# changelog

author: Urs Beyerle <urs.beyerle@psi.ch> 0.5.3-5
changelog:
  - change post script and 915resolution.init: 915resolution is now not 
    turned off after an update.


author: Olivier Fourdan <ofourdan@redhat.com> 6.2.8.0-10.el5
changelog:
  Fix memory allocation failure when using color option (616538)
    Fix hang when converting broken GIF (693989)
    Fix conversion of rotated landscape PDF (694922)


author: Olivier Fourdan <ofourdan@redhat.com> 6.2.8.0-11.el5
changelog:
  Fix assertion failed when using "identify -verbose" when there's no
    image information available (502626)


author: Olivier Fourdan <ofourdan@redhat.com> 6.2.8.0-14.el5
changelog:
  - Add fix for CVE-2012-0247 CVE-2012-0248 CVE-2012-1185 CVE-2012-1186
  - Add fix for CVE-2012-0259 CVE-2012-0260 CVE-2012-1798


author: Olivier Fourdan <ofourdan@redhat.com> 6.2.8.0-15.el5
changelog:
  - Fix for PostScript conversion was incomplete, as larger documents
    would end up being cropped without the "-g" option (797364)


author: Norm Murray <nmurray@redhat.com> - 6.2.8.0-4.el5_1.1
changelog:
  - backport functionality for CVE patches
  - Add patch for CVE-2007-1797 (#235071)
  - Add patch for CVE-2007-4988 (#310081)
  - Add patch for CVE-2007-4985 (#310091)
  - Add patch for CVE-2007-4986 (#310121)
  - Add patch for CVE-2008-1096 (#286411)
  - Add patch for CVE-2008-1097 (#285861)


author: Tom Lane <tgl@redhat.com> 1.2.3-0.1.c1
changelog:
  - Update to MySQL-python 1.2.3c1 (not 1.2.3, because it would be
    NVR-newer than RHEL-6)
  Resolves: #475854
  Resolves: #555868
  - Sync specfile with RHEL-6, including:
  - Use python-setuptools instead of distutils, stop using old setup.py
  - Remove unnecessary manual Requires: specifications
  - Update License tag to match code.


author: Dan Williams <dcbw@redhat.com> - 1:0.6.4-7
changelog:
  - Add LEAP authentication support (Resolves: #224922)
  - Suppress initial wireless device activation until wired devices have had
      time to figure out their link state (Related: #362421)
  - Give drivers some time to recover after suspend/resume (Resolves: #362421)
  - Increase D-Bus pending call limit for applet and NM (Resolves: #221323)
  - Send default EAP fragment size of 1300 to supplicant for better 802.1x
      compatibility (Related: #427843)
  - Move WPA-Enterprise passwords to the GNOME Keyring (Resolves: #220915)
  - Fix the focus-stealing-prevention workarounds to always show the wireless
      secrets dialog (Resolves: #219155)
  - Fix a race when checking whether to activate devices (Resolves: #215720)
  - Indicate when an IPv4 autoip address has been acquired on a wired interface
      (Resolves: #213094)
  - Make use of driver-reported scan capabilities if supported (Related: #427528)


author: Dan Williams <dcbw@redhat.com> - 1:0.6.4-8
changelog:
  - Ensure dialog is realized before setting it's time (Related: #219155)
  - Fix check when moving WPA private key password (Related: #220915)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-9
changelog:
  - Don't show the applet's VPN submenu if no VPN plugins are installed
  - Resolves: #464604
  - Revert fix for #494212, since it breaks multilib (see 351101)
  - Related: #494212


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-10
changelog:
  - Add support for newer Option NV mobile broadband devices (Quicksilver, iCON 505)
  - Resolves: #536897
  - Fix problems with 63-character WPA PSKs
  - Resolves: #532723
  - Improve VPN password handling
  - Resolves: #528425
  - Correctly handle carrier events for renamed ethernet interfaces
  - Resolves: #513547
  - Fix problems with wired 802.1x certificate usage
  - Resolves: #477061
  - Ensure a connection is not used after its CA certificate has been deleted
  - Resolves: CVE-2009-4144
  - Fix possible information disclosure by nm-connection-editor
  - Resolves: CVE-2009-4145


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-1
changelog:
  - Update to NetworkManager 0.7 final release
  - Rename 'ifcfg-fedora' plugin to 'ifcfg-rh'
  - Resolves: #471932


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-2
changelog:
  - Always bring the secrets dialog to the front (updated)
  - Resolves: #467728
  - Prevent stuck grabs between applet menu and the keyring password dialog (updated)
  - Resolves: #465154
  - Fix issues with creating wired 802.1x connections
  - Resolves: #474879


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-4
changelog:
  - CVE-2009-0365: GetSecrets disclosure
  - CVE-2009-0578: local users can modify the connection settings
  - Resolves: #487778


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-9.el5_4
changelog:
  - Ensure a connection is not used after its CA certificate has been deleted
  - Resolves: CVE-2009-4144
  - Fix possible information disclosure by nm-connection-editor
  - Resolves: CVE-2009-4145


author: Jan Safranek <jsafrane@redhat.com> 2.0.16-12.el5
changelog:
  - ipmitool: disabled automatic bridging of SDR readings to IPMB
    (#671059)
  - ipmitool: fixed 'ipmitool sol' sending wrong packets due to miscalculation of SOL
    payload size (#675980)
  - ipmitool: fixed 'ipmitool delloem powermonitor' on big-endian platforms (#659326)
  - ipmitool: lowered severity of "Discovered local IPMB address XYZ", it's visible
    only in the most verbose output (#674494)


author: Jan Safranek <jsafrane@redhat.com> 2.0.16-15.el5
changelog:
  - ipmitool: added -b, -B, -l and -T options to ipmitool man page
    (#846596)
  - ipmitool: fixed man page documentation for delloem setled command
    (#797050)


author: Jan Safranek <jsafrane@redhat.com> 2.0.16-5.el5
changelog:
  - fix crash on "ipmitool sol payload status" command without
    /dev/ipmi device (#470031)
  - fix ipmievd init script, it's off by default now (#509490)


author: Jan Safranek <jsafrane@redhat.com> 2.0.16-6.el5
changelog:
  - relax the depencency on xinetd, sample xinetd service can be installed
    without it (#522524)
  - describe hpm and fwum commands in ipmitool man page (#514215)
  - fix condrestart action of ipmievd init script (#532445)
  - report failure of watchdog startup (#514678)
  - enhance description of sol set command to cover noguard parameter (#513609)


author: Phil Knirsch <pknirsch@redhat.com> - 2.0.6-5.el5.5
changelog:
  - Added -K option for ipmitool to hide keyword from cmdline (#238970)
  - Added -p option for ipmicmd to hide password from cmdline (#239186)
  - Fixed OpenIPMI-python package description (#314031)


author: Jon Peatfield <J.S.Peatfield@damtp.cam.ac.uk> - 2:2.6.2-1
changelog:
  - Update to 2.6.2 tweaks to build on SL5x (and add DAMTP evil hacks in
    a slightly cleaner way).  Include fix from SL5x 2.5.0-2 srpm (zip
    must be a BuildRequires or it won't get listed in etc/Renviron when
    built in brewbuilder).  Epoch needs to be 2 for SL5x.


author: Petr Pisar <ppisar@redhat.com> - 1.2.10-9
changelog:
  - Fix dist macro expansion in spec code (Resolves: #440629)
  - Don't block SDL_WM_GrabInput() if window is not viewable (Resolves: #664771)


author: Bill Nottingham <notting@redhat.com> - 2.86-15
changelog:
  - Allow 'telinit u' in runlevel 0 and runlevel 6 (#348651)
  - Fix wall man page (#436469, <jnansi@redhat.com>)
  - Fix symbol collision with nss_ldap (#454675, <nalin@redhat.com>)


author: Petr Lautrbach <plautrba@redhat.com> 2.86-16
changelog:
  - Fix pathname detection (#507382)
  - Check read value from /proc/pid/stat (#592956)
  - last - Add wide output names with -w (#673533)
  - fix ipv6 support in last command (#690939)


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Build requires ImageMagick for a2ps.cfg to use convert(1) (bug #215982).
  - Build requires groff-perl for a2ps.cfg to use grog(1) (bug #215982).


author: Tim Waugh <twaugh@redhat.com> 4.13b-57.2
changelog:
  - Build requires psutils.  This fixes processing of input files in
    PostScript format (bug #241855).


author: Jiri Moskovcak <jmoskovc@redhat.com> - 2.2.39-4
changelog:
  - fixed exitcodes rhbz#368451
  - fixed segfault with -- --file rhbz#430458
  - fixed symlink handling when -P is used rhbz#436070
  - fixed problems with hebrew chars rhbz#507747
  - fixed handling of relative symlinks rhbz#500095
  - Resolves: #368451, #430458, #436070, #507747, #500095


author: Jiri Moskovcak <jmoskovc@redhat.com> - 2.2.39-5
changelog:
  - rpmdiff fixes
  - don't zip changelog
  - libacl-devel requires specific libacl version
  - Resolves: #500095


author: Phil Knirsch <pknirsch@redhat.com> - 1.0.4-3
changelog:
  - Disable the automatic shutdown -h via powerdown button by default due to
    conflicts with gnome-power-manager


author: Phil Knirsch <pknirsch@redhat.com> - 1.0.4-4
changelog:
  - Made a better fix for the powerdown button which checks if g-p-m is running
  - Don't install sample.conf anymore, not needed


author: Steve Conklin <sconklin@redhat.com> - 0.13.1-3
changelog:
  - Added spec file changes to not save old scripts when patching
  - Changed permissions on source files to meet release criteria
  Related: rhbz#252332


author: Daniel Kopecek <dkopecek@redhat.com> 0.13.1-8
changelog:
  resolves: #547658 aide executable doesn't mention -D option in "aide --help" usage page
  resolves: #580253 AIDE compare_dbline function returns int


author: 1.00-1 20080103 - wolfgang.friebel@desy.de
changelog:
  - Spec for the first official alpine version. A config file
    /etc/alpine/pine.conf is provided with settings that have
    been found useful (at DESY). Feel free to modify it at your
    taste or do report what should be changed


author: 2.00-1 20090211 - wolfgang.friebel@desy.de
changelog:
  - new version 2.00, try to be as close to the EPEL package as possible
    provide /etc/alpine/pine.conf.sample as a sample configuration file
    which configures htmlview (in package htmlview) as URL viewer


author: Karel Zak <kzak@redhat.com> 5:6.1.5-4.1
changelog:
  - fix #219437 - amd: stopping service will pop up an error dialog in 
                  system-config-services app.
  - fix build (m4 stuff) of the package (UTS_RELEASE macro has been removed 
                  from the latest kernel-headers)


author: Ian Kent <ikent@redhat.com> 5:6.1.5-5
changelog:
  - bz964133 - amd command ignores -noacl mount option in RHEL 5
    - fix amd ignores noacl mount option.
  - quiet the BuildPrereq and Prereq depricated warnings.
  - Resolves: rhbz#964133


author: Ian Kent <ikent@redhat.com> 5:6.1.5-6
changelog:
  - bz1065876 - RHEL5.8: amd crashes in autofs_umount_failed, similar to
    bz 862283
    - add setjmp/longjmp patch (Dave Wysochanski).
    - add don't background autofs umount patch.
    - check file handle struct before use on umount.
    - handle-ENOENT-umount-return-for-autofs-mounts.
  -Resolves: rhbz#1065876


author: Karel Zak <kzak@redhat.com> 5:6.1.5-5
changelog:
  - bz862283 - RHEL5.8: amd crashes when shutting down the machine, leading to a shutdown hang
    - dont background autofs umount.
  - Resolves: rhbz#862283


author: Ian Kent <ikent@redhat.com> 5:6.1.5-6
changelog:
  - bz836359 - amd command ignores -noacl mount option in RHEL 5
    - fix amd ignores noacl mount option.
  - quiet the BuildPrereq and Prereq depricated warnings.
  - Resolves: rhbz#836359


author: Ian Kent <ikent@redhat.com> 5:6.1.5-
changelog:
  - bz862283 - RHEL5.8: amd crashes when shutting down the machine, leading to a
    shutdown hang
    - add setjmp/longjmp patch (Dave Wysochanski).
    - check file handle struct before use on umount.
  - Related: rhbz#862283


author: Ian Kent <ikent@redhat.com> 5:6.1.5-8
changelog:
  - bz1065876 - RHEL5.8: amd crashes in autofs_umount_failed, similar to
    bz 862283
    - handle-ENOENT-umount-return-for-autofs-mounts.
  - Resolves: rhbz#1065876


author: Ian Kent <ikent@redhat.com> 5:6.1.5-9
changelog:
  - bz1065876 - RHEL5.8: amd crashes in autofs_umount_failed, similar to
    bz 862283
    - bump revision to fix changelog date.
  - Related: rhbz#1065876


author: Jay Fenlason <fenlason@redhat.com> 2.5.0p2-3
changelog:
  - move libamclient-*.so to the base rpm, so that multilib support works.
    This fixes
    bz#205202 File conflicts


author: Jay Fenlason <fenlason@redhat.com> 2.5.0p2-4
changelog:
  - Include my -dump_size patch to close
    bz#206129: Dump output size determined incorrectly
  - Clean up the spec file, following some suggestions in
    bz#185659: amanda 2.5.0
  - Use a tarball without the problematic contrib/sst directory.
  - Include my new_gnutar (based on a patch by Orion Poplawski
    <orion@cora.nwra.com>) to work around changed incremental file format
    in newer (>1.15.1) versions of gnutar.
  - include my -wildcards patch to turn on wildcards with new versions of tar.


author: Chris Lumens <clumens@redhat.com> 11.1.2.105-1
changelog:
  - Add support for _rnetdev mount option in fstab (pjones).
    Resolves: rhbz#435716
  - Lots of network UI configuration fixes (dcantrell).
    Resolves: rhbz#432011
  - Fix lvm error handling (msivak).
    Related: rhbz#224636


author: Chris Lumens <clumens@redhat.com> 11.1.2.106-1
changelog:
  - Fix the case where we're checking for _netdev but options is None (pjones).
    Resolves: rhbz#435998


author: Chris Lumens <clumens@redhat.com> 11.1.2.111-1
changelog:
  - Don't rebuild the initrds if no modules were installed.
    Resolves: rhbz#439379
  - Bootable requests can not be on logical volumes.
    Resolves: rhbz#439270
  - Name the xen images for ia64 in the .treeinfo file (jgranado).
  - Fix reporting on transaction errors (jgranado).
    Resolves: rhbz#437813
  - Fix loop iteration in nl_ip2str (dcantrell).
    Resolves: rhbz#437773
  - Allow GPT on ppc or ppc64 (dcantrell).
    Resolves: rhbz#438683


author: Chris Lumens <clumens@redhat.com> 11.1.2.113-1
changelog:
  - Require the latest version of libnl-devel.
    Resolves: rhbz#441922
  - Fix definition of __libc_setlocale_lock for new glibc.
    Resolves: rhbz#441940
  - Add support for the bcm5710 driver.
    Resolves: rhbz#442553
  - Require the latest libdhcp (dcantrell).
    Resolves: rhbz#435978
  - Fix networking tracebacks (pjones, clumens).
    Resolves: rhbz#442020


author: Joel Granados <jgranado@redhat.com> 11.1.2.166-1
changelog:
  - Load the raid45 modules at init time (jgranado).
    Related: rhbz#475385
  - Make sure the raid45 modules are in the images (jgranado).
    Related: rhbz#475385


author: Martin Sivak <msivak@redhat.com> 11.1.2.194-1
changelog:
  - comps changed. replaced "virtualization" with "xen" (jgranados)
    Resolves: rhbz#514885
  - Add support for Melanox ConnectX mt26448 10Gb/s Infiniband, Ethernet, and FC (msivak)
    Resolves: rhbz#514971


author: Radek Vykydal <dcantrell@redhat.com> 11.1.2.224-1
changelog:
  - noeject overrides kickstart eject (bcl)
    Related: rhbz#477887
  - Pass --noeject to anaconda (bcl)
    Related: rhbz#477887


author: Ales Kozumplik <akozumpl@redhat.com> 11.1.2.242-1
changelog:
  - Bump the implementation limit on the number of modules in modLoaded (akozumpl)
    Resolves: rhbz#716836


author: Connie Sieh <csieh@fnal.gov> 11.1.2.242-3
changelog:
  - Add SL patch for task_gui.py which was in RHupdates/
    If this patch is not present then xorg...xorg is not installed for SL


author: Martin Gracik <mgracik@redhat.com> 11.1.2.249-1
changelog:
  - Don't add packages from @conflicts group as dependencies (mgracik)
    Resolves: rhbz#756707
  - Do not create new iSCSI target when 'Esc' is hit (vpodzime)
    Resolves: rhbz#768082
  - Do not add drive when 'Esc' is hit in the Advanced Storage Options dialog (vpodzime)
    Related: rhbz#768082
  - Do nothing when 'Esc' is hit in partition dialog (vpodzime)
    Resolves: rhbz#758106


author: Radek Vykydal <rvykydal@redhat.com> 11.1.2.259-1
changelog:
  - Revert 5737408dd5293e5d003d552d3ea919c01417d9d4 targeting gfs support (vpodzime)
    Related: rhbz#754213
  - Revert 64aa1c709a30f3fb6604a2dde13d780fabdcc4af targeting gfs support (vpodzime)
    Related: rhbz#754213


author: Radek Vykydal <rvykydal@redhat.com> 11.1.2-263-2
changelog:
  - Fix LVM reuse failing on HP CCISS Hardware (mkolman)
    Resolves: rhbz#751351
  - Skip relabeling empty disks on s390 (bcl)
    Resolves: rhbz#966950


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Patch: anaconda-sl-sites-upd-instroot.patch
  -->  Adds the sites upd instroot
  - Added Patch: anaconda-sl-installclasses-rhel-259.patch
  -->  Adds the SL install classes
  - Added Source: anaconda.ini
  -->  Config file for automated patch script
  - Added Patch: anaconda-sl-method-rhupdates.patch
  -->  Adds the rhupdates method
  - Added Patch: anaconda-sl-urlinstall-sites.patch
  -->  Adds the url install for sites
  - Added Patch: anaconda-sl-taskgui.patch
  -->  Keep overlaping groups from creating an error
  - Added Patch: anaconda-sl-xfs-boot-partition.patch
  -->  Allows XFS boot
  - Added Patch: anaconda-sl-nfsinstall-sites.patch
  -->  Adds the nfs install for sites
  - Added Patch: anaconda-kernel-module.patch
  -->  Adds the kernel-module.py plugin to anaconda's yum
  - Ran Regex: (Release: .*) => \1.sl5
  -->  Modify release string to note changes


author: Jiri Vanek <jvanek@redhat.com> 1.7.1-2jpp.0
changelog:
  - intproduced ant and ant17 variables to difference ant and ant17
  - changed to ant17
  - bump to ant 1.7.1
  - removed upstreamed patch1 - apache-ant-1.6.5-rpm.patch
  - removed upstreamed patch6 - apache-ant-1.6.5-jvm1.5-detect.patch
  - added apache-ant-1.7.1.ant.conf (used instead of 1.6.5)
  - added apache-ant-1.7.1-javah.patch (ised isntead of 1.6.2)
  - jars in files have corect {version} in name
  - added patch7 apache-ant-1.7.1-create-manifest-only.patch
  - added built_legacy_mfonly switch to enable built of ant-6 compatibility
    manifest only jars
  - Resolves:rhbz#803797


author: Joe Orton <jorton@redhat.com> - 1.2.7-11.1
changelog:
  - add fixes for ttl handling in reslist API (#632096)
  - build with -fno-strict-aliasing to fix strict-aliasing violations


author: Jesse Keating <jkeating@redhat.com> - 0:0.0.8-8
changelog:
  - rebuild
  - Add patch to not include linux/compiler.h
  - Remove br on glibc-kernheaders, part of the build-env.


author: Steve Grubb <sgrubb@redhat.com> - 1.5.5-7
changelog:
  resolves: #251327 swig was incorrectly incoporating a variable in ppc's
  python bindings causing python tracebacks.


author: Steve Grubb <sgrubb@redhat.com> 1.6.5-1
changelog:
  resolves: #234663, #244349
  - auparse library has been updated
  - system-config-audit has added
  - auditd now supports group permissions on audit logs
  - audit by TTY support added
  - New multi-threaded audit event dispatcher supporting plugins
  - node/machine field can be added to audit events
  - RACF zos remote logging plugin from IBM
  - week-ago keyword added to aureport/ausearch
  - auditctl supports errno abbreviation as syscall exit code (-F exit=-EPERM)
  - audit logging can be resumed with SIGUSR2
  - New aulastlog utility


author: Steve Grubb <sgrubb@redhat.com> 1.6.5-7
changelog:
  resolves: #438844 buffer overflow in audit_log_user_command
  - Update ausearch with fixes from auparse, 440086


author: Steve Grubb <sgrubb@redhat.com> 1.6.5-9
changelog:
  resolves: #442556 audit rules with >= get corrupted
  resolves: #438844 buffer overflow in audit_log_user_command, better fix


author: Steve Grubb <sgrubb@redhat.com> 1.7.13-2
changelog:
  resolves: #235398 ausearch does not correctly find out of order records
  resolves: #471383 Missing description of '--exact' in ausyscall man page
  resolves: #474466 audispd: plugin /sbin/audisp-remote terminated unexpectedly
  resolves: #476189 audispd activates the same plugin several times
  resolves: #483086 fix tty audit reporting
  resolves: #483608 audit updates for 5.4


author: Steve Grubb <sgrubb@redhat.com> 1.7.17-3
changelog:
  resolves: #529851 New upstream version with many updates
  resolves: #519790 Crash interpreting IPC mode fields via libauparse
  resolves: #513974 aureport does not accept dates as given in the man pages


author: Steve Grubb <sgrubb@redhat.com> 1.7.18-1
changelog:
  resolves: #554553 filtering a large inode number on i386 doesn't work
  resolves: #568677 aureport help and man page don't show all options
  resolves: #585356 audit updates for virtualization
  resolves: #607823 inodes display incorrectly when listing rules


author: Steve Grubb <sgrubb@redhat.com> 1.8-2
changelog:
  resolves: #667536 Allow setting syslog facility for audisp syslog plugin
  resolves: #697013 audit package rebase
  resolves: #706156 searching on auid = -1 results in all events
  resolves: #654883 service auditd restart output in immutable mode is not clear.
  resolves: #671261 auditctl and audit.rules man pages inconsistent on -a option
  resolves: #702279 autrace -r fails to insert audit rules on 32 bit platforms


author: Roman Rakus <rrakus@redhat.com> - 1.4.3-13
changelog:
  - There are some nonsense warnings and errors while using usermod,
    so ignore them.
    Resolves: #458144


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.101
changelog:
  - Bug 439580: AutoFS still having issues with expiration of submount maps
    - fix rootless direct multi-mount expire.
    - wait for submount shutdown completion.
  - Related: rhbz#439580


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.102
changelog:
  - Bug 439580: AutoFS still having issues with expiration of submount maps
    - fix nested submount expire deadlock.
  - Related: rhbz#439580


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.102.el5_3.1
changelog:
  - Bug 504566 - [5.3]automount aborts when automount accesses to ldap server.
    - add provided patch to resolve double free issue.
  - Resolves: rhbz#504566


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.100
changelog:
  - Bug 465809: automount issues with RHEL5 and NIS+ auto_home map containing wildcard
    - add patch to handle NIS_PARTIAL return when key not found.
  - Resolves: rhbz#465809


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.129
changelog:
  - Bug 452122 - lazy umount causes pwd to fal silently
    - fix error in remount check to set mount point removal flag at umount.
  - Related: rhbz#452122


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.131.el5
changelog:
  - also use actual package version instead of macro for Version tag.
  - add dist tag to revision.
  - Related: rhbz#471385


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.131.el5_4.1
changelog:
  - fix libxml2 non-thread-safe calls (bz523188).
  - fix direct map cache locking (bz525431).
  - fix dont umount existing direct mount on reread (bz525431).
  - Resolves: rhbz#523188 rhbz#525431


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.143.el5_4.2
changelog:
  - bz615258 - [RFE] include autofs support for SASL External authentication using
               certificates
    - fix check authtype is non-null before comparison.
  - Related: rhbz#615258


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.143.el5_4.3
changelog:
  - bz615258 - [RFE] include autofs support for SASL External authentication using
               certificates
    - fix check ctxt->sasl_mech is non-null before comparison.
  - Related: rhbz#615258


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.143.el5_5.4
changelog:
  - fix changelog entries for bz615258 and bz615259 referring to incorrect release.
  - Related: rhbz#615258 rhbz#615259


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.143.el5_5.6
changelog:
  - Bug 648411 - autofs5: segfault in close_mount()
    - add mutex to serialize access to mount module handle in parse module.
    - dont check null cache on expire.
    - fix null cache race.
    - fix cache_init() on source re-read.
  - Resolves: rhbz#648411


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.143.el5_6.1
changelog:
  - bz691311 - autofs should support paged results from ldap server
    - add ldap page control handling.
    - ldap paged query configure fix.
    - auto adjust ldap page size.
  - Resolves: rhbz#691311


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.143.el5_6.2
changelog:
  - bz691311 - autofs should support paged results from ldap server
    - fix paged ldap map read.
  - Related: rhbz#691311


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.154.el5
changelog:
  - bz560124 - autofs-5.0.1-0.rc2.131.el5_4.1 is missing man 8 auto.master
    - automount(8) man page correction
  - Resolves: rhbz#560124


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.155.el5
changelog:
  - bz563956 - autofs should support paged results from ldap server
    - fix paged ldap map read.
  - bz519281 - [RFE] resolve negative cache invalidation on signal to automount
    - reset negative status on cache prune
  - bz692524 - autofs with null maps specified in auto.master segfaults on reload
    - fix null cache clean
  - Resolves: rhbz#519281 rhbz#692524
  - Related: rhbz#563956


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.156.el5
changelog:
  - bz538408 - RFE: automounter to dump maps
    - allow dumping of maps when daemon is already running.
  - bz547510 - [RFE] autofs should honor admin supplied server weights
    in maps
    - fix back port error adding replicated host to list.
  - Related: rhbz#538408 rhbz#547510


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.156.el5_7.1
changelog:
  - bz735935 - autofs mounts show IP rather than hostname after upgrade to RHEL 5.7
    - fix name list check
  - Resolves: rhbz#735935


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.156.el5.el5_7.2
changelog:
  - bz744698 - autofs mount access hangs after reload
    - fix prune cache valid check.
    - fix map source check in file lookup.
  - Resolves: rhbz#744698


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.156.el5.el5_7.3
changelog:
  - bump version so we can replace the build with the incorrect changelog verion
    entry.
  - Related: rhbz#744698


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.el5.el5_7.4
changelog:
  - bz750463 - autofs-5.0.1-0.rc2.156.el5_7.3 breaks indirect NIS maps
    - fix fix map source check in file lookup.
  - Resolves: rhbz#750463


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.161.el5
changelog:
  - bz747020 - autofs-5.0.1-0.rc2.156.el5_7.3 breaks indirect NIS maps
    - fix fix map source check in file lookup.
  - Resolves: rhbz#747020


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.162.el5
changelog:
  - bz759221 - automount is seg faulting regularly in lookup_ghost()
    - fix bad alloca usage.
  - Resolves: rhbz#759221


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.164.el5_8
changelog:
  - bz810126  - autofs-5.0.1-0.rc2.163.el5 fails to load some LDAP maps
    - fix improve mount location error reporting.
  - Resolves: rhbz#810126


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.175.el5
changelog:
  - bz845503 - autofs initscript problems
    - fix status() return code now gets lost due to adding lock file check.
  - Related: rhbz#845503


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.176.el5
changelog:
  - bz859890 - no --timeout option usage demonstrated in auto.master FORMAT
    options man page section
    - add timeout option description to man page.
  - Resolves: rhbz#859890


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.177.el5
changelog:
  - bz714766 - autofs /net maps do not refresh list of shares exported on the NFS server
    - disable hosts map HUP signal update.
  - Related: rhbz#714766


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.181.el5
changelog:
  - bz714766 - autofs /net maps do not refresh list of shares exported on the NFS server
    - remove patch to disable hosts map HUP signal processing.
  - Related: rhbz#714766


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.183.el5
changelog:
  - bz947604 - "autofs reload" causes automount to stop running when multiple maps
    are removed from auto.master
    - fix syncronize handle_mounts() shutdown.
  - bz909263 - Wildcard in nested mounts regression
    - fix fix wildcard multi map regression.
  - Related: rhbz#947604 rhbz#909263


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.184.el5
changelog:
  - bz1049017 - Regression: autofs mounts hang if maps are reloaded while the
    mount is expiring
    - check for existing offset mount before mounting.
  - Resolves: rhbz#1049017


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.185.el5
changelog:
  - bz1130829 - Memory leak in get_exports
    - fix memory leak in get_exports().
  - Resolves: rhbz#1130829


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.186.el5
changelog:
  - bz1130829 - Memory leak in get_exports
    - fix package revision in spec file.
  - Related: rhbz#1130829


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.55.el5.1
changelog:
  - Bug 410041: CVE-2007-5964 autofs defaults don't restrict suid in /net
    - use mount option "nosuid" for "-hosts" map unless "suid" is explicily specified.
  - Related: rhbz#410041


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.55.el5.2
changelog:
  - Bug 426219: CVE-2007-6285 autofs default doesn't set nodev in /net [rhel-5.1.z]
    - use mount option "nodev" for "-hosts" map unless "dev" is explicily specified.
  - Related: rhbz#426219


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.55.el5.3
changelog:
  - Bug 429163 Processed: Reloading autofs map incorrectly removes all map entries
  - add patches to prevent direct map being incorrectly marked stale.
  - Resolves: rhbz#429163


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.53
changelog:
  - change random selection option name to be consistent with autofs v4 (bz 227604).
  - Related: rhbz#227604


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.84
changelog:
  - Bug 298171: Allows autofs to do automount lookups via nscd through LDAP
    - add error message to notify when no valid URIs found in configured list.
    - fix base dn search not trying all configured search bases.
  - Related: rhbz#298171


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.85
changelog:
  - 350171: /etc/init.d/autofs does not handle basedns with spaces
    - yet another correction to the patch.
  - Related: rhbz#350171


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.86
changelog:
  - 254226: autofs reload and condrestart fail if map is originally empty
    - another fix for don't fail on empty master map.
  - Related: rhbz#254226


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.87
changelog:
  - Bug 336961: Reloading autofs map incorrectly removes all map entries
    - fix incorrect initialization which causes unpredictable behavior.
  - Related: rhbz#336961


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.88
changelog:
  - Bug 298171: Allows autofs to do automount lookups via nscd through LDAP
    - init SASL callbacks on every ldap lookup library load.
  - Related: rhbz#298171


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.88.el5_2.1
changelog:
  - Bug 458960: [CRM#1837798] automount NULL pointer dereference segmentation fault
    - check replicated list after probe.
  - Resolves: rhbz#458960


author: Martin Bacovsky <mbacovsk@redhat.com> - 0.6.16-1.el5
changelog:
  - Resolves: #221439 CVE-2006-6870 Maliciously crafted packed can DoS avahi daemon
  - upgrade to new upstream
  - patch revision
  - better solution to #220048 (avahi-dbus and netdev group)


author: Permaine Cheung <pcheung@redhat.com> - 0:1.2.1-2jpp.7
changelog:
  - Add missing connection hostname check against X.509 certificate name
  - Resolves: CVE-2012-5784
  - Add patches to build with java 1.6


author: Pete Graner <pgraner@redhat.com> - 3.2-18
changelog:
  - Added bash32-021 upstream official patch
  - Added bash32-025 upstream official patch
  - Added bash32-024 upstream official patch
  - Added bash32-023 upstream official patch
  - Added bash32-022 upstream official patch


author: Tomas Janousek <tjanouse@redhat.com> - 3.2-20
changelog:
  - Define RECYCLES_PIDS on Linux as well, solving the #419831 regression
  - document special builtin differences in posix mode (#245641)
  - document alias expansion in non-interactive shells (#253673)
  - readline auditing support (#235021)


author: Roman Rakus <rrakus@redhat.com> - 3.2-22
changelog:
  - backported patch 029 - #453123
  - update in fc builtin - #438841
  - changes in manpage for
      continue - #442018
      suspend  - #445692
      fg       - #446625


author: Roman Rakus <rrakus@redhat.com> - 3.2-32.1
changelog:
  - Fixed a bug that caused trap handlers to be executed recursively,
    corrupting internal data structures.
    Resolves: #978840


author: Roman Rakus <rrakus@redhat.com> - 3.2-33
changelog:
  - Fixed a bug that caused trap handlers to be executed recursively,
    corrupting internal data structures.
    Resolves: #964753


author: Adam Tkac <atkac redhat com> - 30:9.3.3-9
changelog:
  - added fix for #224445 - CVE-2007-0493 BIND might crash after 
    attempting to read free()-ed memory (stransky@redhat.com)
  - added fix for #225229 - CVE-2007-0494 BIND dnssec denial of service
    (stransky@redhat.com)
  - initscript now unmounts /proc filesystem correctly
    (#212549, stransky@redhat.com)
  - dnssec-signzone now accepts -d option correctly (#230667)


author: Adam Tkac <atkac redhat com> 30:9.3.4-8.9.P1
changelog:
  - don't crash when certain subdomain is used as rndc reload argument (#457533)
  - return nonzero value from initscript when named fails to reload (#457984)
  - accept krb5-self and krb5-subdomain update-policy matches (#457932)


author: Adam Tkac <atkac redhat com> 30:9.3.4-5.P1
changelog:
  - improved patch to handle D-BUS races (#240876)
  - updated named.root zone to affect root IPv6 migration


author: Adam Tkac <atkac redhat com> 30:9.3.6-18.P1
changelog:
  - document `dig` return codes
  - bind-chroot-admin: don't create symlinks with double "//" in the paths
  - nslookup failed to resolve name in certain cases


author: Adam Tkac <atkac redhat com> 30:9.3.6-20.P1
changelog:
  - zone->curmaster before return in dns_zone_setmasterswithkeys()
  - named could fail to send a uncompressable zone


author: Petr Mensik <pemensik@redhat.com> - 30:9.3.6-25.P1.12
changelog:
  - Fix CVE-2016-9147 (ISC change 4510)
  - Fix regression introduced by CVE-2016-8864 (ISC change 4530)


author: Adam Tkac <atkac redhat com> 30:9.3.6-4.P1.2
changelog:
  - NSEC validation code could cause wrong NXDOMAIN responses (#554851,
    CVE-2010-0097)
  - improve fix for CVE-2009-4022 (#538744)
    - {C,D}NAMEs could be returned to clients without proper DNSSEC validation
    - don't validate + cache out-of-bailiwick data returned with a secure answer.
      Refetch it instead.


author: Adam Tkac <atkac redhat com> 32:9.7.0-4.P2
changelog:
  - replace bind97-rh507429.patch by improved bind97-rh643102.patch
  - don't pass unsupported "-N" option to useradd (#643323)


author: Adam Tkac <atkac redhat com> 32:9.7.0-6.P2.1
changelog:
  - work correctly when new DS is introduced in the trusted DNS tree (#675467)
  - include root zone DNSKEY (#693788)


author: Denys Vlasenko <dvlasenk@redhat.com> 2.17.50.0.6-10.el5
changelog:
  - Improve support of ELF64, particularly on 32-bit architectures.
    Resolves: RHBZ #457189.
  - Fix rare linker corner case when it produces large zero-filled hole
    in the executable.
    Resolves: RHBZ #458301.
  - Make "strings -n non_number" error message clearer.
    Resolves: RHBZ #480009.
  - Fix man page of c++filt to show --[no-]strip-underscore option correctly.
    Resolves: RHBZ #485194.
  - While at it, fix "makeinfo >= 4.4" check in configure.
    Resolves: RHBZ #495209.


author: Denys Vlasenko <dvlasenk@redhat.com> 2.17.50.0.6-11.el5
changelog:
  - Fix man page of c++filt to show --[no-]strip-underscore option correctly.
    Resolves: RHBZ #495196.


author: Andreas Schwab <schwab@redhat.com> - 2.17.50.0.6-13.el5
changelog:
  - Fix parsing of debug section in readelf (#499164, #509124).
  - Fix parsing of strings -N option (#508765).
  - Fix BFD_ARCH_SIZE in bfd.h (#529028).
  - Merge symbol visibility in linkonce sections (#531269).


author: Jeff Law <law@redhat.com> - 2.17.50.0.6-24.el5
changelog:
  - Fix abort in ppc{32,64}_elf_relocate_section due to assumptions about
    certain relocs being adjacent in the insn stream. (#855163)


author: Jeff Law <law@redhat.com> - 2.17.50.0.6-24.el5
changelog:
  - Do not abort when symbol hiding has nulled out plt.plist.  (#924354)
    Ensure htab->tls_get_addr is non-NULL before dereferencing


author: Jeff Law <law@redhat.com> - 2.17.50.0.6-26.el5
changelog:
  - Fix testsuite expected strings that were not properly updated
    when patch for 855163 was backported. (#855163)


author: Jakub Jelinek <jakub@redhat.com> 2.17.50.0.6-4.el5
changelog:
  - 10x linking speedup on large C++ apps (#223181)
  - fix tekhex reader
  - SSE4 support in gas and objdump (H.J.Lu, #223120)
  - compile binutils with -D_FILE_OFFSET_BITS=64 (#215514)
  - fix ld --emit-relocs on ppc64 (Alan Modra, #235221)
  - fix ppc32 ld segfault with -msecure-plt (Alan Modra, BZ#4267)


author: Jakub Jelinek <jakub@redhat.com> 2.17.50.0.6-5.el5
changelog:
  - fix ld --unique with new DWARF3 sections .debug_ranges and .debug_pubtypes
    (Alan Modra, #241252)
  - fix segfault in ppc64 version script handling (Andreas Schwab)


author: Jakub Jelinek <jakub@redhat.com> 2.17.50.0.6-6.el5
changelog:
  - full power6 support (Alan Modra, Peter Bergner, Ben Elliston,
    Anton Blanchard, #253108)
  - demangle ppc64 dot symbols in gprof (Jan Kratochvil, #242057)
  - SSE5 support in gas and objdump (Michael Meissner, Dwarakanath Rajagopal,
    Tony Linthicum, H.J.Lu, #426906)


author: Jan Kratochvil <jan.kratochvil@redhat.com> 2.17.50.0.6-7.el5
changelog:
  - Fix parsing of the `strings' command line argument `-<number>' (Chu Li,
    Nick Clifton, H.J. Lu, #435078).
  - Rebuild libbfd.a with -fPIC for inclusion into shared libraries (#430856).
    - libbfd.a symbols visibility is now hidden (suggested by Jakub Jelinek).
  - Fix PGI cross-files DW_FORM_ref_addr relocations
    (fix by Jakub Jelinek, #438793).
  - Restore the RHEL-5.0 debug symbols linking performance (Jakub Jelinek,
    H.J. Lu, #364141).


