display some invalid errors.
    Resolves: #246272 #219189 #245174


author: Milan Broz <mbroz@redhat.com> - 2.02.30-1
changelog:
  - Update to latest upstream release.
    Resolves: #252150 #210724 #245563 #363931 #291411 #246115
    Resolves: #427360 #421191 #180436 #220568 #429122 #429124
    Resolves: #429118 #427294 #251992


author: Milan Broz <mbroz@redhat.com> - 2.02.32-3
changelog:
  - clvmd no longer crashes if it sees nodeids over 50.
  - Fix potential deadlock in clvmd thread handling.
    Resolves: #437446 #438434


author: Milan Broz <mbroz@redhat.com> - 2.02.32-4
changelog:
  - Fix vgsplit locking of new VG.
  - Fix another allocation bug with clvmd and large node IDs.
    Resolves: #438434 #438249


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-20
changelog:
  - fix snmpwalk / bulkwalk on TCP scalars (#248342)
  - fix bulkwalk security flaw (#366631)
  - interface names can be longer than 8 characters (#357121)
  - aliased interfaces have correct netmask and broadcast addresses
    (#357121)
  - fix icmpStatsTable (#256041)
  - fix race condition when reading /proc/*/cmdline (#311261)
  - fix hostname logging of snmptrapd (#270941)
  - fix race condition when reading process status (#252216)
  - fix TCP support (#251332)
  - fix reading of agentsecname and iquerysecname from config file
    (#338981, #311761)
  - fix disk statistics of mount points with spaces (#348681)
  - store temporary files to /var/run/snmpd to prevent
    users to modify them and to make selinux happy (#401211)
  - print more meaningful message when interface changes its ifIndex
    (#396141)
  - fix hrDeviceStatus and hrDeviceErrors missing during walk
    (#419511)
  - correctly cut values to 32bits in UCD-DISKIO-MIB, preventing
    "truncating integer value > 32 bits" to appear (#386821)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-23
changelog:
  - add ipIfStatsTable to build
  - make ipv6ScopeZoneIndexTable loading quiet (#433446)
  - make ipAddressPrefixTable loading quiet (#253399 related)
  - fix inetToMediaTable to recover from error when ipv6 kernel module is 
    not present (#431977)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-24.1
changelog:
  - fix buffer overflow in perl module (CVE-2008-2292) (#449897)
  - fix SNMPv3 authentication checks (unknown CVE) (#449897)


author: Joe Orton <jorton@redhat.com> 1:1.4.9-2
changelog:
  - update to 1.4.9 (thanks to Remi Collet, #183359)
  - package /usr/share/pear/.pkgxml (#190252)
  - update to XML_RPC-1.4.8
  - bundle the v3.0 LICENSE file


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.18
changelog:
  - pam_console: always decrement use count (#233581)
  - pam_namespace: fix parsing config file with unknown users (#234513)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.21
changelog:
  - pam_namespace: better document behavior on failure (#237249)
  - pam_unix: split out passwd change to a new helper binary (#236316)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.23
changelog:
  - pam_unix: truncated MD5 passwords in shadow shouldn't match (#219258)
  - pam_limits: add limits.d support (#232700)
  - pam_limits, pam_time, pam_access: add auditing of failed logins (#232993)
  - pam_namespace: expand $HOME even when appended with text (#237163)
    original patch by Ted X. Toth
  - add some default limits for users in realtime group (#240123)
  - CVE-2007-3102 - prevent audit log injection through user name (#243204)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.25
changelog:
  - added and improved translations (#219124)
  - adjusted the default limits for realtime users (#240123)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.26
changelog:
  - removed realtime default limits (#240123) from the package as
    it caused regression on machines with nonexistent realtime group


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.27
changelog:
  - support sha256 and sha512 password hashes (#427389)
  - fixed in operator of pam_succeed_if module (#295151)
  - fixed audit option of pam_tally and pam_tally2 (#328281)
  - do not free putenved pointer in pam_xauth (#402391)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-4
changelog:
  - add pam_tty_audit module (#244352)
  - pam_cracklib: additional optional checks for password quality (#438994)
  - pam_lastlog: display failed login attempts if requested (#438990)
  - pam_unix: do not check new passwords through cracklib (#448860)
  - pam_unix: clear PAM_AUTHTOK item if new password is bad (#443872)
  - comment in the limits.conf manpage that rss limit is ignored (#459624)
  - allow larger entries in pammodutil_get functions (#445355)
  - pam_tally: do not leak fds in tally_check (#457024)
  - pam_loginuid: use correct format when printing uid type (#460263)
  - pam_rhosts_auth: correct test for IP address (#461917)


author: Michael Stauber <mstauber@blueonyx.it> 0.99.6.2-5BX01
changelog:
  - Substituted modified system-auth.pamd for usage of pam_abl to block repeated failed logins
  - Modified post-install and pre-install scripts of RPM to deal with /etc/pam.d/system-auth.rpmnew situations


author: Radek Vokal <rvokal@redhat.com> - 2.6.18-1
changelog:
  - upgrade to upstream 2.6.18
  - initcwnd patch merged
  - bug fix for xfrm monitor
  - alignment fixes for cris
  - documentation corrections


author: Marcela Maslanova <mmaslano@redhat.com> - 2.6.18-7
changelog:
  - [iPv6DoD] fix RFC 4309 Using AES CCM Mode with IPsec ESP
  - change xfrm.h header according to ibm patch
  - Resolves: #441384


author: Thomas Woerner <twoerner@redhat.com> 2.2.39-1
changelog:
  - new version 2.2.39
  - fixed usage of long UTF-8 filenames (#183181)
    Thanks to Andrey for the initial patch.


author: Phil Knirsch <pknirsch@redhat.com> - 0.99.3-6.el5.12
changelog:
  - Reenable autoquirks by default, disable them as soon as we get any quirks.
    Fixes regressions to RHEL-5 GA (#249544, #248159, #251544)
  - Fixed bug in latest autoquirk patch


author: Phil Knirsch <pknirsch@redhat.com> - 0.99.3-6.el5.18
changelog:
  - Added missing check if messagebus is running (#248514)
  - Add /etc/sysconfig/pm-action (#248517)
  - Check for valid options and output error message and usage on error (#251838)
  - Fixed usage for radeontool (#252293)


author: David Zeuthen <davidz@redhat.com> - 0.5.8.1-20.el5_1
changelog:
  - Update for fine-grained suspend/hibernate support
  - Resolves: #236907
  - Add support for IBM's EBus
  - Resolves: #238626
  - Add support for /sys/bus/vio
  - Resolves: #241940
  - Create lock files with predictable permissions (#241032)


author: David Zeuthen <davidz@redhat.com> - 0.5.8.1-22.el5_1
changelog:
  - Report primary videocard as system.hardware.primary_video.vendor and
    system.hardware.primary_video.product
    (backport of upstream commit f0552218bb71daa863a62d9ad578810e9f3e24e7)
  - Pass --quirk-none to pm-{suspend,hibernate} if the property
    power_management.quirk.none is set
    (backport of upstream commit 3f4580dfe7a5abf3acb1aabf58d03a50cf5137fa)
  - Resolves: #236907


author: David Zeuthen <davidz@redhat.com> - 0.5.8.1-23.el5_1
changelog:
  - Leave out F7 suspend/resume quirks for now as these F7 specific quirks
    don't work too well on RHEL5
  - Resolves: #236907