author: Jan Kratochvil <jan.kratochvil@redhat.com> 2.17.50.0.6-9.el5
changelog:
  - Fix complains on .gnu.linkonce.r relocations to their discarded
    .gnu.linkonce.t counterparts (#463934).


author: Eric Sandeen <sandeen@redhat.com> - 1.0.0-6
changelog:
  - blkiomon doesn't recognize --msg-queue-name (#498377)
  - Unrecognized blkparse options in manpage (#498381)
  - blktrawverify manpage inconsistencies (#498383)
  - btrecord doesn't recognize --max-pkts (#498426)
  - btrace manpage errors (#498891)
  - Misc. manpage typos and errors (#498904)
  - btrace does not recognize -b and -n options (#498945)
  - blkiomon unaligned access messages on ia64 (#499373)
  - blkrawverify exits without error when no files exist (#499581)
  - blkparse exits without error when no files exist (#500118)


author: Benjamin Kosnik <bkoz@redhat.com> 1.33.1-10
changelog:
  - (#182414: boost: put tests in %check section) via Rex Dieter
  - Fix EVR with .el5_7 tag via Gianluca Sforna


author: Petr Machata <pmachata@redhat.com> - 1.33.1-10.2
changelog:
  - Build with -fno-strict-aliasing due to the sheer amount of warnings
    that we get.
  - Related: #727895


author: Stepan Kasal <skasal@redhat.com> - 3.7.2-2
changelog:
  - fix building with newer kernel-headers (#456247)
  - do not strip debug info during install (#500545)
  - Resolves: rhbz #456247 #500545


author: Stepan Kasal <skasal@redhat.com> - 3.7.2-3
changelog:
  - escape rpm macros in the rpm change log
  - remove bogus rpath from libbrlttybba.so (CVE-2008-3279, #457942)
  - add dependencies to bind the subpackages from one build together


author: Stepan Kasal <skasal@redhat.com> - 3.7.2-4
changelog:
  - use rpm macros more consistently
  - add manual page for brltty.conf
  - add more documentation
  - install the default brltty-pm.conf to docdir only
  - Resolves: #530554
  - silence the postinstall scriptlet
  - Resolves: #529163


author: Jakub Hrozek <jhrozek@redhat.com> - 1.6.0-3
changelog:
  - Backport the fix for usage of IPv6 nameserves from 1.7 branch
  - Use default defattr
  - Comment patches
  - Convert the CHANGES file to UTF8


author: Steve Dickson <steved@redhat.com> 0.8-2
changelog:
  - Removed some upstream bits that leaked into the RHEL5 
    version (bz 250424)
  - Added the creation/removal of the cache directory when
    the rpm is installed and removed.


author: David Howells <dhowells@redhat.com> 0.8-5
changelog:
  - Work around a problem in the status() function in /etc/init.d/functions where
    multiple recursions through an initscript can confuse pidof (bz 237827).
  - Make initscript wait for cachefilesd to complete after signalling it to stop
    (bz 237827).


author: Behdad Esfahbod <besfahbo@redhat.com> 1.2.2-3
changelog:
  - Remove unnecessary --disable-* arguments to configure, add --enable-*
    for those backends we really want to make sure are enabled.


author: Ray Strode <rstrode@redhat.com> 1.2.4-2
changelog:
  - Fix crash when the X client and server don't follow the same
    byte ordering. Patch by Behdad Esfahbod. 
    Resolves: bug #222679


author: Monty <cmontgom@redhat.com> 0.5.1.2-0
changelog:
  - Rebase from upstream to pull in versioning changes and .pc.in fix
  - Bring inline with REVH package
  - Resolves: bz#488571  -  Add celt051 package


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-4
changelog:
  - try to SIGHUP the messagebus daemon at first install so that it'll
    let us claim our service name if it isn't restarted before we are
    first started (#636893)


author: Nalin Dahyabhai <nalin@redhat.com> 0.40-1
changelog:
  - update to 0.40
    - fix validation check on EKU OIDs in getcert (#691351)
    - get session bus mode sorted
    - add a list of recognized EKU values to the getcert-request man page


author: Nalin Dahyabhai <nalin@redhat.com> 0.41-1
changelog:
  - read information about the keys we've just generated before proceeding
    to generating a CSR (part of #694184, part of #695675)
  - when processing a "resubmit" request from getcert, go back to key
    generation if we don't have keys yet, else go back to CSR generation as
    before (#694184, #695675)
  - configure with --with-tmpdir=/var/run/certmonger and own /var/run/certmonger
    (#687899), and add a systemd tmpfiles.d control file for creating
    /var/run/certmonger on Fedora 15 and later
  - let session instances exit when they get disconnected from the bus
  - use a lock file to make sure there's only one session instance messing
    around with the user's files at a time
  - fix errors saving certificates to NSS databases when there's already a
    certificate there with the same nickname (#695672)
  - make key and certificate location output from 'getcert list' more properly
    translatable (#7)


author: Nalin Dahyabhai <nalin@redhat.com> 0.42-1
changelog:
  - getcert: fix a buffer overrun preparing a request for the daemon when
    there are more parameters to encode than space in the array (#696185)
  - updated translations: de, es, id, pl, ru, uk


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport support for enabling delegation of GSSAPI credentials when we
    use Negotiate authentication for XML-RPC (#729803), and backport the
    option for making the ipa-submit helper use the current ccache, which
    makes it easier to test


author: Nalin Dahyabhai <nalin@redhat.com> 0.42-1.2
changelog:
  - incorporate patch from Rob Crittenden to start supplying Referer:
    headers when we submit XML-RPC requests (#767573)


author: Nalin Dahyabhai <nalin@redhat.com> 0.50-1
changelog:
  - really fix these this time:
   - getcert: error out when "list -c" finds no matching CA (#743488)
   - getcert: error out when "list -i" finds no matching request (#743485)


author: Nalin Dahyabhai <nalin@redhat.com> 0.50-2
changelog:
  - incorporate patch from Rob Crittenden to start supplying Referer:
    headers when we submit XML-RPC requests (#757883)


author: Bill Nottingham <notting@redhat.com> 1.3.30.2-2
changelog:
  - alternatives: fix removal of manual links (#525051, <dtardon@redhat.com>)
  - ntsysv man page tweak (#516599)
  - add resetpriorities to the chkconfig man page (#501225)
  - Fix runlevel list in man page (#466740)
  - alternatives: clarify error messages with more context (#441443)


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-4
changelog:
  - Fixed bz230451 (fence_xvm.key file is not automatically created. Should have a least a default)
  - Resolves: bz230451


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-5
changelog:
  - Fixed bz253341 (failure to start cluster service which had been modifed for correction)
  - Resolves: bz253341


author: Ryan McCabe <rmccabe@redhat.com> 0.12.0-2
changelog:
  - Run the cmirror init script when starting cluster nodes that use shared storage.
  - Related: bz430737


author: Jan Pokorny <jpokorny@redhat.com> 0.12.1-8
changelog:
  - Fix bz847289 (cluster-snmp module may cause net-snmp to SEGV when told to reload)
  - Fix bz882277 (cluster-cim: missing symbols/provider library not compiled properly)


author: Ryan McCabe <rmccabe@redhat.com> 0.9.2-6
changelog:
  - Fixed bz236023 (Create/delete cluster - then access disk on node = Generic error on host: cluster tools: cman_tool errored)
  - Resolves: bz236023
  - Related: bz233326, bz228637, bz236020, bz236021, bz236025, bz236026,
  - Related: bz236027, bz236048, bz236050, bz236052, bz236054, bz236055


author: Petr Machata <pmachata@redhat.com> - 2.6.4-5.el5.4
changelog:
  - Add requires: shared-mime-info when building with gui
  - Install Copyright.txt
  - Mark documentation with %doc
  - Fix source file permissions
  - Resolves: #676668
  - Resolves: #673914


author: Chris Feist <cfeist@redhat.com> - 2.0.113-1
changelog:
  - Limitations with 2-node fence_scsi are now properly documented in the man
    page.
  - Resolves: rhbz#512998


author: Chris Feist <cfeist@redhat.com> - 2.0.114-1
changelog:
  - local variable 'verbose_filename' referenced before assignment has been fixed
  - RSA II fencing agent has been fixed.
  - Resolves: rhbz#493802 rhbz#514758


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-1.el5_4.6
changelog:
  - scsi_reserve: Always call echo after calling failure.  
  - scsi_reserve: Handle partitions with multipath in scsi_reserve script.
  - Resolves: rhbz#529712 rhbz#530400


author: Marek Grac <mgrac@redhat.com> - 2.0.115-108
changelog:
  - fence_vmware_soap: Speed up fencing process and do not crash on VM without valid UUID
    Resolves: rhbz#836654


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.0.115-109.1
changelog:
  - cman|fenced: Fix node killing in case of a 2node cluster that suffers
    brief network outage
    Resolves: rhbz#923861


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-109.6
changelog:
  - Fix plock recovery that could result in 2 nodes being granted the same lock
    Resolves: rhbz#1043356


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.116-124
changelog:
  - qdisk: Make qdiskd warn if not all nodes are running qdiskd
    Resolves: rhbz#994187
  - qdisk: Waits tko cycles to complete initialization instead of tko_up
    Resolves: rhbz#1029191


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 2.0.116-124.3
changelog:
  - fence_cisco_ucs: default to TLSv1.3 as SSLv3 is being deprecated in the
    latest firmware due to security concerns

    Resolves: rhbz#1321592


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-34
changelog:
  - fencing: Fix fence_snmp so it returns an error code if the passphrase
    is too short
  - Resolves: rhbz#573834


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-34.el5_5.3
changelog:
  - cman: Reduce consensus value
    (cman_reduce_consensus_value.patch)
    cman: fix consensus calculation
    (cman_fix_consensus_calculation.patch)
    Resolves: rhbz#618639


author: Marek Grac <mgrac@redhat.com> - 2.0.115-34.el5_5.4
changelog:
  - fence_ipmilan: Add power-wait option
    (fence_agents_add_power_wait_to_fence_ipmilan.patch)
    Resolves: rhbz#642700


author: Marek Grac <mgrac@redhat.com> 2.0.115-66
changelog:
  - cman: ownership of /var/log/cluster clobbers log files
    (fence_egenera_revert.patch)
    Resolves: rhbz#659090


author: Lon Hohberger <lhh@redhat.com> 2.0.115-67
changelog:
  - fence_scsi_test: add 'clear' action
    (fence_scsi_test_add_clear_action.patch)
    fence_scsi_test: document 'clear' action in man page.
    (fence_scsi_test_document_clear_action_in_man_page.patch)
    Resolves: rhbz#603838


author: Lon Hohberger <lhh@redhat.com> 2.0.115-68.el5_6.1
changelog:
  - fence-agents: Add man pages for ucs, ifmib, rhevm
    (fence_agents_add_man_pages_for_ucs,_ifmib,_rhevm.patch)
    Resolves: rhbz#664381


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-68.el5_6.2
changelog:
  - ccs: Allow ccs_tool to use alternate base ports
    (allow_ccs_tool_to_use_alternate_base_ports.patch)
    Resolves: rhbz#677814


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-68.el5_6.3
changelog:
  - ccs: Update manual page for ccs_tool
    (ccs_update_manual_page_for_ccs_tool.patch)
    Resolves: rhbz#677814


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-68.el5_6.4
changelog:
  - qdiskd: Fix bad timer check - RHEL5
    (qdiskd_fix_bad_timer_check_rhel5.patch)
    Resolves: rhbz#707053


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-82
changelog:
  - fence_ipmilan: Correct return code for diag operation
    (fence_ipmilan_correct_return_code_for_diag_operation.patch)
    Ancillary fix for 678061
    Resolves: rhbz#678061


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-85
changelog:
  - fence_vmware_soap: Fix RHEL5-specific path issue
    (fence_vmware_soap_fix_rhel5_specific_path_issue.patch)
    Resolves: rhbz#717372


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-85.el5_7.3
changelog:
  - fence_rhevm: change "UP" status to "up" state as the REST-API has changed
    fence_rhevm: REST API URL needs to be updated to /api
    Resolves: rhbz#782833


author: Marek Grac <mgrac@redhat.com> - 2.0.115-94
changelog:
  - fence_ipmilan will not parse args with passwd_script option in cluster.conf
    Resolves: rhbz#732773


author: Marek Grac <mgrac@redhat.com> - 2.0.115-95
changelog:
  - fence_vmware_soap -o list doesn't expose proper virtual machine path for fencing
    Resolves: rhbz#715107


author: Marek Grac <mgrac@redhat.com> - 2.0.115-96.1
changelog:
  - fence_rhevm: Incorrect power status detected when VM status is not up/down
    Resolves: rhbz#795665


author: Marek Grac <mgrac@redhat.com> - 2.0.115-93.4
changelog:
  - fence_vmware_soap: Improve speed of fencing and fix issues with VM without valid UUID
    Resolves: rhbz#861392


author: Chris Feist <cfeist@redaht.com> - 2.0.73-1.el5_1.1
changelog:
  - Fixed a bug which could cause fence_xvm to cause corruption instead of
    logging.
  - Fixed a bug which caused qdisk to fail when being shut down.
  - Resolves: rhbz#326661 rhbz#328341


author: Chris Feist <cfeist@redhat.com> - 2.0.73-1.el5_1.2
changelog:
  - Fixed a bug which caused ppc clusters to interfere with ccsd on other non-ppc
    clusters
  - Resolves: rhbz#428325


author: Chris Feist <cfeist@redhat.com> - 2.0.75-1
changelog:
  - Potential NULL pointer dereferences were removed.
  - Correctly reduce quorum when a node leaves using "cman_tool leave remove"
  - Quorum is now recalculated when cman has the new nodes expected_votes.
  - Updated cman_tool man page
  - Resolves: rhbz#323931 rhbz#317561 rhbz#327721


author: Chris Feist <cfeist@redhat.com> - 2.0.79-1
changelog:
  - Dumping of debug logs from daemons has been improved
  - Plock performance has been improved
  - ccs_tool now returns the proper exit status
  - ccs lookup functions now recognize alternative hostnames better
  - ccs_connect now fails properly when a non-root user calls it
  - Endian issues which caused problems on multi-arch clusters were fixed
  - Possible NULL pointer dereferences in cman were fixed
  - Quorum is now properly reduced when a node leaves using
    "cman_tool leave remove"
  - Resolves: rhbz#317181 rhbz#359271 rhbz#404451 rhbz#249781 rhbz#323711 rhbz#289501 rhbz#418741 rhbz#267441 rhbz#271701


author: Chris Feist <cfeist@redhat.com> - 2.0.80-1
changelog:
  - gfs_tool now recognizes GFS files sytems on ppc
  - Fixed alignment problem with ppc64
  - Prevent "reservation conflict" messages when scsi_reserve starts.
  - Leave the fence domain if scsi_reserve fails to register with any device.
  - Improve logging in scsi_reserve script.
  - Use "locking_type = 0" for all lvm commands (ie. vgs).
  - Fix SCSI reservations scripts to handle LVM mirrors and stripes.
  - Not an error if fence_scsi attempts to remove a non-existent key from a
    device.
  - Resolves: rhbz#429633 rhbz#429546 rhbz#373491 rhbz#373511 rhbz#373541 rhbz#373571 rhbz#429033


author: Chris Feist <cfeist@redhat.com> - 2.0.81-1
changelog:
  - cman now starts correctly when additional params are given to network-bridge 
  - fencde admin override now updates cman
  - qdisk master abdication now works properly
  - groupd no longer processes messages from dead nodes
  - dlm no longer complains about closing a connection to node 0 when shutting
    down qdisk
  - Resolves: rhbz#434790 rhbz#435189 rhbz#430264 rhbz#436984 rhbz#437496 rhbz#315711


author: Chris Feist <cfeist@redhat.com> - 2.0.84-2_el5_2.2
changelog:
  - The dirty flag is now honored for nodes that have not been seen
  - A new option to delay the fence_tool join to solve some issues in certain
    network configurations has been added.
  - rgmanager now waits for the fence domain join to complete during startup.
  - Resolves: rhbz#471273 rhbz#471415 rhbz#471272


author: Chris Feist <cfeist@redhat.com> - 2.0.96-1
changelog:
  - WTI fencing agent no longer powers off/on power if it is unable to get
    status.
  - Resolves: rhbz#468904


author: Chris Feist <cfeist@redhat.com> - 2.0.98-1.el5_3.1
changelog:
  - Fixed a bug which caused cman to eject nodes that are quorate without
    any other nodes.
  - Resolves: rhbz#487397


author: Chris Feist <cfeist@redhat.com> - 2.0.98-1.el5_3.2
changelog:
  - group_tool ls fence no longer exits with return code '1' when the group
    exists but has an id of zero.
  - Resolves: rhbz#503730


author: Chris Feist <cfeist@redhat.com> - 2.0.98-1.el5_3.3
changelog:
  - Connections to openais are now allowed from unprivileged CPG clients with
    user and group of 'ais'
  - Resolves: rhbz#504531


author: Chris Feist <cfeist@redhat.com> - 2.0.98-1.el5_3.7
changelog:
  - Quickly starting and stopping the cman service no longer leaves the cluster
    in an inconsistent state
  - Resolves: rhbz#510510


author: Chris Feist <cfeist@redhat.com>
changelog:
  - More list corrpution fixes
  - Fixed bug which can cause the sync percentage to go over 100.
  - Resolves: rhbz#464550


author: Jonathan Brassow <jbrassow@redhat.com>
changelog:
  - Fix possible corruption issue on mirrors with more than 2 images
  - Fix I/O hang after cluster mirror creation with '--nosync' flag
  - Resolves: rhbz#456575 rhbz#471291


author: Chris Feist <cfeist@redhat.com>
changelog:
  - Copy percentage of corelog mirror no longer gets stuck in certain cases.
  - A segfault in clogd was fixed which was caused by mirrors being suspended
    quickly after being started.
  - During a sync attempt the copy percentage will no longer hang due to the
    receipt of stale checkpoint data.
  - Resolves: rhbz#474174 rhbz#484968 rhbz#491340


author: Chris Feist <cfeist@redhat.com>
changelog:
  - Fixed more issues which caused the copy percentage of a corelog mirror to
    get stuck.
  - Resolves: rhbz#474174 rhbz#491340


author: Chris Feist <cfeist@redhat.com>
changelog:
  - Local UIDs are now used to prevent more than one log created with the
    same UUID.
  - Resolves: rhbz#506843


author: Chris Feist <cfeist@redhat.com>
changelog:
  - Init script no longer throws errors on 'stop'.
  - Cmirror no longer generates errors if openais stops.
  - Mixed architecture and rolling upgrade issues have been fixed.
  - Resolves: rhbz#488102 rhbz#518665 rhbz#520915


author: Chris Feist <cfeist@redhat.com> - 0.1.22-3.el5
changelog:
  - Fixed mixed arch and rolling upgrade issues.
  - Remove an entry from a list before freeing memory.
  - Resolves: rhbz#544253 rhbz#488102


author: Jakub Jelinek <jakub@redhat.com> 3.4.6-4
changelog:
  - buildrequire elfutils-devel, so that libgcc_s is properly built
    on ia64
  - on ppc*/s390* make sure all needed math *l stubs are included
  - add -lnldbl_nonshared to ppc*/s390* specs


author: Jakub Jelinek <jakub@redhat.com> 3.4.6-4.1
changelog:
  - don't create DT_TEXTREL binaries on ia64 (#462581, PR target/26090)
  - ignore install-info failures in scriptlets (#223680)
  - don't include cpp.debug in compat-gcc-34-debuginfo (#227021)


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-4
changelog:
  - Fixed bz230451 (fence_xvm.key file is not automatically created. Should have a least a default)
  - Fixed bz249097 (allow a space as a valid password char)
  - Fixed bz250834 (ZeroDivisionError when attempting to click an empty lvm volume group)
  - Fixed bz250443 (storage name warning utility produces a storm of warnings which can lock your browser)
  - Resolves: bz249097, bz250443, bz250834
  - Related: bz230451


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-5
changelog:
  - Fixed bz249291 (delete node task fails to do all items listed in the help document)
  - Fixed bz253341 (failure to start cluster service which had been modifed for correction)
  - Related: bz253341
  - Resolves: bz249291


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-6
changelog:
  - Fixed bz253783
  - Fixed bz253914 (conga doesn't allow you to reuse nfs export and nfs client resources)
  - Fixed bz254038 (Impossible to set many valid quorum disk configurations via conga)
  - Fixed bz253994 (Cannot specify multicast address for a cluster)
  - Resolves: bz253783, bz253914, bz254038, bz253994


author: Ryan McCabe <rmccabe@redhat.com> 0.12.0-4
changelog:
  - Fix bz429151 ([RFE] Luci: increase min password length to 6 characters)
  - Fix bz429152 ([RFE] add inactivity timeout)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.0-6
changelog:
  - Fix bz434586 (Resource tree does not display multiple children of a parent correctly)
  - Fix bz304931 (Rich Sybase resource agent configuration support)
  - Fix bz437398 (When Luci session times out a re-login is thought to be a logout.)


author: Chris Feist <cfeist@redhat.com> 0.12.2-12.el5_5.1
changelog:
  - An issue with calling 'virsh nodelist' would cause ricci to hang for
    30 seconds during most requests resulting in timeouts to the web interface.
  - Resolves: rhbz#578954


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-24
changelog:
  - Fix bz493662 (RFE: Separate the Oracle 10g Failover Instance in Conga to two resources called "Oracle Instance" and "Oracle Listener")


author: Jan Pokorny <jpokorny@redhat.com> 0.12.2-51
changelog:
  - Fix bz711494 (CVE-2011-1948 plone: reflected XSS vulnerability)
  - Fix bz771920 (CVE-2011-4924 Zope: Incomplete upstream patch for CVE-2010-1104/bz577019)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-4
changelog:
  - Rework fix for bz483775 (Failover Domains can't be set for VMs as services of cluster suite using Conga)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-5
changelog:
  - Fix bz492392 (Conga Interface for Fence Agents Requires Password even when Password Script is Specified)
  - Fix bz491903 ([RFE] add option 'nfslock' to conga)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-6
changelog:
  - Fix bz469965 (Adding existing fence device fails)
  - Fix bz499741 (updating qdisk partition global settings wipes out heuristics)
  - Fix bz495109 (Need xen/kvm flag for conga UI)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-6.1
changelog:
  - Fix bz519252: run the 'virsh' command with --readonly to cope with new
    virsh/xen behavior introduced in RHEL 5.4.


author: Jan Pokorny <jpokorny@redhat.com> 0.12.2-59
changelog:
  - Fix bz835649 (luci uninstall will leave /var/lib/luci/var/pts and /usr/lib*/luci/zope/var/pts behind)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-60
changelog:
  - Improvements for bz832185 (Luci cannot configure the "identity_file" attribute for fence_ilo_mp)
  - Improvements for bz822633 (Add luci support for nfsrestart)


author: Jan Pokorny <jpokorny@redhat.com> 0.12.2-64
changelog:
  - Improvements for bz786372 (Better protect luci's authentication cookie)
  - Improvements for bz607179 (Improper handling of session timeouts)


author: Jan Pokorny <rmccabe@redhat.com> - 0.12.2-67
changelog:
  - luci: copyright info not displayed properly with non-English locale
    Resolves: rhbz#514679
  - luci: templates batch cleanup: rel links, "forgotten password" feature, consistent titles
    Resolves: rhbz#853018


author: Ryan McCabe <rmccabe@redhat.com> - 0.12.2-68
changelog:
  - luci: Fix for uncaught exception caused by deep recursion
    Resolves: rhbz#872645
  - luci: Don't chkconfig system services on when starting
    Resolves: rhbz#887170
  - luci: Additional fix for rhbz#514679
    Resolves: rhbz#514679


author: Jan Pokorny <jpokorny@redhat.com> - 0.12.2-78
changelog:
  - luci: reflect startup_wait parameter added in postgres-8 RA
    Resolves: rhbz#1065263
  - luci: Multiple information leak flaws in various luci site extensions
    Resolves: rhbz#1076148


author: Jan Pokorny <jpokorny@redhat.com> - 0.12.2-79
changelog:
  - luci: drop unsuccessful monkey patch application wrt. Plone 20121106 advisory
    Related: rhbz#956861


author: Ryan McCabe <rmccabe@redhat.com> 0.9.2-6
changelog:
  - Fixed bz233326 (CVE-2007-0240 Conga includes version of Zope that is vulnerable to a XSS attack)
  - Fixed bz228637 (CVE-2007-1462 security alert - passwords sent back from server as input value)
  - Fixed bz236020 (Conga allows creation/rename of clusters with name greater than 15 characters)
  - Fixed bz236021 (Cluster cannot be deleted (from 'Manage Systems') - but no error results)
  - Fixed bz236025 (Entering bad password when creating a new cluster = UnboundLocalError: local variable 'e' referenced before assignment)
  - Fixed bz236026 (luci failover domain forms are missing/empty)
  - Fixed bz236027 (fence_xvm is incorrectly listed as "xmv" in virtual cluster)
  - Fixed bz236048 (Advanced options parameters settings don't do anything)
  - Fixed bz236050 (Unable to configure a virtual service)
  - Fixed bz236052 (kmod-gfs-xen not installed with Conga install)
  - Fixed bz236054 (enable shared storage' option cleared whenever there is a configuration error)
  - Fixed bz236055 (Must manually edit cluster.conf on the dom0 cluster to add "<fence_xvmd/>")
  - Resolves: bz233326, bz228637, bz236020, bz236021, bz236025, bz236026,
  - Resolves: bz236027, bz236048, bz236050, bz236052, bz236054, bz236055
  - Related: bz236023


author: Matthias Clasen <mclasen@redhat.com> - 2.16.0-13
changelog:
  - Fix a possible crash when dbus is not available (#216698)
  - Fix a possible crash with DND of themes (#216699)


author: Ray Strode <rstrode@redhat.com> - 2.16.0-15
changelog:
  Resolves: #250220
  - Workaround e-d-s issue to retain account changes
  - Make dialog smaller to fit on small displays
  - Make alt-c actually commit changes, too


author: Robert Relyea <rrelyea@redhat.com> - 1.1.0-12
changelog:
  - Fix threading issue. Coolkey will now work with non-threaded applications
  - that don't link with libpthread.


author: Tim Waugh <twaugh@redhat.com> 5.97-12.1
changelog:
  - Fixed stat's 'C' format specifier (bug #216676).
  - Misleading 'id -Z root' error message (bug #211089).


author: Ondrej Vasik <ovasik@redhat.com> 5.97-13
changelog:
  - Prevent a cut(1) crash (bug #222117).
  - allow cp -a to rewrite file on NFS filesystem(#320771)
  - fixed du output for unaccesible dirs(#250087)
  - fixed displaying dangling symlinks with full path(#236721)
  - fixed rm race(#235994)


author: Ondrej Vasik <ovasik@redhat.com> 5.97-14
changelog:
  - apropos selinux should display runcon and chcon(#217881)
  - fixed bug in handling YYYYMMDD date format with relative
    signed offset(#377821)


author: Ondrej Vasik <ovasik@redhat.com> 5.97-21
changelog:
  - do not show error messages about unsupported operation
    when copying xattrs to prevent spam on e.g. NFSv3(#496143)
  - improve version sorting in ls based on latest upstream
    version(#253817)


author: Ondrej Vasik <ovasik@redhat.com> 5.97-22
changelog:
  - fixed segfault in join for multibyte locales (#497368)
  - df: use open(2), not stat, to trigger automounting(#497830)


author: Ondrej Vasik <ovasik@redhat.com> 5.97-23
changelog:
  - add support for copying xattrs to --archive (-a) option
    as well, but don't show diagnostic errors for it - do not
    require preserving xattrs(#454072)


author: Ondrej Vasik <ovasik@redhat.com> 5.97-23.1
changelog:
  - fixed regression where df -l <device> as regular user
    cause "Permission denied" (#520630, introduced by fix for
    rhbz #497830)


author: Ondrej Vasik <ovasik@redhat.com> 2.6.21
changelog:
  - fix segfault and rsh issues caused by missing
    buildrequires: rsh (#452904)
  - cpio -p should now honour system umask (#484690)


author: Ondrej Vasik <ovasik@redhat.com> 2.6-23.1
changelog:
  - CVE-2010-0624 fix heap-based buffer overflow by expanding
    a specially-crafted archive
  - CVE-2007-4476 fix stack crashing in safer_name_suffix


author: Pavel Raiskup <praiskup@redhat.com> 2.6-25
changelog:
  - man page edit to document the misleading error message in case the used tape
    machine does not support default block size of 512 Bytes (#573943)


author: Petr Sabata <psabata@redhat.com> - 1:005-2
changelog:
  - RHEL-5.6 build
  - Including cpufreq-aperf from cpufrequtils-008 (Source1, Source2)
  - Makefile patch to handle cpufreq-aperf
  - Resolves: rhbz#568754


author: Jarod Wilson <jwilson@redhat.com>
changelog:
  - Fix up exit codes for LSB compliance (#237940)
  - Try loading acpi-cpufreq even on systems that don't
    report enhanced speedstep support (#216702)
  - Indentation and variable usage cleanup


author: Jarod Wilson <jarod@redhat.com> 1.2.1-8
changelog:
  - Revert fixes for #488924, they unfortunately lead to cpuspeed
    never starting on boot on xen kernels, since cpuspeed starts
    before xend (#498406)


author: Jarod Wilson <jarod@redhat.com> 1.2.1-9
changelog:
  - Start cpuspeed after syslog on boot so its messages are logged (#516244)
  - Don't load acpi-cpufreq by default on Intel 7100 series processors,
    due to a hardware bug that can lead to a lockup (#449004)
  - Minor initscript exit status fixups (#495049)


author: Petr Sabata <psabata@redhat.com> 1.2.1-10
changelog:
  - Initscript changed to reset to default values if no minimal or maximal
    CPU speed is defined in configuration
  - Resolves: rhbz#616524


author: Jarod Wilson <jwilson@redhat.com>
changelog:
  - Disable freq scaling by default on AMD rev F and earlier
    cpus when running xen, due to clock instability (#435321)


author: Jarod Wilson <jarod@redhat.com> 1.2.1-5
changelog:
  - Support for speedstep-centrino module fallback if
    new-and-improved acpi-cpufreq doesn't work (#463488)


author: Jarod Wilson <jarod@redhat.com> 1.2.1-6
changelog:
  - Don't try loading speedstep-centrino if acpi-cpufreq already
    successfully loaded, it causes p-state issues (#485480)
  - If we're running on a Xen kernel and the number of virtual cpus
    doesn't match the number of physical cpus, we could end up
    scaling the wrong physical cpu due to migration, so in the
    vcpus != pcpus case, don't do freq scaling (#488924)


author: Jarod Wilson <jarod@redhat.com> 1.2.1-7
changelog:
  - Handle case under kernel-xen where xm is unavailable and/or
    we can't communicate with xend (additional fix for #488924)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.9-3.2
changelog:
  - fix check for the existence of dictionaries when the caller specifies a
    location (#225858, upstream #1644628)
  - attempt to provide doc strings in the python module (more of #225858)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.9-3.3
changelog:
  - improve reports of out-of-memory exceptions so that they don't include a
    bogus filename (more on #225858)
  - improve reports of file-missing exceptions from the python module so that
    they give the right filename


author: Dave Anderson <anderson@redhat.com> - 4.0-3.14
changelog:
  - Fix for s390x live system analysis to recognize debuginfo vmlinux
    file that contains an ASCII char adjacent to the Linux version
    string.
  - Resolves: rhbz#216973


author: Dave Anderson <anderson@redhat.com> - 4.0-4.3.1
changelog:
  - Fix for "dev -p" command for ppc64 machines with virtual devices
    and for kernels that don't have the "pci_device" symbol.
  - Resolves: rhbz#220929 
  - Fix for "crash: cannot resolve "init_task_union" errors due to
    to "__per_cpu_start" and "__per_cpu_end" symbols changing from
    type 'A' to type 'D'.
  - Resolves: rhbz#221901 
  - Fix for segmentation fault when attempting to read a xen core dump
    from a 6 GB guest.
  - Resolves: rhbz#224535 
  - Fix for crash session initialization failure indicating "crash:
    cannot read/find cr3 page" in xendumps where the cr3 register
    value in the dumpfile header is overloaded to be able to use
    page directory pages that are greater than 4GB.
  - Resolves: rhbz#223454 
  - Support for determining the physical base address in FV relocatable
    x86_64 xendump dumpfiles run as xen guests. 
  - Resolves: rhbz#233151 
    Create a new crash-devel package for extension modules, which installs
    defs.h in /usr/include/crash. 
  - Resolves: rhbz#241045 
    Reasonable backtraces for x86_64.
  - Resolves: rhbz#221355


author: Dave Anderson <anderson@redhat.com> - 4.0-4.6.1
changelog:
  - Fix for "bt" command segmentation violation when run against
    an x86 xen-syms hypervisor.
  - Resolves: rhbz#252198


author: Dave Anderson <anderson@redhat.com> - 4.0-5.0.1
changelog:
  - Fix for initialization-time failure when analyzing a vmcore of
    an i386-HVM guest that was taken when running on an x86_64 host
  - Resolves: rbhz#288691
  - Fix for initialization-time segmentation violation when analyzing
    a vmcore in which the kernel has over-run its kernel stack, 
    corrupting the process thread_info structure, which is used by 
    the crash utility for determining the process cpu.
  - Resolves: rbhz#405101
  - Fix for "mod" command when analyzing ppc64 kernels with 64K pages.
  - Resolves: rbhz#414881


author: Dave Anderson <anderson@redhat.com> - 4.0-5.0.2
changelog:
  - Fix for initialization-time segmentation violation when analyzing
    a vmcore in which the kernel has over-run its kernel stack, 
    corrupting the process thread_info structure, which is used by 
    the crash utility for determining the process cpu.
  - Resolves: rbhz#405101


author: Dave Anderson <anderson@redhat.com> - 4.0-7.2.2
changelog:
  Fix for x86 "bt" command to correctly handle the transition from
    the hard IRQ stack back to the process stack and then display
    the interrupt exception frame.
  - Resolves: rhbz#462624


author: Dave Anderson <anderson@redhat.com> - 4.0-7.2.3
changelog:
  Fix for the incomplete resolution for the "search -k" option when 
    run on RHEL5 ia64 CONFIG_SPARSEMEM kernels.  The initial fix
    addressed the segmentation violation, but on certain physical 
    memory configurations, it would prematurely bail out when making
    the transition from the kernel mapped region to the vmalloc region.
  - Resolves: rhbz#458417


author: Dave Anderson <anderson@redhat.com> - 4.0-7.2.3.el5_3.1
changelog:
  Fix for a "bt" command segmentation violation by correctly
    handling the transition from the IRQ stack back to the process
    stack running when running against a Xen kernel.
  - Resolves: rhbz#479810


author: Dave Anderson <anderson@redhat.com> - 4.0-7.2.4
changelog:
  Fix for a "bt" command segmentation violation by correctly 
    handling the transition from the IRQ stack back to the process 
    stack running when running against a Xen kernel.
  - Resolves: rhbz#478904


author: Dave Anderson <anderson@redhat.com> - 4.0-8.9.el5
changelog:
  - Re-based package to upstream version 4.0-8.9.
  - Resolves: rhbz#494028
  - Fix for nonsensical usage of the "set" command when running
    against the xen hypervisor binary.  If entered alone on the
    command line, the command would cause a segmentation violation,
    because there is no concept of a "context" in the xen hypervisor.
    In addition, more reasonable error messages are displayed if
    "set", "set -c <cpu>", "set -p", or "set <address>" are
    attempted when running against a xen hypervisor.
  - Resolves: rhbz#462819
  - Fix for "irq -d" option when run on x86_64 xen kernels.  Without the
    patch it would indicate: "irq: invalid structure size: gate_struct"
    and dump a stack trace leading to x86_64_display_idt_table().  Now it
    will indicate that the -d option is not applicable.
  - Resolves: rhbz#464116
  - Fixes for the "bt" command when running against the xen hypervisor
    binary.  The "bt -o" option, and setting it to run by default with
    "bt -O", would fail with the vmlinux-specific error message "bt:
    invalid structure size: desc_struct" with a stack trace leading
    to read_idt_table(); with the patch it will display the generic
    error message "bt: -o option not supported or applicable on this
    architecture or kernel".  The "bt -e" or "bt -E" will also display
    the same error message, as opposed to the command usage message.
    Lastly, the "bt -R" option would cause a segmentation violation;
    it has been fixed to work as it was designed.
  - Resolves: rhbz#464288
  - Fix for the "bt" command when run on a xen hypervisor in which the
    backtrace leads to either "process_softirqs" or "page_fault".
    Without the patch, the backtrace indicates: "bt: cannot resolve stack
    trace", and then the recovery code terminates the command with the
    nonsensical error message: "bt: invalid structure size: task_struct".
  - Resolves: rhbz#466724
  - Fix for "bt -a" command when running against the xen hypervisor where
    the number of physical cpus outnumber the MAX_VIRT_CPUS value for the
    processor type.  Without the patch on such a system, "bt -a" would
    fail after displaying backtraces for the first 32 (MAX_VIRT_CPUS)
    pcpus with the the error message: "bt: invalid vcpu".  The patch also
    corrects the "vcpus" command output to show the vcpus associated with
    pcpus 32 through 63, and the "doms" command output to show the second
    idle domain associated with pcpus 32 through 63.
  - Resolves: rhbz#471790
  - Fix for the "bt" command when run on a xen hypervisor in which the
    backtrace leads to either "process_softirqs" or "page_fault".
    Without the patch, the backtrace indicates: "bt: cannot resolve stack
    trace", and then the recovery code terminates the command with the
    nonsensical error message: "bt: invalid structure size: task_struct".
  - Resolves: rhbz#474712
  - Fix for "mod -[sS]" command if the target module object filename
    contains both underscore and dash characters.  Without the patch
    the module load would fail with the error message: "mod: cannot
    find or load object file for <name> module".  Examples are
    the "aes_x86_64" module from the "aes-x86_64.ko" object file, and
    the "dm_region_hash" module from the "dm-region_hash.ko" object file.
  - Resolves: rhbz#480136
  - Changed the manner in which the "bt" command determines which PID 0
    swapper task was interrupted by an ia64 INIT or MCA exception.
    There is an existing ia64 INIT/MCA handler bug which incorrectly
    writes the pseudo task's command name in its comm[] name string
    such that the cpu number may not be part of the string.  If that
    happens without this patch, the "bt" command fails to make the link
    back to the interrupted task, and displays the error message:
    "bt: unwind: failed to locate return link (ip=0x0)!"
  - Resolves: rhbz#487429
  - The starting backtrace location of active, non-crashing, xen dom0
    tasks are not available in kdump dumpfiles, nor is there anything
    that can be searched for in their respective stacks.  Therefore, for
    those those tasks, the "bt" command will indicate: "bt: starting
    backtrace locations of the active (non-crashing) xen tasks cannot be
    determined: try -t or -T options".  Without the patch, the backtrace
    would either be empty, or it would show an invalid backtrace starting
    at the last location where schedule() had been called. 
  - Fix for potentially empty "bt -t" output, and for "bt -T" potentially
    dumping the text return addresses in the hard or soft IRQ stacks
    instead of the process stack.  This could occur if the targeted task
    was the last task that used the hard or soft IRQ stack (x86 only).
  - Resolves: rhbz#495586


author: Dave Anderson <anderson@redhat.com> - 4.0-8.9.1.el5
changelog:
  - Fix for running "foreach bt" on a live system, where a backtrace that
    is attempted on a task that no longer exists may cause a segmentation
    violation due to the use of stale/invalid kernel stack pointer.
  - Resolves: rhbz#504796


author: Dave Anderson <anderson@redhat.com> - 4.1.2-2.el5
changelog:
  - Fix for a 4.0-8.11 regression that introduced a bug in determining
    the number of cpus in ppc64 kernels when the cpu_possible_[map/mask]
    has more cpus than the cpu_online_[map/mask].  In that case, the
    kernel contains per-cpu runqueue data and "swapper" tasks for the
    extra cpus.  Without the patch, on systems with a possible cpu count
    that is larger than its online cpu count:
     (1) the "sys" command will reflect the possible cpu count.
     (2) the "ps" command will show the existent-but-unused "swapper"
         tasks as active on the extra cpus.
     (3) the "set" command will allow the current context to be set to
         any of the existent-but-unused "swapper" tasks.
     (4) the "runq" command will display existent-but-unused runqueue
         data for the extra cpus.
     (5) the "bt" command on the existent-but-unused "swapper" tasks will
         indicate: "bt: cannot determine NT_PRSTATUS ELF note for active
         task: <task>" on dumpfiles, and "(active)" on live systems
  - Resolves: rhbz#550419


author: Dave Anderson <anderson@redhat.com> - 4.1.2-3.el5
changelog:
  - Fix for the "bt" command on an ia64 "INIT" process that interrupted
    a task that was running in user space, but was unable to modify the
    original (interrupted) task's stack.  Without the patch, the "INIT"
    task's backtrace would not display the task that was interrupted,
    and would display the error message "bt: unwind: failed to locate
    return link (ip=<user-virtual-address>)!".  With the patch, the
    interrupted task information is displayed in the same manner as if
    the original stack had been modified.
  - Resolves: rhbz#553353


author: Dave Anderson <anderson@redhat.com> - 4.1.2-4.el5
changelog:
  - Fix for very large xendump core files whose ELF sections are located
    beyond a file offset of 4GB.
  - Resolves: rhbz#561767


author: Dave Anderson <anderson@redhat.com> - 4.1.2-4.el5_5.1
changelog:
  - Fix for backtrace of x86 NMI-interrupted task with a user exception frame
    from a syscall exception that had not called the requested system call 
    function.
    Fix for backtrace when a newly-forked x86 task's resumption EIP address 
    value is set to the "ret_from_fork" entry point by copy_thread().
    Resolves: rhbz#601089
  - Fix for segmentation violation with the "mach -m" command option on x86 
    or x86_64 systems whose BIOS-provided e820 map contains EFI-related memory
    type value that has not been mapped to an E820 type.
    Resolves: rhbz#601082
  - Fix for the "kmem -s list" command option to prevent it from attempting
    to gather a slab cache name string from the "cache_chain" list_head.
    Resolves: rhbz#601084
  - Change the ppc64 cpu count displayed by the initial system banner
    and by the "sys" and "mach" commands to be the number of cpus online.
    Resolves: rhbz#601088
  - Fix for backtrace of an x86_64 NMI-interrupted task which had not 
    swapped its RSP from the user-space stack to the kernel stack.
    Resolves: rhbz#601081


author: Dave Anderson <anderson@redhat.com> - 4.1.2-6.el5
changelog:
  - Support for "__rhel5" marker device in KVM dumpfile header.
    Resolves: rhbz#603027
  - Fix for the x86 "bt" command to generically recognize the end of trace
    condition for user-space tasks without having to hardwire any more 
    kernel entry point function names.
    Resolves: rhbz#608714
  - Fix for the x86_64 "bt" command if the kdump-generated NMI interrupts
    a multi-threaded task that has just entered kernel space but has not
    changed the RSP stack pointer register from its user-space per-thread
    stack location to the kernel stack.
    Resolves: rhbz#608171


author: Dave Anderson <anderson@redhat.com> - 4.1.2-7.el5
changelog:
  - Fix for the x86 "bt" command for potential backtrace error of a
    NMI-interrupted idle task.
    Resolves: rhbz#653288
  - Fix for the x86 "bt" command to fix Xen hypervisor backtrace errors 
    generated when a NMI-interrupted VCPU is running within the hypercall
    entry point, and when a NMI-interrupted VCPU is running within an
    interrupt handler entry point.
    Resolves: rhbz#653823


author: Dave Anderson <anderson@redhat.com> - 4.1.2-8.el5
changelog:
  - Fix for potential segmentation violation in glibc malloc/free when 
    running "kmem -s" on a large, active, live system.
    Resolves: rhbz#659593


author: Dave Anderson <anderson@redhat.com> - 5.1.8-1.el5
changelog:
  - Rebase to upstream version 5.1.8.
    Resolves: rhbz#715072

  - Fix for the x86_64 "bt" command if the shutdown NMI is issued to a
    32-bit task that has executed a "sysenter" instruction and the RSP
    still contains the zero value loaded from the MSR_IA32_SYSENTER_ESP
    register.  The backtrace issued a warning message indicating 
    "WARNING: possibly bogus exception frame", and was unable to make a 
    transition from the NMI exception stack back to the process stack. 
    Resolves: rhbz#676408

  - Fix for the x86 "bt" command for several backtraces of non-crashing
    active tasks that fail with "bt: cannot resolve stack trace" errors
    due to the failure to properly transition from the shutdown NMI stack 
    back to the process stack.
    Resolves: rhbz#713050

  - Fix to more correctly determine the KVM I/O hole size and location.
    The I/O hole size to this point in time is either 1GB or 512MB, but
    its setting is hardwired into the Qemu code that was used to create 
    the dumpfile.  The dumpfile is a "savevm" file that is designed to be
    used for guest migration, and since inter-version save/load is not 
    supported, the I/O hole information does not have to be encoded into the
    dumpfile.  Without the patch, the I/O hole for dumpfiles created by 
    older Qemu version was not being set to 1GB, so if the KVM guest was 
    configured with more than 3GB of memory, the crash session would 
    typically display numerous "read error" messages during session 
    initialization.
    Resolves: rhbz#715070

  - Fix for KVM dumpfiles from guests that were provisioned with more
    than 3.5GB of RAM.  KVM virtual systems contain an I/O hole in the
    physical memory region from 0xe0000000 to 0x100000000 (3.5GB to 4GB).
    If a guest is provisioned with more than 3.5GB of RAM, then the
    memory above 3.5GB is "pushed up" to start at 0x100000000 (4GB).
    But the "ram" device headers in the KVM dumpfiles do not reflect
    that, and so without the patch, numerous error messages would be
    displayed during invocation, and in all probability, the session
    would fail.
    Resolves: rhbz#716327


author: Dave Anderson <anderson@redhat.com> - 5.1.8-2.el5
changelog:
  - Fix to handle xen dom0 dumpfiles created with "makedumpfile -d1" on very
    large systems, where the ELF vmcore may be mistakenly determined to be
    an old-style netdump vmcore.  
    Resolves: rhbz#876046


author: Milan Broz <mbroz@redhat.com> - 1.0.3-3
changelog:
  - Fix segfault when key-slot number is greater than max number of keys.
  - Fix segfault on ppc64 platform.
    Resolves: #444665 #440425


author: Milan Broz <mbroz@redhat.com> - 1.0.3-5
changelog:
  - Properly wipe header during format (removes fs signature).
  - Fix cryptsetup status return code.
  - Show device name when prompting for password.
    Resolves: #468910 #439191 #437261


author: Milan Broz <mbroz@redhat.com> - 1.0.3-6
changelog:
  - Fix hang if argument is not block device.
  - Remove wrong automatic header conversion.
  - Fix crash for keys larger than 256bits.
    Resolves: #583431 #622712 #678011


author: Milan Broz <mbroz@redhat.com> - 1.0.3-8
changelog:
  - Fix some memory leaks.
  - Wipe salt and iteration count when deleting keyslot.
    Resolves: #696561 #697815


author: Tomas Hoger <thoger@redhat.com> - 15.5-15.el5_3.4
changelog:
  - Merge incdir-overflow and snprintf patches for better readability,
    snprintf is used now with PATHLEN limit without other adjustments,
    related strlen / %.*s / *_len are no longer needed and were dropped
  - Update tempsec patch, drop extraneous s(n)printf argument
    to suppress compiler warnings
  - Update fscanf-overflows patch to perform reffile argument length
    check earlier, now also includes strlen-adjust-fix patch


author: Sumit Bose <sbose@redhat.com> - 1.0.112-1
changelog:
  - Updated to ctdb version 1.0.112 maintenance release 18,
     git commit de49edcc0dfea7c4396cdbd9e4897358b5474100
     resolves: #611854
   - substituted $RPM_BUILD_ROOT by %{buildroot}
   - fix permissions on event scripts
   - fixed rpmlint warnings
   - added fix for bz537223


author: : Version 1.0.82
changelog:
  - Update the "ctdb lvsmaster" command to return -1 on error.
   - Add a -Y flag to "ctdb lvsmaster"
   - RHEL5 apache leaks semaphores when crashing. Add semaphore cleanup to the
     41.httpd eventscript and try to restart apache when it has crashed.
   - Fixes to some tests
   - Add a -o option to "onnode" which will redirect all stdout to a file for
     each of the nodes.
   - Add a natgw and a lvs node specifier to onnode so that we can use
     "onnode natgw ..."
   - Assign the natgw address to lo instead of the private network so it can also
     be used where private and public networks are the same.
   - Add GPL boilerplates to two missing scripts.
   - Change the natgw prefix NATGW_ to CTDB_NATGW_


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.14:.2
changelog:
  - Applied patch to fix CVE-2007-4045 (bug #356571).
  - Applied patch to fix CVE-2007-4352, CVE-2007-5392 and
    CVE-2007-5393 (bug #356571).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.14:.4
changelog:
  - Prevent double-free when a browsed class has the same name as a printer
    or vice versa (bug #433766, STR #2656).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.14:.5
changelog:
  - Applied patch to prevent heap-based buffer overflow in CUPS helper
    program (bug #436153, CVE-2008-0047, STR #2729).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.14:.6
changelog:
  - Applied patch to fix CVE-2008-0053 (HP-GL/2 input processing, bug #438117).
  - Applied patch to fix CVE-2008-1373 (GIF overflow, bug #438303).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Applied patch to fix CVE-2007-4045 (bug #356581).
  - Applied patch to fix CVE-2007-4352, CVE-2007-5392 and
    CVE-2007-5393 (bug #356581).
  - Applied patch to fix CVE-2007-4351 (STR #2561, bug #353991).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.15
changelog:
  - Fixed LSPP patch so that strings allocated with cupsdSetString() are always
    clear correctly (bug #258221).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.16
changelog:
  - Prevent double-free when a browsed class has the same name as a printer
    or vice versa (bug #433767, STR #2656).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.18:.2
changelog:
  - Applied patch to fix CVE-2008-3639 (STR #2918, bug #464721).
  - Applied patch to fix CVE-2008-3640 (STR #2919, bug #464721).
  - Applied patch to fix CVE-2008-3641 (STR #2911, bug #464721).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-9
changelog:
  - Include printer-uri IPP attribute in IPP-Get-Jobs requests in order
    to be able to operate correctly with newer versions of CUPS
    (bug #497529, STR #2996, STR #3107, STR #3117).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-10
changelog:
  - Reverted php-cgi change due to incorrectly handling of CGI output
    that is not line-based (STR #3194, bug #460898).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-11:.3
changelog:
  - Include NULL pointer check in ObjectStream::getObject.  Part of the
    fix for CVE-2009-3608 (bug #526637).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-11:.4
changelog:
  - Applied patch to fix CVE-2009-3553 (bug #530111, STR #3200).
  - Applied patch to fix CVE-2009-2820 (bug #529833, STR #3367, STR #3401).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-16
changelog:
  - Applied patch to prevent memory leak when adding/modifying printers
    (bug #540646, STR #2836).
  - Applied patch to fix CVE-2009-3553 (bug #530111, STR #3200).
  - Applied patch to fix CVE-2009-2820 (bug #529833, STR #3367, STR #3401).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-18:.2
changelog:
  - Applied patch for CVE-2010-1748 (web interface memory disclosure,
    STR #3577, bug #591983).
  - Applied patch for CVE-2010-0542 (texttops unchecked memory
    allocation failure leading to NULL pointer dereference, STR #3516,
    bug #587746).
  - Applied patch for CVE-2010-0540 (CUPS administrator web interface
    CSRF, STR #3498, bug #588805).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-18:.5
changelog:
  - Adjust texttops output to be in natural orientation (STR #3563).
    This fixes page-label orientation when texttops is used in the
    filter chain (bug #601516).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-18:.7
changelog:
  - Reverted patch for STR #3563 as it does not fix the original problem
    and may well introduce further regressions (bug #601516).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-18:.8
changelog:
  - Applied patch to fix cupsd memory corruption vulnerability
    (CVE-2010-2941, STR #3648, bug #624438).
  - Fix latent privilege escalation vulnerability (CVE-2010-2431,
    STR #3510, bug #605397).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-24
changelog:
  - Try to avoid overwriting text with page labels (STR #3415,
    bug #527187).
  - Reverted patch for bug #572338 as that and related bugs need a
    solution that can guarantee no regressions.


author: Jiri Popelka <jpopelka@redhat.com> 1:1.3.7-28
changelog:
  - Web interface didn't show completed jobs for printer (STR #3436, bug #625900)
  - Serial backend didn't allow a raw job to be canceled (STR #3649, bug #625955)
  - Fixed condition in textonly filter to create temporary file
    regardless of the number of copies specified. (bug #660518)


author: Jiri Popelka <jpopelka@redhat.com> 1:1.3.7-29
changelog:
  - The imageto* filters could crash with bad GIF files
    (CVE-2011-2896, STR #3867, STR #3914, bug #752118).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-30:.1
changelog:
  - Applied patch to fix CVE-2012-5519 (privilege escalation for users
    in SystemGroup or with equivalent polkit permission).  This prevents
    HTTP PUT requests with paths under /admin/conf/ other than that for
    cupsd.conf, and also prevents such requests altering certain
    configuration directives such as PageLog and FileDevice (bug #875898).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-32
changelog:
  - New SSLOptions directive to enable SSL3 and/or RC4, which are now
    disabled by default (bug #1161218).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-6
changelog:
  - Applied patch to fix CVE-2008-3639 (STR #2918, bug #464722).
  - Applied patch to fix CVE-2008-3640 (STR #2919, bug #464722).
  - Applied patch to fix CVE-2008-3641 (STR #2911, bug #464722).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-8
changelog:
  - Applied patch to fix STR #2974 (bug #473905, CVE-2008-5286,
    CVE-2008-1722).
  - Applied patch to fix STR #2774 (bug #473915, CVE-2008-5184).
  - Applied patch to fix RSS subscription limiting (bug #473901,
    CVE-2008-5183).
  - Run the serial backend as root (bug #216658).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-8:.3
changelog:
  - Applied patches to fix CVE-2009-0163 (bug #490596),
    CVE-2009-0146 (bug #490612), CVE-2009-0147 (bug #490614),
    and CVE-2009-0166 (bug #490625).


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 1:1.3.7-8:.4
changelog:
  - Applied additional patches by Tim Waugh for batch3892.pdf,
    batch4781.pdf, batch5486.pdf, batch19856.pdf, batch19869.pdf
    testing files from CERT (bug #491864).
  - Resolves: rhbz#492386.


author: Kamil Dudka <kdudka@redhat.com> 7.15.5-14
changelog:
  - fix stack smashing in the FTP implementation (#652557)
  - fix proxy kerberos authentication (#657396)
  - update running_handles counter properly in curl_multi_remove_handle (#688871)


author: Kamil Dudka <kdudka@redhat.com> - 7.15.5-8
changelog:
  - mention lack of IPv6, FTPS and LDAP support while using a socks proxy
    (#473128)
  - avoid tight loop if an upload connection is broken (#479967)
  - add options --ftp-account and --ftp-alternative-to-user to program help
    (#517084)
  - fix crash when reusing connection after negotiate-auth (#517199)
  - support for CRL loading from a PEM file (#532069)


author: Petr Pisar <ppisar@redhat.com> - 1.11.22-9
changelog:
  - Deliver xinetd configuration as a sub-package requiring xinetd
    (Resolves: #634691)
  - Protect configuration files from overwriting on package upgrade or
    reinstallation (Resolves: #684769)


author: Jiri Moskovcak <jmoskovc@redhat.com> - 1.11.22-6
changelog:
  - added support for passing arguments thru stdin (patch from arozansk@redhat.com)
  - Resolves: #462062


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.7-10
changelog:
  - fix bug when unselect command on proxy mode caused segmentation fault (#679253)
  - fix lmtp ignorequota on ia64 (#584088)
  - replace instances of #!/usr/bin/env python with #!/usr/bin/python (#521338)
  - don't require lm_sensors-devel, net-snmp-devel is enough (#437999)
  - fix file descriptor leak when moving mailbox folder with quota set (#253854)
  - document that client ignores mupdate_port option (#504813)


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.7-12.2
changelog:
  - fix CVE-2011-3481: NULL pointer dereference via crafted 
    References header in email (#738391)
  - fix CVE-2011-3372: nntpd authentication bypass (#740822)


author: Petr Rockai <prockai@redhat.com> - 2.3.7-1
changelog:
  - update to latest upstream version, fixes a fair amount of issues
  - forward-port the autocreate and rmquota patches (used latest
    upstream patches, those are for 2.3.3)


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.7-5
changelog:
  - don't modify imapd.conf if not necessary, 
    fix different time for source files across archs (#497317)


author: Tomas Mraz <tmraz@redhat.com> 2.1.22-5
changelog:
  - install the shared version of pluginviewer and other tools (#473197)
  - remove potentially patented srp plugin which was not built
    anyway (#368421)
  - include crypt.h for missing prototype (#433583)
  - implement reload as conditional restart in the init script (#448154)
  - set the LDAP_OPT_TIMEOUT in the ldap plugin (#475726)


author: Jan F. Chadima <jchadima@redhat.com> - 2.1.22-5.3
changelog:
  - solve race condition, second version with rewriten spec file for ppc64
    and with repaired autoconf macros (#568084)


author: Doug Ledford <dledford@redhat.com> - 2.0.13-2
changelog:
  - I don't know what I was thinking putting the version into the compat
    dapl packages names...makes upgrades not work and makes things like
    buildrequire compat-dapl-devel not work.  Removed, and we now obsolete
    the existing compat-dapl*-{version} packages.


author: Doug Ledford <dledford@redhat.com> - 2.0.13-3
changelog:
  - Add a compat-dapl-utils package so people can test their dapl-1.2
    setups
  - Even though we tell dapl to look for its config in /etc/ofed, it wasn't
    actually looking there.  Fix that.
  - Resolves: bz465841, bz465840


author: Doug Ledford <dledford@redhat.com> - 2.0.19-1
changelog:
  - Recompile against non-XRC libibverbs
  - Update to OFED 1.4.1 final bits
  - Related: bz506258, bz506097


author: Jay Fenlason <fenlason@redhat.com> 2.0.25-2.1.el5
changelog:
  - compat-dapl-1.2.15-pipe-leak.patch
    Resolves: bz634324    
  - dapl-cleanup-cr-linkings-after-dto-error-on-ep.patch
    Resolves: bz634323
  - compat-dapl-cleanup-cr-linkings-after-dto-error-on-ep.patch
    Resolves: bz636197                            
  - dapl-2.0.25-verbs-cq-completion-channels-leak.patch
    Resolves: bz636193


author: Jay Fenlason <fenlason@redhat.com> 2.0.25-2.el5.1
changelog:
  - compat-dapl-1.2.15-pipe-leak.patch
    Resolves: bz638595
  - dapl-cleanup-cr-linkings-after-dto-error-on-ep.patch
    Resolves: bz638594
  - compat-dapl-cleanup-cr-linkings-after-dto-error-on-ep.patch
    Resolves: bz638862
  - dapl-2.0.25-verbs-cq-completion-channels-leak.patch
    Resolves: bz638860


author: Doug Ledford <dledford@redhat.com> - 2.0.3-2
changelog:
  - Import upstream package, gut spec file, copy over dapl spec from openib spec
  - Merge dapl 1.2 and 2.0 support into a single rpm
  - Related: bz428197


author: Doug Ledford <dledford@redhat.com> - 2.0.3-3
changelog:
  - Make dapl-1.2 and dapl-2.0 devel environments coexist, and make dapl-1.2
    the default lib so that unported apps continue to build, and ported apps
    build properly by adding -L/usr/lib64/dat -ldat to their LDFLAGS.


author: Doug Ledford <dledford@redhat.com> - 2.0.3-3
changelog:
  - Make dapl-1.2 and dapl-2.0 devel environments coexist, and make dapl-1.2
    the default lib so that unported apps continue to build, and ported apps
    build properly by adding -L/usr/lib/dat -ldat to their LDFLAGS.


author: Doug Ledford <dledford@redhat.com> - 2.0.7-1
changelog:
  - Update to same dapl versions as OFED 1.3 final bits
  - Upstream modified dapl-1.2 and dapl-2.0 to coexist, so undo the changes we
    made in order for them to coexist in our package
  - Related: bz428197


author: Ray Strode <rstrode@redhat.com> - 1.0.0-4
changelog:
  Resolves: #217721
  - Don't die on SIGHUP when rereading config file, if it's no
    longer compatible with the version of the bus running


author: Dan Williams <dcbw@redhat.com> - 1.1.2-12
changelog:
  - Fix for CVE-2008-3834
  - Resolves: #466227
  - Remove dbus-libs Obsoletes on dbus; not needed
  - Resolves: #466007


author: Richard Hughes <rhughes@redhat.com> - 1.1.2-21.el5
changelog:
  - Revert the -doc split as the original bug was closed with WONTFIX
  - Ensure unreleased changes are reverted from dist-git.
  - Resolves: #752493


author: Colin Walters <walters@redhat.com> - 0.73-10
changelog:
  - Add patch to fix CVE-2010-1172
    Drop broken-xml.patch which this one now incorporates
    Resolves: #588397
      (and #585395)


author: Colin Walters <walters@redhat.com> - 0.73-10
changelog:
  - Add patch to fix CVE-2010-1172
    Drop broken-xml.patch which this one now incorporates
    Resolves: #585395


author: Tim Waugh <twaugh@redhat.com> 0.19-20.2
changelog:
  - Prevent eggcups crash when hostnames contain an underscore
    (bug #436919).
  - Fixed last patch (bug #434879).


author: Kai Engert <kengert@redhat.com> - 0.12-13
changelog:
  - Reverting previous changes, which failed to build,
    no rebuild necessary at this time because of fixes in gecko.


author: Alasdair Kergon <agk@redhat.com> - 1.02.13-1
changelog:
  - Update dmsetup man page (setgeometry & message).
  - Suppress encryption key in 'dmsetup table' output unless --showkeys supplied.


author: Milan Broz <mbroz@redhat.com> - 1.02.20-1
changelog:
  - Update to latest upstream release.
  - Add tree-based and dependency fields to dmsetup reports.
    Resolves: #168533


author: Milan Broz <mbroz@redhat.com> - 1.02.32-1
changelog:
  - Update to latest upstream release.
  - Source files are now part of LVM2 upstream source tree.
    Resolves: #501752


author: Milan Broz <mbroz@redhat.com> - 1.02.55-2
changelog:
  - Allocate buffer for reporting functions dynamically to support long outputs.
  - Fix regex optimiser not to ignore RHS of OR nodes in _find_leftmost_common.
    Resolves: #649710 #651349


author: Milan Broz <mbroz@redhat.com> - 1.02.67-1
changelog:
  - Update to latest upstream release, see WHATS_NEW_DM for detailed changelog.
    Resolves: #746300 #454618


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-10.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_5
  - Resolves: #214838, #223146, #223150, #223762, #231545, #241189, #242723, #243483


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-12.el5_1.1
changelog:
  - multipath.conf now has a new config option "bindings_file", which allows
    you to specify the bindings file location
  - Resolves: bz #426287


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-12.el5_1.2
changelog:
  - multipathd now creates its own ramfs cache for all callout programs.  This
    means that once multipathd starts, it never needs to access the underlying
    filesystem, so I won't hang if it looses access to the root device.
  - Resolves: bz #428338


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-12.el5_1.3
changelog:
  - All of the non-static path priority callout functions are now symlinks to
    the static versions.
  - Resolves: bz #431947


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.8-12.el5_1.4
changelog:
  - Instead of using clone() to get a new namespace, use fork() and unshare(),
    which fixes an selinux caused crash.
  - Resolves: bz #438150


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-14.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_10
  - Resolves: bz #226791, #247443, #249088, #251346, #335021, #354661, #355961


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-15.el5
changelog:
  - All non-static path_prio callouts are now just symlinks to the static
    ones
  - Resolves: bz #355961


author: Benjamin Marzinski <bmarzins@redaht.com> 0.4.7-33.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_19
  - Added new multipath.conf option "checker_timeout". If this is not set the
    checker functions with explicit timeouts use /sys/block/sd<x>/device/timeout
  - Resolves: bz #553042


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-34.el5
changelog:
  - Added 545822_fix_part2.patch
  - Added 554830_fix.patch
  - Fixed Invista default config, and typo in multipath.conf man page.
  - Resolves: bz #545822, #554830


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-44.el5
changelog:
  - Updated to latest sourse, t0_4_7_rhel5_30
  - Resolves: bz #639429, #627911, #670836, #674366, #675369


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-47.el5
changelog:
  - Updated to latest source, t0_4_7_rhel5_31
  - Resolves: bz #650795, #655203, #655976, #702410, #703501, #711970, #715524, #716329


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-48.el5
changelog:
  - Updated to latest source, t0_4_7_rhel5_32
  - Resolves: bz #703277, #719575, #729478, #737072, #740022, #740512, #741664, #742906


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-59.el5.2
changelog:
  - Modified bz1039935.patch
    * added a check to avoid segfaults if the multipath config didn't define
      an alias.
  - Resolves: bz #1065229


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-61.el5
changelog:
  - Added bz489499.patch
    * update multipathd man page
  - Added bz852011.patch
    * fixed typo in multipath.conf.annotated
  - Added bz1004179.patch
    * updated multipath.conf.defaults
  - Added bz798543.patch
    * changed rpm build flags
  - Added instructions to get upstream tarball
  - Resolves: bz #489499, #560955, #798543, #852011, #1004179


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-62.el5
changelog:
  - Added bz1086949.patch
    * make multipathd block sighup until after it finishes starting-up
  - Resolves: bz #1086949


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-63.el5
changelog:
  - Added bz1092603.patch
    * don't free memory needed by other threads during shutdown, to avoid
      races ending in use after free corruption.
  - Resolves: bz #1092603


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-9
changelog:
  - Updated dhcpd init script to conform to script guidelines
    Resolves: rhbz#237978
  - Updated dhcrelay init script to conform to script guidelines
    Resolves: rhbz#237980


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-12
changelog:
  - Avoid printing two OK/FAILURE messages when the stop() function runs
    in the dhcpd and dhcrelay init scripts
    Resolves: rhbz#439800


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-19
changelog:
  - Do not restart ntpd service unless necessary
    Resolves: rhbz#450301
  - Carry over relay agent options when client enters INIT or REBIND
    Resolves: rhbz#450545
  - Honor PEERNIS and PEERNTP variables completely in dhclient-script
    Resolves: rhbz#471543


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-20
changelog:
  - Restrict interface names given on the dhcpd command line to length
    IFNAMSIZ or shorter
    Resolves: rhbz#441524


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-21
changelog:
  - Display usage if init scripts get 'try-restart' or 'reload' args,
    set exit code to 3
    Resolves: rhbz#491868


author: Jiri Popelka <jpopelka@redhat.com> - 12:3.0.5-21.1
changelog:
  - Memory leak in the load_balance_mine() function is fixed. This would leak ~20-30 octets
    per DHCPDISCOVER packet while failover was in use and in normal state.


author: Jiri Popelka <jpopelka@redhat.com> - 12:3.0.5-23
changelog:
  - fix dhclient to not renew it's lease too often when gets very short lease from server (#498658)
  - fix dhclient-script to not restart ntpd when not necessary (#532136)
  - fix dhcrelay initscript to restart dhcrelay properly (#555672)


author: Jiri Popelka <jpopelka@redhat.com> - 12:3.0.5-23.1
changelog:
  - A partner-down failover server no longer emits 'peer holds all free leases'
    if it is able to newly-allocate one of the peer's leases. (RHBZ #621838)


author: Jiri Popelka <jpopelka@redhat.com> - 12:3.0.5-23.2
changelog:
  - The server's "by client-id" and "by hardware address" hash table lists
    are now sorted according to the preference to re-allocate that lease to
    returning clients.  This should eliminate pool starvation problems
    arising when "INIT" clients were given new leases rather than presently
    active ones. (RHBZ #627572)


author: Jiri Popelka <jpopelka@redhat.com> - 12:3.0.5-27
changelog:
  - dhclient.conf(5) fix (RHBZ #585855)
  - Make dhcpd init script LSB compliant (RHBZ #610128)
  - Use PID for seeding the random number generator in dhclient (RHBZ #623953)
  - Add DHCRELAYARGS variable to /etc/sysconfig/dhcrelay (RHBZ #624965)
  - 'lease imbalance' messages are not logged unless rebalance
    was actually attempted (RHBZ #661939)
  - Explicitly clear the ARP cache and flush all addresses & routes
    instead of bringing the interface down (RHBZ #685048)


author: Jiri Popelka <jpopelka@redhat.com> - 12:3.0.5-28
changelog:
  - Better fix for CVE-2011-0997: making domain-name check more lenient (RHBZ #690577)
  - dhclient requests interface-mtu option by default (RHBZ #694264)


author: Jiri Popelka <jpopelka@redhat.com> - 12:3.0.5-29
changelog:
  - dhclient.conf(5), dhclient(8) mention that interface-mtu option
    is also requested by default (RHBZ #694264)


author: Jiri Popelka <jpopelka@redhat.com> - 12:3.0.5-29.1
changelog:
  - A pair of defects cause the server to halt upon processing certain packets
    (CVE-2011-2748, CVE-2011-2749, #729880)


author: Jiri Popelka <jpopelka@redhat.com> - 12:3.0.5-30
changelog:
  - A pair of defects cause the server to halt upon processing certain packets
    (CVE-2011-2748, CVE-2011-2749, #729881)


author: Jiri Popelka <jpopelka@redhat.com> - 12:3.0.5-31.1
changelog:
  - An error in the handling of malformed client identifiers can
    cause a denial-of-service condition in affected servers. (CVE-2012-3571, #843124)


author: Jiri Popelka <jpopelka@redhat.com> - 12:3.0.5-32
changelog:
  - An error in the handling of malformed client identifiers can
    cause a denial-of-service condition in affected servers. (CVE-2012-3571, #843125)


author: David Cantrell <dcantrell@redhat.com> - 1.0.10-14
changelog:
  - Add directive for dhcp6s.conf that lets users enable the 'only
    send option 23 for ADVERTISE messages' setting
    Related: rhbz#426899


author: David Cantrell <dcantrell@redhat.com> - 1.0.10-15
changelog:
  - Allow users to configure dhcp6s to return only option 24 for
    ADVERTISE and REPLY messages
    Related: rhbz#426899


author: David Cantrell <dcantrell@redhat.com> - 1.0.10-16
changelog:
  - Remove the ADVERTISE/REPLY patch for option 24 as it is unnecessary,
    the problem was in our test driver scripts for the TAHI suite
    Resolves: rhbz#426899


author: Jiri Popelka <jpopelka@redhat.com> - 1.0.10-18
changelog:
  - Get new address when moving into a new link (bug #466251).
  - Windows 2008 interoperability fix in dhcp6c (bug #476974).
  - Check DAD necessity by the interface type to prevent dhcp6c
    from segfaulting when run for second time (bug #515644).


author: Jiri Popelka <jpopelka@redhat.com> - 1.0.10-19
changelog:
  - Server correctly parses Relay-Forward message (bug #512399).
  - Client correctly handles NotOnLink error in REPLY (bug #511323).
  - Server doesn't send NotOnlink error in REPLY
    when more range statements configured (bug #598439).


author: David Cantrell <dcantrell@redhat.com> - 1.0.10-2
changelog:
  - Fix hwtype in calculate_duid_len()
    Resolves: rhbz#377101
  - Do not return IA_NA option with status code set to NoAddrAvail
    Resolves: rhbz#365531
  - Add domain list option check to specify DNS list
    Related: rhbz#377131
  - Update 'now' whenever checking expiration for each timer
    Resolves: rhbz#365501
  - Verify length of buffer for RELAY_REPL correctly
    Resolves: rhbz#365551
  - Support updating /etc/resolv.conf when network-functions is not available
    Related: rhbz#377131
  - Remove gcc_intrin.h workaround for ia64
    Related: rhbz#429074


author: David Cantrell <dcantrell@redhat.com> - 1.0.10-3
changelog:
  - Fix hwtype in calculate_duid_len()
    Resolves: rhbz#377101
  - Do not return IA_NA option with status code set to NoAddrAvail
    Resolves: rhbz#365531
    Related: rhbz#426899
  - Add domain list option check to specify DNS list
    Related: rhbz#377131
  - Update 'now' whenever checking expiration for each timer
    Resolves: rhbz#365501
  - Verify length of buffer for RELAY_REPL correctly
    Resolves: rhbz#365551
    Related: rhbz#365521
    Related: rhbz#365531
    Related: rhbz#365541
    Related: rhbz#365581
    Related: rhbz#365591
    Related: rhbz#365601
    Related: rhbz#365631
    Related: rhbz#365641
    Related: rhbz#365651
    Related: rhbz#376871
  - Support updating /etc/resolv.conf when network-functions is not available
    Related: rhbz#377131
  - Remove gcc_intrin.h workaround for ia64
    Related: rhbz#429074


author: David Cantrell <dcantrell@redhat.com> - 1.0.10-4
changelog:
  - Do not send Message-ID from dhcp6r except for RELAY-FORWARD and RELAY-REPL
    Resolves: rhbz#440440


author: David Cantrell <dcantrell@redhat.com> - 1.0.10-4.el5_2.1
changelog:
  - Do not dereference a possible NULL pointer in dhcp6c
    Resolves: rhbz#449325
  - Check DUID and IAID for duplicate hosts
    Resolves: rhbz#449326
  - Add error handling during initialization of dhcp6c
    Resolves: rhbz#449347
  - Log correct PID after daemonizing in dhcp6c
    Resolves: rhbz#449331
  - Handle multiple nameservers in option-23
    Resolves: rhbz#449327
  - Use last 4 bytes of MAC address to generate IAID
    Resolves: rhbz#449329


author: David Cantrell <dcantrell@redhat.com> - 1.0.10-4.el5_2.2
changelog:
  - Add -fno-strict-aliasing to the CFLAGS
    Related: rhbz#449325
    Related: rhbz#449326
    Related: rhbz#449347
    Related: rhbz#449331
    Related: rhbz#449327
    Related: rhbz#449329


author: David Cantrell <dcantrell@redhat.com> - 1.0.10-4.el5_2.3
changelog:
  - Set status code of Advertise message to NoAddrAvail when necessary
    Resolves: rhbz#455723
  - Check IA options of the received Advertise message
    Resolves: rhbz#455668
  - Do not return IA_NA option with status code set to NoAddrAvail
    Resolves: rhbz#455667
  - Match time field of received DHCPv6 Advertise message
    Resolves: rhbz#455665
  - Support multiple IA options
    Resolves: rhbz#455722


author: Stephen Gallagher <sgallagh@redhat.com> - 0.1.2-3
changelog:
  - New upstream release 0.1.2
  - Fixes a serious issue with libdhash where hash_enter() would never update
  - existing entries for a key.