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-7
changelog:
  - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276)
  - fix CVE-2006-2940 - parasitic public keys DoS (#207274)
  - fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
  - fix CVE-2006-4343 - sslv2 client DoS (#206940)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-9
changelog:
  - fix CVE-2007-3108 - side channel attack on private keys (#250581)
  - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309881)
  - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321221)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-10
changelog:
  - compile with -march=z900 on s390 for performance improvements (#250818)
  - make ssl session ID matching strict (#233599)


author: Peter Jones <pjones@redhat.com> - 1.39-8
changelog:
  - Prefer the labels that dosfsutils writes, rather than various other kinds of
    labels on FAT/VFAT
    Related: rhbz#218957


author: Eric Sandeen <esandeen@redhat.com> 1.39-9
changelog:
  - Many coverity-found potential leaks, segfaults, etc (#239354)
  - Fix debugfs segfaults when no fs open (#208416, #209330)
  - Avoid recursive loops in logdump due to symlinks in /dev (#210371)
  - Don't write changes to the backup superblocks by default (#229561)
  - Correct byteswapping for fast symlinks with xattrs (#232663)
  - e2fsck: added sanity check for xattr validation (#230193)


author: Eric Sandeen <esandeen@redhat.com> 1.39-11
changelog:
  - e2fsck: Check all journal blocks for validity (#241222)
  - wrap a couple headers to fix multilib issues (#270441)


author: Eric Sandeen <esandeen@redhat.com> 1.39-13
changelog:
  - New uuidd subpackage for unique time-based UUID generation (#233471)
  - Fix potential uninitialized reference in e2fsck (#428707)


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-7
changelog:
  - Fix service httpd status to return correct code
  Resolves: #232164
  - Update Linda Knippers patch for newrole on serial console
  Resolves: #228102


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-8
changelog:
  - Fix gui componants
  - Fix genhomedircon to use __default__ to get default user and prefix
  Resolves: #237324


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-13
changelog:
  - Add support for selecting a store in semanage
  Resolves: #316011
  - Handle bad options on semodule command line
  - Add newrole support for alternate pam configurations
  Resolves: #336171


author: Don Howard <dhoward@redhat.com> [2.6.18-53.1.13.el5]
changelog:
  - revert to 2.6.18-53.1.6.el5
  - [x86_64] check permissions in vmsplice_to_pipe (Alexander Viro ) [432252] {CVE-2008-0600}


author: Anton Arapov <aarapov@redhat.com> [2.6.18-53.1.14.el5]
changelog:
  - merge from 2.6.18-53.1.13 to 2.6.18-53.1.12
  - [nfs] potential file corruption issue when writing (Jeff Layton ) [432078]
  - [ppc] chrp: fix possible strncmp NULL pointer usage (Vitaly Mayatskikh ) [396821]
  - [isdn] i4l: fix memory overruns (Vitaly Mayatskikh ) [425171]
  - [isdn] fix possible isdn_net buffer overflows (Aristeu Rozanski ) [392151] {CVE-2007-6063}
  - [mm] hugepages: leak due to pagetable page sharing (Larry Woodman ) [431522]
  - [net] NULL dereference in iwl driver (Vitaly Mayatskikh ) [401421] {CVE-2007-5938}
  - [misc] Denial of service with wedged processes (Jerome Marchand ) [221403]
  - [xen] ia64: hvm guest memory range checking (Jarod Wilson ) [408701]


author: Anton Arapov <aarapov@redhat.com> [2.6.18-53.1.15.el5]
changelog:
  - [libata] sata_nv: un-blacklist hitachi drives (David Milburn ) [433617]
  - [libata] sata_nv: may send cmds with duplicate tags (David Milburn ) [433617]
  - [s390] qdio: output queue stall on FCP and net devs (Hans-Joachim Picht ) [412071]
  - [xen] ia64: guest has bad network performance (Tetsu Yamamoto ) [433616]


author: Anton Arapov <aarapov@redhat.com> [2.6.18-53.1.16.el5]
changelog:
  - [misc] fix range check in fault handlers with mremap (Vitaly Mayatskikh ) [428970]
  - [video] neofb: avoid overwriting fb_info fields (Anton Arapov ) [430253]


author: Don Howard <dhoward@redhat.com> [2.6.18-53.1.17.el5]
changelog:
  - [fs] fix race condition in dnotify (Alexander Viro ) [439758] {CVE-2008-1375}
  - [pci] hotplug: PCI Express problems with bad DLLPs (Kei Tokunaga ) [440438]
  - [nfs] stop sillyrenames and unmounts from racing (Steve Dickson ) [440447]
  - [x86] clear df flag for signal handlers (Jason Baron ) [437316] {CVE-2008-1367}
  - [xen] ia64: ftp stress test fixes between HVM/Dom0 (Tetsu Yamamoto ) [427400] {CVE-2008-1619}
  - [xen] ia64: fix ssm_i emulation barrier and vdso pv (Tetsu Yamamoto ) [427400] {CVE-2008-1619}


author: Anton Arapov <aarapov@redhat.com> [2.6.18-53.1.19.el5]
changelog:
  - [xen] check num of segments in block backend driver (Bill Burns ) [378281]
  - [x86_64] update IO-APIC dest field to 8-bit for xAPIC (Dave Anderson ) [442922]
  - Update: [fs] fix race condition in dnotify (Alexander Viro ) [439758] {CVE-2008-1375}
  - Update: [xen] ia64: ftp stress test fixes between HVM/Dom0 (Tetsu Yamamoto ) [427400] {CVE-2008-1619}


author: Anton Arapov <aarapov@redhat.com> [2.6.18-53.1.21.el5]
changelog:
  - [misc] infinite loop in highres timers (Michal Schmidt ) [440001]
  - [video] PWC driver DoS (Pete Zaitcev ) [308521]
  - [x86_64] fix unprivileged crash on %cs corruption (Jarod Wilson ) [439787]
  - [net] ESP: ensure IV is in linear part of the skb (Thomas Graf ) [427247]
  - [cpufreq] booting with maxcpus=1 panics (Doug Chapman ) [429516]
  - [net] sunrpc: lockd recovery is broken (Steve Dickson ) [445360]
  - [cpufreq] don't take sem in cpufreq_quick_get (Doug Chapman ) [400821]
  - [cpufreq] remove hotplug cpu cruft (Doug Chapman ) [400821]
  - [cpufreq] governor: use new rwsem locking in work cb (Doug Chapman ) [400821]
  - [cpufreq] ondemand governor restructure the work cb (Doug Chapman ) [400821]
  - [cpufreq] rewrite lock to eliminate hotplug issues (Doug Chapman ) [400821]


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-18
changelog:
  - fix syntax error in kadmin init script (#373011,#381011)
  - turn off content/size/date verification on krb5.conf (#329771)
  - fix storage of delegated krb5 credentials when they've been wrapped up in
    spnego (#319351)
  - return a delegated credential handle even if the application didn't pass a
    location to store the flags which would be used to indicate that credentials
    were delegated (#314651)
  - in login, allow PAM to interact with the user when they've been strongly
    authenticated (#309951)
  - signal PAM when we're changing an expired password that it's an expired
    password, so that when cracklib flags a password as being weak it's treated
    as an error even if we're running as root (#308131)
  - set the key expiration time in an AS-REP using the sooner of the client's
    entry's key expiration time and the entry's expiration time, instead of
    just the entry's expiration time (#250257)
  - in ftp, don't lose track of a client socket when a server-side error
    causes a download to fail (#248618)
  - in ftp, fix runique when mget is used (#247633)
  - add the snippet documenting the kdc_tcp_ports option to kdc.conf's man
    page, using text taken from the administrator's guide (#282191)
  - in kpasswd, when reading the client's principal name from the ccache fails
    for any reason, fall back to the user's name (#248631)
  - init script cleanups (Michal Marciniszyn, #242500)
  - tweak the telnet man page to refer to the telnet rlogin escape character
    as such instead of rereferring to it simly as the escape character or the
    telnet escape character (#247741)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-19
changelog:
  - backport from 1.6.3 to initialize a library-allocated get_init_creds_opt
    structure the same way we would one which was allocated by the calling
    application, to restore kinit's traditional behavior of doing a password
    change right when it detects an expired password (#413051)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-20
changelog:
  - allocate space for the relative path including the nul-terminator (Jose
    Plans, #426085)
  - fix a couple of spots where a file context wouldn't be freed


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-21
changelog:
  - add conditional logic to allow building only the krb5-server-ldap subpackage
    (#427790)
  - use the right sequence numbers when generating password-set/change requests
    for kpasswd servers after the first one (#427789)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-22
changelog:
  - add patch to fall back to TCP kpasswd servers for kdc-unreachable,
    can't-resolve-server, and response-too-big errors (#392631)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-23
changelog:
  - backport changes from 1.6.3 which allow callers of the the sendto-kdc
    functions to override the failover behavior on a per-response basis, and
    default to failing over on service-unavailable errors (#230384)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-24
changelog:
  - kdb_ldap: add patch to recognize "nsAccountLock: TRUE" as indicating that
    an entry should have the DISALLOW_ALL_TIX flag set (read only), for better
    interop with Fedora, Netscape, Red Hat Directory Server (Simo Sorce, #431784)


author: Michael Stauber <mstauber@solarspeed.net>
changelog:
  - [5.2-S4:] /etc/init.d/functions.sol updated for deprecated initlog stuff from CentOS-5.2
  - Added requires for centos-release and a post-install delete for CentOS YUM repos


author: Michael Stauber <mstauber@solarspeed.net>
changelog:
  - [5.2-S4b:] Renamed /usr/sausalito/sbin/crond_checker.sh to *.pl and extended to ignore stopped VPS's


author: Michael Stauber <mstauber@solarspeed.net>
changelog:
  - [5.3-S4a:] Updated build for 6105R on CentOS5.3
  - Updated aventurine-conf/usr/sausalito/sbin/crond_checker.pl again.


author: Tim Lauridsen <timlau@fedoraproject.org> - 0.2.1-4
changelog:
  - Added some logic to get the right python-setuptools buildrequeres
  - based on the fedora version, to make the same spec file useful in
  - all fedora releases.


author: Tim Lauridsen <timlau@fedoraproject.org> - 0.2.2-1
changelog:
  - Updated to release 0.2.2
  - removed patch to to fix problems with out commented lines, included in upstream source


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.14
changelog:
  - properly include /var/log/faillog and tallylog as ghosts
    and create them in post script (#209646)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.17
changelog:
  - pam_namespace: unmount poly dir for override users (#229689)
  - pam_namespace: use raw context for poly dir name (#227345)
  - pam_namespace: truncate long poly dir name (append hash) (#230120)


author: John (J5) Palmieri <johnp@redhat.com> - 1.0.0-1
changelog:
  - update to D-Bus 1.0.0 "Blue Bird"
  - build tests, asserts and verbose mode off
  - patch so we are not fatal when checks fail


author: Ray Strode <rstrode@redhat.com> - 1.0.0-4
changelog:
  Resolves: #217721
  - Don't die on SIGHUP when rereading config file, if it's no
    longer compatible with the version of the bus running


author: Radek Vokál <rvokal@redhat.com> - 1.60-76
changelog:
  - make sctp quiet on systems without sctp and also add description to netstat.8
  - fixed arp unaligned access error
  - netplugd init script fixed
  - Resolves: #242916, #220438, #229232


author: Harald Hoyer <harald@redhat.com> - 095-14.7
changelog:
  - added RPM_OPT_FLAGS and pie to static build flags
  - Resolves: rhbz#233956, rhbz#233307, rhbz#226997, rhbz#236242
  - Resolves: rhbz#217917, rhbz#231990


author: Harald Hoyer <harald@redhat.com> - 095-14.8
changelog:
  - removed pie link flag from static build flags
  - Resolves: rhbz#233956, rhbz#233307, rhbz#226997, rhbz#236242
  - Resolves: rhbz#217917, rhbz#231990


author: Petr Machata <pmachata@redhat.com> 1:3.80-11
changelog:
  - Applied (five years old) patch from Jonathan Kamens to allow make to
    handle several pattern-specific variables (#52962).

    The patch was changed so that it forces make to process pattern
    specific variables in the same order as they appear in file.
    (Upstream make behaves this way, too.)  This is change from old make
    behavior, which processed the variables in reverse order.  In case
    you used only x=a assignments, this had the effect of using the
    first pattern specific variable that matched.  For x+=a this just
    doesn't work, and it produces absolutely nonintuitive results.

  - (It would be great if make's target-specific variables were handled
    the same way as pattern-specific ones, just without the pattern
    component.  However current handling is documented and considered a
    feature.)


author: Petr Machata <pmachata@redhat.com> - 1:3.81-1
changelog:
  - Upstream 3.81:
    - Contains several backwards incompatible changes.  See NEWS inside
      the source package to find out more.
  - memory patch and error reporting patch were ported to this version.


author: Petr Rockai <prockai@redhat.com> - 0.52.2-4
changelog:
  - Apply patch by Bill Nottingham (thanks) to improve scrollbar appearance
    (BR 174771).
  - Add -10.el5 to snack's Provides: line (just in case).


author: Petr Rockai <prockai@redhat.com> - 0.52.2-5
changelog:
  - Fix a crash in checkboxtree.c where pressing pgup/pgdown
    on a checkboxtree with less items than its height would
    cause segmentation violation. Consult BR 165347.