author: Stephen Gallagher <sgallagh@redhat.com> - 0.1.2-10
changelog:
  - Resolves: rhbz#677753 - ding-libs developer docs on RHEL 5 are not
  -                         multilib-clean
  - Removed API documentation from packages


author: Jarod Wilson <jarod@redhat.com> 2.10-1
changelog:
  - Update to v2.10 for smbios 2.6.1 support
  - Adds support for properly reporting DDR3 memory, PCI-E Gen 2
    slots, LGA1366 sockets and many newer cpu types (#518562)


author: Peter Jones <pjones@redhat.com> - 1.0.0.rc13-8
changelog:
  - Revert fix for 381501, since the RHEL kernel doesn't currently support
    the feature.
    Related: rhbz#381501


author: Ian Kent <ikent@redhat.com> - 1.0.0.rc13-9
changelog:
  - Bug 427550: dmraid segfaults on boot resulting in broken mirror
    - patch to fix SEGV when requesting activation of invalid raid set.
    the feature.
    Related: rhbz#427550


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc13-14
changelog:
  - Added support for RAID set create/delete/rebuild and event handling
    (Intel contributions)
  - Removed regression: format handler check leading to unaligned accesses on ia64
  - Resolves: rhbz#466213


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc13-31
changelog:
  - manual pages not found due to wrong pattern
  - Added /etc/cron.d/ to buildrout to avoid -D option to
    logwatch file install calls
  - Related: rhbz#437169 rhbz#476123


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc13-3
changelog:
  - Fix dmraid map names
  - Resolves: #211012
  - Fix unaligned access messages
    Resolves: #210361, #211150
  - Fix jmicron name parsing (bz#219058)


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc13-51
changelog:
  - Fix regression mistakenly adding 'a' as libdmraid library
    suffix breaking bindings
  - Resolves: rhbz#507339


author: Mike Snitzer <snitzer@redhat.com> - 1.0.0.rc13-53
changelog:
  - Split logwatch dependency out to a dmraid-events-logwatch package
  - Eliminated smtpdaemon dependency; defer mail dependency to logwatch
  - Renamed /etc/cron.d/dmeventd to /etc/cron.d/dmeventd-logwatch
  - Resolves: rhbz#512833
  - Switched from postun rm to using ghost on dmeventd_syslogpattern.txt


author: Zdenek Kabelac <zkabelac@redhat.com> - 1.0.0.rc13-64
changelog:
  - Fix kernel panic when rebuilding and reboot occurs on IMSM RAID5 volume
  - Update specfile
  - Resolves: rhbz#626417
  - Resolves: rhbz#627705


author: Tim Waugh <twaugh@redhat.com> 3.1-27.2
changelog:
  - Preserve file modes (bug #437465).
  - Applied patch to fix segfault with missing -c argument (bug #429231).


author: Stepan Kasal <skasal@redhat.com> - 2.11-8
changelog:
  - if the reported geometry is incorrect, use the default one
    Resolves: #249067
  - fix debuginfo
    Resolves: #469842
  - add url tag, improve buildroot tag, add mkdosfs-ygg provide


author: Petr Rockai <prockai@redhat.com> - 1.0-1.rc15
changelog:
  - update to latest upstream, fixes a few bugs, plus a security
    vulnerability (#216510, CVE-2006-5973)


author: Tomas Janousek <tjanouse@redhat.com> - 1.0.7-1
changelog:
  - update to latest upstream, fixes a few bugs (#331441, #245249), plus two
    security vulnerabilities (CVE-2007-2231, CVE-2007-4211)
  - increased default login_process_size to 64 (#253363)


author: Tomas Janousek <tjanouse@redhat.com> - 1.0.7-2
changelog:
  - LDAP+auth cache user login mixup (CVE-2007-6598, #427575)
  - insecure mail_extra_groups option (CVE-2008-1199, #436927)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.7-5
changelog:
  - change permissions of deliver and dovecot.conf to prevent possible password exposure
  - Resolves: #436287


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.7-7
changelog:
  - permissions of deliver and dovecot.conf from 1.0.7-5 reverted
  - password can be stored in different file readable only for root now
  - Resolves: #436287, CVE-2008-4870


author: Jindrich Novy <jnovy@redhat.com> 0.4b41-2.fc6
changelog:
  - fix miscompares detected by restore -C caused by SELinux (#189845)
  - link properly against device-mapper and selinux libraries
  - add autoconf BuildRequires
  - use %{?dist}


author: Adam Tkac <atkac redhat com> 0.4b41-4
changelog:
  - display dump level correctly in all cases (#493635)
  - -A option is not valid when -P is specified, correct manual page (#490627)
  - fix typos in manual pages (#489853)


author: Harald Hoyer <harald@redhat.com> - 7.0-0.el5.3
changelog:
  - set pthread stack size according to limits
  - use _SC_PHYS_PAGES instead of _SC_AVPHYS_PAGES to determine available memory
  - Resolves: rhbz#219477, #215818


author: Jarod Wilson <jwilson@redhat.com> - 3.0-1
changelog:
  - Update to dvgrab 3.0
  - Fix segfault on cleanup (#410621)
  - fix pipe output in conjunction with file capture
  - fix hang at end of reading from stdin
  - fix potential data loss due to short writes


author: Peter Jones <pjones@redhat.com> - 1.39-8
changelog:
  - Prefer the labels that dosfsutils writes, rather than various other kinds of
    labels on FAT/VFAT
    Related: rhbz#218957


author: Eric Sandeen <esandeen@redhat.com> 1.39-9.el5
changelog:
  - Many coverity-found potential leaks, segfaults, etc (#239354)
  - Fix debugfs segfaults when no fs open (#208416, #209330)
  - Avoid recursive loops in logdump due to symlinks in /dev (#210371)
  - Don't write changes to the backup superblocks by default (#229561)
  - Correct byteswapping for fast symlinks with xattrs (#232663)
  - e2fsck: added sanity check for xattr validation (#230193)


author: Eric Sandeen <esandeen@redhat.com> 1.39-13
changelog:
  - New uuidd subpackage for unique time-based UUID generation (#233471)
  - Fix potential uninitialized reference in e2fsck (#428707)


author: Eric Sandeen <esandeen@redhat.com> 1.39-23.1
changelog:
  - blkid: handle stale entries in blkid cache (#637920)
  - e2fsck: mark sparse journal as invalid (#580671, #621836)


author: Eric Sandeen <esandeen@redhat.com> 1.39-32
changelog:
  - Fix e2fsck pass 2 "should never happen" case (#681071)
  - Safe variant of uuid_generate_time() and fix locking (#678304)


author: Eric Sandeen <esandeen@redhat.com> 1.39-37
changelog:
  - Fix uuidd permissions (#905027)
  - Better handle errors in journal superblock during e2fsck (#885073)
  - Ensure chattr errors out on symbolic links (#910214)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-3
changelog:
  - Fix 16T boundary conditions in resize2fs (#707314)
  - Create ext4 fs by default from mke4fs (#785200)


author: Eric Sandeen <sandeen@redhat.com> 1.41.9-1
changelog:
  - Update to e4fsprogs-1.41.9 (#528055)
  - Add ext4-capable, renamed libraries & headers for pygrub (#524611)


author: Thomas Woerner <twoerner@redhat.com> - 2.0.9-3
changelog:
  - fixed init script to be lsb conform
    Resolves: rhbz#536828
  - fixed download link according to package review
    Related: rhbz#543948


author: Thomas Woerner <twoerner@redhat.com> - 2.0.9-5
changelog:
  - import of the RHEL-6 ebtables package without the buildid patch
  - added -fno-strict-aliasing to the compiler flags (rhbz#596158)
  - cleaned up description (rhbz#596158)
  - fixed install of /etc/ethertypes in running system (rhbz#596778)


author: Ben Konrath <bkonrath@redhat.com> 3.2.1-18
changelog:
  - Update patch to disable embedded browser and add it to spec file. 
  - Add BuildRequires desktop-file-utils.
  - Related:  rhbz#206539, rhbz#207016
  - Resolves:  rhbz#220205


author: Andrew Overholt <overholt@redhat.com> 3.2.1-19
changelog:
  - Fix ppc64 and ia64 issue in Platform.java.
  - Resolves:  rhbz#383681
  - Don't build mozilla bindings.
  - Resolves:  rhbz#430714
  - Don't aot-compile OSGi or jsch jar due to gcj bug (just on ia64).


author: Michal Hlavinka <mhlavink@redhat.com> 75-3
changelog:
  - ask for password confirmation when creating openssl key (#500850)
  - removed executable permission from ecryptfs-dot-private (#500817)
  - ecryptfs-rewrite-file: improve of progress output (#500813)
  - don't error out when unwrapping and adding a key that already exists (#500810)
  - fix typo in ecryptfs-rewrite-file(1) (#500804)
  - add error message about full keyring (#501460)
  - gui sub-package must requires pygtk2-libglade (#500997)
  - require cryptsetup-luks for encrypted swap (#500824)
  - use blkid instead of vol_id (#500820)
  - don't rely on cryptdisks service (#500829)


author: Michal Hlavinka <mhlavink@redhat.com> - 75-5.1
changelog:
  - security fixes:
  - privilege escalation via mountpoint race conditions (CVE-2011-1831, CVE-2011-1832)
  - race condition when checking source during mount (CVE-2011-1833)
  - mtab corruption via improper handling (CVE-2011-1834)
  - key poisoning via insecure temp directory handling (CVE-2011-1835)
  - arbitrary file overwrite via lock counter race (CVE-2011-1837)


author: Michal Hlavinka <mhlavink@redhat.com> - 75-8
changelog:
  - lazy /dev files creation on ecryptfs module load prevents ecryptfsd 
    daemon to start (#554740)
  - passwd_file option used together with salt option breaks ecryptfs (#553629)


author: Roland McGrath <roland@redhat.com> - 0.137-2
changelog:
  - Update to 0.137
    - libdwfl: bug fixes; new segment interfaces;
               all the libdwfl-based tools now support --core=COREFILE option
  - Resolves: RHBZ #325021, RHBZ #447416


author: Ondrej Vasik <ovasik@redhat.com> 0.11.1-6.1
changelog:
  - fix #235411 - CVE-2007-2027 - elinks tries to load .po files
    from non-absolute path
  - fix #523258 - CVE-2008-7224 - entity_cache static array buffer
    overflow


author: Chip Coldwell <coldwell@redhat.com> - 21.4-19
changelog:
  - change desktop category from Development to Utility
  - BuildRequires: sendmail (yes, it really does) Resolves: bz232688
  - Resolves: bz248182


author: Karel Klíč <kklic@redhat.com> - 21.4-22
changelog:
  - Added -fno-strict-aliasing to the compiler flags to avoid
    "dereferencing type-punned pointer will break strict-aliasing rules"
    warnings


author: Jack Magne <jmagne@redhat.com>= 1.1.0-10
changelog:
  - Resolves: #523568 - cannot enroll using SSHA password scheme.
  - Resolves: #530482 - no rendering in "Smart Card Enrollment" window.


author: Eduardo Habkost <ehabkost@redhat.com> - 5.4.4-9
changelog:
  - Set ExclusiveArch to only the arches where the images can be built
    (i386, x86_64)
  - Related: bz#488612


author: Eduardo Habkost <ehabkost@redhat.com> - etherboot-5.4.4-11.el5
changelog:
  - Add rtl8029 to the list of kvm roms (bz#511912)
    - Add etherboot-{rom,zrom}-rtl8029 Provides to kvm rom subpackages
    - Make -kvm subpackage conflict with older etherboot-{roms,zroms} packages
      because they have the same rtl8029 rom files
  - Resolves: bz#511912
    (ne model failed to get ip address)


author: Eduardo Habkost <ehabkost@redhat.com> - etherboot-5.4.4-12.el5
changelog:
  - Change glibc32 BuildRequires to file-based BuildRequires [bz#521901]
  - Resolves: bz#521901
    (can't build cause wrong BR)


author: Eduardo Habkost <ehabkost@redhat.com> - etherboot-5.4.4-13.el5
changelog:
  - Use 0644 permission on all rom files [bz#547773]
  - Resolvez: bz#547773
  - Use update-alternatives to provide the common /usr/share/qemu-pxe-roms dir
    [bz#546016]
  - Resolves: bz#546016


author: Jay Fenlason <fenlason@redhat.com> 5-1
changelog:
  - Upgrade to ethtool version 5 to close
    bz#184985: RFE: 10gigE support
    bz#204840: "buffer overflow detected" when devname's length >=16 of ethtool
    Resolves: #184985, #204840


author: Jay Fenlason <fenlason@redhat.com> 6-1
changelog:
  - Upgrade to ethtool version 6 to close
    bz#219364  -  [rhel5b1s9] ethtool support for for displaying 10GB speeds
    Resolves: #219364


author: Jay Fenlason <fenlason@redhat.com> 6-2
changelog:
  - Include patch from Radek Bíba (rbiba@redhat.com) to close
    bz#462696 - ethtool now supports 10000 Mb/s but its man page hasn't been updated
    Resolves: #462696


author: Jay Fenlason <fenlason@redhat.com> 6-3
changelog:
  - Include patch from upstream to close
    bz#509398 -  ethtool should support GRO options
    Resolves: #509398


author: Jay Fenlason <fenlason@redhat.com> 6-4
changelog:
  - Backport from upstream to clean up a bunch of minor bugs:
    Resolves: 450162 -  Request for ethtool to display all NIC speeds
    Resolves: 472034 -  Redundant file INSTALL is included in the package
    Resolves: 472038 -  Usage message states that -h requires a DEVNAME
    Resolves: 524241 -  ethtool: typo in "speed 10000" command line parsing
    Resolves: 529395 -  add support for 10000baseT


author: Marek Kasik <mkasik@redhat.com> - 0.6.0-11
changelog:
  - Fix current page of view when searching
  - plus minor changes to pass rpmdiff
  - Resolves: bug #469379


author: Milan Crha <mcrha@redhat.com> - 2.12.3-11.el5
changelog:
  - Require latest evolution-data-server package (1.12.3-17).
  - Require latest evolution package (2.12.3-19).


author: Matthew Barnes <mbarnes@redhat.com> - 1.12.3-6.el5
changelog:
  - Add patch for RH bug #436800 (crash on malformed vcard).
  - Add patch for RH bug #431663 (support simple binds for GAL access).


author: Milan Crha <mcrha@redhat.com> - 2.12.3-8.el5_2.3
changelog:
  - Add patch for RH bug #469703 (no drop over "Personal Folder").
  - Add patch for RH bug #469704 (allow enter mailbox name for exchange).
  - Bump EDS requirement to 1.12.3 (requires 1.12.3-6.1).


author: Matthew Barnes <mbarnes@redhat.com> - 2.8.0-34.el5
changelog:
  - Add second patch for RH bug #209566 (calendar input context).
  - Compile with the -fno-strict-aliasing flag, which will hopefully improve
    reliability until the illegal type-punning is fixed (RH bug #224552).


author: Matthew Barnes <mbarnes@redhat.com> - 2.8.0-39.el5
changelog:
  - CVE-2007-1002 (Shared memo categories format string vulnerability)
  - Add patch for RH bug #215873 (saving appointments in zh_TW).


author: David Woodhouse <dwmw2@infradead.org> - 4.63-3
changelog:
  - chmod +x /etc/init.d/clamd.exim
  - Make exim-clamav package require exim (since it uses the same uid)


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.63-5
changelog:
  - Move certificate generation to init script (#510203)
  - Listen only on loopback by default (#513492)
  - Fix default config to use relay_to_domains list (#248289)
  - Fix return codes in init script (#238026)
  - Add -fno-strict-aliasing to CFLAGS


author: Joe Orton <jorton@redhat.com> - 1.95.8-9
changelog:
  - add security fix for CVE-2009-3720 (#531711)
  - add security fix for CVE-2009-3560, without regression (#556415)


author: Joe Orton <jorton@redhat.com> - 1.95.8-10
changelog:
  - add security fix for CVE-2012-1148 (#811823)
  - add security fix for CVE-2012-0876 (#811831)
  - run test suite during build


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.43.0-6
changelog:
  - Use full path to su in passmass
    Resolves: #702265
  - Fix minor man page formatting issue
    Resolves: #699613


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.43.0-8
changelog:
  - Fix expect pauses on exit
    Resolves: #520451
  - Fix /usr/bin/passmass to work with RHEL5 password prompts
    Resolves: #567307


author: Jan Zeleny <jzeleny@redhat.com> - 1.0.7-2
changelog:
  - minor corrections in spec file
  - moved init script to correct location
  - correction in the init script (chkconfig directives)


author: Jan Zeleny <jzeleny@redhat.com> - 1.0.7-4
changelog:
  - backported some patches from Fedora:
    503162 - renaming service from fcoe-utils to fcoe
    503164 - adding libhbalinux as dependency
    503165 - invalid free() call
    503167 - correction of long options in fcoeadm
  - patch to install proper init script and correction of that
    script in order to allow functionality without fcoemon


author: Petr Sabata <contyk@redhat.com> - 1.0.7-5
changelog:
  - Both long and short options should behave the same
  - Resolves: rhbz#703374
  - fcoeadm: Don't report nonsense when the given interface doesn't exist
  - Resolves: rhbz#512938


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.3.6-1.1
changelog:
  - Fix APOP vulnerability (CVE-2007-1558)
    Resolves: #241196
  - Fix broken support for KPOP
    Resolves: #224018


author: Martin Bacovsky <mbacovsk@redhat.com file-4.17-10
changelog:
  - resolves: #241027: CVE-2007-2799 file integer overflow
  - Resolves: #233337: CVE-2007-1536: file 4.20 fixes a heap overflow 
    in that can result in arbitrary code


author: Tomas Smetana <tsmetana@redhat.com> - 4.17-14
changelog:
  - fix #235420 - recognize UTF-16, little-endian encoded XML file
  - fix #249473 - wrongly identifies text file as MPEG-4 LO-EP
  - fix #428437 - GFS2 recognition
  - fix #444524 - ext4/ext4dev recognition


author: Jan Kaluza <jkaluza@redhat.com> 4.17-19
changelog:
  - fix #751030 - detect s390 kernel, do not detect kernels as ELF binaries
  - fix #751032 - detect all RPM architectures
  - fix #751022 - do not try to get coredump informations from normal binary


author: Jan Kaluza <jkaluza@redhat.com> - 4.17-26
changelog:
  - fix #826899 - add "magic" definition for BIOS versions
  - fix #826897 - do not trim too much of command line from core file
  - fix #826901 - removed weak DOS executable patterns
  - fix #809801 - add xz compression support


author: Martin Bacovsky <mbacovsk@redhat.com> - 4.17-9
changelog:
  - Resolves: #233337: CVE-2007-1536: file 4.20 fixes a heap overflow 
    in that can result in arbitrary code


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1:4.2.27-5
changelog:
  - Fix find fails with "Permission denied" if parent directory
    lacks "r" permission
    Resolves: #296631


author: Tomas Mraz - 1.2.0-1
changelog:
  - add lib subpackage to avoid multilib on the base package
  - add ability to compute hmacs on multiple files at once
  - improved debugging with FIPSCHECK_DEBUG


author: Martin Stransky <stransky@redhat.com> - 1.5.0.12-9
changelog:
  - Update to latest snapshot of Mozilla 1.8.0 branch
  - Added a patch with backported fixes from 1.8.1.12


author: Christopher Aillon <caillon@redhat.com> - 1.5.0.12-12
changelog:
  - Update to latest snapshot of Mozilla 1.8.0 branch
  - Add patches for backported fixes from 1.8.1.13


author: Kai Engert <kengert@redhat.com> - 1.5.0.12-2
changelog:
  - Update to latest snapshot of Mozilla 1.8.0 branch
  - Include patches for Mozilla bugs 379245, 384925, 178993,
    381300 (+382686), 358594 (+380933), 382532 (+382503)


author: Martin Stransky <stransky@redhat.com> - 1.5.0.12-4
changelog:
  - added pathes for Mozilla bugs 199088,267833,309322,345305,361745,
    362901,372309,378787,381300,384105,386914,387033,387881,388121,388784
    390078,393537,395942


author: Martin Stransky <stransky@redhat.com> - 10.0.8-2
changelog:
  - Fixed rhbz#865284 - add the storage.nfs_filesystem
    config key to property list
  - disable OOP for wrapped plugins (nspluginwrapper)


author: Martin Stransky <stransky@redhat.com> - 17.0.8-4
changelog:
  - Added fix for mozbz#601442 - Support the extensions.getAddons.showPane 
    pref again in the Add-ons Manager UI, a part of rhbz#818636 fix.


author: Martin Stransky <stransky@redhat.com> - 17.0.8-3
changelog:
  - Fixed rhbz#818636 - Firefox allows install of addons,
    disregarding xpinstall.enabled flag set as false.


author: Martin Stransky <stransky@redhat.com> - 24.4.0-3
changelog:
  - Added a workaround for Bug 1054242 - RHEVM: Extremely high memory
    usage in Firefox 24 ESR on RHEL 6.5


author: Jan Horak <jhorak@redhat.com> - 31.3.0-9
changelog:
  - Fixed problems with dictionaries (mozbz#1097550)
  - Fixed rhbz#1164855 - firefox.desktop is missing
    x-scheme-handler MimeType entries


author: Martin Gracik <mgracik@redhat.com> 1.4.27.9-1
changelog:
  - Print an error if we cannot import graphical firstboot
    Resolves: rhbz#706074
  - Don't show sound setup screen with no soundcards
    Resolves: rhbz#642510
  - Check if we are on an arch which supports GUI
    Resolves: rhbz#653442


author: Tim Waugh <twaugh@redhat.com> 3.0.2-38
changelog:
  - Change a2ps requirement to mpage.
  - Make CUPS driver work with drivers containing '-' in their names
    (bug #201398).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-38.3
changelog:
  - Better margin defaults (bug #244348).
  - Ship a defaultspooler file to avoid the need for spooler
    auto-detection (bug #454684).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-38.3:.1
changelog:
  - Applied patch to fix improper sanitization of command line options
    (CVE-2011-2697, bug #721001).


author: Jan Safranek <jsafrane@redhat.com> 0.5.1-7
changelog:
  - Fixed ipmi-sel crashing when reading empty SEL log (#439411)
  - bmc-watchdog service now stops the watchdog on service stop
    and resets it on service start (#639850)


author: Thomas Woerner <twoerner@redhat.com> 1.1.3-1.1.el5
changelog:
  - fixed ldap code to not use internals, added LDAP_DEPRECATED compile time flag
    Resolves: rhbz#217688


author: John Dennis <jdennis@redhat.com> - 1.1.3-1.3
changelog:
  - Resolves: bug #447669 freeradius cannot be queried using net-snmp
  - force all files in /etc/raddb to be 640 root:radiusd, otherwise after dropping
    privileges the radiusd daemon cannot re-read it's config files on SIGHUP.  
  - add group creation for radiusd
  - Resolves: bug #249308 freeradius (prior to 1.1.4) won't work with vista clients
  - Resolves: bug #440626 bad dist macro


author: John Dennis <jdennis@redhat.com> - 1.1.3-1.4
changelog:
  - Resolves: bug #287381 rlm_ldap could not set LDAP_OPT_X_TLS_REQUIRE_CERT option to allow
    for some reason the freeradius-1.1.3-ldap.patch incorrectly changed 
    ldap_int_tls_config() to ldap_set_option(), this reverts the incorrect patch


author: John Dennis <jdennis@redhat.com> - 1.1.3-1.3
changelog:
  - Resolves: bug #447669 freeradius cannot be queried using net-snmp
  - force all files in /etc/raddb to be 640 root:radiusd, otherwise after dropping
    privileges the radiusd daemon cannot re-read it's config files on SIGHUP.
  - add group creation for radiusd
  - Resolves: bug #249308 freeradius (prior to 1.1.4) won't work with vista clients
  - Resolves: bug #440626 bad dist macro


author: John Dennis <jdennis@redhat.com> - 1.1.3-1.4
changelog:
  - Resolves: bug #287381 rlm_ldap could not set LDAP_OPT_X_TLS_REQUIRE_CERT option to allow
    for some reason the freeradius-1.1.3-ldap.patch incorrectly changed
    ldap_int_tls_config() to ldap_set_option(), this reverts the incorrect patch


author: John Dennis <jdennis@redhat.com> - 1.1.3-1.5
changelog:
  - Security: Fix Tunnel-Password zero-length attributes flaw (bug #521912)
    Resolves: RH BZ#522062
  - rebase a couple of old patches (freeradius-0.9.0-com_err.patch,
    freeradius-1.0.0-samba3.patch) so they apply with fuzz=0


author: John Dennis <jdennis@redhat.com> - 1.1.3-1.5
changelog:
  - Security: Fix Tunnel-Password zero-length attributes flaw (bug #521912)
    Resolves: CVE-2009-3111
  - rebase a couple of old patches (freeradius-0.9.0-com_err.patch,
    freeradius-1.0.0-samba3.patch) so they apply with fuzz=0


author: John Dennis <jdennis@redhat.com> - 2.1.12-1
changelog:
  - Upgrade to latest upstream release: 2.1.12
    resolves: bug#609633
    resolves: bug#546583
    resolves: bug#602567
    resolves: bug#630072
    resolves: bug#658508
  - Upstream changelog for 2.1.12:
    Feature improvements
    * Updates to dictionary.erx, dictionary.siemens, dictionary.starent,
      dictionary.starent.vsa1, dictionary.zyxel, added dictionary.symbol
    * Added support for PCRE from Phil Mayers
    * Configurable file permission in rlm_linelog
    * Added "relaxed" option to rlm_attr_filter.  This copies attributes
      if at least one match occurred.
    * Added documentation on dynamic clients.
      See raddb/modules/dynamic_clients.
    * Added support for elliptical curve cryptography.
      See ecdh_curve in raddb/eap.conf.
    * Added support for 802.1X MIBs in checkrad
    * Added support for %{rand:...}, which generates a uniformly
      distributed number between 0 and the number you specify.
    * Created "man" pages for all installed commands, and documented
      options for all commands.  Patch from John Dennis.
    * Allow radsniff to decode encrypted VSAs and CoA packets.
      Patch from Bjorn Mork.
    * Always send Message-Authenticator in radtest. Patch from John Dennis.
      radclient continues to be more flexible.
    * Updated Oracle schema and queries
    * Added SecurID module.  See src/modules/rlm_securid/README

    Bug fixes
    * Fix memory leak in rlm_detail
    * Fix "failed to insert event"
    * Allow virtual servers to be reloaded on HUP.
      It no longer complains about duplicate virtual servers.
    * Fix %{string:...} expansion
    * Fix "server closed socket" loop in radmin
    * Set ownership of control socket when starting up
    * Always allow root to connect to control socket, even if
      "uid" is set.  They're root.  They can already do anything.
    * Save all attributes in Access-Accept when proxying inner-tunnel
      EAP-MSCHAPv2
    * Fixes for DHCP relaying.
    * Check certificate validity when using OCSP.
    * Updated Oracle "configure" script
    * Fixed typos in dictionary.alvarion
    * WARNING on potential proxy loop.
    * Be more aggressive about clearing old requests from the
      internal queue
    * Don't open network sockets when using -C


author: John Dennis <jdennis@redhat.com> - 2.1.12-4
changelog:
  - resolves: bug#855315
    CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
    certain expiration date fields of a certificate during x509 certificate
    validation


author: John Dennis <jdennis@redhat.com> - 2.1.12-4
changelog:
  resolves: bug#818885 possible errors in /etc/raddb/sql/postgresql/admin.sql template
    resolves: bug#781877 rlm_dbm_parser has man pages in rlm_dbm_parse.8.gz
    resolves: bug#787111 logrotate script does not reload running daemon
    resolves: bug#846471 freeradius not compiled with --with-udpfromto
    resolves: bug#846474 shadow password expiration does not work
    resolves: bug#846475 Segfault with freeradius-perl threading
    resolves: bug#846476 radtest script is not working with eap-md5 option


author: John Dennis <jdennis@redhat.com> - 2.1.12-5
changelog:
  - resolves: bug#855308
    CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
    certain expiration date fields of a certificate during x509 certificate
    validation


author: John Dennis <jdennis@redhat.com> - 2.1.7-6
changelog:
  - resolves: bug #473704
  - more spec file clean up from review comments
  - remove freeradius-libs subpackage, move libfreeradius-eap and
    libfreeradius-radius into the main package
  - fix subpackage requires, change from freeradius-libs to main package
  - fix description of the devel subpackage, remove referene to non-shipped libs
  - remove execute permissions on src files included in debuginfo
  - remove unnecessary use of ldconfig
  - since all sub-packages now require main package remove user creation for sub-packages
  - also include the LGPL library license file in addition to the GPL license file
  - fix BuildRequires for perl so it's compatible with both Fedora, RHEL5 and RHEL6


author: John Dennis <jdennis@redhat.com> - 2.1.7-7
changelog:
  - resolves: bug #550845 - freeradius2-devel has multilib conflicts
    Remove devel subpackage. It doesn't make much sense to have a devel package since
    we don't ship libraries and it produces multilib conflicts.


author: Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-15
changelog:
  - Fix rendering issue with some Asian fonts.
  - Add freetype-2.2.1-fix-get-orientation.patch
  - Resolves: #207261


author: Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-16
changelog:
  - Backport binary-search fixes from HEAD
  - Add freetype-2.2.1-ttcmap.patch
  - Resolves: #208734, #218326


author: Marek Kasik <mkasik@redhat.com> 2.2.1-23
changelog:
  - Add freetype-2.2.1-CVE-2010-2527.patch
      (Use precision for `%s' where appropriate to avoid buffer overflows)
  - Resolves: #614012


author: Marek Kasik <mkasik@redhat.com> 2.2.1-24
changelog:
  - Modify freetype-2.2.1-CVE-2010-2519.patch (additional fix)
      (If the type of the POST fragment is 0, the segment is completely ignored)
  - Resolves: #614012


author: Marek Kasik <mkasik@redhat.com> 2.2.1-25
changelog:
  - Add freetype-2.2.1-axis-name-overflow.patch
      (Avoid overflow when dealing with names of axes)
  - Resolves: #614012


author: Marek Kasik <mkasik@redhat.com> 2.2.1-27
changelog:
  - Add freetype-2.2.1-CVE-2010-2806.patch
      (Protect against negative string_size. Fix comparison.)
  - Add freetype-2.2.1-CVE-2010-3311.patch
      (Don't seek behind end of stream.)
  - Add freetype-2.2.1-CVE-2010-3054.patch
      (Protect against nested `seac' calls.)
  - Add freetype-2.2.1-CVE-2010-2808.patch
      (Check the total length of collected POST segments.)
  - Resolves: #638142


author: Marek Kasik <mkasik@redhat.com> 2.2.1-28.el5_5.1
changelog:
  - Add freetype-2.2.1-CVE-2010-3855.patch
      (Protect against invalid `runcnt' values.)
  - Resolves: #651759


author: Marek Kasik <mkasik@redhat.com> 2.2.1-31.el5_8.1
changelog:
  - Fix CVE-2012-{1126, 1127, 1130, 1131, 1132, 1134, 1136,
    1137, 1139, 1140, 1141, 1142, 1143, 1144}
  - Protect against invalid string offsets in pcf_get_properties()
  - Check bytes per row for overflow in _bdf_parse_glyphs()
  - Resolves: #806266


author: Marek Kasik <mkasik@redhat.com> 2.2.1-32
changelog:
  - Fix CVE-2012-{1126, 1127, 1130, 1131, 1132, 1134, 1136,
    1137, 1139, 1140, 1141, 1142, 1143, 1144}
  - Protect against invalid string offsets in pcf_get_properties()
  - Check bytes per row for overflow in _bdf_parse_glyphs()
  - Resolves: #806267


author: Andrew Cagney <cagney@redhat.com> - 0.0.1.2007.06.21.rh2-4
changelog:
  - Enable ppc64 build
  - Apply frysk-dwfl-reorder-crc32.patch, work around #245424.
  - Make dependant on autoconf and automake, and libtool.
  - Related: #224452


author: Andrew Cagney <cagney@redhat.com> - 0.0.1.2008.01.18.rh1-1
changelog:
  - Related: #247498
  - Import frysk-0.0.1.2008.01.18.rh1 (4cff0daa2996b28274985fa4674160f15e5fd9e2)
  - Delete patch3, frysk-0.0.1.2008.01.14-sortjar-bz428982.patch
  - Add patch4, frysk-0.0.1.2008.01.18.rh1-no-sysroot.patch to not build sysroot tests.


author: Andrew Cagney <cagney@redhat.com> - 0.0.1.2008.01.18.rh1-2
changelog:
  - Related: #247498
  - Add patch5, frysk-0.0.1.2008.01.18.rh1-line-npe.patch to prevent NPE
    in source window.


author: Andrew Cagney <cagney@redhat.com> - 0.0.1.2008.03.19.rh1-1
changelog:
  - Related: #437292
  - Import frysk-0.0.1.2008.03.19.rh1 (35c076f3436b95a116cba33f52e0c9a592607dfa)
  - Add Patch10 frysk-src-path.patch, and configure with
    --enable-src-prefix; from cmoller.
  - Add Patch11 frysk-elfutils-crc.patch.
  - Move fparser to pkglibdir.
  - Added ferror, FunitSimpleInterfaceTest.
  - Added frysk.7 in base and moved frysk.1 to frysk-gnome.
  - Added Patch12, install fparser's manpage in man8.


author: Jiri Skala <jskala@redhat.com> - 0.17-34
changelog:
  - Resolves: #315251: patched socket leaking when fails opening a file 
  - Resolves: #442712: patched mget bug when filenames are case sensitivly corrupted


author: Jiri Skala <jskala@redhat.com> - 0.17-36
changelog:
  - Resolves: #694757 - Ftp command aborted due to a segmentation fault
  - Resolves: #735840 - ftp - append, put, send commands cause memory leaks
  - Resolves: #531095 - active mode enabled from command line


author: Josef Bacik <josef@redhat.com> - 2.7.4-8
changelog:
  - use -fno-strict-aliasing in the build flags
  - add a fuse group and make sure fusermount belongs to that group for security
    reasons


author: Marek Kasik <mkasik@redhat.com> - 1.9.2-2
changelog:
  - Check GNOME_ACCESSIBILITY variable before printing message
  - about initialization of GTK Accessibility module
  - Resolves: bug #506561


author: Marek Kasik <mkasik@redhat.com> - 1.9.2-3
changelog:
  - Add -fno-strict-aliasing flag
  - Change Requires of gail-devel to require correct gail
  - Resolves: bug #506561


author: Jakub Jelinek <jakub@redhat.com> 4.1.1-51.el5
changelog:
  - update from gcc-4_1-branch (-r120325:120507)
    - PRs c++/30382, middle-end/27826, middle-end/28116,
  	tree-optimization/30212


author: Jakub Jelinek <jakub@redhat.com> 4.1.1-52.el5.2
changelog:
  - add gnu.java.util.ZoneInfo class, use tzdata files for libgcj
    timezone stuff instead of builtin simple and outdated rules (#227888)


author: Jakub Jelinek <jakub@redhat.com> 4.1.2-13.el5
changelog:
  - update from gcc-4_1-branch (-r120507:126008)
    - GCC 4.1.2 release
    - PRs inline-asm/32109, rtl-optimization/28011, target/32389,
  	libfortran/31409, libfortran/31880, libfortran/31964,
  	rtl-optimization/31691, target/31022, target/31480, target/31701,
  	target/31876, target/32163, tree-optimization/26998, c++/30016,
  	c++/30221, middle-end/30761, target/18989, target/28675,
  	tree-optimization/29446, tree-optimization/31698, middle-end/31448,
  	preprocessor/30468, target/28623, target/31641, c++/30168, c++/31074,
  	c++/31449, c++/31517, c/31520, middle-end/30729, target/25448,
  	target/30289, target/30483, target/31361, target/31582,
  	testsuite/31578, target/31137, target/31380, fortran/31184,
  	target/31245, tree-optimization/30590, debug/29906, middle-end/30364,
  	middle-end/30433, target/31123, c++/30852, c++/30895,
  	classpath/28550, fortran/29441, fortran/30400, libgcj/17002,
  	libgfortran/30910, libgfortran/30918, other/31050,
  	rtl-optimization/30931, target/30848, tree-optimization/29925,
  	ada/30684, fortran/30478, fortran/30799, middle-end/24427,
  	other/27843, rtl-optimization/28173, rtl-optimization/28772,
  	rtl-optimization/29599, rtl-optimization/30787, target/19087,
  	tree-optimization/30823, fortran/24783, testsuite/30649,
  	middle-end/30313, c++/29487, target/29487, target/30370,
  	c++/28988, fortran/30278, libstdc++/30586, middle-end/29683,
  	objc/27438, c++/28999, libgfortran/30435, objc/30479,
  	rtl-optimization/29329, target/30173, testsuite/12325, target/24036
    - reenable memory CSE (Alexandre Oliva, #229366, PR rtl-optimization/30643)
  - backported OpenMP fixes from trunk and gcc-4_2-branch
    - PRs middle-end/32362, tree-optimization/31769, c++/32177, c++/30703,
  	middle-end/27416, middle-end/30421, middle-end/30494
  - on ppc{,64} when tuning for power6{,x}, try to put the base
    register as first operand in instructions to improve
    performance (Peter Bergner, #225425, PR middle-end/28690)
  - on ppc64 emit nop after a call and disallow sibling calls
    if the target function is not defined in the same object file
    (David Edelsohn, #245424)
  - gomp parallel sections fix and fix for checking whether combined
    parallel can be used (PR libgomp/32468)
  - don't set TREE_READONLY on C++ objects that need runtime initialization
    (PRs c++/31806, c++/31809)
  - fix computation of common pointer type (PR tree-optimization/32139)
  - precompute const and pure fn calls inside another fn call arguments
    with accumulating outgoing args
    (PRs middle-end/32285, tree-optimization/30493)
  - fix handling of RESULT_DECLs in points-to analysis
    (#243438, PR tree-optimization/32353)
  - don't increase alignment of TLS variables too much
  - __do_global_dtors_aux hardening (#240422)
  - allow libgomp to be dlopened (PR libgomp/28482)
  - speed up and improve libgomp omp_get_num_procs and dynamic
    thread count computation
  - GOMP_CPU_AFFINITY support
  - fix ICE on C++ type passed as OpenMP clause variable (PR c++/31748)
  - fix a couple of translation bugs that could lead to ICEs (#235008)
  - fix ICE with #pragma omp parallel inside of a try catch construct
    (PR tree-optimization/30558)
  - fix OpenMP clause handling in templates (PR c++/31598)
  - fix folding of comparisions against min, min+1, max-1, max
    (#236711, PR tree-optimization/31632)
  - fix _mm_cmpord_ss on i?86/x86_64 (#237067)
  - deque::erase fix (Steve LoBasso, Paolo Carlini, #234515)
  - fix a regression caused by C++ visibility fixes (Jason Merrill,
    PR c++/31187)
  - fix C++ ICE on i ? j : k = (void) 0; (PR c++/30847)
  - fix C++ accepts invalid bug (Mark Mitchell, PR c++/30863)
  - fix random seed handling with -frepo (Alexandre Oliva, #228769)
  - fix fortran OPEN without ACTION on read-only filesystem (#231134)
  - fix fortran module writer ICEs on implicit conversions (#231261)
  - fix !$omp space space parsing in Fortran
  - fix Fortran -ff2c (Tobias Schlueter, #229110, PR fortran/25392)
  - fix ICE in dwarf2out with limbo die nodes in namespace context
    (Alexandre Oliva, #240503, #227376)
  - fix a SRA bug with bitfields (Alexandre Oliva, #223576)
  - package up ammintrin.h on i386/x86_64
  - fix AMDfam10 testcases (H.J. Lu)
  - fix f951 assert accessing memory after free (H.J. Lu, PR fortran/27351)
  - add AMDfam10 support (Harsha Jagasia, #222897)
  - add -march=core2 and -mtune=core2 support (Vlad Makarov)
  - fix sprintf builtin (PR middle-end/30473)
  - fix ICE on invalid __thread register on fields (PR c++/30536)
  - ignore install-info errors in scriptlets (#223687)
  - rename MNI and mni to SSSE3 and ssse3, keep -m{,no-}mni option and
    __MNI__ macro for compatibility
  - combiner fixes (Richard Sandiford, PR rtl-optimization/25514,
    PR rtl-optimization/27736)
  - fix build against post RHEL5 GA firefox-devel (#234435)


author: Jakub Jelinek <jakub@redhat.com> 4.1.2-14.el5
changelog:
  - fix simplify_plus_minus with ppc{,64} power6 tuning (regression from
    4.1.1-52.el5.2, #247586)
  - fix OpenMP handling of Fortran POINTER non-array vars (PR fortran/32550)


author: Jakub Jelinek <jakub@redhat.com> 4.1.2-38.el5
changelog:
  - update from gcc-4_1-branch (-r126008:130387)
    - PRs middle-end/34030, rtl-optimization/28062, rtl-optimization/33822,
  	bootstrap/33418, c++/31941, c++/32113, java/31842, target/33256,
  	tree-optimization/33142, c++/32112, c++/17763, rtl-optimization/32450,
  	target/31331, target/32641, target/32660, tree-optimization/32681,
  	boehm-gc/21940, boehm-gc/21942, target/28307, target/32506,
  	tree-optimization/31966, tree-optimization/32533
    - fix if-conversion to avoid introducing races into threaded code
      (Ian Lance Taylor, #391731)
  - don't unnecessarily create a stack frame in leaf functions e.g. on ppc with
    -fpic or -maltivec (Nathan Sidwell, Daniel Jacobowitz, #369541,
    PRs target/28966, target/29248)
  - compile libstdc++-4*.s390.rpm DSO with -march=z900, as RHEL5 only supports
    those CPUs.  libstdc++-devel*.s390.rpm should still work even for older
    CPUs (#298801)
  - add SSE5 support (Michael Meissner, Dwarakanath Rajagopal, Tony Linthicum,
    Uros Bizjak, #252998)
  - java_mark_cni_decl_local fix (Andrew Haley, #414411, PR java/27643)
  - i386 <= 0xNNffffffffLL comparison optimization (PR target/29978)
  - fix Fortran alternate returns with dummy procedure (Paul Thomas, #399531,
    PR fortran/31483)
  - OpenMP fixes (PR c++/33890, c/34506, c++/34513)
  - don't hold a global guard mutex across whole local static initialization
    (Doug Kwan, #426846)
  - fix OpenMP handling of global vars privatized in orphaned constructs
    with #pragma omp parallel inside them
  - -frepo fixes (#411741, PRs c++/34178, c++/34340)
  - fix dynamic_cast<C &> in templates (PR c++/34364)
  - fix error diagnostics involving ABS_EXPR (PR c++/34394)
  - two ctor preevaluation fixes (Olivier Hainque,
    Eric Botcazou, #407281)
  - consider static data members and static member functions in anon ns
    classes to be external for C++ linkage type handling (PR c++/34213)
  - handle OBJ_TYPE_REF in C++ diagnostics (PR c++/34275)
  - backport a bunch of bugfixes from GCC trunk
    - PRs c++/29225, c++/30293, c++/30294, c++/30988, c++/32241,
  	c++/32384, c++/33501, c++/33516, c++/33616, c++/33836,
  	c++/33842, c++/33844, c++/33962, c++/34089,
  	c/34146, debug/33537, middle-end/23848, middle-end/34070,
  	testsuite/33978, tree-optimization/33723
  - fix abs optimization (Richard Guenther, #394271, PR middle-end/34130)
  - fortran lbound/ubound fix (Paul Thomas, #391151, PR fortran/29712)
  - generate proper fortran debuginfo for assumed-size, assumed-shape
    and deferred arrays (#364001)
  - fix ppc64 unwinding of cr2 register if vdso=0
  - only allow __label__ at the start of a block (PR c++/32121)
  - disable -fipa-type-escape by default (PR tree-optimization/33136)
  - VLA handling fix (PR c/33238, PR c/27301)
  - disable TER of pure and const function calls except for __builtin_expect
    (PR tree-optimization/33619)
  - fix parsing of C++ function-like cast in template argument where cast's
    argument uses greater-than operator (PR c++/33744)
  - ignore always_inline attribute on redefined extern inline
    functions (Jan Hubicka, #329671, PR tree-optimization/33763)
  - add support for Fortran int conversion intrinsics (Francois-Xavier
    Coudert, #317051)
  - don't drop DECL_BUILT_IN_CLASS when defining a builtin function
  - print virtual inline backtrace in some diagnostic messages to help
    locate bugs reported with -D_FORTIFY_SOURCE{,=2}
  - add support for artificial, error and warning attributes
  - fix ICE with set_rhs allowing non-gimple (Roger Sayle, #247407,
    PR tree-optimization/32694)
  - fix ICE on Fortran interface-body declaring current subroutine name
    (Paul Thomas, #300851, PR fortran/20880)
  - don't ignore throw specification of function types in type hashing
    (PR c++/33506)
  - fix ICE on __builtin_mem*_chk if it couldn't be folded until
    expand time and at that point it can avoid a call (PR middle-end/33423)
  - handle the upcoming POSIX 'm' *scanf allocation modifier in
    GCC format checking, fix up some details about %as/%aS/%a[
  - backport __builtin_va_arg_pack () and __builtin_va_arg_pack_len () support
  - fix Fortran error recovery with DATA (Jerry DeLisle, #281331,
    PR fortran/27954)
  - make sure __builtin_{,v}{,f}{print,scan}f, __builtin_{,f}printf_unlocked
    and __builtin___{,v}{,f}printf_chk can throw
  - handle __*_chk builtins without __builtin_ in the name as anticipated in
    C++
  - fix libmudflap-devel multilib conflict on ppc/ppc64 and sparc/sparc64
    (#270281)
  - backport __attribute__((__gnu_inline__)) support for C++
  - fix ppc/ppc64 __sync_* builtins with aligned 8 or 16-bit values
  - don't set executable flag on .note.GNU-stack on ppc64/ia64 even
    when trampolines are used - trampolines on those architectures
    don't need executable stack
  - fix ppc32 libgcc.a(tramp.o), so that binaries using trampolines
    aren't forced to use bss PLT
  - fix a fortran charlen sharing bug (#253102)
  - fix ICE with X|~X or X^~X with vectors (PR middle-end/32912)
  - nuke bits/stdc++.gch directories from libstdc++-devel (#253304)
  - fix fortran Tx format handling (Jerry DeLisle, #252152,
    PR libgfortran/32678)
  - don't NRV optimize fields inside anonymous unions (PR c++/32992)
  - fortran debuginfo improvements for constant bound arrays (#248541,
    PR fortran/22244)
  - backport ARM fixes from trunk (#246800)
    - PRs middle-end/24998, target/28516, target/30486
  - fix simplify_plus_minus with ppc{,64} power6 tuning (regression from
    4.1.1-52.el5.2, #247256)
  - fix OpenMP handling of Fortran POINTER non-array vars (PR fortran/32550)


author: Jakub Jelinek <jakub@redhat.com> 4.1.2-39.el5
changelog:
  - generate DW_TAG_class_type for C++ and Java classes in DWARF3
    debuginfo (#371831, PR debug/7081)


author: Jakub Jelinek <jakub@redhat.com> 4.1.2-41.el5
changelog:
  - allow non-aggregate extern "Java" types in C++ placement new
    (PR c++/34829, Tom Tromey)
  - make sure no errors are reported during tentative parsing of
    pseudo-destructors (PR c++/35138)
  - fix i386 <= 0xNNffffffffLL comparison optimization (Michael Matz,
    PR target/35264)


author: Jakub Jelinek <jakub@redhat.com> 4.1.2-42.el5
changelog:
  - include bmmintrin.h and mmintrin-common.h headers (#252998)
  - fix PCH failure if a precompiled header is included more than
    once (#251682, PR pch/13675)
  - BuildRequire xulrunner-devel rather than firefox-devel


author: Jakub Jelinek <jakub@redhat.com> 4.1.2-43.el5
changelog:
  - update from gcc-4_1-branch
    - PRs c++/27177, c++/33959, c++/34774, c++/34950, c/34993, c++/35007,
  	libfortran/26253, libfortran/34699, libgfortran/34699,
  	libstdc++/20448, libstdc++/20451, middle-end/25445, middle-end/33631,
  	middle-end/33826, middle_end/34150, middle-end/34627, objc++/27232,
  	objc++/34193, rtl-optimization/31944, target/34393,
  	tree-optimization/21655
    - fix fold_widened_comparison (#371901, PR middle-end/35163,
      PR middle-end/37103)
  - move libgomp subpackage to gcc43 src.rpm (#437268)
  - fix java.net.URI.relativize (#429825, PR libgcj/34369)
  - var-tracking fix (#440345, PR debug/29558)
  - fix libstdc++ time and collate category handling (#441639,
    PR libstdc++/29217)
  - fix x86_64 TLS handling (#445666, PR target/36189)
  - fix C++ OpenMP privatized var [cd]tor cleanup handling (#452972,
    PR c++/36237)
  - fix make_bit_field_ref with large offsets (#453191, PR middle-end/36449)
  - fix -ftree-loop-linear (#434916, PR tree-optimization/30565)


author: Jakub Jelinek <jakub@redhat.com> 4.1.2-45.el5
changelog:
  - fix SCEV ICE (#490513, PR tree-optimization/27144)
  - fix -fabi-version=1 (#490211, PR c++/27640)
  - fix expansion ICE if fold creates TRUTH_{AND,OR}IF_EXPR (#495469,
    PR middle-end/37014)


author: Jakub Jelinek <jakub@redhat.com> 4.1.2-46.el5
changelog:
  - fix Fortran module reading with USE...ONLY (#483845, PR fortran/30554)
  - fix ULL multiplication on i386 (#465807, PR middle-end/37731)
  - fix Fortran FMT= with character array section (#492209, PR fortran/39865)
  - fix jump on single bit from ULL test on i386 (PR middle-end/40057)


author: Jakub Jelinek <jakub@redhat.com> 4.1.2-46.el5_4.1
changelog:
  - fix handling of multiple -fno-builtin-XXXX options on the command line
    (#526422, PR driver/28437)


author: Jakub Jelinek <jakub@redhat.com> 4.1.2-46.el5_4.2
changelog:
  - fix libjava to avoid opening *.la/dlopening *.so files from current
    working directory or subdirectories thereof (#545672, CVE-2009-3736)


author: Jakub Jelinek <jakub@redhat.com> 4.1.2-47.el5
changelog:
  - fix handling of multiple -fno-builtin-XXXX options on the command line
    (#515799, PR driver/28437)
  - fix DW_CFA_{remember,restore}_state handling


author: Jakub Jelinek <jakub@redhat.com> 4.1.2-48.el5
changelog:
  - fix debuginfo for local variables in constructors or destructors
    (#513184, PR c++/27574)
  - force BLKmode return values into registers if they are from likely
    spilled classes (#516028, PR rtl-optimization/41646)
  - fix dynamic_cast (#519519)
  - fix debuginfo for ppc{,64} with -mno-sched-prolog (#528792, PR target/40473)
  - fix libjava to avoid opening *.la/dlopening *.so files from current
    working directory or subdirectories thereof (#545673, CVE-2009-3736)
  - fix DW_OP_{gt,ge,lt,le} handling, add DW_OP_swap handling


author: Jakub Jelinek <jakub@redhat.com> 4.1.2-49.el5
changelog:
  - fix ICE in set_uids_in_ptset (#605803)
  - fix ICE in make_rtl_for_nonlocal_decl (#582682, #508735, #503565,
    PR c++/33094)
  - don't build gcjwebplugin (#596097)
  - fix IPP handling in libgcj (#578382)
  - document -print-multi-os-directory (#529659, PR other/25507)
  - fix ICE in output_die with function local types (#527510, PR debug/41063)
  - speed up locale::locale() ctor if _S_global hasn't been changed
    (#635708, PR libstdc++/40088)


author: Jakub Jelinek <jakub@redhat.com> 4.1.2-51.el5
changelog:
  - don't overwrite INDIRECT_REF type directly in C++ vtable accesses
    (#630893)
  - don't emit an extra useless var at -O0 for NRV optimized C++ vars,
    fix debug info for them (#660302, #660305, PR debug/44367, PR debug/46815)


author: Jakub Jelinek <jakub@redhat.com> 4.1.2-52.el5
changelog:
  - decrease C++ FE memory usage on code with heavy overloading
    (#651098, PR c++/48481)
  - build EH_SPEC_BLOCK with the same location as current function
    to help gcov (#706383, PR c++/50055)
  - fix PCH ICEs introduced by PR44367 changes (#735304)
  - improve debug info for C externs in block scope (#745004, PR debug/39563)
  - fix #pragma omp for handling in C++ try/catch stmt (#722252,
    PR middle-end/33333)
  - fix ICE in modified_type_die with Fortran array descriptors (#746405)


author: Jakub Jelinek <jakub@redhat.com> 4.1.2-52.el5_8.1
changelog:
  - backport N2179 exception propagation support to improve
    gcc44 as well as Developer Toolset (#806394)


author: Jakub Jelinek <jakub@redhat.com> 4.1.2-53.el5
changelog:
  - backport N2179 exception propagation support to improve
    gcc44 as well as Developer Toolset (#806275)


author: Jakub Jelinek <jakub@redhat.com> 4.1.2-54.el5
changelog:
  - lazily declare destructor when needed (#750545)
  - fix i?86 -m32 -fpic -fno-omit-frame-pointer cmpxchg8b patterns
    (#760417, PR target/39431)
  - change s390* -m31/-m64, -msoft-float/-mhard-float,
    -mlong-double-128/-mlong-double-64 and -mesa/-mzarch option
    handling to cancel each other (#797938)


author: Jakub Jelinek <jakub@redhat.com> 4.1.2-55.el5
changelog:
  - clear next_bb/prev_bb of basic blocks that have been dropped
    (#799592)
  - fix TImode arithmetics on x86_64 (#901750, PR target/31167,
    PR target/30041)
  - don't ICE on arrays with NULL TYPE_DOMAIN (#1008819)


author: Jakub Jelinek <jakub@redhat.com> 4.3.2-7.el5
changelog:
  - update from gcc-4_3-branch
  - ensure one can put breakpoints on break, continue and goto statements
    with -g -O0 (#465824, PRs debug/29609, debug/36690, debug/37616)
  - emit one DW_TAG_common_block for each common block in each scope, not
    one for each common block in one CU (#465974, PR debug/37738)
  - Intel -maes and -mpclmul support


author: Jakub Jelinek <jakub@redhat.com> 4.4.0-6.el5
changelog:
  - don't disable internal dependency generator, instead chmod 644 private
    shared libraries that shouldn't be provided/required, fold
    libppl{,_c} as convenience libraries into libcloog.so.0 (#503725)


author: Jakub Jelinek <jakub@redhat.com> 4.4.6-3.el5.1
changelog:
  - updated from gcc-4.4.6-3.el6
  - use /usr/libexec/binutils220/as assembler instead of /usr/bin/as
    (#742118)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-1.el5
changelog:
  - updated from gcc-4.4.7-1.el6 (#813708, #784360)
    - add -f{,no-}strict-enums option, make -fno-strict-enums
      the default for C++ (#556962, PR c++/43680)
    - lazily declare destructor when needed (#750545)
  - remove preview word from summary and description of the subpackages
    to avoid confusion about support status of gcc44 (#815207)


author: Jiri Moskovcak <jmoskovc@redhat.com> - 2.0.33-9.4.1
changelog:
  - security fixes
  - CVE-2006-4484 CVE-2007-0455 CVE-2007-2756 CVE-2007-3472 
  - CVE-2007-3473 CVE-2007-3475 CVE-2007-3476
  - Resolves: #432786


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 6.5-25
changelog:
  - Revert the pending signals handling (formerly BZ 233853, BZ 292971 tracker).
  - Fix attaching to stopped threads (BZ 289041).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 6.8-25
changelog:
  - Remove the Fortran dynamic arrays support (BZ 469681, formerly BZ 377541).
  - Fix conditional watchpoints from upstream (BZ 469720).
  - Fix on PPC spurious SIGTRAPs on active watchpoints (BZ 469749);
    still the PPC watchpoints are not reliable due to RHEL-5.3 kernel BZ 437970.


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 6.8-35
changelog:
  - Fixup Fortran modules namespaces testcase for biarch (for BZ 466118).
  - Fix crashes due to (missing) varobj invalidation, for VLA (for BZ 377541).
  - New testcase for Fortran arrays containing type records (for BZ 465301).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.0.1-21.el5
changelog:
  - Fortran: Fix regression on setting breakpoint at toplevel symbols (BZ 559291;
    David Moore, Intel).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.0.1-23.el5
changelog:
  - Disable break-by-name on inlined functions due to a regression on parameters
    of inlined functions falsely <optimized out> (BZ 556975 Comment 8).
    - Disable addon (finish) due to inline-cmds.exp: up from outer_inline2 assert.
  - Fix gdb.ada/* regressions (Keith Seitz).
  - testsuite: Include .c file for the test of the fix 7.0.1-22.el5 (BZ 562770).
  - testsuite: Fix long timeout on arches with failing gdb.base/interrupt.exp.
  - Fix ia64 part of the bt-clone-stop.exp fix.
  - Fix crash on stale addrinfo->sectindex (sensitive due to the PIE patch).
  - Remove false gdb_assert on $sp underflow.
  - Fix failed gdb_assert due to the PIE patchset (BZ 559414).
  - Workaround ia64 inferior calls clearing SP.


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.0.1-23.el5_5.1
changelog:
  - Fix gstack to print even the frame #0.  New gdb.base/gstack.exp.  (BZ 580833)
  - Merge gdb-6.3-gstack-without-path-20060414.p* into gdb-6.3-gstack-20050411.p*,
    no real code change.
  - testsuite: Fix gdb.base/gstack.exp also for ppc64 inferiors (for BZ 580833).
  - Adjust the %{dist} check for ".el5_5".


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.0.1-37.el5
changelog:
  - Fix kernel repeating PID cores, new test x86_64-pid0-core.exp (BZ 696464).
  - Fix ppc* and s390* for pthread_t for threads from core files (for BZ 673697).
  - Fix regression: Quit should not ask with core (for BZ 673697).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.0.1-37.el5_7.1
changelog:
  - [vla] Fix regression on fields of structs in internal vars (BZ 728151).
  - archer-jankratochvil-fedora12 commit: 6e73988f653ba986e8742f208f17ec084292cbd5
  - Adjust the %{dist} check for ".el5_7".


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.0.1-40.el5
changelog:
  - Fix dlopen of libpthread.so, updated glibc required (Gary Benson, BZ 658851).
    - SystemTap probes support (Sergio Durigan Junior, for BZ 658851).


author: Ray Strode <rstrode@redhat.com> - 1:2.16.0-30
changelog:
  Resolves: #220370
  - add function prototypes to fix crash in language selector on
  x86-64.  Patch by Bill Nottingham.


author: Ray Strode <rstrode@redhat.com> - 1:2.16.0-38
changelog:
  Resolves: #223192
  - Drop translations of console messages in locales that the console
    doesn't support


author: Ray Strode <rstrode@redhat.com> - 1:2.16.0-40
changelog:
  Resolves: #210827
  - Only honor cancel requests when blocking in the pam conversation
    waiting for user input (the only time it makes sense to cancel).
    Doing it at other times was causing spurious "authentication failure"
    messages.


author: Ray Strode <rstrode@redhat.com> - 1:2.16.0-46
changelog:
  Resolves: #215855
  - Work around issue in SECMOD_CancelWait() that was preventing
    smart card helper from exiting


author: Ray Strode <rstrode@redhat.com> 2.16.0-59.1
changelog:
  - Don't try to pre-create directories that are internal
    implementation details of X.
    Resolves: #997619 CVE-2013-4169


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Patch: gdm-change-theme.patch
  -->  The theme from TUV is not the theme we want to use
  - Added Source: gdm.ini
  -->  Config file for automated patch script
  - Ran Regex: (Release: .*)%{\?dist}(.*) => \1.sl5\2
  -->  Modify release string to note changes


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV> 2.16.0-59.sl5
changelog:
  Customizing the GDM for SL
  - Added patch gdm-change-theme.patch
    The theme from TUV is not the theme we want to use


author: Ray Strode <rstrode@redhat.com> - 1:2.16.0-7
changelog:
  Resolves: #209452
  - Disable factory when disable isn't local (so we don't 
    try to use the factory over ssh)


author: Jens Petersen <petersen@redhat.com> - 0.14.6-4.el5
changelog:
  - reset timestamp of examples ChangeLog for brp-java-repack-jars to really fix
    libintl.jar multilib conflict (#222156)


author: Jens Petersen <petersen@redhat.com> - 0.17-1.el5
changelog:
  - backport 0.17 from RHEL6 (#523713):
  - update License to GPLv3 and LGPLv2+
  - set preloadable_libintl.so executable in %install so it gets stripped
  - fix encoding of msghack script (Dwayne Bailey, #250248)
  - fix autopoint messing up CVS files with upstream patch (#441481)
  - add upstream gettext-xgettext-python-unicode-surrogate-473946.patch
    to fix xgettext handling of utf16 surrogates in python (#473946)
  - msghack.py: add arg checking and usage help (dchen, #456666)
  - drop java support and libintl.jar since needs gcj > 4.3 and openjdk
  - remove examples from -devel package
  - do not own en@*quot locale dirs
  - use %find_lang for .mo files
  - drop superfluous po-mode-init.el source


author: Chris Feist <cfeist@redhat.com> - 0.1.16-6
changelog:
  - Build for 2.6.18-8.1.15.el5 kernel
  - Fixed a panic when running SPECsfs NFS test bed
  - Resolves: rhbz#334671 rhbz#242838


author: Chris Feist <cfeist@redhat.com> - 0.1.19-7.1.1
changelog:
  - Fixed a problem caused by gfs-kmod requiring a kernel symbol (__clear_user)
    not on the kernel abi whitelist on ppc64.
  - Resolves: rhbz#373591


author: Chris Feist <cfeist@redhat.com> - 0.1.21-1
changelog:
  - Lock methods are now removed when using the lock_nolock protocol
  - Permission checks have been removed from xattr operations
  - Locking order in gfs_get_parent() has been fixed
  - Resolves: rhbz#244343 rhbz#323111 rhbz#400651


author: Chris Feist <cfeist@redhat.com> - 0.1.22-1
changelog:
  - gfs_tool now recognizes GFS files sytems on ppc
  - Fixed a NULL pointer dereference.
  - gfs_quota is now able to perform efficient list operations
  - Resolves: rhbz#429633 rhbz#426291 rhbz#430134


author: Chris Feist <cfeist@redhat.com> - 0.1.23-5.el5_2.3
changelog:
  - Fixed an assertion caused by the inode glock holder never getting
    dequeued through gfs_readpage.
  - Resolves: rhbz#465327


author: Abhijith Das <adas@redhat.com> - 0.1.34-10
changelog:
  - Fixes "Resource tempory unavailable" for EWOULDBLOCK message with 
    flocks on gfs file
  - Resolves: rhbz#515717


author: Abhijith Das <adas@redhat.com> - 0.1.34-11
changelog:
  - Fixes "Resource tempory unavailable" for EWOULDBLOCK message with
    flocks on gfs file
  - Resolves: rhbz#515717


author: Bob Peterson <rpeterso@redhat.com> - 0.1.34-15
changelog:
  - NFS over GFS issue (fatal: assertion "!bd->bd_pinned && !buffer_busy(bh)" failed)
  - Resolves: rhbz#491369


author: Bob Peterson <rpeterso@redhat.com> - 0.1.34-16
changelog:
  - GFS1 using lock_dlm is showing a poor performance problem compared to lock_nolock
  - Resolves: rhbz#732129


author: Chris Feist <cfeist@redhat.com> - 0.1.32-1
changelog:
  - Reduced the potential for a deadlock by prefaulting buffer pages preventing
    a hang on 'wait_for_completion'.
  - An issue with apache reading files with the inherit_jdata flag has been fixed
  - Resolves: rhbz#472062 rhbz#436811


author: Chris Feist <cfeist@redhat.com> - 0.1.33-1
changelog:
  - vmalloc is now used instead of kmalloc to prevent page allocation failures.
  - Resolves: rhbz#479421


author: Benjamin Marzinski <bmarzins@redhat.com> 0.1.34-21
changelog:
  - Modify bz1066181.patch
    * Added checks to make sure gfs_write_inode can start a transaaction,
      and modified gfs2_inode_attr_in to keep it from overwriting updated
      vfs inode timestamps
  - Updated kernel version
  - Resolves: bz #1066181


author: Benjamin Marzinski <bmarzins@redhat.com> 0.1.34-22
changelog:
  - Modify bz1066181.patch
    * Removed the locking code.  This makes gfs_write_inode only actually
      write out the inode when it gets called with the glock already held.
      This is necessary to avoid lock ordering deadlocks, but it means that
      mtime will only be updated for mmapped files when calling msync with
      MS_SYNC.
  - Updated kernel version
  - Resolves: bz #1066181


author: Chris Feist <cfeist@redhat.com> - 0.1.15-1
changelog:
  - A check is done to see if the file system is mounted before creation.
  - Man page has been added for gfs_edit
  - lock_dlm is now the default lock protocol on mkfs.gfs and mkfs.gfs2
  - gfs_grow /mountpoint/ now works properly
  - Resolves: rhbz#426298 rhbz#295301 rhbz#311591 rhbz#337961


author: Chris Feist <cfeist@redhat.com> 0.1.18-1
changelog:
  - gfs_mkfs now checks more thoroughly to see if a device is mounted.
  - Man page for gfs_edit has been added.
  - gfs_fsck now repairs corruption caused by gfs_grow.
  - Resolves: rhbz#426298 rhbz#295301 rhbz#438762 rhbz#440896 rhbz#440897 rhbz#421761 rhbz#436383


author: Chris Feist <cfeist@redhat.com> 0.1.19-3
changelog:
  - Fixed an issue with gfs_fsck attempting to fix the wrong bitmap.
  - Improved gfs_fsck's ability to fix damaged resource groups.
  - Added human readable option to gfs_tool df
  - Fixed an issue which could potentially cause gfs_fsck to remove everything
    in a corrupt filesystem.
  - gfs_grow performance has been improved on 1k block size filesystems. 
  - Fix a segfault in gfs_fsck when fixing a 'EA leaf block type' problem.
  - The gfs service is no longer disabled on install or upgrade
  - Resolves: rhbz#463817 rhbz#442271 rhbz#459131 rhbz#493727 rhbz#485451 rhbz#495774 rhbz#498593


author: Bob Peterson <rpeterso@redhat.com> 0.1.20-13
changelog:
  - GFS: Document new mount option: -o errors=withdraw|panic
  - gfs-utils: gfs mount option noprefetch not documented
  - Resolves: rhbz#766646


author: Bob Peterson <rpeterso@redhat.com> 0.1.20-5
changelog:
  - Fixed a problem whereby the extended attribute count was miscalculated.
  - Resolves: rhbz#509225 (addendum)


author: Bob Peterson <rpeterso@redhat.com> 0.1.20-7
changelog:
  - Fixed a problem whereby gfs_fsck attempted to reclaim metadata when -n was specified
  - Resolves: rhbz#508978


author: Chris Feist <cfeist@redhat.com> - 1.16
changelog:
  - Rebuild for -53 kernel.
  - Fixed a race condition caused when multiple glock demote requests were sent
    to a node back-to-back.
  - Related: rhbz#267001


author: Chris Feist <cfeist@redhat.com> 0.1.36-1
changelog:
  - fsck now works when processing files larger than 945 MB
  - fsck now properly process the '-n' command line option
  - Resolves: rhbz#291451 rhbz#287901


author: Chris Feist <cfeist@redhat.com> 0.1.41-1
changelog:
  - gfs2_fsck changes the system inodes properly now.
  - gfs2_edit savemeta now saves the rindex file.
  - Resolves: rhbz#402971 rhbz#325151


author: Chris Feist <cfeist@redhat.com> 0.1.42-1
changelog:
  - gfs2_fsck now behaves more like other filesystem fsck commands
  - gfs2_edit man page created
  - Fixed build time warnins for gfs2 userland tools
  - lock_dlm is now the default lock protocol in mkfs.gfs and mkfs.gfs2
  - Journals are now not cleared without asking the user first
  - Updates to gfs2_jadd man page
  - Extra slashes on gfs2 mount paths no longer confuse gfs2 tools
  - gfs2_tool lockdump has been implemented
  - gfs2_tool man page has been updated
  - gfs2_quota now works if the lock table is not specified
  - Additional gfs2_tool commands have now been implemented
  - gfs2_edit savemeta now saves the rindex file
  - Resolves: rhbz#240545 rhbz#247318 rhbz#251180 rhbz#311591 rhbz#291551 rhbz#291551 rhbz#334481 rhbz#345501 rhbz#349601 rhbz#354201 rhbz#352581 rhbz#336561 rhbz#364741 rhbz#352841 rhbz#369771 rhbz#382581 rhbz#402971 rhbz#325151 rhbz#426670


author: Chris Feist <cfeist@redhat.com> 0.1.51-1
changelog:
  - Device is now properly checked to verify that the device is not already
    mounted or busy.
  - gfs2_convert now properly converts file systems.
  - Resolves: rhbz#240584 rhbz#471618


author: Chris Feist <cfeist@redhat.com> 0.1.53-1.el5_3.1
changelog:
  - Other mount options will now be properly recognized when using 'noatime'
    or 'nodiratime'.
  - gfs2_grow now works with block sizes other than 4k.
  - Resolves: rhbz#482734 rhbz#483527


author: Chris Feist <cfeist@redhat.cmo> 491989
changelog:
  - A bug which could cause corruption during a conversion between gfs1 and gfs2 has
    been fixed.
  - Resolves: rhbz#491989


author: Chris Feist <cfeist@redhat.com> 0.1.53-1.el5_3.2
changelog:
  - A bug which could cause corruption during a conversion between gfs1 and gfs2
    has been fixed.
  - Resolves: rhbz#491989


author: Chris Feist <cfeist@redhat.com> 0.1.60-1
changelog:
  - When '/' is a gfs2 file system it is now properly mounted without an error.
  - Resolves: rhbz#507893


author: Abhi Das <adas@redhat.com> 0.1.62-20
changelog:
  - Fix gfs2_quota to initialize fiemap flags
  - Fix gfs2_quota to deal with boundary conditions that cause some
    quotas to not be set/listed correctly.
  - Resolves: rhbz#536902


author: Abhi Das <adas@redhat.com> 0.1.62-30
changelog:
  - fsck.gfs2: segfault in pass1b
  - gfs2_edit savemeta doesn't save all leaf blocks for large dirs
  - Resolves: rhbz#679076 rhbz#679565


author: Abhi Das <adas@redhat.com> 0.1.62-33
changelog:
  - gfs2_grow: gfs2_grow fails on a full file system with stuffed rindex file
  - mkfs.gfs2: mkfs.gfs2 doesn't work on regular files
  - libgfs2: libgfs2 limit major/minor numbers to 255
  - gfs2_grow: gfs2_grow fails to grow a filesystem with less than 3 rgrps
  - Resolves: rhbz#711451, rhbz#720935, rhbz#714739, rhbz#730091


author: Bob Peterson <rpeterso@redhat.com> 0.1.62-37
changelog:
  - After converting a GFS1 file system with gfs2_convert errors were detected with fsck.gfs2
  - Resolves: rhbz#956030


author: Andrew Price <anprice@redhat.com> 0.1.62-39
changelog:
  - gfs2_tool: Update /etc/mtab with metafs mounts, handle interrupts
  - libgfs2: Set umask before calling mkstemp
    Resolves: rhbz#994643


author: Andrew Price <anprice@redhat.com> - 0.1.62-42
changelog:
  - gfs2-utils: patch to update gfs1 superblock correctly
  - gfs2-utils: check and fix bad dinode pointers in gfs1 sb
    Resolves: rhbz#1084140


author: Tim Waugh <twaugh@redhat.com> 8.15.2-9
changelog:
  - Apply CJKV patch from svn164:165 plus the fix from svn173:174 (bug #194592,
    bug #203712, possibly bug #167596).


author: Tim Waugh <twaugh@redhat.com> 8.15.2-9.10
changelog:
  - Backported patch from upstream to initialize ColorSpace parameter to
    prevent PostScript error for some inputs (bug #504254).


author: Tim Waugh <twaugh@redhat.com> 8.15.2-9.2
changelog:
  - Configure with --with-drivers=ALL since the advertised default is not
    what gets used (bug #224129).


author: Tim Waugh <twaugh@redhat.com> 8.15.2-9.4:.6
changelog:
  - Applied patch to fix gdevpdtb buffer overflow (bug #493445).
  - Applied patch to fix scfd buffer underrun (bug #493442).
  - Applied patch to fix CVE-2009-0792 (bug #491853).
  - Applied patch to fix CVE-2009-0196 (bug #493379).


author: Tim Waugh <twaugh@redhat.com> 8.70-12
changelog:
  - Include extra upstream fixes c7474f22 and 13028e7b for PDF/A support
    (bug #710074, bug #755577).


author: Tim Waugh <twaugh@redhat.com> 8.70-5
changelog:
  - Restored Fontmap.local patch, incorrectly dropped after
    ghostscript-8.15.4-3 (bug #629943).
  - Applied upstream patch to fix iname.c segfault (bug #629563).


author: Tim Waugh <twaugh@redhat.com> 8.70-6
changelog:
  - Two more font substitution names needed adjusting for urw-fonts in
    RHEL-5: Helvetica-BoldOblique and Helvetica-Oblique (bug #662110).


author: Tim Waugh <twaugh@redhat.com> 8.70-6:.3
changelog:
  - Fixed character spacing problems using backported patch (bug #688996).
  - Match landscape page sizes when writing PXL (bug #692165).


author: Tim Waugh <twaugh@redhat.com> 8.70-6:.4
changelog:
  - Applied patch to avoid reading initialization files from CWD
    (CVE-2010-2055, bug #599564).
  - Applied patch to prevent integer underflow in TrueType bytecode
    interpreter (CVE-2009-3743, bug #627902).


author: Nils Philippsen <nils@redhat.com> - 2:2.2.13-2.0.9.el5
changelog:
  - fix overflows in PSD plugin (CVE-2009-3909, CVE-2012-3402)
  - fix heap corruption and overflow in GIF plug-in (CVE-2011-2896)
  - fix overflow in CEL plug-in (CVE-2012-3403)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.13-2.0.5
changelog:
  - add safeguard to avoid crashes while loading corrupt PSD images (#247573,
    patch by Raphaël Quinet)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.13-2.0.6
changelog:
  - replace gimp_error() by gimp_message()/gimp_quit() in a few plugins so they
    don't crash but gracefully exit when encountering error conditions
  - fix endianness issues in the PSP plugin to avoid it doing (seemingly) endless
    loops when loading images
  - fix endianness issues in the PCX plugin which cause it to not detect corrupt
    images


author: Nils Philippsen <nils@redhat.com> - 2:2.2.13-2.0.7.2
changelog:
  - fix various overflows (#537356, #666793, #689831, #703403, #703405, #703407,
    - unfuzz gimphelpmissing, icontheme patches


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.13-2
changelog:
  - avoid buffer overflow in sunras plugin (#238420)
  - don't erroneously delete symlinks to external plugins when updating (#238993)
  - own used directories in gimp-devel
  - s/%redhat/%rhel/g


author: Tim Waugh <twaugh@redhat.com> 4.2.7-22.2
changelog:
  - Compile libgimpprint with -fno-strict-aliasing (bug #450318).
  - For devel, utils, and plugin sub-packages, adjust main package
    requirement to include release (bug #450320).


author: Jeff Law <law@redhat.com> - 2.5-106
changelog:
  - Fix errno for various overflow situations in vfprintf.  Add
      missing overflow checks. (#857387)


author: Carlos O'Donell <carlos@redhat.com> - 2.5-107.3
changelog:
  - Fix multibyte character processing crash in regexp (CVE-2013-0242, #951130)
    - Fix getaddrinfo stack overflow resulting in application crash (CVE-2013-1914, #951130)


author: Carlos O'Donell <carlos@redhat.com> - 2.5-107.5
changelog:
  - Fix _nl_find_msg malloc failure case, and callers (#963813).
    - Test on init_fct, not result->__init_fct, after demangling (#963812).
    - Don't handle ttl == 0 specially (#962903).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.5-107.6
changelog:
  - Add support for newer L3 caches on x86-64 and correctly count
    the number of hardware threads sharing a cacheline (#1011422).


author: Jeff Law <law@redhat.com> - 2.5-105
changelog:
  - Handle failure of _nl_explode_name in all cases (#848481)
    - Define the default fuzz factor to 2 to make it easier to manipulate
      RHEL 5 RPMs on RHEL 6 and newer systems.