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.2-7
changelog:
  - fix checkboxtree positioning
  - make textbox with scrollbar focusable (#83203)
  - turn off cursor when entry terminated form (#86074)
  - handle listbox and checkboxtree focus better (#186053)
  - make default colors more friendly to 8-color terminals (#187545)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.2-9
changelog:
  - fix screen corruption when half of double width character is overwritten
    (#137957) 
  - fix double width character handling in checkboxtree and listbox


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc14-1
changelog:
  - asr.c: fixed Adaptec HostRAID DDF1 metadata discovery (bz#211016)
  - ddf1_crc.c: added crc() routine to avoid linking to zlib alltogether,
                because Ubuntu had problems with this
  - dropped zlib build requirement


author: Peter Jones <pjones@redhat.com> - 1.0.0.rc13-2
changelog:
  - We didn't change the API or ABI, so don't change the version number
    because it'll change the SONAME, which means we have to needlessly rebuild
    other packages.


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc13-3
changelog:
  - Fix dmraid map names
  - Resolves: #211012
  - Fix unaligned access messages
    Resolves: #210361, #211150
  - Fix jmicron name parsing (bz#219058)


author: Ian Kent <ikent@redhat.com> - 1.0.0.rc13-6
changelog:
  - Bug 381511: dmraid needs to generate UUIDs for lib device-mapper
    - add patch to set UUID.
    - add "DMRAID-" prefix to dmraid UUID string.
  - Bug 381501: dmraid needs to activate device-mapper mirror resynchronization error handling
  - Resolves: rhbz#381511 rhbz#381501


author: Peter Jones <pjones@redhat.com> - 1.0.0.rc13-8
changelog:
  - Revert fix for 381501, since the RHEL kernel doesn't currently support
    the feature.
    Related: rhbz#381501


author: Ian Kent <pjones@redhat.com> - 1.0.0.rc13-9
changelog:
  - Bug 427550: dmraid segfaults on boot resulting in broken mirror
    - patch to fix SEGV when requesting activation of invalid raid set.
    the feature.
    Related: rhbz#427550


author: Karel Zak <kzak@redhat.com> 2.13-0.46
changelog:
  - fix #324471 - CVE-2007-5191 util-linux (u)mount doesn't drop privileges
                 properly when calling helpers


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.27
changelog:
  - Make naming of Driver Update Program grub entry more friendly to RHEL users than the previous entries were.
  - Make the resultant grub entry default bootable.
  - Related: #224076.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.31
changelog:
  - Overhaul logic for bootpath driver handling to work with new-kernel-pkg
    grubby better in keeping with their design.
  - Resolves: #252210.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.32
changelog:
  - Update fix to pipe issue and use same logic in other place we call "head -n 1"
  - just in case it would ever also cause similarly noisy output.
  - Resolves: #249537.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.34
changelog:
  - Update to fix inter-module symbol references on 64-bit platforms.
  - (fix wasn't properly in the build yesterday).
  - Resolves: #247986.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.37
changelog:
  - Sort modules alphabetically.
  - Resolves: #249449.
  - Check override of modules.
  - Resolves: #253512.
  - Fix "--dry-run" option.
  - Resolves: #254141.


author: Joe Orton <jorton@redhat.com> 1.3.2-2
changelog:
  - update to 1.3.2
  - fix Ruby sitelibdir (Garrick Staples, #191611)
  - own /etc/subversion (#189071)
  - update to psvn.el r19857


author: Mihai Ibanescu <misa@redhat.com> - 2.4.3-15
changelog:
  - Fixed bug #201434 (distutils.sysconfig is confused by the change to make
    python-devel multilib friendly)


author: Kai Engert <kengert@redhat.com> - 3.11.5-4
changelog:
  - Apply upstream patch for mozilla.org bug 51429 in order to
    fix an issue with smartcard login (rhbz#212077).


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 5.1.2-1
changelog:
  - update to 5.1.2
  - replace readline patch (old issue go away and a new appears).
  - apply well-known "libtool-rpath-workaround" (see in Internet ;-))
    to avoid use -rpath for linking


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 5.1.4-1
changelog:
  - update to upstream php 5.1.4
  - an easier way to auto-detect php-api version
  - specify extdir and apiver explicitly, because FE build system
    is not able to auto-detect it now.


author: Johnny Hughes <johnny@centos.org> 5.1.6-15
changelog:
  - rolled in security updates
  - added freetds build requirement and php-mssql
  - added --with-libdir=%{_lib} to handle 64bit arches properly
  - add patch for mssql (rh bug #244736), a backport of some php-5.2 changes


author: Mike A. Harris <mharris@redhat.com> 1.0.3-2.fc6
changelog:
  - Added libX11-nls-indic-locales-bug185376.patch to add support for various
    indic locales which have now been committed upstream (#185376)


author: Adam Jackson <ajax@redhat.com> 1.0.3-8.el5
changelog:
  - libX11-GB18030.patch: Fix the previous patch to unbreak input for non-UTF8
    locales (BIG5, etc.) (#220040)


author: Hisao SHIBUYA <shibuya@alpha.or.jp> 1.1.1-21BQ3
changelog:
  - modified am_mem.pl to support kernel 2.6 by Rickard Osser.
  - remove Cobalt hardware dependency script such as am_temp.pl and am_fans.pl.


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-3
changelog:
  - fix CAN-2005-0109 - use constant time/memory access mod_exp
    so bits of private key aren't leaked by cache eviction (#157631)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-4
changelog:
  - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
    disables the countermeasure against man in the middle attack in SSLv2
    (#169863)
  - more fixes for constant time/memory access for DSA signature algorithm
  - updated ICA engine patch


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-6
changelog:
  - fix a few rpmlint warnings
  - fix build if 'rand' or 'passwd' in buildroot path (#178782)
  - make libica build in brew


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-7
changelog:
  - fixed sha1 on 2gb boundary (patch from upstream) (#189492)
  - enable compilation of updated assembler code on IA64 (#180091)
  - correct verification of CA certs in SSL (#201005)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - resize the supplemental GID array when it gets too large and an array size
    limit isn't set (Gavin Romig-Koch, #246541)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-4
changelog:
  - add dbus,radvd,tomcat,radiusd,news,mailman to the default list of
    nss_initgroups_ignoreusers (#243753)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-6
changelog:
  - suppress password-expired errors encountered during referral chases during
    modify requests (#335661)
  - interpret server-supplied policy controls when chasing referrals, so that
    we don't give up when following a referral for a password change after
    reset (#335661)
  - don't attempt to change the password using ldap_modify if the password
    change mode is "exop_send_old" (we already didn't for "exop") (#364501)
  - don't drop the supplied password if the directory server indicates that
    the password needs to be changed because it's just been reset: we may need
    it to chase a referral later (#335661)
  - correctly detect libresolv and build a URI using discovered settings, so that
    server discovery can work again (#254172)
  - honor the "port" setting again by correctly detecting when a URI doesn't
    already specify one (#326351)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-7
changelog:
  - add keyutils-libs-devel and libselinux-devel as a buildrequires: in order to
    static link with newer Kerberos (#427370)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-11
changelog:
  - backport changes to group parsing from version 254 to fix heap corruption
    when parsing nested groups (#444031)