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.5-118.1
changelog:
  - Add support for newer L3 caches on x86-64 and correctly count
    the number of hardware threads sharing a cacheline (#1011424).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.5-118.3
changelog:
  - Remove gconv transliteration loadable modules support (CVE-2014-5119,
    - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.5-121
changelog:
  - Fix return code when starting an already started nscd daemon (#979413).
  - Fix getnameinfo for many PTR record queries (#1020486).
  - Return EINVAL error for negative sizees to getgroups (#995207).


author: Jakub Jelinek <jakub@redhat.com> 2.5-17
changelog:
  - fix copying of power4 ppc{,64} ld.so during %install
  - disable workaround for #210748 and #211133, instead backport
    ld.so locking fixes from the trunk (#235026)
  - Korean charsets additions (BZ#3954, BZ#3955)
  - fix handling of 2001::/32 IPv6 addresses in getaddrinfo (BZ#4102)
  - add inline optimization for fgetc_unlocked
  - fix handling of 172.{1[7-9],2[0-9],3[01]}/16 IPv4 addresses in
    getaddrinfo
  - make sure NULL checks in routines with nonnull attribute aren't
    optimized away
  - don't write uninitialized padding bytes to nscd socket
  - avoid misaligned reads/writes in gethostbyname_r (#243967, BZ#4381)
  - fix dl{,v}sym, dl_iterate_phdr and dlopen if some library is
    mapped into ld.so's inter-segment hole on x86_64 (#244545)
  - fix LD_AUDIT=a:b program (#180432)


author: Jakub Jelinek <jakub@redhat.com> 2.5-18.el5_1.1
changelog:
  - fix an ABBA deadlock in ld.so (#295891)
  - workaround for bugs in ia64 /emul/ia32-linux hack (#253961)
  - nis_list fix (#254115)


author: Jakub Jelinek <jakub@redhat.com> 2.5-16
changelog:
  - only build 31-bit shared libraries with -march=z900, *.a and *.o
    in glibc-devel should still work with g5 and g6 CPUs (#228127)
  - build ppc and ppc64 base shared libraries with -mcpu=power4,
    i.e. only support power4 and newer CPUs, *.a and *.o in
    glibc-devel should still work on any powerpc CPU (#241003)
  - don't crash on pseudo-zero long double values passed to
    *printf on i?86/x86_64/ia64 (BZ#4586)
  - fix *printf %La and strtold with some hexadecimal floating point
    constants on ppc/ppc64
  - fix nextafterl on ppc/ppc64


author: Jakub Jelinek <jakub@redhat.com> 2.5-20
changelog:
  - allow debugging of threaded statically linked binaries (#239653)
  - fix sscanf/swscanf if errno is set to EINTR on entry (BZ#4745)
  - fix forkpty error handling (BZ#4813)
  - fix popen if some active previous popen's stream has fd 0 or 1
    (#248281)
  - fix dlinfo RTLD_DI_SERINFO* with empty entry in DT_R*PATH or
    LD_LIBRARY_PATH (BZ#4776)
  - further gettext out of memory handling fixes (#247788)
  - fix i?86 pthread_rwlock_timed{rd,wr}lock
  - add SHA-256 and SHA-512 hashing to crypt(3) (#249477, #380751)
  - power6 updates (#253116)
  - support optimistic addresses in getaddrinfo (#259681)
  - si_LK fixes (#282201)
  - fix sporadic hangs in clntudp_call (#339821)
  - getaddrinfo sorting changes (not turned on by default, to enable
    them /etc/gai.conf needs to be present and with scopev4
    rules, #352021)
  - fix nscd paranoia restarting when one of the caches is
    disabled (#352321)
  - add sfence to x86_64 memset after movnti instructions (#371561)
  - fix iso-2022-jp//translit iconv bugs (#397021)
  - fix calloc with mlocked memory (#405781)
  - optimized x86_64 memcpy (#196882)
  - misc fixes (BZ#4858, BZ#4963, BZ#5028, BZ#5071, BZ#5225, BZ#5277,
    BZ#5375, BZ#5378, BZ#5424, BZ#5435, BZ#5451, BZ#5454, BZ#5541)


author: Jakub Jelinek <jakub@redhat.com> 2.5-24.el5_2.1
changelog:
  - fix _mcount and socket syscalls on s390x (#467106)
  - try harder to allocate memory in valloc and pvalloc (#463135)
  - fix dynamic TLS handling (#469861)


author: Jakub Jelinek <jakub@redhat.com> 2.5-23
changelog:
  - fix gettext race conditions (#439486, BZ#5058, BZ#5443)
  - fix x86_64 pthread_mutex_timedlock (#434601)
  - only service sshd condrestart if /etc/rc.d/init.d/sshd exists
    (#428859)


author: Andreas Schwab <schwab@redhat.com> - 2.5-34.el5_3.1
changelog:
  - force malloc hook pointers into register to avoid rereading them
    from memory non-atomically (#507530, BZ#9957)


author: Jakub Jelinek <jakub@redhat.com> 2.5-40
changelog:
  - add a barrier to ATOMIC_FASTBINS _int_free code needed
    on ppc/ppc64 (#508395)
  - don't stop parsing fopen mode string after seing 'c'
    letter (#509853)


author: Andreas Schwab <schwab@redhat.com> - 2.5-58.el5_6.2
changelog:
  - Avoid too much stack use in fnmatch (#681054, CVE-2011-1071)
  - Properly quote output of locale (#625893, CVE-2011-1095)
  - Don't leave empty element in rpath when skipping the first element,
    ignore rpath elements containing non-isolated use of $ORIGIN when
    privileged (#667974, CVE-2011-0536)
  - Fix handling of newline in addmntent (#559579, CVE-2010-0296)


author: Troy Dawson <dawson@fnal.gov> - 2.5-58.el5_6.2.6.sl5
changelog:
  - Changed patch 245 back to what it was in 2.5-58,
    Disabled patch 249, due to the change in patch 245
    (#693882)
  - CVE-2011-0536 is now unpatched and vulnerable.


author: Andreas Schwab <schwab@redhat.com> - 2.5-64
changelog:
  - Don't allocate executable stack when it cannot be allocated in the
    first 4G (#448011)
  - Initialize resolver state in nscd (#676039)
  - No cancel signal in unsafe places (#684808)


author: Jeff Law <law@redhat.com> - 2.5-65.el5_7.3
changelog:
  - Use correct type when casting d_tag (#767687)
  - Report write error  in addmnt even for cached streams (#767687)
  - ldd: Never run file directly (#767687).
  - Workaround misconfigured system (#767687)


author: Jeff Law <law@redhat.com> - 2.5-81.el5_8.1
changelog:
  - Add dist tag
  - Filter out <built-in> when building file lists (#784646).
  - Avoid "nargs" integer overflow which could be used to bypass FORTIFY_SOURCE (#794813)


author: Patsy Franklin <pfrankli@redhat.com> - 2.5-81.el5_8.4
changelog:
  - Fix iconv() segfault if the invalid multibyte character 0xffff is input when converting from IBM930 (#837896)


author: Jeff Law <loaw@redhat.com> - 2.5-81.el5_8.5
changelog:
  - Do not use PT_IEEE_IP ptrace calls (#839411)
  - Update ULPs (#839411)
  - Fix various transcendentals in non-default rounding modes (#839411)


author: Jeff Law <law@redhat.com> - 2.5-79
changelog:
  - Complete the numeric settings fix (#675259)
  - Complete the change for error codes from pthread_create (#707998)


author: Chris Feist <cfeist@redhat.com> - 0.1.3-2
changelog:
  - Now requires kABI rather than specific kernel (code from
    jcm@redhat.com)
  - Resolves: rhbz#212428


author: Chris Feist <cfeist@redhat.com> - 0.1.5-1
changelog:
  - gnbd now uses the deadline scheduler by default.
  - Sending requests after a send has failed is now disallowed.
  - The gnbd kernel module on 64 bit architectures now handles ioctls from 32
    bit userspace processes.
  - Related: rhbz#442606 rhbz#449812 rhbz#440454


author: Richard Hughes <rhughes@redhat.com> - 2.16.0-8.el5
changelog:
  - Add patches 6..17 from upstream to fix various bugs and crashers.
    None of these patches are risky, and pose little risk for a large gain in
    stability.
  - Resolves: #244982


author: Richard Hughes <rhughes@redhat.com> - 2.16.0-10.el5
changelog:
  - Don't poke the screensaver when we get a button press else we can
    trigger the LCD panel to wakeup when the lid is closed on some laptops.
  - Resolves: #423931


author: Dan Williams <dcbw@redhat.com> - 2.15.90-2.fc6
changelog:
  - Remove unecessary dependencies on gnome-python2-desktop from
      -libwnck and -rsvg subpackages (OLPC)


author: Matthew Barnes <mbarnes@redhat.com> - 2.14.2-6
changelog:
  - Require gecko-libs instead of firefox.
  - Add patch to make pkg-config look for mozilla-gtkmozembed even
    though we're using xulrunner.


author: Ray Strode <rstrode@redhat.com> - 2.16.0-8.el5
changelog:
  - Replace "Ask on logout" checkbox with "Save the current session"
    button in session properties
    Resolves: #432538


author: Ray Strode <rstrode@redhat.com> - 2.16.0-5.el5
changelog:
  - don't hose users with a stale http_proxy variable if they
    use autoconfiguration and uses to use manual configuration.
    Patch by Mark McLoughlin (bug 212319)


author: Jeff Bastian <jbastian@redhat.com> - 2.16.0-7.el5
changelog:
  Resolves: #484431
  - backport patch from upstream bug #341286 as recommended by Ray Strode
    to fix restoration of multiple konsole windows (#484431)


author: Ray Strode <rstrode@redhat.com> 2.16.0-5.3.1
changelog:
  - Proxy fixes, patch by
    Behdad Esfahbod <besfahbo@redhat.com>
    and
    Olivier Fourdan <ofourdan@redhat.com>
    Resolves: #719399


author: Ray Strode <rstrode@redhat.com> - 2.16.0-4
changelog:
  Resolves: #228631 - log viewer crash on logout
  - initialize variable to 0 before using it as an index


author: Ray Strode <rstrode@redhat.com> - 2.16.0-5
changelog:
  Resolves: #216964 - disk usage analyzer crash/lockup on search
  - pass correct values with correct types into variadic functions
  - skip /proc and /sys to prevent read() hangs


author: Tomas Bzatek <tbzatek@redhat.com> - 2.16.2-8.el5
changelog:
  - Fix Gnome trashcan doesn't work on ext4 filesystems (#594836)
  - Fix a crash in ImageMagick after conversion is done (#472253)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.16.2-9.el5
changelog:
  - Prevent deleting items linking out of the trash (#586015)
  - Do not stat every file on an ClearCase mvfs filesystem (#822817)
  - Do not silently skip directory having no read permission during copy (#772307)
  - Allow trashing symlink to filesystem root that does not support trashing (#621394)
  - CVE-2009-2473 gnome-vfs2 embedded neon: billion laughs DoS attack (#540548)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.16.2-5.el5
changelog:
  - Fix daemon restart due to invalid utf-8 device file (#486286)
  - Fix Search stops upon encountering an unreadable directory (#432764)
  - Fix moving files between different NFS mounts (#438116)
  - Copy file when following symlink (#481593)
  - DAV: Handle filenames with reserved chars (#503112)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-13
changelog:
  - incorporate patch from Werner to work around clients which
    can't tell that multiple plain messages have been processed (#230457)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-14
changelog:
  - add patch from David Shaw to fix incorrectly detecting multiple plaintexts
    when processing multiple input files (#442815)


author: Tomas Mraz <tmraz@redhat.com> - 1.4.5-17
changelog:
  - fix CVE-2012-6085 GnuPG: read_block() corrupt key input validation
  - fix CVE-2013-4242 GnuPG susceptible to Yarom/Falkner side-channel attack
  - fix CVE-2013-4402 GnuPG: infinite recursion in the compressed packet parser


author: Tomas Mraz <tmraz@redhat.com> - 2.0.10-5
changelog:
  - fix CVE-2012-6085 GnuPG: read_block() corrupt key input validation
  - fix CVE-2013-4402 GnuPG: infinite recursion in the compressed packet parser


author: Steve Traylen <steve.traylen@cern.ch> - 4.2.6-5
changelog:
  - Build with wxGtk for the purposes of releasing in SL, i.e with
    out EPEL.
  - Remove SL4 support case.


author: Tomas Mraz <tmraz@redhat.com> 1.4.1-8
changelog:
  - fix multiple possible NULL dereferences and other problems
    that can potentially lead to segfault in the client


author: Tomas Mraz <tmraz@redhat.com> 1.4.1-9
changelog:
  - fix CVE-2011-4128 - buffer overflow in gnutls_session_get_data() (#752308)
  - fix CVE-2012-1569 - missing length check when decoding DER lengths (#804920)
  - fix CVE-2012-1573 - security issue in packet parsing (#805432)


author: Tomas Mraz <tmraz@redhat.com> 1.4.1-10
changelog:
  - do not generate invalid certificate requests without challenge password
  - store subject DN instead of issuer DN in the CA list


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 1.4.1-14
changelog:
  - Renamed gnutls-1.4.1-cve-2014-0092-1.patch to cve-2014-5138.patch
  - Renamed gnutls-1.4.1-cve-2014-0092-2.patch to cve-2014-0092.patch


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 1.4.1-15
changelog:
  - fix session ID length check and null pointer dereference (#1102355)
  - fix minitasn1 issues (#1102355)
  - Renamed gnutls-1.4.1-cve-2014-5138.patch to cve-2009-5138.patch


author: Tomas Mraz <tmraz@redhat.com> 1.4.1-3.5
changelog:
  - fix NUL characters in DN and SAN cert fields issue,
    make sure gnutls_x509_crt_check_hostname() fails when certificate
    has no CN or SAN CVE-2009-2730 (#516231)


author: Tomas Mraz <tmraz@redhat.com> 1.4.1-3.7
changelog:
  - implement safe renegotiation - CVE-2009-3555 (#533125)
  - do not allow MD2 in certificate signatures by default - CVE-2009-2409
    (#510197)


author: Troy Dawson <dawson@fnal.gov> - 2.18-3.sl
changelog:
  - Updated to release 2.18.
  - Fixed %files sections for various packages
  - Removed the vendor line, so we get the default vendor


author: Troy Dawson <dawson@fnal.gov>
changelog:
  - Made changes for SL 5, which consists of the following
  - set "LUA 1" for rhel5
  - set "PHP 1" for rhel5
  - Added Patch100 (written by Jaroslaw Polok) so PHP would build on SL5


author: Tim Waugh <twaugh@redhat.com> 2.5.1-54.2
changelog:
  - Fixed count of patterns when the last is an empty string (bug #216934).
  - Fix 'memory exhausted' errors by limiting in-memory buffer (bug #216882).


author: Stepan Kasal <skasal@redhat.com> 2.5.1-55
changelog:
  - fix hang under non-UTF-8 multibyte locales (#479151)
  - with lines longer than 200 MB, give up rather than print incorrect
    output (#483073)
  - fix an off-by-one error which might cause segfault (#452127)
  - a doc improvement (#484366)
  - Resolves: #479151, #452127, #483073, and 484366


author: Peter Jones <pjones@redhat.com> - 0.97-13.8.el5
changelog:
  - Update documentation for "savedefault" grub-shell command
    Resolves: rhbz#212649
  - Support more than 10 devices
    Resolves: rhbz#829228


author: Václav Pavlín <vpavlin@redhat.com> - 0.97-13.11.1
changelog:
  - grub-install: fix regex for partition and multipath when
    use_friendly_names is off
    Resolves: rhbz#1034595


author: Peter Jones <pjones@redhat.com> - 0.97-13.1
changelog:
  - Fix handling of CCISS devices when installing to the MBR.
    Resolves: rhbz#429187
  - Allow longer kernel command lines
    Resolves: rhbz#336341


author: - Bastien Nocera <bnocera@redhat.com> - 0.10.20-2
changelog:
  - Remove increased liboil req, otherwise we can't actually install
    the package
  Related: rhbz #450104


author: Cosimo Cecchi <cosimoc@redhat.com> - 1.2.10-57
changelog:
  - Use pointer coordinates to compute input events scaling, when a
    device bound to a screen is used in multihead scenarios.
    Resolves: #694888


author: Daniel P. Berrange <berrange@redhat.com> - 0.3.2-2.el5
changelog:
  - Fix keyboard state tracking (rhbz #435763)
  - Fix endian conversion logic in framebuffer updates (rhbz #431811)


author: Daniel P. Berrange <berrange@redhat.com> - 0.3.2-3.el5
changelog:
  - Fix colour conversions for mixed-endian setups (rhbz #431811)
  - Fix mouse pointer grab semantics (rhbz #433711)


author: Matthias Clasen <mclasen@redhat.com> - 2.10.4-17
changelog:
  - Make printing to raw print queues work  (#224202)
  - Fix a crash in gdk_region_polygon()  (#237153)
  - Fix a warning from GtkCalendar   (#218676)


author: Matthias Clasen <mclasen@redaht.com> - 2.10.4-20
changelog:
  - Update Telugu translations (Resolves: #225373)
  - Fix a problem with tray icons in KDE (Resolves: #216847, #236650, #240049)


author: Matthias Clasen <mclasen@redhat.com> - 2.10.4-21
changelog:
  - Fix some cases where the file chooser is not responding
    well to initial selection (Resolves: #523657, #518483)


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.10.4-27
changelog:
  - Fix integer overflow in GdkPixbuf's XBM image file format loader
    (CVE-2012-2370)
    Resolves: #846252


author: Cosimo Cecchi <ccecchi@redhat.com> - 2.10.4-29
changelog:
  - Improve patch to parse CUPS user lpoptions file to avoid crashes
    on s390 and ia64
    Resolves: #603809


author: Karel Klic <kklic@redhat.com> 1.3.5-11:.1
changelog:
  - Added fix for CVE-2010-0001: (64 bit) Integer underflow by decompressing
    LZW format files
    Resolves: rhbz#555088


author: Karel Klic <kklic@redhat.com> 1.3.5-11.el5
changelog:
  - Added fix for CVE-2010-0001: (64 bit) Integer underflow by decompressing
    LZW format files
    Resolves: rhbz#555089


author: Tim Waugh <twaugh@redhat.com> - 0.6.2-5.1
changelog:
  - Use correct page size in locales that do not use US Letter (bug #221871).
    Requires system-config-printer-libs >= 0.7.32.6.


author: Tim Waugh <twaugh@redhat.com> - 0.6.2-5.2
changelog:
  - Initialize locale when setting page size from locale (bug #221871).  If
    locale is not set by HAL, fetch it from i18n sysconfig file.


author: David Zeuthen <davidz@redhat.com> - 0.5.8.1-23.el5
changelog:
  - Leave out F7 suspend/resume quirks for now as these F7 specific quirks
    don't work too well on RHEL5
  - Resolves: #236907


author: David Zeuthen <davidz@redhat.com> - 0.5.8.1-34{?dist}
changelog:
  - Add some more quirks
  - Resolves: #435290
  - Resolves: #435292
  - Resolves: #435295
  - Resolves: #435296


author: Richard Hughes <rhughes@redhat.com> - 0.5.8.1-36{?dist}
changelog:
  - Add the keymap setkeycode ioctl set code and the quirks from hal-info
    to fix many, many models of laptops.
  - Resolves: #442623


author: Richard Hughes <rhughes@redhat.com> - 0.5.8.1-60{?dist}
changelog:
  - Do not force noexec onto media devices as it offers no real security
    and breaks some of the existing tools.
  - Resolves: #480716


author: Richard Hughes <rhughes@redhat.com> - 0.5.8.1-61{?dist}
changelog:
  - Do not poll drives that have the storage.media_check_enabled key set
    to FALSE.
  - Resolves: #454923


author: Richard Hughes <rhughes@redhat.com> - 0.5.8.1-62{?dist}
changelog:
  - Modify /etc/init.d/haldaemon to parse the /etc/sysconfig/haldaemon
    config file in for extra parameters.
  - Resolves: #576045


author: Richard Hughes <rhughes@redhat.com> - 0.5.8.1-64{?dist}
changelog:
  - Do not print an incorrect console warning when hald spawns a runner
    with input values. Fixes the error message:
    'Warning: Error while wite r->input () to stdin_v.'
  - Resolves: #704079


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6-1
changelog:
  - fix 'make check' by using binaries built with a different path for their
    own check files
  - add a non-fips compile-time option, which we don't use


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6-2
changelog:
  - backport changes to ensure that hmaccalc can always find prelink where it
    was at build-time, regardless of the value of $PATH at runtime (#512275)
  - buildrequire prelink on architectures where we have it, so that it will be
    found at build-time


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6-4
changelog:
  - when checking, don't truncate the sums we read from the checkfile, just check
    them as they are (#658178)


author: Tim Waugh <twaugh@redhat.com> 1.6.7-4.1.el5_2.4
changelog:
  - Applied patch to make hpssd message parser more robust (bug #457052).
  - Applied patches to fix insecure alert emails (bug #455235).


author: Tim Waugh <twaugh@redhat.com> 1.6.7-5
changelog:
  - Moved libhpip library to main package (bug #457440).
  - Don't use "/usr/bin/env python" for Python scripts (bug #521857).


author: Tim Waugh <twaugh@redhat.com> 3.9.8-9
changelog:
  - Further use of unavailable dbus features removed.
  - Don't ship hp3-devicesettings as it requires PyQt4.


author: Tim Waugh <twaugh@redhat.com> 3.9.8-10
changelog:
  - Remove more programs that require PyQt4: hp3-faxsetup,
    hp3-linefeedcal, hp3-pqdiag, hp3-printsettings, hp3-wificonfig.


author: Jon Prindiville <jprindiv@redhat.com> 1:1.8.0.4-3jpp.6
changelog:
  - Updating the config files forgotten in the previous revision
  - Still addressing CVE-2007-4576
  - Resolves: #303581


author: Adam Tkac <atkac redhat com> 3:3.2.0b6-11
changelog:
  - handle databases with zero words well (#222419)
  - htstat got segfault when there are no words in db
  - write error message when external parser doesn't exist (#435741)
  - don't write spurious error when allow_numbers is true (#435743)
  - mark modifiable config files as noreplace (#459971)


author: Joe Orton <jorton@redhat.com> 2.2.3-11.el5_1.1
changelog:
  - add security fixes for CVE-2007-6388, CVE-2007-6421
    and CVE-2007-6422 (#427240)
  - add security fix for CVE-2007-4465, CVE-2007-5000 (#421631)
  - add security fix for mod_proxy_ftp UTF-7 XSS (#427745)


author: Joe Orton <jorton@redhat.com> 2.2.3-22.el5
changelog:
  - add security fixes for CVE-2008-2939 (#468841)
  - note that the mod_proxy 2.2.9 rebase fixed CVE-2008-2634


author: Joe Orton <jorton@redhat.com> - 2.2.3-31.3
changelog:
  - mod_ssl: add SSLInsecureRenegotiation (#567980)
  - add security fixes for CVE-2010-0408, CVE-2010-0434 (#570440)


author: Joe Orton <jorton@redhat.com> - 2.2.3-43.2
changelog:
  - add security fixes for CVE-2010-1452, CVE-2010-2791 (#623210)
  - mod_deflate: rebase to 2.2.15 (#625435)
  - stop multiple invocations of filter init functions (#625451)


author: Joe Orton <jorton@redhat.com> - 2.2.3-44
changelog:
  - mod_ssl: improved fix for SSLRequire's OID() function (#614423)
  - add security fixes for CVE-2010-1452, CVE-2010-2791 (#623211)
  - mod_deflate: rebase to 2.2.15 (#612211)
  - stop multiple invocations of filter init functions (#570628)


author: Joe Orton <jorton@redhat.com> - 2.2.3-45
changelog:
  - ab: fail gracefully for OOM allocating stats structures (#645845)
  - init script: use $STOP_DELAY as delay before SIGKILL of parent (#644223)
  - mod_dav: don't delete the existing resource if a PUT fails (#572910)
  - core: don't replace Date header when acting as reverse proxy (#565865)
  - mod_dbd: fix pool usage (#633955)


author: Joe Orton <jorton@redhat.com> - 2.2.3-63.1
changelog:
  - add security fixes for CVE-2012-0053, CVE-2012-0031, CVE-2011-3607 (#787596)	
  - remove patch for CVE-2011-3638, obviated by fix for CVE-2011-3639


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV> 2.2.3-63.sl5.1
changelog:
  This package must not feature TUVs branding
    Spec change: The index.html file is outside of the source tarball, so we need to patch it in the install step
  - Added patch httpd-sl_index.html.sl5.patch
    Switches to an SL branded default index
  - Added patch httpd-spec_sl_index.html.sl5.patch
  - Prevented application of patch httpd-sl_index.html.sl5.patch
    This is the patch we need, just can	 be applied in the normal place
  - Prevented application of patch httpd-spec_sl_index.html.sl5.patch


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV> 2.2.3-65.sl5.3
changelog:
  This package must not feature TUVs branding
    Spec change: The index.html file is outside of the source tarball, so we need to patch it in the install step
  - Added patch httpd-spec_sl_index.html.sl5.patch
  - Added patch httpd-sl_index.html.sl5.patch
    Switches to an SL branded default index
  - Prevented application of patch httpd-sl_index.html.sl5.patch
    This is the patch we need, just can	 be applied in the normal place
  - Prevented application of patch httpd-spec_sl_index.html.sl5.patch


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Source: httpd-spec_sl_index.html.sl.patch
  -->  The index.html file is outside of the source tarball, so we need to patch it in the install step
  - Ran Regex: (Release: .*).el5(.*) => \1.sl5\2
  -->  Modify release string to note changes
  - Ran Regex: vstring Red Hat => vstring Scientific Linux
  -->  This package must not feature TUVs branding
  - Ran Regex: distro Red Hat => distro Scientific Linux
  -->  This package must not feature TUVs branding
  - Added Source: httpd-sl_index.html.sl.patch
  -->  This patch removes TUV branding from the default index.html
  - Added Source: httpd.ini
  -->  Config file for automated patch script


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Source: httpd-spec_sl_index.html.sl.patch
  -->  The index.html file is outside of the source tarball, so we need to patch it in the install step
  - Ran Regex: (Release: .*).el5(.*) => \1.sl5\2
  -->  Modify release string to note changes
  - Ran Regex: vstring Red Hat => vstring Scientific Linux
  -->  This package must not feature TUVs branding
  - Added Source: httpd-sl_index.html.sl.patch
  -->  This patch removes TUV branding from the default index.html
  - Added Source: httpd.ini
  -->  Config file for automated patch script
  - Ran Regex: distro Red Hat Enterprise Linux => distro Scientific Linux
  -->  This package must not feature TUVs branding


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Source: httpd-spec_sl_index.html.sl.patch
  -->  The index.html file is outside of the source tarball, so we need to patch it in the install step
  - Ran Regex: vstring Red Hat => vstring Scientific Linux
  -->  This package must not feature TUVs branding
  - Ran Regex: (Release: .*)%{\?dist}(.*) => \1.sl5\2
  -->  Modify release string to note changes
  - Added Source: httpd-sl_index.html.sl.patch
  -->  This patch removes TUV branding from the default index.html
  - Added Source: httpd.ini
  -->  Config file for automated patch script
  - Ran Regex: distro Red Hat Enterprise Linux => distro Scientific Linux
  -->  This package must not feature TUVs branding


author: Eduardo Habkost <ehabkost redhat com> - 20061109-5
changelog:
  - Spec changes from package review [bz#490765]:
    - Use %{version} on %setup line
  - Related: bz#490765


author: Doug Ledford <dledford@redhat.com> - 0.4-3
changelog:
  - Rebuild against updated libibmad and libibumad libraries
  - Only need to build require libibmad, it pulls in libibumad
  - Resolves: bz451466


author: Doug Ledford <dledford@redhat.com> - 1.2-8
changelog:
  - Remove ibdiagui from the package entirely since it still doesn't work
    without graphviz-tcl
  - Related: bz468122


author: Jay Fenlason <fenlason@redhat.com> 1.2-11.2.el5
changelog:
  - Added Requires lines for ibutils-libs to make rpmdiff happier.
  - Add patch for CVE-2008-3277
    Resolves: bz768400


author: Doug Ledford <dledford@redhat.com> - 1.2-7
changelog:
  - Grab the upstream ibutils git repo, find a checkout that supports the
    recent opensm library versions and yet doesn't require graphviz-tcl,
    export that tree to a tarball with a git designation, build from it.
  - Resolves: bz468122


author: Troy Dawson <dawson@fnal.gov> 1.2.37-1
changelog:
  - Updated to 1.2.37
  - Added ooffice icons
  - Changed menu and toolbar entries to be ooffice instead of soffice


author: Troy Dawson <dawson@fnal.gov> 1.2.37-1.1
changelog:
  - Scaled background (added imlib build requirements which replaces libXpm-devel)
    Spec file patch provided by Oleg Sadov


author: Caolan McNamara <caolanm@redhat.com> - 3.6-5.10
changelog:
  - Resolves: rhbz#226949 telegu rendering problem in OOo
  - Resolves: rhbz#228458 gujarati dependent vowel treated as independent
  - Resolves: rhbz#214948 multiple dependant vowel signs displayed as one


author: Paul Howarth <paul@city-fan.org> 1:1.9.15-11
changelog:
  - add libXt-devel dependency for -devel package (#478357)
  - use install -p to maintain timestamps where reasonable
  - Use an alternative approach to rpath-fixing - hacking the supplied libtool
    rather than trying to use the system one


author: Doug Ledford <dledford@redhat.com> - 1.5.8-1.el6
changelog:
  - Update to latest upstream version
  - Make build work on i686 arch
  - Modify perfquery to be able to loop through all HCAs in a single host
  - Resolves: bz593767
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 1.5.12-2.el5
changelog:
  - Update the all_hcas patch to resolve several problems
  - Give a simple help message to the ibnodes script
  - Resolves: bz772602


author: Doug Ledford <dledford@redhat.com> - 1.5.3-1.el5
changelog:
  - Update to latest upstream version
  - Don't include the newly added devel stuff as it's likely only needed
    internally (and certainly not needed by anything we've supported before
    since we've never shipped it)
  - Related: bz518218


author: Bill Nottingham <notting@redhat.com> 8.45.16.EL-1
changelog:
  - init.d/network: add support for VLAN_PLUS_VID_NO_PAD vlans (#229285)
  - network-functions: fix logic error in install_bonding_driver (#229643)
  - add init script for netconsole (#223742)
  - ifup-eth: set 'primary' later for bonding devices (#236897, <agospoda@redhat.com>)
  - init.d/halt: don't shut down the network in kexec (#223932, <mchristi@redhat.com>)


author: Bill Nottingham <notting@redhat.com>, Harald Hoyer <harald@redhat.com> 8.45.18.EL-1
changelog:
  - IKE_DHGROUP is now an option for IPsec configuration files, which allows
  to set the dh group used during PHASE 1 of IPsec SA (#251506)
  - arp_ip_target can now be used with a comma seperated IP list in BONDING_OPTS (#288151)
  - genhostid now generates only 32 bit hostids on 64 bit systems (#306811)
  - the check for the need of remounting the root file system read-writable
  is now refined (#334171)
  - quoted SUBCHANNELS and HWADDR options in network configuration files are
  now handled properly (#351291)
  - support for resuming from an encrypted swap has been added (#360071)
  - rc.sysinit now executes the proper configuration tools, if /.unconfigured
  is present (#426372)
  - Resolves: rhbz#251506 rhbz#288151 rhbz#306811 rhbz#334171 rhbz#351291 rhbz#360071 rhbz#426372


author: Bill Nottingham <notting@redhat.com> 8.45.19.EL-1
changelog:
  - also skip network shutdown if there is a '_rnetdev' root device (part of #435358, <pjones@redhat.com>)


author: Phil Knirsch <pknirsch@redhat.com> 8.45.29-3
changelog:
  - Final fixes for IP address validation (#464268)
  - Added required 54-cu3088-fix.rules udev rules file (#475721)
  - Resolves: #464268,#475721


author: Harald Hoyer <harald@redhat.com> 8.45.30-2
changelog:
  - fix raw path in initscript (#472891)
  - remove deprecation comments (#472891)
  - Resolves: rhbz#472891


author: Harald Hoyer <harald@redhat.com> 8.45.31-1
changelog:
  - do not killall racoon with the full path
  Resolves: rhbz#567295
  - fixed the interactive startup keys in translation
  Resolves: rhbz#566579
  - do not clear the environment for daemon()
  Resolves: rhbz#564093
  - call unicode_start with $UNIMAP instead of $SYSFONTACM
  Resolves: rhbz#557089
  - fixed the network interface name grep in checks
  Resolves: rhbz#538863
  - make /var/lib/xend a bind mount for read-only root systems
  Resolves: rhbz#526046
  - do not try to activate individual dmraid subsets
  Resolves: rhbz#524356
  - create /var/run/utmp* /var/log/wtmp* with the correct selinux context
  Resolves: rhbz#519748
  - load the bonding driver, if bonding options are present in the ifcfg file
  Resolves: rhbz#516569
  - run quotacheck after the local filesystems have been mounted
  Resolves: rhbz#499207
  - add DHCP_HOSTNAME documentation to sysconfig.txt
  Resolves: rhbz#498052
  - remove /var/run/dovecot/* also (not only /var/run/dovecot/*/*)
  Resolves: rhbz#492994


author: Lukas Nykryn <lnykryn@redhat.com> - 8.45.44-1
changelog:
  - move VLAN= docs to the interface configuration section, rather than /etc/sysconfig/network (#860252)
  - fix comments in sysctl.conf (#862597)
  - sysctl.d manpage (#735982)
  - check_device_down: Don't bother calling ip to check link state if the device doesn't exist (#814058)
  - test if there is /dev/rtc before syncing hardware clock (#636861)
  - sysconfig.txt advised saslauthd -a instad of -v (#957109)


author: Lukas Nykryn <lnykryn@redhat.com> - 8.45.43-1
changelog:
  - add a -l option to status to pass the lock file name (#852967)
  - clarify docs around IPV6INIT=yes/no (#545881)
  - support ipv6 routing rules by merging IPv4/IPv6, and route/rule code (#853038)
  - make killproc more granular when delay is passed (#843386)
  - don't accidentally match other bonding devices (#880890)
  - set NIS domain (#705218)
  - don't set primary before we enslave devices (#747418)


author: Lukas Nykryn <lnykryn@redhat.com> - 8.45.45-2
changelog:
  - bridging: add possibility to set prio and ageing
  - ifup: add possibility to specify value for -w parameter of arping
  - Don't try to startup crypto if we can't find the device, or if it isn't there.
  - create /tmp/.X11-unix in rc.sysinit


author: Martin Stransky <stransky@redhat.com> 2.4.3-6
changelog:
  - added dist tag
  - added patch from #204371 - innd.init script should use 
    ctlinnd to stop the server


author: Ondrej Vasik <ovasik@redhat.com> 2.4.3-7
changelog:
  - moved makedbz command from post to init script due to 
    sporadic failures of su in install everything


author: Ondrej Vasik <ovasik@redhat.com> 2.4.3-8
changelog:
  - Make innd init script LSB compliant (#238133)
  - Inn package now should own several more its directories
    under /usr/lib/news(#448088)


author: Rob Crittenden <rcritten@redhat.com> - 2.0-8
changelog:
  - Re-add patch to attempt to configure a number of nss_ldap related files
    if installed and configure nslcd.conf if installed. This got inadvertantly
    dropped when the source tarball was re-based (#559004)
  - Update nokrbv patch to remove another usage of python-krbV that
    isn't directly used by ipa-client but fails at runtime. (#598626)


author: Rob Crittenden <rcritten@redhat.com> - 2.0-10
changelog:
  - Port to RHEL-5 (#607772)
  - Drop nslcd patch
  - Drop move binaries patch
  - authconfig 6.0 isn't available so we can't automatically configure sssd
    so configure nss_ldap instead


author: Rob Crittenden <rcritten@redhat.com> - 2.0-12
changelog:
  - Update to upstream 2.0.0rc3 (#631907)
  - Add patch to work on Python 2.4
  - Set minimum Requires for authconfig to 5.3.21-7 (sssd support)
  - Set minimum Requires for openssl to 0.9.8e-18 (sha2 support)
  - Add Requires for sssd, set minimum to sssd-1.5.1-18
  - Add Requires for bind-utils
  - Remove Requires on nss_ldap
  - Update license to GPLv3+


author: Rob Crittenden <rcritten@redhat.com> - 2.0-14.1
changelog:
  - Use updated xmlrpc-c API to do GSSAPI ticket delegation (#736658)
  - Set minimum curl and xmlrpc-c to pull in new delegation API (#736658)


author: Rob Crittenden <rcritten@redhat.com> - 2.1.3-1
changelog:
  - Rebase to upstream 2.1.3 (#753936)
  - Updated patch for CVE-2011-3636 to include CR in the HTTP headers.
    xmlrpc-c in RHEL-6 doesn't support the dont_advertise option so that is
    not set any more. Another fake header, X-Original-User_Agent, is added
    so there is no more trailing junk after the Referer header.  (#752226)
  - Add ia64 to list for 64-bit cyrus-sasl-gssapi (#750338)
  - Set minimum n-v-r of sssd to 1.5.1-40


author: Rob Crittenden <rcritten@redhat.com> - 2.1.3-3
changelog:
  - Fix method that replaced values in config files, it would result
    in a zero-length file (#813387)


author: Rob Crittenden <rcritten@redhat.com> - 2.1.3-6
changelog:
  - Make certutil failures non-fatal (#821500)
  - Fix segfault in ipa-join when unenrolling a client (#961132)
  - Handle double-encoded CA certificate (#915504)
  - Fix client enrollment failover (#949632)
  - Add missing Requires on pyOpenSSL (#907071)
  - Client functionality in CA-less mode (#955652)
  - Add Requires on python-kerberos (#955652)


author: Marcela Maslanova <mmaslano@redhat.com> - 2.6.18-8
changelog:
  - change ss.c - use standart library
  - fix segfault - only hexadecimal keys are possible values for xfrm
  - support for TCP_RTO_MIN
  - update of man ip - xfrm details
  - IPv6 Default Address Selection - User Configurable Policy Table
  - Resolves: rhbz#446198, rhbz#449933, rhbz#358351, rhbz#431011, rhbz#439524


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.18-10
changelog:
  - “ip maddr show” on an infiniband address causes a stack corruption 
   because the length of the address for Infiniband
  - Resolves: rhbz#472878


author: Petr Sabata <contyk@redhat.com> - 2.6.18-13
changelog:
  - Correct lnstat usage (dump, keys)
  - Resolves: rhbz#645264
  - Correct arpd usage (various missing options), based on Petr Lautrbach's patch
    for bug 592266
  - Resolves: rhbz#645260
  - Correct ss usage (query, diag)
  - Resolves: rhbz#645267


author: Marcela Maslanova <mmaslano@redhat.com> - 2.6.18-7
changelog:
  - [iPv6DoD] fix RFC 4309 Using AES CCM Mode with IPsec ESP
  - change xfrm.h header according to ibm patch
  - Resolves: #441384


author: Tomas Mraz <tmraz@redhat.com> - 0.6.5-11
changelog:
  - fix cleanup of IPSEC SAs in SADB (#231604)
  - fix segfault in timer (#378551)
  - handle new interfaces immediately (#247301)
  - eliminate debug logging overhead when log level is lower (#248567)
  - use the adminsock_path as specified on the command line (#247294)
  - link only necessary libraries (#458631)
  - make racoon PIE executable (#210023)
  - fix for DoS through various memory leaks (CVE-2008-3651 #456660,
    CVE-2008-3652 #458846)


author: Tomas Mraz <tmraz@redhat.com> - 0.6.5-14.4
changelog:
  - fix non-exact policy matching (#606904)
  - make pfkey socket buffer size configurable (#607361)
  - use separate pfkey socket for sadb dumps (#590783)
  - do not delete phase 2 SAs when phase 1 delete notification is received (#599115)


author: Tomas Mraz <tmraz@redhat.com> - 0.6.5-14.5
changelog:
  - do not dereference ph1 when it might be NULL
  - increase the default pfkey socket buffer size and never decrease it


author: Steve Grubb <sgrubb@redhat.com> - 0.6.5-8
changelog:
  - Upstream fix for Racoon DOS, informational delete must be encrypted
  - Resolves: rhbz#235388 - CVE-2007-1841 ipsec-tools racoon DoS


author: Thomas Woerner <twoerner@redhat.com> 1.3.5-4.el5
changelog:
  - fixed man page for dscp extension max value
    Resolves: rhbz#239383
  - fixed missing extension modules, because of build problems
    Resolves: rhbz#244047


author: Thomas Woerner <twoerner@redhat.com> 1.3.5-5.2
changelog:
  - reverting init script return codes because of bahaviour change, only fixing
    the ipchains test
    Related: rhbz#242457


author: Thomas Woerner <twoerner@redhat.com> 1.3.5-8
changelog:
  - added libipt_statistic support (rhbz#471163)
  - added patch to load sysctl settings on iptables start (rhbz#552522)
    Thanks to Martin Foster for the patch
  - added patch to load ip_tables.ko just before checking revision support in
    kernel. (rhbz#554340)
  - added reload action for service script (rhbz#710050)


author: Thomas Woerner <twoerner@redhat.com> 1.3.5-9.1
changelog:
  - added reload to usage output of init script (rhbz#710050)
  - only reload if iptables was started before (rhbz#710050)


author: Neil Horman <nhorman@redhat.com> - 0.55-7
changelog:
  - Fixed cpu parsing bugs (bz 311341)
  - Added docs/config for irqbalance env. vars. (bzs 339551 339571 339581)


author: Mike Christie <mchristie@redhat.com> - 6.2.0.742-0.5
changelog:
  - BZ 218791 - We get a network hang when the firewall is started
  - and to allow iscsi root boot to work we start iscsid early.
  - This breaks up iscsi.init into iscsidevs.init (start iscsi targets)
  - and iscsid.init (start iscsi daemon). Users should be using
  - iscsiadm for management instead of the rc script, but we add some compat
  - code to make it a little easier.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.865-0.7
changelog:
  - 250140 Document how to set timers when using multipath or iscsi root.
  - 249053 Document iscsid and iscsiadm debug argument.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.868-0.17
changelog:
  - 472562 (additional fixup to patch) only use logout time2wait for
  relogins when response code is 2 or 3.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.868-0.18
changelog:
  - 476752 Must install list.h (install as iscsi_list.h) because fw_context.h
  is bringing it in. Also revert ibft name changes because anaconda is using
  them instead of the fw_context.h functions.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.868-0.5
changelog:
  - 438092 Print ibft net info (waiting on ppc support from IBM).
  - 437195 Use CHAP values from sysfs during resync, incase they were from ibft.
  - 437195 Update README to reflect that users should set node.startup


author: Mike Christie <mchristie@redhat.com> - 6.2.0.871-0.8
changelog:
  - 508782 fix iscsid/iscsistart segfault due to bad conn context cast
  - Fix bnx2i login when iface uses only the hwaddress.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.871-0.11
changelog:
  - 549629 Sync brcm uio to 0.4.8 to fix ifdown reconnection handling
  - 520508 Fix login/connect timeout due to MAC addr mishandling.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.871-0.16
changelog:
  - 570893 Fix bnx2x uip panic due to the packet index in the VLAN field of the
  BD does not match the packet index expected by the firmware when the index crosses a BD page.


author: Matt Wringe <mwringe at redhat.com> - 0:1.1-8jpp.1
changelog:
  - Merge with upstream version:
   - Add missing javadoc requires
   - Add patches to properly set the classpath in build.xml and
     build.properties.default


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:1.1-8jpp.1.0.1.el5
changelog:
  - Add patch to fix jira task: MODELER-15 to allow tomcat5 5.5.23
    to build against j-c-modeler
  - Resolves: bug 238694


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:1.1-8jpp.2.el5
changelog:
  - Add patch to fix jira task: MODELER-15 to allow tomcat5 5.5.23
    to build against j-c-modeler
  - Resolves: bug 237704


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 0:1.4.2.0-40jpp.115
changelog:
  - Do not depend on arch-specific gcc-java.
  - Add comment about depending on 4.1.1 directory.
  - Resolves: rhbz#236526


author: Lillian Angel <langel@redhat.com> - 1:1.6.0.0-0.24.b09
changelog:
  - Added java-1.6.0-openjdk-securitypatches.patch. Applies all current
  OpenJDK patches.
  - Updated release.
  - Resolves: rhbz#473317


author: Lillian Angel <langel@redhat.com> - 1:1.6.0.0-0.25.b09
changelog:
  - Updated java-1.6.0-openjdk-securitypatches.patch. Removed all tests, and added patch for
  Makefile.in.
  - Updated release.


author: Martin Matejovic <mmatejov@redhat.com> - 1:1.6.0-1.10.b16
changelog:
  - Update to openjdk build b16
  - Update to icedtea6-1.6
  - Added tzdata-java requirement
  - Added autoconf and automake build requirement
  - Added tzdata-java requirement
  - Added java-1.6.0-openjdk-gcc-stack-markings.patch
  - Added java-1.6.0-openjdk-memory-barriers.patch
  - Added java-1.6.0-openjdk-jar-misc.patch
  - Added java-1.6.0-openjdk-linux-separate-debuginfo.patch
  - Added java-1.6.0-openjdk-securitypatches-20100323.patch
  - Added STRIP_KEEP_SYMTAB=libjvm* to install section, fix bz530402
  - Resolves: rhbz#576124


author: Deepak Bhole <dbhole@redhat.com> - 1:1.6.0.0-1.14.b17.el5
changelog:
  - Synched with el6 branch
  - Updated to IcedTea 1.7.5
  - Resolves: bz639951
  - Also resolves 619800 and 621303


author: Lillian Angel <langel@redhat.com> - 1:1.6.0.0-1.2.b09
changelog:
  - Updated release.
  - Moved java-1.6.0-openjdk-securitypatches.patch to 
  java-1.6.0-openjdk-march24-securitypatches.patch.
  - Created new java-1.6.0-openjdk-july28-securitypatches.patch.
  - Updated release.
  - Resolves: rhbz#513391


author: Deepak Bhole <dbhole@redhat.com> - 1:1.6.0.0-1.22.1.9.7
changelog:
  - Resolves bz690289
  - Import from RHEL-5_6-Z
  - Updated to IcedTea6 1.9.7
  - Removed all plugin/webstart related commented lines
  - Modified bz entry format in previous logs to get around cvs ack checking bug


author: Deepak Bhole <dbhole@redhat.com> - 1:1.6.0.0-1.22.1.9.8
changelog:
  - Resolves: rhbz#668488
  - Bumped to IcedTea6 1.9.8
  - RH706250, S6213702, CVE-2011-0872: (so) non-blocking sockets with TCP urgent
    disabled get still selected for read ops (win)
  - RH706106, S6618658, CVE-2011-0865: Vulnerability in deserialization
  - RH706111, S7012520, CVE-2011-0815: Heap overflow vulnerability in 
    FileDialog.show()
  - RH706139, S7013519, CVE-2011-0822, CVE-2011-0862: Integer overflows in 2D 
    code
  - RH706153, S7013969, CVE-2011-0867: NetworkInterface.toString can reveal 
    bindings
  - RH706234, S7013971, CVE-2011-0869: Vulnerability in SAAJ
  - RH706239, S7016340, CVE-2011-0870: Vulnerability in SAAJ
  - RH706241, S7016495, CVE-2011-0868: Crash in Java 2D transforming an image 
    with scale close to zero
  - RH706248, S7020198, CVE-2011-0871: ImageIcon creates Component with null acc
  - RH706245, S7020373, CVE-2011-0864: JSR rewriting can overflow memory address
    size variables


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.23.1.9.10
changelog:
  - Resolves: rhbz#744786
  - Bumped to IcedTea6 1.9.8
   Security fixes
    - S7000600, CVE-2011-3547: InputStream skip() information leak
    - S7019773, CVE-2011-3548: mutable static AWTKeyStroke.ctor
    - S7023640, CVE-2011-3551: Java2D TransformHelper integer overflow
    - S7032417, CVE-2011-3552: excessive default UDP socket limit under SecurityManager
    - S7046823, CVE-2011-3544: missing SecurityManager checks in scripting engine
    - S7055902, CVE-2011-3521: IIOP deserialization code execution
    - S7057857, CVE-2011-3554: insufficient pack200 JAR files uncompress error checks
    - S7064341, CVE-2011-3389: JSSE
    - S7070134, CVE-2011-3558: Hotspot unspecified issue
    - S7077466, CVE-2011-3556: RMI DGC server remote code execution
    - S7083012, CVE-2011-3557: RMI registry privileged code execution
    - S7096936, CVE-2011-3560: missing checkSetFactory calls in HttpsURLConnection
   NetX
    - PR794: javaws does not work if a Web Start app jar has a Class-Path element in the manifest


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.25.1.10.6
changelog:
  - Updated to IcedTea6 1.10.6
  - Resolves: rhbz#787142
  - Security fixes
    - S7082299: Fix in AtomicReferenceArray
    - S7088367: Fix issues in java sound
    - S7110683: Issues with some KeyboardFocusManager method
    - S7110687: Issues with TimeZone class
    - S7110700: Enhance exception throwing mechanism in ObjectStreamClass
    - S7110704: Issues with some method in corba
    - S7112642: Incorrect checking for graphics rendering object
    - S7118283: Better input parameter checking in zip file processing
    - S7126960: Add property to limit number of request headers to the HTTP Server
  - Bug fixes
    - RH580478: Desktop files should not use hardcoded path
  - Removed and deleted upstreamed  patch7 - name-rmi-fix.patch
  - Removed and deleted upstreamed Hugepages patches:
    - Source100: 7034464-hugepage.patch
    - Source101: 7037939-hugepage.patch
    - Source102: 7043564-hugepage.patch


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.26.1.10.8
changelog:
  - Updated to IcedTea6 1.10.8
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added to patch
  - Resolves: rhbz#828749


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.27.1.10.8
changelog:
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added also to package.definition
  - Resolves: rhbz#828749


author: Deepak Bhole <dbhole@redhat.com> - 1:1.6.0.0-1.28.1.10.10
changelog:
  - Updated to IcedTea6 1.10.10
  - Resolves rhbz#s 856124, 865346, 865348, 865350, 865352, 865354, 865357,
    865359, 865363, 865365, 865370, 865428, 865471, 865434, 865511, 865514,
    865519, 865531, 865541, 865568


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.31.1.11.6
changelog:
  - Updated to icedtea6 1.11.6
  - Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
  - Resolves: rhbz#906705


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.32.1.11.6
changelog:
  - added patch9 revertTwoWrongSecurityPatches2013-02-06.patch
    to remove   6664509 and 7201064 from 1.11.6 tarball
  - Resolves: rhbz#906705


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.33.1.11.6
changelog:
  - removed patch9 revertTwoWrongSecurityPatches2013-02-06.patch
  - added patch9:   7201064.patch to be reverted
  - added patch10:   8005615.patch to fix the 6664509.patch
  - Resolves: rhbz#906705


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.34.1.11.8
changelog:
  - Updated to icedtea6 1.11.8
  - Removed patch9   7201064.patch
  - Removed patch10   8005615.patch
  - Removed  not-applied patch 6664509.patch
  - Removed mauve as deadly outdated and run on QA
    -  jtreg kept, useless, but valid
  - Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
  - Resolves: rhbz#911522


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.59.1.11.11
changelog:
  - Updated to icedtea6 1.11.11 - fixed xalan/xerxes privledges
  - removed patch 9 -  removingOfAarch64.patch.patch - fixed upstream
  - removed patch10  patchToFixMalformed8007667.patch - upstreamed
  - Resolves: rhbz#950383


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.39.1.11.11
changelog:
  - added and applied (temporally) one more patch to xalan/xerces privileges
   - patch9 jaxp-backport-factoryfinder.patch
  - will be upstreamed
  - Resolves: rhbz#950383


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.61.1.11.11
changelog:
  - added and applied (temporally) patch10   fixToFontSecurityFix.patch.
   - fixing regression in fonts introduced by one security patch.
  - Resolves: rhbz#950383


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.41.1.11.11.90
changelog:
  - updated to icedtea6-1.11.11.90.tar.gz
  - removed upstreamed patch9 jaxp-backport-factoryfinder.patch
  - removed upstreamed patch10 fixToFontSecurityFix.patch.
  - modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#973126


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.61.1.11.11
changelog:
  - added and applied (temporally) patch10   fixToFontSecurityFix.patch.
   - fixing regression in fonts introduced by one security patch.
  - Resolves: rhbz#950384


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.41.1.11.11.90
changelog:
  - updated to icedtea6-1.11.11.90.tar.gz
  - removed upstreamed patch9 jaxp-backport-factoryfinder.patch
  - removed upstreamed patch10 fixToFontSecurityFix.patch.
  - modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#973128


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.42.1.11.14
changelog:
  - updated to icedtea6-1.11.14.tar.gz
  - added and applied 1.11.14-fixes.patch, patch10 to fix build issues
  - Resolves: rhbz#1017615


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-3.1.13.0
changelog:
  - updated to icedtea 1.13.1
   - http://blog.fuseyism.com/index.php/2014/01/23/security-icedtea-1-12-8-1-13-1-for-openjdk-6-released/
  - updated to jdk6, b30,  21_jan_2014
   - https://openjdk6.java.net/OpenJDK6-B30-Changes.html
  - adapted patch7 1.13_fixes.patch
  - pre 2011 changelog moved to (till now  wrong) pre-2009-spec-changelog (rh1043611)
  - added --disable-system-lcms to configure options to pass build
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#1050187


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-5.1.13.3
changelog:
  - updated to icedtea 1.13.3
  - updated to openjdk-6-src-b31-15_apr_2014
  - renmoved upstreamed patch7, 1.13_fixes.patch
  - Resolves: rhbz#1085007


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-6.1.13.4
changelog:
  - moved to  icedteaver 1.13.4
  - moved to openjdkver b32 and openjdkdate 15_jul_2014
  - Resolves: rhbz#1115865


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-5.1.13.3
changelog:
  - updated to icedtea 1.13.3
  - updated to openjdk-6-src-b31-15_apr_2014
  - renmoved upstreamed patch7, 1.13_fixes.patch
  - renmoved upstreamed patch9, 1051245.patch
  - Resolves: rhbz#1085008


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-6.1.13.4
changelog:
  - moved to  icedteaver 1.13.4
  - moved to openjdkver b32 and openjdkdate 15_jul_2014
  - Resolves: rhbz#1115866


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.33-1.13.5.0
changelog:
  - Update to IcedTea 1.13.5
  - Change versioning to match java-1.7.0-openjdk so revisions work.
  - No need to explicitly disable system LCMS any more (bug fixed upstream).
  - Add icedteasnapshot to setup lines so they work with pre-release tarballs.
  - Resolves: rhbz#1148898


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.0
changelog:
  - Update to IcedTea 1.13.6
  - Apply pr2125.patch in generate_rhel_zip.sh to remove unwanted elliptic curves.
  - Add no_pr2125.patch to avoid repeating the procedure during the IcedTea build.
  - Avoid duplicating the OpenJDK build version by making more use of %{openjdkver}.
  - Add US_export_policy.jar and local_policy.jar to packages.
  - Resolves: rhbz#1180289


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.1
changelog:
  - Update to latest 1.13.6 release candidate tarball
  - Fixes a number of issues found with b34:
  - * OJ51, PR2187: Sync patch for 4873188 with 7 version
  - * OJ52, PR2185: Application of 6786276 introduces compatibility issue
  - * OJ53, PR2181: strict-aliasing warnings issued on PPC32
  - * OJ54, PR2182: 6911104 reintroduces test fragment removed in existing 6964018 backport
  - * S6730740, PR2186: Fix for 6729881 has apparently broken several 64 bit tests: "Bad address"
  - * S7031830, PR2183: bad_record_mac failure on TLSv1.2 enabled connection with SSLEngine
  - Also includes PR2180, so patch dropped from RPM.
  - Resolves: rhbz#1180289


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.36-1.13.8.0
changelog:
  - Update to IcedTea 1.13.8
  - Update no_pr2125.patch to work against new version.
  - Resolves: rhbz#1235149


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.2
changelog:
  - Update with new IcedTea & b37 tarballs, including Kerberos fixes for TCK regression.
  - Resolves: rhbz#1271926


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.3
changelog:
  - Update with new IcedTea & b37 tarballs, including more Kerberos fixes for TCK regression.
  - Resolves: rhbz#1271926


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.4
changelog:
  - Update with new IcedTea & b37 tarballs, including fix for appletviewer regression.
  - Resolves: rhbz#1271926


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.38-1.13.10.0
changelog:
  - Add patch to replace -fno-strict-overflow with -fwrapv on older RHEL 5.11 GCC.
  - Resolves: rhbz#1295772


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.39-1.13.11.0
changelog:
  - Explictly required libXcomposite-devel for PR2868 as nothing else pulls it in
  - Resolves: rhbz#1325429


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.99-2.6.5.0
changelog:
  - Explictly required libXcomposite-devel for PR2867 as nothing else pulls it in
  - Resolves: rhbz#1320655


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.101-2.6.6.0
changelog:
  - Bump to 2.6.6 and u101b00.
  - Drop a leading zero from the priority as the update version is now three digits
  - Resolves: rhbz#1325424


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.0
changelog:
  - Bump to 2.6.7 and u111b00.
  - Update SystemTap bundle with fix for PR3091/RH1204159
  - Drop patches (S8161262 (8147466_wrapv) and PR2939 (fontpath)) applied upstream.
  - Reset permissions of resources.jar to avoid it only being readable by root (PR1437).
  - Resolves: rhbz#1350038


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.121-2.6.8.0
changelog:
  - Bump to 2.6.8 and u121b00.
  - Drop patches (S7081817, S8140344, S8145017 and S8162344) applied upstream.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.121-2.6.8.1
changelog:
  - Require a version of java-1.7.0-openjdk-devel with a working jar uf
  - Remove unneeded AArch64 environment variable setting.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.131-2.6.9.0
changelog:
  - Bump to 2.6.9 and u131b00.
  - Remove patch application debris in fsg.sh.
  - Re-generate RH1022017 against 2.6.9.
  - Resolves: rhbz#1410612


author: Jiri Vanek <jvanek@redhat.com - 1.7.0.9-2.3.8.1.el5
changelog:
  - Added some of the latest Fedora spec bugfixes
  - Bumped release
  - zlib in BuildReq restricted for  1.2.3-7 or higher
   - see https://bugzilla.redhat.com/show_bug.cgi?id=904231
  - Removed a -icedtea tag from the version
    - package have less and less connections to icedtea7
  - Added gcc-c++ build dependence. Sometimes caused troubles during rpm -bb
  - Added (Build)Requires for fontconfig and xorg-x11-fonts-Type1
    - see https://bugzilla.redhat.com/show_bug.cgi?id=721033 for details
  - logging.properties marked as config(noreplace)
    - see https://bugzilla.redhat.com/show_bug.cgi?id=679180 for details
  - nss.cfg was marked as config(noreplace)
  - slaves sync with el6
  - Resolves: rhbz#950376


author: Jiri Vanek <jvanek@redhat.com - 1.7.0.19-2.3.9.0.el5
changelog:
  - updated to IcedTea  2.3.9 with latest security patches
  - buildver sync to b19
  - rewritten java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#950376


author: Jiri Vanek <jvanek@redhat.com - 1.7.0.19-2.3.9.1.el5
changelog:
  - updated to updated IcedTea  2.3.9 with fix to one of security fixes
    -  fixed font glyph offset
  - Resolves: rhbz#950376


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.10.2.el5
changelog:
  - added patch1000 MBeanFix.patch to fix regressions caused by security patches
  - Resolves: rhbz#973117


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.10.4.el5
changelog:
  - updated to newer IcedTea7-forest 2.3.10 with 8010118 fix
  - removed upstreamed patch1000 MBeanFix.patch
  - Resolves: rhbz#973117


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.7.0.25-2.3.10.5.el5
changelog:
  - Sync with upstream IcedTea7-forest 2.3.10 tag
  - Fixes regressions as introduced with 1.7.0.25-2.3.10.4.el5:
    rhbz#978005, rhbz#977979, rhbz#976693, IcedTeaBZ#1487.
  - Related: rhbz#973117


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.4.1.4.el5
changelog:
  - updated to icedtea 2.4.1
  - improoved handling of patch111 - nss-config-2.patch
  - backported uniquesuffix from 6.5
  - Resolves: rhbz#978421


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.45-2.4.3.0.el5
changelog:
  - fixed and updated tapset
  - removed bootstrap
  - source 11 redeclared to 1111
  - added source12: TestCryptoLevel.java
  - removed upstreamed patch103 java-1.7.0-openjdk-arm-fixes.patch
  - removed unnecessary patch112 java-1.7.0-openjdk-doNotUseDisabledEcc.patch
  - added patch120: java-1.7.0-openjdk-freetype-check-fix.patch
  - fixed nss 
  - cleaned sources
  - Resolves: rhbz#1017623


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.51-2.4.4.1.el5
changelog:
  - updated to security icedtea 2.4.4
   - icedtea_version set to 2.4.4
   - updatever bumped to       51
   - release reset to 1
  - build requires: java-devel >= 1:1.6.0 changed java7-devel 
  - Resolves: rhbz#1050192


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.55-2.4.7.0.el5
changelog:
  - bumped to future icedtea-forest 2.4.7
  - updatever set to 55, buildver se to 13, release reset to 0
  - removed BuildRequires on pulseaudio >= 0.9.1, devel is enough
  - removed Requires: rhino, BuildRequires is enough
  - updated patch400, java-1.7.0-openjdk-remove-gstabs.patch
  - added JRE_RELEASE_VERSION and ALT_PARALLEL_COMPILE_JOBS
  - ppc64 repalced by power64 macro
  - patch111 applied as dry-run (6.5 forward port)
  - Resolves: rhbz#1085000


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.65-2.5.1.2
changelog:
  - added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
  - Resolves: rhbz#1115872


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.65-2.5.1.2
changelog:
  - added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
  - Resolves: rhbz#1115873


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.71-2.5.3.1
changelog:
  - Bump to 2.5.3 with security updates.
  - Remove obsolete patches which are now included upstream.
  - Disable LCMS via environment variables rather than maintaining a patch.
  - Resolves: rhbz#1148890


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.75-2.5.4.0
changelog:
  - Bump to 2.5.4 using OpenJDK 7u75 b13.
  - Fix elliptic curve list as part of fsg.sh
  - Resolves: rhbz#1180294


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.85-2.6.1.3
changelog:
  - Check return value of gio_init in gsettings_init and return false if necessary.
  - Re-enable the use of system GConf.
  - Only ifdef g_type_init&g_free if USE_SYSTEM_GIO and USE_SYSTEM_GCONF are undefined.
  - Resolves: rhbz#1242587


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.9-2.3.3.el5
changelog:
  - Updated to IcedTea7-OpenJDK 2.3.3
  - Removed upstreamed java-1.7.0-openjdk-rhel5-gio.patch
  - Updated java-1.7.0-openjdk-java-access-bridge-security.patch
  - Updated java-1.7.0-openjdk-remove-gstabs.patch
  - Resolves rhbz#s 856124, 865346, 865348, 865350, 865352, 865354, 865357,
    865359, 865363, 865365, 865370, 865428, 865471, 865434, 865511, 865514,
    865519, 865531, 865541, 865568


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.3.el5.1
changelog:
  - Changed permissions of sa-jdi.jar to correct 644
  - Correctly removed noarch tag form javadoc, rhel5 donot support noarch subpackages
  - Resolves: rhbz#803732


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.11-2.4.0.el6.1
changelog:
  - Rewritten patch105: java-1.7.0-openjdk-disable-system-lcms.patch
  - Added jxmd and idlj to alternatives
  - make executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
  - Unapplied patch302 and deleted systemtap.patch
  - buildver increased to 11
  - icedtea_version set to 2.4.0
  - Added and applied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
  - Added /lib/security/US_export_policy.jar and lib/security/local_policy.jar
  - Resolves: rhbz#895031


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.4.el6.1
changelog:
  - Rewerted to IcedTea 2.3
    - Rewerted patch105: java-1.7.0-openjdk-disable-system-lcms.patch
    - Removed jcmd and idlj to alternatives
    - make NOT executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
    - Reapplied patch302 and deleted systemtap.patch
    - buildver set to 9
    - icedtea_version set to 2.3.4
    - Unapplied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
    - removed /lib/security/US_export_policy.jar and lib/security/local_policy.jar
    - java-1.7.0-openjdk-java-access-bridge-security.patch's path moved from 
      java.security-linux back to java.security
  - Resolves: rhbz#895031


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.7.0.el5_9
changelog:
  - Removed patch1000 sec-2013-02-01-8005615.patch
  - Removed patch1001 sec-2013-02-01-8005615-sync_with_jdk7u.patch
  - Removed patch1010 sec-2013-02-01-7201064.patch
  - Removed testing
   - mauve was outdated and
   - jtreg was icedtea relict
  - Updated  to icedtea 2.3.7
  - Resolves: rhbz#911527


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.7.1.el5_9
changelog:
  - Updated main source tarball
  - Removed wrong relinking of cacerts (see rhbz 904165)
  - Resolves: rhbz#911527


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.95-2.6.4.0
changelog:
  - Remove unneeded build dependencies on jakarta-commons-logging and prelink/execstack
  - Resolves: rhbz#1295764


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.99-2.6.5.0
changelog:
  - Bump to 2.6.5 and u99b00.
  - Correct check for fsg.sh in tarball creation script
  - Resolves: rhbz#1320655


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 3.2.3-9
changelog:
  - Fix reversed logic of trying to connect to whois server
    Resolves: #415491
  - Update jwhois.conf file
    Resolves: #512930, #509475, #479061


author: Roman Rakus <rrakus@redhat.com> - 0:0.12.17-2
changelog:
  - Use manual buffer size by default
  - .el5 changed to .el5
  - added BuildRequires - libutempter-devel
  - Resolves: rhbz#220481, rhbz#440611


author: Miloslav Trmac <mitr@redhat.com> - 1.12-19
changelog:
  - Ship "el" translation instead of the obsolete "gr" translation
    Resolves: #210749
  - Fix % quoting in %changelog


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.12-20
changelog:
  - Fix ro.map.gz, add ro_std.map.gz, drop ro_win.map.gz,
    add Lat2-Terminus16.psf console font (many thanks to Alexandru Szasz
    <alexxed@gmail.com>)
    Resolves: #294471


author: Than Ngo <than@redhat.com> - 6:3.5.4-17
changelog:
  - Resolves: #222970, khelpcenter crashes if press F1 at least 2 consecutive times
  - Resolves: #380281, kcmshell desktop - default button on virtual
    desktop doesn't work


author: Than Ngo <than@redhat.com> 3.5.4-19
changelog:
  - Resolves: #251414, knotification cannot be enabled after re-enabling arts from kcontrol
  - Resolves: #251968, kdesktop_lock issue
  - Resolves: #236931, kdm does not cleanup PAM state


author: Than Ngo <than@redhat.com> - 3.5.4-20
changelog:
  - Resolves: #469723, Cannot mount floppy disk
  - Resolves: #472295, KDE Desktop icons do not refresh correctly


author: Lukas Tinkl <ltinkl@redhat.com> - 6:3.5.4-22
changelog:
  - Resolves: #499442, Kdesktop_lock does not work on multiuser 
    systems and for single user with multiple login


author: Than Ngo <than@redhat.com> - 6:3.5.4-23
changelog:
  - Resolves: #580485, konsole crashed and caused the signal 11
  - Resolves: #501483, kwin crashes when closing Java dialog boxes
  - Resolves: #561844, kwin ignores configure requests causing wrong size of Motif windows
  - Resolves: #579707, kdm hangs when forced change password window is cancelled
  - Resolves: #584822, kwin uses smart placement instead of cascade in multi-screen
    even if cascade placement is selected
  - Resolves: #638849, rebuild failed if the build system has lm_sensors-devel installed


author: Than Ngo <than@redhat.com> - 6:3.5.4-25
changelog:
  - Resolves: #653970, add overrides directory to default manpaths
  - Resolves: #607781, drop empty mozilla, plugins directories


author: Than Ngo <than@redhat.com> - 6:3.5.4-26
changelog:
  - Resolves: #500399, fix screenlook issue with multiuser
  - Resolves: #663638, HAL backend does not honor mount options set in HAL config files
  - Resolves: #669354, fix timetamp issue in kwin on 64bit machine


author: Than Ngo <than@redhat.com> - 3.5.4-10
changelog:
  - Resolves: #490729, CVE-2009-0146 CVE-2009-0147 CVE-2009-0166
    revised patch that adds a fix for badpage10910.pdf


author: Than Ngo <than@redhat.com> - 3.5.4-11
changelog:
  - Resolves: #490729, CVE-2009-0146 CVE-2009-0147 CVE-2009-0166
    revised patch that adds a fix for some potential problems,
    latest upstream patch


author: Than Ngo <than@redhat.com> - 3.5.4-13
changelog:
  - Resolves: #506302
     CVE-2009-0945, KSVG NULL-pointer dereference in the SVGList interface implementation
     CVE-2009-1709, KSVG Pointer use-after-free error in the SVG animation element


author: Than Ngo <than@redhat.com> - 3.5.4-17.1
changelog:
  - Resolves: #639841
      CVE-2010-3702, uninitialized Gfx::parser pointer dereference
      CVE-2010-3704, array indexing error in FoFiType1::parse()


author: Than Ngo <than@redhat.com> - 7:3.5.4-6
changelog:
  - Resolves: #239473, JPEG-EXIF Meta Information DoS vulnerability
  - Resolves: #356631, CVE-2007-4352 CVE-2007-5392 CVE-2007-5393


author: Than Ngo <than@redhat.com> - 6:3.5.4-12.el5
changelog:
  - resolves: #293421, CVE-2007-3820 CVE-2007-4224 CVE-2007-4225
  - Resolves: #293911, UTF-8 overlong sequence decoding vulnerability, CVE-2007-0242
  - Resolves: #293571, Konqueror improper HTML comment rendering, CVE-2007-0537


author: Than Ngo <than@redhat.com> - 6:3.5.4-13.el5
changelog:
  - Resolves: #293571
    CVE-2007-0537 Konqueror improper HTML comment rendering
    CVE-2007-1564 FTP protocol PASV design flaw affects konqueror


author: Than Ngo <than@redhat.com> - 6:3.5.4-14.el5
changelog:
  - Resolves: #293581, CVE-2007-0537
  - Resolves: #293921, CVE-2007-0242
  - Resolves: #293431, CVE-2007-4224, CVE-2007-4225, CVE-2007-3820
  - Resolves: #293581, CVE-2007-1564 FTP protocol PASV design flaw affects konqueror


author: Than Ngo <than@redhat.com> 3.5.4-16
changelog:
  - Resolves: #223958, add missing documentation menu
  - Resolves: #422011, libutemper issue, konsole doesn't write to utmp


author: Than Ngo <than@redhat.com> - 3.5.4-20
changelog:
  - Resolves: #505621,
      CVE-2009-1687, integer overflow in KJS JavaScript garbage collector
      CVE-2009-1698, KHTML CSS parser - incorrect handling CSS "style" attribute content (DoS, ACE)


author: Than Ngo <than@redhat.com> 6:3.5.4-4
changelog:
  - fix #207920, klaptop_acpi_help to use pm-utils and pam
  - fix crash in klaptopdaemon
  - apply upstream patches
     fix #134192, computes negative real raised 0 power equals nan


author: Than Ngo <than@redhat.com> 6:3.5.4-5
changelog:
  - apply upstream patches
      fix #132929, Apply default settings in Power Control->Laptop Battery crash
      fix #113622, kde logout on low battery
      fix #129161, kwalletmanager does not show up in systray