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-14.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_10
  - Resolves: bz #226791, #247443, #249088, #251346, #335021, #354661, #355961


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-15.el5
changelog:
  - All non-static path_prio callouts are now just symlinks to the static
    ones
  - Resolves: bz #355961


author: Jakub Jelinek <jakub@redhat.com> 4.1.2-38.el5
changelog:
  - update from gcc-4_1-branch (-r126008:130387)
    - PRs middle-end/34030, rtl-optimization/28062, rtl-optimization/33822,
  	bootstrap/33418, c++/31941, c++/32113, java/31842, target/33256,
  	tree-optimization/33142, c++/32112, c++/17763, rtl-optimization/32450,
  	target/31331, target/32641, target/32660, tree-optimization/32681,
  	boehm-gc/21940, boehm-gc/21942, target/28307, target/32506,
  	tree-optimization/31966, tree-optimization/32533
    - fix if-conversion to avoid introducing races into threaded code
      (Ian Lance Taylor, #391731)
  - don't unnecessarily create a stack frame in leaf functions e.g. on ppc with
    -fpic or -maltivec (Nathan Sidwell, Daniel Jacobowitz, #369541,
    PRs target/28966, target/29248)
  - compile libstdc++-4*.s390.rpm DSO with -march=z900, as RHEL5 only supports
    those CPUs.  libstdc++-devel*.s390.rpm should still work even for older
    CPUs (#298801)
  - add SSE5 support (Michael Meissner, Dwarakanath Rajagopal, Tony Linthicum,
    Uros Bizjak, #252998)
  - java_mark_cni_decl_local fix (Andrew Haley, #414411, PR java/27643)
  - i386 <= 0xNNffffffffLL comparison optimization (PR target/29978)
  - fix Fortran alternate returns with dummy procedure (Paul Thomas, #399531,
    PR fortran/31483)
  - OpenMP fixes (PR c++/33890, c/34506, c++/34513)
  - don't hold a global guard mutex across whole local static initialization
    (Doug Kwan, #426846)
  - fix OpenMP handling of global vars privatized in orphaned constructs
    with #pragma omp parallel inside them
  - -frepo fixes (#411741, PRs c++/34178, c++/34340)
  - fix dynamic_cast<C &> in templates (PR c++/34364)
  - fix error diagnostics involving ABS_EXPR (PR c++/34394)
  - two ctor preevaluation fixes (Olivier Hainque,
    Eric Botcazou, #407281)
  - consider static data members and static member functions in anon ns
    classes to be external for C++ linkage type handling (PR c++/34213)
  - handle OBJ_TYPE_REF in C++ diagnostics (PR c++/34275)
  - backport a bunch of bugfixes from GCC trunk
    - PRs c++/29225, c++/30293, c++/30294, c++/30988, c++/32241,
  	c++/32384, c++/33501, c++/33516, c++/33616, c++/33836,
  	c++/33842, c++/33844, c++/33962, c++/34089,
  	c/34146, debug/33537, middle-end/23848, middle-end/34070,
  	testsuite/33978, tree-optimization/33723
  - fix abs optimization (Richard Guenther, #394271, PR middle-end/34130)
  - fortran lbound/ubound fix (Paul Thomas, #391151, PR fortran/29712)
  - generate proper fortran debuginfo for assumed-size, assumed-shape
    and deferred arrays (#364001)
  - fix ppc64 unwinding of cr2 register if vdso=0
  - only allow __label__ at the start of a block (PR c++/32121)
  - disable -fipa-type-escape by default (PR tree-optimization/33136)
  - VLA handling fix (PR c/33238, PR c/27301)
  - disable TER of pure and const function calls except for __builtin_expect
    (PR tree-optimization/33619)
  - fix parsing of C++ function-like cast in template argument where cast's
    argument uses greater-than operator (PR c++/33744)
  - ignore always_inline attribute on redefined extern inline
    functions (Jan Hubicka, #329671, PR tree-optimization/33763)
  - add support for Fortran int conversion intrinsics (Francois-Xavier
    Coudert, #317051)
  - don't drop DECL_BUILT_IN_CLASS when defining a builtin function
  - print virtual inline backtrace in some diagnostic messages to help
    locate bugs reported with -D_FORTIFY_SOURCE{,=2}
  - add support for artificial, error and warning attributes
  - fix ICE with set_rhs allowing non-gimple (Roger Sayle, #247407,
    PR tree-optimization/32694)
  - fix ICE on Fortran interface-body declaring current subroutine name
    (Paul Thomas, #300851, PR fortran/20880)
  - don't ignore throw specification of function types in type hashing
    (PR c++/33506)
  - fix ICE on __builtin_mem*_chk if it couldn't be folded until
    expand time and at that point it can avoid a call (PR middle-end/33423)
  - handle the upcoming POSIX 'm' *scanf allocation modifier in
    GCC format checking, fix up some details about %as/%aS/%a[
  - backport __builtin_va_arg_pack () and __builtin_va_arg_pack_len () support
  - fix Fortran error recovery with DATA (Jerry DeLisle, #281331,
    PR fortran/27954)
  - make sure __builtin_{,v}{,f}{print,scan}f, __builtin_{,f}printf_unlocked
    and __builtin___{,v}{,f}printf_chk can throw
  - handle __*_chk builtins without __builtin_ in the name as anticipated in
    C++
  - fix libmudflap-devel multilib conflict on ppc/ppc64 and sparc/sparc64
    (#270281)
  - backport __attribute__((__gnu_inline__)) support for C++
  - fix ppc/ppc64 __sync_* builtins with aligned 8 or 16-bit values
  - don't set executable flag on .note.GNU-stack on ppc64/ia64 even
    when trampolines are used - trampolines on those architectures
    don't need executable stack
  - fix ppc32 libgcc.a(tramp.o), so that binaries using trampolines
    aren't forced to use bss PLT
  - fix a fortran charlen sharing bug (#253102)
  - fix ICE with X|~X or X^~X with vectors (PR middle-end/32912)
  - nuke bits/stdc++.gch directories from libstdc++-devel (#253304)
  - fix fortran Tx format handling (Jerry DeLisle, #252152,
    PR libgfortran/32678)
  - don't NRV optimize fields inside anonymous unions (PR c++/32992)
  - fortran debuginfo improvements for constant bound arrays (#248541,
    PR fortran/22244)
  - backport ARM fixes from trunk (#246800)
    - PRs middle-end/24998, target/28516, target/30486
  - fix simplify_plus_minus with ppc{,64} power6 tuning (regression from
    4.1.1-52.el5.2, #247256)
  - fix OpenMP handling of Fortran POINTER non-array vars (PR fortran/32550)


author: Jakub Jelinek <jakub@redhat.com> 4.1.2-39.el5
changelog:
  - generate DW_TAG_class_type for C++ and Java classes in DWARF3
    debuginfo (#371831, PR debug/7081)


author: Jakub Jelinek <jakub@redhat.com> 4.1.2-41.el5
changelog:
  - allow non-aggregate extern "Java" types in C++ placement new
    (PR c++/34829, Tom Tromey)
  - make sure no errors are reported during tentative parsing of
    pseudo-destructors (PR c++/35138)
  - fix i386 <= 0xNNffffffffLL comparison optimization (Michael Matz,
    PR target/35264)


author: Jakub Jelinek <jakub@redhat.com> 4.1.2-42.el5
changelog:
  - include bmmintrin.h and mmintrin-common.h headers (#252998)
  - fix PCH failure if a precompiled header is included more than
    once (#251682, PR pch/13675)
  - BuildRequire xulrunner-devel rather than firefox-devel


author: Petr Machata <pmachata@redhat.com> - 2006m-2
changelog:
  - Proposed upstream patch (#210058)
    - Jordan will switch to winter time on October 27, not September 29
    - Brazil's DST this year is the first Sunday in November to the last
      Sunday in February.  (Thanks to Frederico A. C. Neves.)
    - ISO 3166 codes for Serbia and Montenegro, zone Europe/Podgorica
    - Commentary and past timestamps changes


author: Petr Machata <pmachata@redhat.com> - 2007a-1
changelog:
  - Upstream 2007a:
    - Cuba has ended its three years of permanent DST.
    - Western Australia DST trial changes
    - Updates to Bahamas, they will be in sync with 2007 US DST change
  - Resolves: #228732


author: Petr Machata <pmachata@redhat.com> - 2007c-1
changelog:
  - Upstream 2007c
    - Pulaski County, Indiana, switched back to eastern time.
    - Turkey switches at 01:00 standard time, not at 01:00 UTC.
  - Upstream 2007b
    - Changes to the commentary in "leapseconds".
  - Resolves: #230089


author: Petr Machata <pmachata@redhat.com> - 2007d-1
changelog:
  - Upstream 2007d
    - Mongolia has abolished DST.
    - Turkey will use EU rules this year, changing at 01:00 UTC rather
      than 01:00 standard time.
    - Cuba observed DST starting Sunday.
    - Resolute, Nunavut switched from Central to Eastern time last
      November.


author: Petr Machata <pmachata@redhat.com> - 2007f-1
changelog:
  - Upstream 2007f
    - New Zealand is extending DST, starting later this year.
    - Haiti no longer observes DST.
    - The Turks and Caicos switch at 02:00, not at 00:00, and have
      adopted US DST rules.
  - Upstream 2007e
    - Syria switched to summer time at Mar/29.
    - Honduras will not enter DST this year.
  - Resolves: #240786


author: Petr Machata <pmachata@redhat.com> - 2007g-1
changelog:
  - Upstream 2007g
    - Egypt switches the September 7, not September 28
    - Daviess, Dubous, Knox, Martin, and Pike Counties, Indiana, switch
      from central to eastern time in November
    - South Australia, Tasmania, Victoria, and New South Wales are
      changing their DST rules effective next year
    - Several Antarctic station's rules weren't properly updated to account
      for this year's change to the New Zealand daylight saving rules
  - Venezuela timezone changes from -4:00 to -4:30 at 24 September
  - Resolves: #296801
  - Resolves: #266861


author: Petr Machata <pmachata@redhat.com> - 2007h-1
changelog:
  - Upstream 2007h
    - Brazil will observe DST from 2007-10-14 to 2008-02-17
    - Egypt and Gaza switched earlier than we expected
    - Iran will resume DST next year
    - Venezuela is scheduled to change TZ to -4:30 on January 1
  - Resolves: #296801
  - Resolves: #266861


author: Petr Machata <pmachata@redhat.com> - 2007j-1
changelog:
  - Upstream 2007j
    - New links America/St_Barthelemy and America/Marigot
    - Venezuela is changing their clocks on December 9 at 03:00
  - Upstream 2007i
    - Syria DST will take place at Midnight between Thursday and Friday.
    - Cuba will end DST on the last Sunday of October.
  - Update tst-timezone.c from glibc CVS
  - Resolves: #410101


author: Karanbir Singh <kbsingh@centos.org> - 8.0.45-22.el5.centos
changelog:
  - Make dist.sh recognise CentOS and report the right el version (#2064)
  - Roll in CentOS Branding in SPEC file


author: Michael Stauber <mstauber@solarspeed.net> 0.5.1-2009AV01
changelog:
  - Modified rules/defines.mk as it reported HTTPD_USER wrong.
  - Updated rules/module.mk for better svn ignores


author: Karanbir Singh <kbsingh@centos.org> - 5.2.el5.centos
changelog:
  - add centos-release-disableContrib.patch
  - add SOURCES/centos-release-Typo.patch
  - Build for CentOS-5.1


author: Ivana Varekova <varekova@redhat.com> - 7.0.2-1
changelog:
  - Resolves: #223138 
    update to 7.0.2
  - Resolves: #243307
    problem with empty debuginfo package
  - Resolves: #369951
    too much open files
  - Resolves: #229760
    add hotplug CPU support
  - Resolves: #236934
    sar command exits with "realloc: Success" 
    see 7.0.0-7.0.1 changelog
  - Resolves: #177540
    add option to iostat which emables it to show 
    the registered device names for device mapper devices


author: Ivana Varekova <varekova@redhat.com> - 7.0.2-2
changelog:
  - Resolves: #451626
    switch off SMP_RACE option
  - Resolves: #458811
    fix -I problems on ia64 machine
  - Resolves: #369981
    add two extended nfs fields


author: Tomas Mraz <tmraz@redhat.com> - 5.3.17-1
changelog:
  - remove obsolete pam_krb5afs support (#250704)
  - add support for pam_access (#251360)
  - update translations


author: Tomas Mraz <tmraz@redhat.com> - 5.3.19-1
changelog:
  - support new sha256 and sha512 password hash algorithms
  - add support for pam_mkhomedir (#212790)
  - do not crash in authconfig --help (#237956) - thanks to Andy Shevchenko for
    the idea how to fix that
  - setup password hash algorithm in /etc/login.defs (#218652)
  - update translations


author: Harald Hoyer <harald@redhat.com> 2.2.3-5
changelog:
  - added modified patch from Michael E. Brown @ Dell, to also 
    read all /usr/share/hwdata/pci.ids.d/*.ids files (rhbz#195327)
  - Resolves: rhbz#195327


author: Patrick Baltz <patrick.baltz@sun.com>
changelog:
  - make umount_and_raid function of make_raid.sh more robust
    try to umount 10 times before giving up


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.49
changelog:
  - update ldaps protocol support patch (bz 185443).
  - local variable initialization error.
  - Related: rhbz#185443


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.50
changelog:
  - update master map lexer to also allow "." in macro name (bz 243645).
  - add missing "multi" map support (bz 241717).
  - Resolves: rhbz#243645 rhbz#241717


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.53
changelog:
  - change random selection option name to be consistent with autofs v4 (bz 227604).
  - Related: rhbz#227604


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.55.el5.1
changelog:
  - Bug 410041: CVE-2007-5964 autofs defaults don't restrict suid in /net
    - use mount option "nosuid" for "-hosts" map unless "suid" is explicily specified.
  - Related: rhbz#410041


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.55.el5.2
changelog:
  - Bug 426219: CVE-2007-6285 autofs default doesn't set nodev in /net [rhel-5.1.z]
    - use mount option "nodev" for "-hosts" map unless "dev" is explicily specified.
  - Related: rhbz#426219


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.55.el5.3
changelog:
  - Bug 429163 Processed: Reloading autofs map incorrectly removes all map entries
  - add patches to prevent direct map being incorrectly marked stale.
  - Resolves: rhbz#429163


author: Petr Machata <pmachata@redhat.com> - 2.5.4a-38
changelog:
  - Caught the real cause of #183098.  It failed because the parser
    built with `flex -f' *sometimes* made it into the final package, and
    -f assumes seven-bit tables.  Solution has two steps.  Move `make
    bigcheck' to `%check' part, where it belongs anyway, so that flexes
    built during `make bigcheck' don't overwrite original build.  And
    change makefile so that `make bigcheck' will *always* execute *all*
    check commands.


author: Petr Machata <pmachata@redhat.com> - 2.5.4a-39
changelog:
  - fileno is defined in posix standard, so adding #define _POSIX_SOURCE
    to compile without warnings (#195687)
  - dropping 183098 test, since the original bug was already resolved


author: Miroslav Lichvar <mlichvar@redhat.com> 3.0.0-1
changelog:
  - update to release 3.0.0
  - spec cleanup
  - drop cfgpath patch
  - fix bad display of frames on linux console (#140698)


author: Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-10
changelog:
  - Fix crasher https://bugs.freedesktop.org/show_bug.cgi?id=6841
  - Add freetype-2.2.1-memcpy-fix.patch


author: Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-15
changelog:
  - Fix rendering issue with some Asian fonts.
  - Add freetype-2.2.1-fix-get-orientation.patch
  - Resolves: #207261


author: Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-16
changelog:
  - Backport binary-search fixes from HEAD
  - Add freetype-2.2.1-ttcmap.patch
  - Resolves: #208734, #218326


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2-3
changelog:
  - fix manycast support in ntpdate (#194329)
  - reply to manycast requests with null refid
  - enable mlockall (#195617)
  - correct threshold value in ntpdate manpage


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-6.el5
changelog:
  - fix broadcast client to accept broadcasts on 255.255.255.255 (#226958)
  - compile with crypto support on 64bit architectures (#239580)
  - add ncurses-devel to buildrequires (#239580)
  - exit with nonzero code if ntpd -q did not set clock (#240134)
  - fix return codes in init script (#240118)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-8.el5
changelog:
  - avoid use of uninitialized floating-point values in clock_select (#250838)
  - generate man pages from html source, include config man pages (#307271)
  - add note about paths and exit codes to ntpd man page (#242925, #246568)
  - add section about exit codes to ntpd man page (#319591)
  - always return 0 in scriptlets


author: Martin Bacovsky <mbacovsky@redhat.com> 1.86-1
changelog:
  - fix userpasswd - Query window pops up three times if cancelling passwd (#202924)
  - Serbian latin script translation added (#203003)


author: Miloslav Trmac <mitr@redhat.com> - 1.88-3.el5.1
changelog:
  - Preserve application exit code
    Resolves: #210893
  - Don't use PAM data after it was freed
    Resolves: #211188


author: Michael Stauber <mstauber@solarspeed.net> 0.5.1-2008AV07
changelog:
  - Ajax and JS based password strength checker implemented directly through uifc calls.
  - Newly added files for that:
  - web/libJs/ajax_lib.js
  - web/uifc/check_password.php
  - Modified the following pages for that:
  - libPhp/uifc/FormFieldBuilder.php
  - libPhp/uifc/Password.php
  - libPhp/uifc/Page.php
  - Some more include fixes for PHP5


author: Peter Jones <pjones@redhat.com> - 0.97-13.1
changelog:
  - Fix handling of CCISS devices when installing to the MBR.
    Resolves: rhbz#429187
  - Allow longer kernel command lines
    Resolves: rhbz#336341


author: Michael Stauber <mstauber@solarspeed.net> 0.5.1-2008AV08
changelog:
  - Brian found the faulty code that cause missing pagedBlock elements.
  - Found another piece of faulty code that cause missing pagedBlock elements in same code:
  - Updated libPhp/uifc/PagedBlock.php to change references to a straight pointer.


author: Michael Stauber <mstauber@solarspeed.net> 0.5.1-2009AV09
changelog:
  - Added missing TD style for TextLists in libPhp/uifc/MultiChoice.php
  - Modified libPhp/uifc/ScrollList.php to fix CSS issue with formField-1.


author: Michael Stauber <mstauber@solarspeed.net> 0.5.1-2009AV10
changelog:
  - Updated libPhp/uifc/VerticalCompositeFormField.php to add 12px font size to style.
  - This fixes a display problem that - so far - only exists on Aventurin{e}.


author: Michael Stauber <mstauber@solarspeed.net> 0.5.1-2009AV11
changelog:
  - Updated libPhp/uifc/VerticalCompositeFormField.php to remove blank lines at end of file. They cause errors.


author: Denys Vlasenko <dvlasenk@redhat.com> - 4.5.18-2
changelog:
  - Fix "strace -s N sets string size to N+1" problem (patch by Jeff Bastian)
  - Resolves: RHBZ #467776


author: Denys Vlasenko <dvlasenk@redhat.com> - 4.5.18-2.el5.1
changelog:
  - Fix the case where we did not nicely report that traced process
    disappeared (SIGKILL etc) while we were examining its state.
  - Resolves: RHBZ #472053


author: Denys Vlasenko <dvlasenk@redhat.com> - 4.5.18-3
changelog:
  - Partial sync up with upsteam #1: whitespace changes
  - Partial sync up with upsteam #2: trivial changes (comments etc)
  - Partial sync up with upsteam #3: flock reporting, fix network ops selection
  - Resolves: RHBZ #471169
  - Partial sync up with upsteam #4: support -D option, blackfin cpu support
  - Partial sync up with upsteam #5: update SIGKILL detection machinery
  - Resolves: RHBZ #472053
  - Improve fairness - do not allow a few threads to usurp strace's attention
  - Resolves: RHBZ #478419


author: Denys Vlasenko <dvlasenk@redhat.com> - 4.5.18-4
changelog:
  - Restore ^C handling inadvertently disabled in fairness fix
  - Note: previous version (4.5.18-3) includes fixes for these bugs:
  - Resolves: RHBZ #471169 (incorrent formatting of fcntl64() on32/64 system)
  - Resolves: RHBZ #472053 (SIGKILL might be improperly traced)


author: Denys Vlasenko <dvlasenk@redhat.com> - 4.5.18-5
changelog:
  - Remove unneeded changes on QE request
  - Note: still includes fixes for these bugs:
  - Resolves: RHBZ #471169 (incorrent formatting of fcntl64() on32/64 system)
  - Resolves: RHBZ #472053 (SIGKILL might be improperly traced)
  - Resolves: RHBZ #478419 (Improve fairness)


author: Bill Nottingham <notting@redhat.com> 8.45.10.EL-1
changelog:
  - add a step to rename any temporarily renamed devices (#208740, #204803, #214817)
  - rc.sysinit: fix reversed dmraid test (#216490)
  - translation updates (#216097)
  - don't automatically reload modules on module reomvals (#211474)
  - don't unmount network file systems (#217625)


author: Bill Nottingham <notting@redhat.com> 8.45.16.EL-1
changelog:
  - init.d/network: add support for VLAN_PLUS_VID_NO_PAD vlans (#229285)
  - network-functions: fix logic error in install_bonding_driver (#229643)
  - add init script for netconsole (#223742)
  - ifup-eth: set 'primary' later for bonding devices (#236897, <agospoda@redhat.com>)
  - init.d/halt: don't shut down the network in kexec (#223932, <mchristi@redhat.com>)


author: Bill Nottingham <notting@redhat.com>, Harald Hoyer <harald@redhat.com> 8.45.18.EL-1
changelog:
  - IKE_DHGROUP is now an option for IPsec configuration files, which allows
  to set the dh group used during PHASE 1 of IPsec SA (#251506)
  - arp_ip_target can now be used with a comma seperated IP list in BONDING_OPTS (#288151)
  - genhostid now generates only 32 bit hostids on 64 bit systems (#306811)
  - the check for the need of remounting the root file system read-writable
  is now refined (#334171)
  - quoted SUBCHANNELS and HWADDR options in network configuration files are
  now handled properly (#351291)
  - support for resuming from an encrypted swap has been added (#360071)
  - rc.sysinit now executes the proper configuration tools, if /.unconfigured
  is present (#426372)
  - Resolves: rhbz#251506 rhbz#288151 rhbz#306811 rhbz#334171 rhbz#351291 rhbz#360071 rhbz#426372


author: Bill Nottingham <notting@redhat.com> 8.45.19.EL-1
changelog:
  - also skip network shutdown if there is a '_rnetdev' root device (part of #435358, <pjones@redhat.com>)


author: Miloslav Trmac <mitr@redhat.com> - 0.16-4
changelog:
  - Drop Obsoletes: openssl-python, openssl-python was last shipped in RHL 7.1
  - Fix interpreter paths in demos


author: Miloslav Trmac <mitr@redhat.com> - 0.16-5
changelog:
  - Backport the urllib2 wrapper (code by James Bowes <jbowes@redhat.com>)
    Resolves: #210956
  - Add proxy support for https using CONNECT (original patch by James Bowes
    <jbowes@redhat.com>)
    Resolves: #210963


author: Miloslav Trmac <mitr@redhat.com> - 0.16-6
changelog:
  - Add support for SSL socket timeouts (based on a patch by James Bowes
    <jbowes@redhat.com>)
    Resolves: #219966


author: Miloslav Trmač <mitr@redhat.com> - 0.16-6.el5.2
changelog:
  - Send the Host: header when using a HTTP/1.1 proxy for https (patch by Karl
    Grindley)
    Resolves: #239034
  - Backport support of multiple CN values and multiple patterns in subjectAltName
    from m2crypto-0.18
    Resolves: #363591


author: Karel Zak <kzak@redhat.com> 1.6.8p12-7
changelog:
  - fix #198755 - make login processes (sudo -i) initialise session keyring
    (thanks for PAM config files to David Howells)
  - add IPv6 support (patch by Milan Zazrivec)


author: Peter Vrabec <pvrabec@redhat.com> 1.6.8p12-11
changelog:
  - fix segfaults when using ldap on s390,
    Resolves: #305331
  - add audit support,
    Resolves: #320671


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.17-6
changelog:
  - fix regression. Permissions on user* group* binaries 
    should be 0750, because of CAPP/LSPP certification
  - fix groupdel man page


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.17-8
changelog:
  - improve "-l" option. Do not reset faillog if it's used (#213450).
  - fix "-a" option. Bug was introduced by upstream (#213405).


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.17-13
changelog:
  - use MD5 encryption by default
  - fix "--append" option
  - useradd create user's mailbox file
  - do not run find_new_uid() twice and use getpwuid() to check
    UID uniqueness
  - fix infinitive loop if there are duplicate entries in /etc/group
  - fix chpasswd buffer overflow
  - add SHA256/512 support
    Resolves: #218629, #222563, #231311, #236871, #241585, #247514, #427449


author: Dmitry Mishin <dim-at-openvz.org> 3.0.9-1
changelog:
  - added README and NEWS files
  - deleted debian directory (requested by debian package maintainers)
  - fixed compilation on ppc64 platform.


author: Andy Shevchenko <andriy@asplinux.com.ua> - 3.0.9-1
changelog:
  - fixed according to Fedora Packaging Guidelines:
    - use dist tag
    - removed Vendor tag
    - added URL tag
    - use full url for source
    - changed BuildRoot tag


author: Dave Anderson <anderson@redhat.com> - 4.0-5.0.1
changelog:
  - Fix for initialization-time failure when analyzing a vmcore of
    an i386-HVM guest that was taken when running on an x86_64 host
  - Resolves: rbhz#288691
  - Fix for initialization-time segmentation violation when analyzing
    a vmcore in which the kernel has over-run its kernel stack, 
    corrupting the process thread_info structure, which is used by 
    the crash utility for determining the process cpu.
  - Resolves: rbhz#405101
  - Fix for "mod" command when analyzing ppc64 kernels with 64K pages.
  - Resolves: rbhz#414881


author: Dave Anderson <anderson@redhat.com> - 4.0-5.0.2
changelog:
  - Fix for initialization-time segmentation violation when analyzing
    a vmcore in which the kernel has over-run its kernel stack, 
    corrupting the process thread_info structure, which is used by 
    the crash utility for determining the process cpu.
  - Resolves: rbhz#405101


author: Neil Horman <nhorman@redhat.com> - 0.55-7
changelog:
  - Fixed cpu parsing bugs (bz 311341)
  - Added docs/config for irqbalance env. vars. (bzs 339551 339571 339581)