author: Don Zickus <dzickus@redhat.com> [2.6.18-127.el5]
changelog:
  - Revert: [i386]: check for dmi_data in powernow_k8 driver (Prarit Bhargava ) [476184]
  - [xen] re-enable using xenpv in boot path for FV guests (Don Dutile ) [473899]
  - [xen] pv_hvm: guest hang on FV save/restore (Don Dutile ) [475778]
  - [openib] fix ipoib oops in unicast_arp_send (Doug Ledford ) [476005]
  - [scsi] fnic: remove link down count processing (mchristi@redhat.com ) [474935]
  - Revert: [x86] disable hpet on machine_crash_shutdown (Neil Horman ) [475652]
  - [scsi] ibmvscsi: EH fails due to insufficient resources (AMEET M. PARANJAPE ) [475618]
  - [x86_64] proc: export GART region through /proc/iomem (Neil Horman ) [475507]
  - [acpi] add xw8600 and xw6600 to GPE0 block blacklist (Prarit Bhargava ) [475418]
  - [net] cxgb3: fixup embedded firmware problems take 2 (Andy Gospodarek ) [469774]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.1.1.el5]
changelog:
  - [security] introduce missing kfree (Jiri Pirko ) [480597 480598] {CVE-2009-0031}
  - [sched] fix clock_gettime monotonicity (Peter Zijlstra ) [481122 477763]
  - [nfs] create rpc clients with proper auth flavor (Jeff Layton ) [481119 465456]
  - [net] sctp: overflow with bad stream ID in FWD-TSN chunk (Eugene Teo ) [478804 478805] {CVE-2009-0065}
  - [md] fix oops with device-mapper mirror target (Heinz Mauelshagen ) [481120 472558]
  - [openib] restore traffic in connected mode on HCA (AMEET M. PARANJAPE ) [479812 477000]
  - [net] add preemption point in qdisc_run (Jiri Pirko ) [477746 471398] {CVE-2008-5713}
  - [x86_64] copy_user_c assembler can leave garbage in rsi (Larry Woodman ) [481117 456682]
  - [misc] setpgid returns ESRCH in some situations (Oleg Nesterov ) [480576 472433]
  - [s390] zfcp: fix hexdump data in s390dbf traces (Hans-Joachim Picht ) [480996 470618]
  - [fs] hfsplus: fix buffer overflow with a corrupted image (Anton Arapov ) [469637 469638] {CVE-2008-4933}
  - [fs] hfsplus: check read_mapping_page return value (Anton Arapov ) [469644 469645] {CVE-2008-4934}
  - [fs] hfs: fix namelength memory corruption (Anton Arapov ) [470772 470773] {CVE-2008-5025}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.1.8.el5]
changelog:
  - [misc] exit_notify: kill the wrong capable check [494270 494271] {CVE-2009-1337}
  - [misc] fork: CLONE_PARENT && parent_exec_id interaction (Don Howard ) [479963 479964] {CVE-2009-0028}
  - [scsi] qla2xxx: reduce DID_BUS_BUSY failover errors (Marcus Barrow ) [495635 244967]
  - [nfs] v4: client crash on file lookup with long names (Sachin S. Prabhu ) [494078 493942] {CVE-2009-1336}
  - [net] ixgbe: stop double counting frames and bytes (Andy Gospodarek ) [489459 487213]
  - [xen] x86: update the earlier APERF/MPERF patch (Chris Lalancette ) [495929 493557]
  - [xen] x86: fix dom0 panic when using dom0_max_vcpus (Chris Lalancette ) [495931 485119]
  - [net] fix oops when using openswan (Neil Horman ) [496044 484590]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.1.14.el5]
changelog:
  - [nfs] v4: client handling of MAY_EXEC in nfs_permission (Peter Staubach ) [500301 500302] {CVE-2009-1630}
  - [fs] proc: avoid info leaks to non-privileged processes (Amerigo Wang ) [499546 499541]
  - [net] tg3: Fix firmware event timeouts (Jiri Pirko ) [502837 481715]
  - [scsi] libiscsi: fix nop response/reply and session cleanup race (Jiri Pirko ) [502916 497411]
  - [fs] cifs: fix pointer and checks in cifs_follow_symlink (Jeff Layton ) [496576 496577] {CVE-2009-1633}
  - [fs] cifs: fix error handling in parse_DFS_referrals (Jeff Layton ) [496576 496577] {CVE-2009-1633}
  - [fs] cifs: buffer overruns when converting strings (Jeff Layton ) [496576 496577] {CVE-2009-1633}
  - [fs] cifs: unicode alignment and buffer sizing problems (Jeff Layton ) [494279 494280] {CVE-2009-1439}
  - [x86] xen: fix local denial of service (Chris Lalancette ) [500950 500951] {CVE-2009-1758}
  - [misc] compile: add -fwrapv to gcc CFLAGS (Don Zickus ) [501751 491266]
  - [misc] random: make get_random_int more random (Amerigo Wang ) [499783 499776]
  - [gfs2] fix uninterruptible quotad sleeping (Steven Whitehouse ) [501742 492943]
  - [mm] cow vs gup race fix (Andrea Arcangeli ) [486921 471613]
  - [mm] fork vs gup race fix (Andrea Arcangeli ) [486921 471613]
  - [nfs] fix hangs during heavy write workloads (Peter Staubach ) [486926 469848]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.1.4.el5]
changelog:
  - [x86_64] mce: do not clear an unrecoverable error status (Aristeu Rozanski ) [490433 489692]
  - [wireless] iwlwifi: booting with RF-kill switch enabled (John W. Linville ) [489846 482990]
  - [x86_64] fix gettimeoday TSC overflow issue (Prarit Bhargava ) [489847 467942]
  - [misc] signal: modify locking to handle large loads (AMEET M. PARANJAPE ) [489457 487376]
  - [x86] TSC keeps running in C3+ (Luming Yu ) [489310 474091]
  - [net] fix icmp_send and icmpv6_send host re-lookup code (Jiri Pirko ) [489253 439670] {CVE-2009-0778}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.2.1.el5]
changelog:
  - Revert: [mm] cow vs gup race fix (Andrea Arcangeli ) [486921 471613]
  - Revert: [mm] fork vs gup race fix (Andrea Arcangeli ) [486921 471613]
  - Revert: [mm] fix swap race condition in fork-gup-race patch (Andrea Arcangeli ) [507297 506684]
  - Revert: [mm] prevent panic in copy_hugetlb_page_range (Larry Woodman ) [508030 507860]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.28.1.el5]
changelog:
  - [misc] kernel: remove yield from stop_machine paths (Oleg Nesterov) [651814 634454]
  - [kernel] add stop_machine barrier to fix lock contention (Prarit Bhargava) [651814 634454]
  - [scsi] scsi_transport_fc: fc_user_scan correction (David Milburn ) [651455 515176]
  - [block] disable iostat collection in gendisk (Jerome Marchand ) [651809 484158]
  - [block] fix request flags (Jerome Marchand ) [651809 484158]


author: Don Zickus <dzickus@redhat.com> [2.6.18-126.el5]
changelog:
  - [scsi] mpt fusion: disable msi by default (Tomas Henzl ) [474465]
  - [scsi] fcoe: update drivers (mchristi@redhat.com ) [474089]
  - [scsi] fix error handler to call scsi_decide_disposition (Tom Coughlan ) [474345]
  - [scsi] lpfc: fix cancel_retry_delay (Tom Coughlan ) [470610]
  - [x86] disable hpet on machine_crash_shutdown (Neil Horman ) [473038]
  - Revert [mm] keep pagefault from happening under pagelock (Don Zickus ) [473150]
  - [net] enic: update to version 1.0.0.648 (Andy Gospodarek ) [473871]
  - [scsi] qla4xxx: increase iscsi session check to 3-tuple (Marcus Barrow ) [474736]
  - [agp] update the names of some graphics drivers (John Villalovos ) [472438]
  - [net] atm: prevent local denial of service (Eugene Teo ) [473701] {CVE-2008-5079}
  - [scsi] remove scsi_dh_alua (mchristi@redhat.com ) [471920]
  - [scsi] qla2xx/qla84xx: occasional panic on loading (Marcus Barrow ) [472382]
  - [net] cxgb3: eeh and eeprom fixups (Andy Gospodarek ) [441959]
  - [net] cxgb3: fixup embedded firmware problems (Andy Gospodarek ) [469774]
  - [wireless] iwlwifi/mac80211: various small fixes (John W. Linville ) [468967]
  - [x86_64] fix AMD IOMMU boot issue (Joachim Deguara ) [473464]
  - [x86_64] limit num of mce sysfs files removed on suspend (Prarit Bhargava ) [467725]
  - [xen] console: make LUKS passphrase readable (Bill Burns ) [466240]
  - [x86_64] Calgary IOMMU sysdata fixes (Prarit Bhargava ) [474047]
  - [alsa] select 3stack-dig model for SC CELSIUS R670 (Jaroslav Kysela ) [470449]
  - [ata] libata: lba_28_ok sector off by one (David Milburn ) [464868]
  - [ppc64] fix system calls on Cell entered with XER.SO=1 (Jesse Larrew ) [474196]
  - [block] fix max_segment_size, seg_boundary mask setting (Milan Broz ) [471639]
  - [fs] jbd: alter EIO test to avoid spurious jbd aborts (Eric Sandeen ) [472276]
  - [acpi] acpi_cpufreq: fix panic when removing module (Prarit Bhargava ) [472844]
  - [openib] ehca: fix generating flush work completions (AMEET M. PARANJAPE ) [472812]
  - [ata] libata: sata_nv hard reset mcp55 (David Milburn ) [473152]
  - [misc] fix add return signal to ptrace_report_exec (AMEET M. PARANJAPE ) [471112]
  - [misc] utrace: prevent ptrace_induce_signal() crash (Oleg Nesterov ) [469754]
  - [misc] utrace: make ptrace_state refcountable (Oleg Nesterov ) [469754]
  - [net] virtio_net: mergeable receive buffers (Mark McLoughlin ) [473120]
  - [net] virtio_net: jumbo frame support (Mark McLoughlin ) [473114]
  - [net] tun: jumbo frame support (Mark McLoughlin ) [473110]
  - [net] fix unix sockets kernel panic (Neil Horman ) [470436] {CVE-2008-5029}
  - [xen] x86: emulate movzwl with negative segment offsets (Chris Lalancette ) [471801]


author: Anton Arapov <aarapov@redhat.com> [2.6.18-164.8.1.el5]
changelog:
  - [xen] iommu-amd: extend loop ctr for polling completion wait (Bhavna Sarathy ) [539687 518474 526766]
  - [xen] iommu: add passthrough and no-intremap parameters (Bhavna Sarathy ) [539687 518474 526766]
  - [xen] iommu: enable amd iommu debug at run-time (Bhavna Sarathy ) [539687 518474 526766]
  - [xen] support interrupt remapping on M-C (Bhavna Sarathy ) [539687 518474 526766]
  - [xen] iommu: move iommu_setup() to setup ioapic correctly (Bhavna Sarathy ) [539687 518474 526766]
  - [net] bnx2x: add support for bcm8727 phy (Stanislaw Gruszka ) [540381 515716]
  - [x86] cpu: upstream cache fixes needed for amd m-c (Bhavna Sarathy ) [540469 526315]
  - [x86_64] set proc id and core id before calling fixup_dcm (Bhavna Sarathy) [540469 526315]
  - [x86] mce_amd: fix up threshold_bank4 creation (Bhavna Sarathy ) [540469 526315]
  - Revert: [net] sched: fix panic in bnx2_poll_work (John Feeney ) [539686 526481]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.10.1.el5]
changelog:
  - [net] e1000, r9169: fix rx length check errors (Cong Wang ) [550914 550915]
  - [net] e1000e: fix rx length check errors (Amerigo Wang ) [551222 551223]
  - [net] ipv6: fix ipv6_hop_jumbo remote system crash (Amerigo Wang ) [548642 548643] {CVE-2007-4567}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.11.1.el5]
changelog:
  - [firewire] ohci: handle receive packets with zero data (Jay Fenlason) [547241 547242] {CVE-2009-4138}
  - [x86] sanity check for AMD northbridges (Andrew Jones) [549905 547518]
  - [x86_64] disable vsyscall in kvm guests (Glauber Costa) [550968 542612]
  - [fs] ext3: replace lock_super with explicit resize lock (Eric Sandeen) [549908 525100]
  - [fs] respect flag in do_coredump (Danny Feng) [544188 544189] {CVE-2009-4036}
  - [gfs2] make O_APPEND behave as expected (Steven Whitehouse) [547521 544342]
  - [fs] hfs: fix a potential buffer overflow (Amerigo Wang) [540740 540741] {CVE-2009-4020}
  - [fuse] prevent fuse_put_request on invalid pointer (Danny Feng) [538736 538737] {CVE-2009-4021}
  - [mm] call vfs_check_frozen after unlocking the spinlock (Amerigo Wang) [548370 541956]
  - [infiniband] init neigh->dgid.raw on bonding events (Doug Ledford) [543448 538067]
  - [scsi] gdth: prevent negative offsets in ioctl (Amerigo Wang) [539420 539421] {CVE-2009-3080}
  - [fs] gfs2: fix glock ref count issues (Steven Whitehouse) [544978 539240]
  - [net] call cond_resched in rt_run_flush (Amerigo Wang) [547530 517588]
  - [scsi] megaraid: fix sas permissions in sysfs (Casey Dahlin) [537312 537313] {CVE-2009-3889 CVE-2009-3939}
  - [ia64] kdump: restore registers in the stack on init (Takao Indoh ) [542582 515753]
  - [x86] kvm: don't ask HV for tsc khz if not using kvmclock (Glauber Costa ) [537027 531268]
  - [net] sched: fix panic in bnx2_poll_work (John Feeney ) [539686 526481]
  - [x86_64] fix 32-bit process register leak (Amerigo Wang ) [526797 526798]
  - [cpufreq] add option to avoid smi while calibrating (Matthew Garrett ) [537343 513649]
  - [kvm] use upstream kvm_get_tsc_khz (Glauber Costa ) [540896 531025]
  - [net] fix unbalance rtnl locking in rt_secret_reschedule (Neil Horman ) [549907 510067]
  - [net] r8169: imporved rx length check errors (Neil Horman ) [552913 552438]
  - [scsi] lpfc: fix FC ports offlined during target controller faults (Rob Evers ) [549906 516541]
  - [net] emergency route cache flushing fixes (Thomas Graf ) [545662 545663] {CVE-2009-4272}
  - [fs] fasync: split 'fasync_helper()' into separate add/remove functions (Danny Feng ) [548656 548657] {CVE-2009-4141}
  - [scsi] qla2xxx: NPIV vport management pseudofiles are world writable (Tom Coughlan ) [537317 537318] {CVE-2009-3556}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.13.1.el5]
changelog:
  - [net] e1000e: fix broken wol (Andy Gospodarek) [559335 557974]
  - [net] gro: fix illegal merging of trailer trash (Herbert Xu) [561417 537876]
  - [xen] hook sched rebalance logic to opt_hardvirt (Christopher Lalancette ) [562777 529271]
  - [xen] crank the correct stat in the scheduler (Christopher Lalancette ) [562777 529271]
  - [xen] whitespace fixups in xen scheduler (Christopher Lalancette ) [562777 529271]
  - [scsi] cciss: ignore stale commands after reboot (Tomas Henzl ) [562772 525440]
  - [scsi] cciss: version change (Tomas Henzl ) [562772 525440]
  - [scsi] cciss: switch to using hlist (Tomas Henzl ) [562772 525440]
  - [net] bonding: allow bond in mode balance-alb to work (Jiri Pirko ) [560588 487763]
  - [net] e1000e: fix WoL on 82577/82578 (Jiri Pirko ) [543449 517593]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.14.1.el5]
changelog:
  - [fs] ext4: Avoid null pointer dereference when decoding EROFS w/o a journal (Jiri Pirko) [547256 547257] {CVE-2009-4308}
  - [net] sctp: backport cleanups for ootb handling (Neil Horman) [555666 555667] {CVE-2010-0008}
  - [mm] fix sys_move_pages infoleak (Eugene Teo) [562589 562590] {CVE-2010-0415}
  - [x86_64] wire up compat sched_rr_get_interval (Danny Feng) [557684 557092]
  - [net] netfilter: enforce CAP_NET_ADMIN in ebtables (Danny Feng) [555242 555243] {CVE-2010-0007}
  - [misc] fix kernel info leak with print-fatal-signals=1 (Danny Feng) [554583 554584] {CVE-2010-0003}
  - [net] ipv6: fix OOPS in ip6_dst_lookup_tail (Thomas Graf) [559238 552354]
  - [kvm] pvclock on i386 suffers from double registering (Glauber Costa) [561454 557095]
  - [pci] VF can't be enabled in dom0 (Don Dutile) [560665 547980]
  - [kvm] kvmclock won't restore properly after resume (Glauber Costa) [560640 539521]
  - [mm] prevent performance hit for 32-bit apps on x86_64 (Larry Woodman) [562746 544448]
  - [fs] fix possible inode corruption on unlock (Eric Sandeen) [564281 545612]
  - [gfs2] careful unlinking inodes (Steven Whitehouse ) [564288 519049]
  - [gfs2] gfs2_delete_inode failing on RO filesystem (Abhijith Das ) [564290 501359]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.15.1.el5]
changelog:
  - [net] sctp: backport cleanups for ootb handling V2 (Neil Horman) [555666 555667] {CVE-2010-0008}
  - Reverting: [net] sctp: backport cleanups for ootb handling (Neil Horman) [555666 555667] {CVE-2010-0008}


author: Don Zickus <dzickus@redhat.com> [2.6.18-164.el5]
changelog:
  - [misc] information leak in sigaltstack (Vitaly Mayatskikh ) [515396]
  - [misc] execve: must clear current->clear_child_tid (Oleg Nesterov ) [515429]
  - [net] igb: set lan id prior to configuring phy (Stefan Assmann ) [508870]
  - [net] udp: socket NULL ptr dereference (Vitaly Mayatskikh ) [518043] {CVE-2009-2698}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.1.1.el5]
changelog:
  - [net] sky2: revert some phy power refactoring changes (Neil Horman ) [517976 509891]
  - [net] atalk/irda: memory leak to user in getname (Danny Feng ) [519309 519310] {CVE-2009-3001 CVE-2009-3002}
  - [x86_64] fix gettimeoday TSC overflow issue - 1 (Prarit Bhargava ) [489847 467942]
  - [md] prevent crash when accessing suspend_* sysfs attr (Danny Feng ) [518135 518136] {CVE-2009-2849}
  - [nfs] nlm_lookup_host: don't return invalidated nlm_host (Sachin S. Prabhu ) [517967 507549]
  - [net] bonding: tlb/alb: set active slave when enslaving (Jiri Pirko ) [517971 499884]
  - [nfs] r/w I/O perf degraded by FLUSH_STABLE page flush (Peter Staubach ) [521244 498433]
  - [SELinux] allow preemption b/w transition perm checks (Eric Paris ) [520919 516216]
  - [scsi] scsi_transport_fc: fc_user_scan correction (David Milburn ) [521239 515176]
  - [net] tg3: refrain from touching MPS (John Feeney ) [521241 516123]
  - [net] qlge: fix hangs and read performance (Marcus Barrow ) [519783 517893]
  - [scsi] qla2xxx: allow use of MSI when MSI-X disabled (Marcus Barrow ) [519782 517922]
  - [net] mlx4_en fix for vlan traffic (Doug Ledford ) [520906 514141]
  - [net] mlx4_core: fails to load on large systems (Doug Ledford ) [520908 514147]
  - [x86] disable kvmclock by default (Glauber Costa ) [520685 476075]
  - [x86] disable kvmclock when shuting the machine down (Glauber Costa ) [520685 476075]
  - [x86] re-register clock area in prepare_boot_cpu (Glauber Costa ) [520685 476075]
  - [x86] kvmclock smp support (Glauber Costa ) [520685 476075]
  - [x86] use kvm wallclock (Glauber Costa ) [520685 476075]
  - [x86_64] kvm clocksource's implementation (Glauber Costa ) [520685 476075]
  - [x86] kvm: import kvmclock.c (Glauber Costa ) [520685 476075]
  - [x86] kvm: import pvclock.c and headers (Glauber Costa ) [520685 476075]
  - [x86] export additional cpu flags in /proc/cpuinfo (Prarit Bhargava ) [520686 517928]
  - [x86] detect APIC clock calibration problems (Prarit Bhargava ) [521238 503957]
  - [x86] pnpacpi: fix serial ports on IBM Point-of-Sale HW (Kevin Monroe ) [520905 506799]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.2.1.el5]
changelog:
  - [x86_64] kvm: bound last_kvm to prevent backwards time (Glauber Costa ) [524527 524076]
  - [x86] kvm: fix vsyscall going backwards (Glauber Costa ) [524527 524076]
  - [misc] fix RNG to not use first generated random block (Neil Horman ) [523289 522860]
  - [x86] kvm: mark kvmclock_init as cpuinit (Glauber Costa ) [524151 523450]
  - [x86_64] kvm: allow kvmclock to be overwritten (Glauber Costa ) [524150 523447]
  - [x86] kvmclock: fix bogus wallclock value (Glauber Costa ) [524152 519771]
  - [scsi] scsi_dh_rdace: add more sun hardware (mchristi@redhat.com ) [523237 518496]
  - [misc] cprng: fix cont test to be fips compliant (Neil Horman ) [523290 523259]
  - [net] bridge: fix LRO crash with tun (Andy Gospodarek ) [522636 483646]
  - Revert: [x86_64] fix gettimeoday TSC overflow issue - 1 (Don Zickus ) [489847 467942]
  - Revert: [net] atalk/irda: memory leak to user in getname (Danny Feng ) [519309 519310] {CVE-2009-3001 CVE-2009-3002}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.4.1.el5]
changelog:
  - [net] bonding: set primary param via sysfs (Jiri Pirko ) [517971 499884]
  - [scsi] fusion: re-enable mpt_msi_enable option (Tomas Henzl ) [526963 520820]
  - [net] ipt_recent: sanity check hit count (Amerigo Wang ) [527434 523982]
  - [net] ipv4: ip_append_data handle NULL routing table (Jiri Pirko ) [527436 520297]
  - [nfs] fix cache invalidation problems in nfs_readdir (Jeff Layton ) [526960 511170]
  - [net] tc: fix unitialized kernel memory leak (Jiri Pirko ) [520994 520863]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.5.1.el5]
changelog:
  - [fs] eCryptfs: prevent lower dentry from going negative (Eric Sandeen ) [527834 527835] {CVE-2009-2908}
  - [nfs] v4: reclaimer thread stuck in an infinite loop (Sachin S. Prabhu ) [529162 526888]
  - [net] r8169: avoid losing MSI interrupts (Ivan Vecera ) [529366 514589]
  - [scsi] st.c: memory use after free after MTSETBLK ioctl (David Jeffery ) [528133 520192]
  - [net] r8169: balance pci_map/unmap pair, use hw padding (Ivan Vecera ) [529143 515857] {CVE-2009-3613}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.6.1.el5]
changelog:
  - [fs] fix pipe null pointer dereference (Jeff Moyer) [530938 530939] {CVE-2009-3547}
  - [security] require root for mmap_min_addr (Eric Paris ) [518142 518143] {CVE-2009-2695}
  - [net] lvs: adjust sync protocol handling for ipvsadm -2 (Neil Horman ) [528645 524129]
  - [xen] allow booting with broken serial hardware (Chris Lalancette ) [524153 518338]


author: Anton Arapov <aarapov@redhat.com> [2.6.18-164.7.1.el5]
changelog:
  - [xen] fix numa on magny-cours systems (Bhavna Sarathy ) [539684 526051]
  - [xen] fix crash with memory imbalance (Bhavna Sarathy ) [539690 526785]
  - [net] sched: fix panic in bnx2_poll_work (John Feeney ) [539686 526481]
  - [acpi] prevent duplicate dirs in /proc/acpi/processor (Matthew Garrett ) [539692 537395]
  - [x86] fix boot crash with < 8-core AMD Magny-cours system (Bhavna Sarathy) [539682 522215]
  - [x86] support amd magny-cours power-aware scheduler fix (Bhavna Sarathy ) [539680 513685]
  - [x86] disable NMI watchdog on CPU remove (Prarit Bhargava ) [539691 532514]
  - [acpi] bm_check and bm_control update (Luming Yu ) [539677 509422]
  - [x86_64] amd: iommu system management erratum 63 fix (Bhavna Sarathy ) [539689 531469]
  - [net] bnx2i/cnic: update driver version for RHEL5.5 (Mike Christie ) [537014 516233]
  - [x86] fix L1 cache by adding missing break (Bhavna Sarathy ) [539688 526770]
  - [x86] amd: fix hot plug cpu issue on 32-bit magny-cours (Bhavna Sarathy ) [539688 526770]
  - [acpi] disable ARB_DISABLE on platforms where not needed (Luming Yu ) [539677 509422]
  - [fs] private dentry list to avoid dcache_lock contention (Lachlan McIlroy ) [537019 526612]
  - [scsi] qla2xxx: enable msi-x correctly on qlogic 2xxx series (Marcus Barrow ) [537020 531593]
  - [apic] fix server c1e spurious lapic timer events (Bhavna Sarathy ) [539681 519422]
  - [net] netlink: fix typo in initialization (Jiri Pirko ) [528872 527906]
  - [x86] set cpu_llc_id on AMD CPUs (Bhavna Sarathy ) [539678 513684]
  - [x86] fix up threshold_bank4 support on AMD Magny-cours (Bhavna Sarathy ) [539678 513684]
  - [x86] fix up L3 cache information for AMD Magny-cours (Bhavna Sarathy ) [539678 513684]
  - [x86] amd: fix CPU llc_shared_map information (Bhavna Sarathy ) [539678 513684]
  - [nfs] v4: fix setting lock on open file with no state (Jeff Layton ) [533114 533115] {CVE-2009-3726}
  - [misc] futex priority based wakeup (Jon Thomas ) [533858 531552]
  - [dlm] use GFP_NOFS on all lockspaces (David Teigland ) [533859 530537]
  - [drm] r128: check for init on all ioctls that require it (Danny Feng ) [529602 529603] {CVE-2009-3620}
  - [scsi] mpt: errata 28 fix on LSI53C1030 (Tomas Henzl ) [529308 518689]
  - [x86] add ability to access Nehalem uncore config space (John Villalovos ) [539675 504330]
  - [net] AF_UNIX: deadlock on connecting to shutdown socket (Jiri Pirko ) [529630 529631] {CVE-2009-3621}
  - [fs] inotify: remove debug code (Danny Feng ) [533822 499019]
  - [fs] inotify: fix race (Danny Feng ) [533822 499019]
  - [audit] dereferencing krule as if it were an audit_watch (Alexander Viro ) [533861 526819]
  - [mm] fix spinlock performance issue on large systems (John Villalovos ) [539685 526078]
  - [x86] finish sysdata conversion (Danny Feng ) [537346 519633]
  - [pci] pciehp: fix PCIe hotplug slot detection (Michal Schmidt ) [530383 521731]
  - [x86] oprofile: support arch perfmon (John Villalovos ) [539683 523479]
  - [x86] oprofile: fix K8/core2 on multiple cpus (John Villalovos ) [539683 523479]
  - [x86] oprofile: utilize perf counter reservation (John Villalovos ) [539683 523479]
  - [pci] avoid disabling acpi to use non-core PCI devices (Mauro Carvalho Chehab ) [539675 504330]
  - [misc] support Intel multi-APIC-cluster systems (Prarit Bhargava ) [539676 507333]
  - [x86] suspend-resume: work on large logical CPU systems (John Villalovos ) [539674 499271]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.9.1.el5]
changelog:
  - [xen] ia64: unset be from the task psr (Andrew Jones) [587475 587477] {CVE-2010-2070}
  - [fs] ext4: MOVE_EXT can't overwrite append-only files (Eric Sandeen) [601007 601008] {CVE-2010-2066}
  - [pci] acpiphp: fix missing acpiphp_glue_exit (Prarit Bhargava) [607486 515556]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.10.1.el5]
changelog:
  - [fs] xfs: don't let swapext operate on write-only files (Jiri Pirko) [605160 605161] {CVE-2010-2226}
  - [fs] nfs: fix bug in nfsd4 read_buf (Jiri Olsa) [612034 612035] {CVE-2010-2521}
  - [fs] cifs: reject DNS upcall add_key req from userspace (Jeff Layton) [612170 612171] {CVE-2010-2524}
  - [security] keys: new key flag for add_key from userspace (Jeff Layton) [612170 612171] {CVE-2010-2524}
  - [message] mptsas: fix disk add failing due to timeout (Rob Evers) [612539 542892]
  - [block] cfq-iosched: fix bad locking in changed_ioprio (Jeff Moyer) [607483 582435]
  - [block] cfq-iosched: kill cfq_exit_lock (Jeff Moyer) [607483 582435]
  - [fs] cifs: fix kernel BUG with remote OS/2 server (Jeff Layton) [608587 608588] {CVE-2010-2248}
  - [net] bluetooth: fix possible bad memory access via sysfs (Mauro Carvalho Chehab) [576020 576021] {CVE-2010-1084}
  - [net] tcp: fix rcv mss estimate for lro (Stanislaw Gruszka) [613900 593801]
  - [net] cnic: fix panic when nl msg rcvd when device down (Stanislaw Gruszka) [615260 595862]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.11.2.el5]
changelog:
  - [mm] pass correct mm when growing stack (Jiri Pirko) [607857 607858] {CVE-2010-2240}
  - [mm] fix up some user-visible effects of stack guard page (Jiri Pirko) [607857 607858] {CVE-2010-2240}
  - [mm] fix page table unmap for stack guard page properly (Jiri Pirko) [607857 607858] {CVE-2010-2240}
  - [mm] fix missing unmap for stack guard page failure case (Jiri Pirko) [607857 607858] {CVE-2010-2240}
  - [mm] keep a guard page below a grow-down stack segment (Jiri Pirko) [607857 607858] {CVE-2010-2240}


author: Don Howard <dhoward@redhat.com> [2.6.18-194.11.4.el5]
changelog:
  - [misc] make compat_alloc_user_space() incorporate the access_ok() (Don Howard) [634463 634464] {CVE-2010-3081}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.17.1.el5]
changelog:
  - Syncing following patch from branched build:
  - [misc] make compat_alloc_user_space() incorporate the access_ok() (Don Howard) [634463 634464] {CVE-2010-3081}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.1.1.el5]
changelog:
  - [xen] arpl on MMIO area crashes the guest (Paolo Bonzini) [572979 572982] {CVE-2010-0730}
  - [mm] fix boot on s390x after bootmem overlap patch (Amerigo Wang) [580838 550974]
  - [net] bnx2: avoid restarting cnic in some contexts (Andy Gospodarek) [581148 554706]
  - [iscsi] fix slow failover times (Mike Christie) [580840 570681]
  - [misc] kernel: fix elf load DoS on x86_64 (Danny Feng) [560552 560553] {CVE-2010-0307}
  - [netlink] connector: delete buggy notification code (Jiri Olsa) [561684 561685] {CVE-2010-0410}
  - [sound] hda_intel: avoid divide by zero in azx devices (Jaroslav Kysela) [567171 567172] {CVE-2010-1085}
  - [dvb] fix endless loop when decoding ULE at dvb-core (Mauro Carvalho Chehab) [569241 569242] {CVE-2010-1086}
  - [scsi] fnic: fix tx queue handling (Mike Christie) [580829 576709]
  - [fusion] mptsas: fix event_data alignment (Tomas Henzl) [580832 570000]
  - [edac] fix internal error message in amd64_edac driver (Bhavna Sarathy) [580836 569938]
  - [x86_64] fix floating point state corruption after signal (Oleg Nesterov) [580841 560891]
  - [mm] don't let reserved memory overlap bootmem_map (Amerigo Wang) [580838 550974]
  - [s390] kernel: correct TLB flush of page table entries (Hendrik Brueckner) [580839 545527]
  - [xen] iommu: clear IO-APIC pins on boot and shutdown (Paolo Bonzini) [580199 548201]
  - [xen] vtd: fix ioapic pin array (Don Dugger) [581150 563546]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.30.1.el5]
changelog:
  - [scsi] lpfc: set heartbeat timer off by default (Rob Evers) [658079 655119]
  - [misc] posix-cpu-timers: workaround for mt exec problems (Oleg Nesterov) [656265 656266] {CVE-2010-4248}
  - [fs] setup_arg_pages: diagnose excessive argument size (Oleg Nesterov) [645226 645227] {CVE-2010-3858}
  - [net] inet_diag: make sure we run audited bytecode (Jiri Pirko) [651266 651267] {CVE-2010-3880}
  - [net] limit sendto/recvfrom/iovec total length to INT_MAX (Jiri Pirko) [645871 645872] {CVE-2010-3859}
  - [bluetooth] hci_ldisc: fix missing NULL check (Jarod Wilson) [655664 655666] {CVE-2010-4242}
  - [virt] xen: add bounds req-process loop in blkback/blktap (Laszlo Ersek) [656208 654546] {CVE-2010-4247}
  - [virt] xen: don't leak dev refs on bad xenbus transitions (Laszlo Ersek) [636412 635999] {CVE-2010-3699}
  - [scsi] lpfc: fix crashes on NULL pnode dereference (Rob Evers) [658864 649489]
  - [scsi] qla2xxx: check null fcport in _queuecommands (Chad Dupuis) [657029 644863]
  - [fs] gfs2: fix race in unlinked inode deallocation (Robert S Peterson) [651811 643165]
  - [scsi] lpfc: fix a BUG_ON in lpfc_abort_handler (Rob Evers) [658378 639028]
  - [scsi] re-enable transistions from OFFLINE to RUNNING (Mike Christie) [658934 641193]
  - [scsi] scsi_dh_alua: handle transitioning state correctly (Mike Snitzer) [657028 619361]
  - [misc] add round_jiffies_up and related routines (Michal Schmidt) [658520 556476]
  - [fs] fix dcache accounting bug (Josef Bacik) [658857 596548]
  - [usb] uhci: fix oops in uhci_scan_schedule (Pete Zaitcev) [657319 516851]
  - [scsi] lpfc: fix panic in lpfc_scsi_cmd_iocb_cmpl (Rob Evers) [658379 603806]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.31.1.el5]
changelog:
  - [fs] nfs: set lock_context field in nfs_writepage_sync (Jeff Layton) [663381 660580]
  - [fs] nfs: remove problematic calls to nfs_clear_request (Jeff Layton) [663353 656492]
  - [fs] nfs: handle alloc failures in nfs_create_request (Jeff Layton) [663353 656492]
  - [fs] nfs: clean up nfs_create_request (Jeff Layton) [663353 656492]
  - [virt] xen: fix netback hotplug regression in xenbus fix (Laszlo Ersek) [636412 635999] {CVE-2010-3699}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.6.1.el5]
changelog:
  - [fs] gfs2: fix permissions checking for setflags ioctl (Steven Whitehouse) [595580 595399] {CVE-2010-1641}
  - [mm] clear page errors when issuing a fresh read of page (Rik van Riel) [599739 590763]
  - [misc] keys: do not find already freed keyrings (Vitaly Mayatskikh) [585099 585100] {CVE-2010-1437}
  - [net] sctp: file must be valid before setting timeout (Jiri Pirko) [598355 578261]
  - [net] tg3: fix panic in tg3_interrupt (John Feeney) [600498 569106]
  - [net] e1000/e1000e: implement simple interrupt moderation (Andy Gospodarek) [599332 586416]
  - [net] cnic: Fix crash during bnx2x MTU change (Stanislaw Gruszka) [596385 582367]
  - [net] bxn2x: add dynamic lro disable support (Stanislaw Gruszka) [596385 582367]
  - [net] implement dev_disable_lro api for RHEL5 (Stanislaw Gruszka) [596385 582367]
  - [x86_64] fix time drift due to faulty lost tick tracking (Ulrich Obergfell) [601090 579711]
  - [net] neigh: fix state transitions via Netlink request (Jiri Pirko) [600215 485903]
  - [mm] fix hugepage corruption using vm.drop_caches (Larry Woodman) [599737 579469]
  - [nfs] don't unhash dentry in nfs_lookup_revalidate (Jeff Layton) [596384 582321]
  - [fs] remove unneccessary f_ep_lock from fasync_helper (Lachlan McIlroy) [599730 567479]
  - [xen] set hypervisor present CPUID bit (Paolo Bonzini) [599734 573771]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.7.1.el5]
changelog:
  - [virt] don't compute pvclock adjustments if we trust tsc (Glauber Costa) [601080 570824]
  - [virt] add a global synchronization point for pvclock (Glauber Costa) [601080 570824]
  - [virt] enable pvclock flags in vcpu_time_info structure (Glauber Costa) [601080 570824]
  - [misc] add atomic64_cmpxcgh to x86_64 include files (Glauber Costa) [601080 570824]
  - [x86] grab atomic64 types from upstream (Glauber Costa) [601080 570824]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-192.el5]
changelog:
  - [cpu] fix amd l3 cache disable functionality (Jarod Wilson) [517586]
  - [misc] backport upstream strict_strto* functions (Jarod Wilson) [517586]
  - [wireless] rt2x00: fix work cancel race conditions (Stanislaw Gruszka) [562972]
  - [net] igb: fix DCA support for 82580 NICs (Stefan Assmann) [513712]
  - Revert: [ia64] kdump: fix a deadlock while redezvousing (Neil Horman) [506694]
  - [block] cfq: kick busy queues w/o waiting for merged req (Jeff Moyer) [570814]
  - [fs] cifs: max username len check in setup does not match (Jeff Layton) [562947]
  - [fs] cifs: CIFS shouldn't make mountpoints shrinkable (Jeff Layton) [562947]
  - [fs] cifs: fix dentry hash for case-insensitive mounts (Jeff Layton) [562947]
  - [fs] cifs: fix len for converted unicode readdir names (Jeff Layton) [562947]
  - [x86_64] xen: fix missing 32-bit syscalls on 64-bit Xen (Christopher Lalancette) [559410]
  - [fs] gfs2: fix kernel BUG when using fiemap (Abhijith Das) [569610]
  - [net] sctp: backport cleanups for ootb handling (Neil Horman) [555667] {CVE-2010-0008}
  - [xen] vtd: ignore unknown DMAR entries (Don Dugger) [563900]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-193.el5]
changelog:
  - [fs] gfs2: locking fix for potential dos (Steven Whitehouse) [572390] {CVE-2010-0727}
  - [acpi] power_meter: avoid oops on driver load (Matthew Garrett) [566575]
  - [net] r8169: fix assignments in backported net_device_ops (Ivan Vecera) [568040]
  - [net] virtio_net: refill rx buffer on out-of-memory (Herbert Xu) [554078]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-194.el5]
changelog:
  - [net] mlx4: pass attributes down to vlan interfaces (Doug Ledford) [573098]
  - [block] cfq-iosched: fix sequential read perf regression (Jeff Moyer) [571818]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-237.el5]
changelog:
  - [block] fully zeroize request struct in rq_init (Rob Evers) [662154]
  - [scsi] qla4xxx: update to 5.02.04.02.05.06-d0 (Chad Dupuis) [656999]
  - [scsi] qla4xxx: make get_sys_info function return void (Chad Dupuis) [656999]
  - [scsi] qla4xxx: don't default device to FAILED state (Chad Dupuis) [656999]
  - [scsi] qla4xxx: mask bits in F/W Options during init (Chad Dupuis) [656999]
  - [scsi] qla4xxx: update to 5.02.04.01.05.06-d0 (Chad Dupuis) [661768]
  - [scsi] qla4xxx: disable irq instead of req pci_slot_reset (Chad Dupuis) [661768]
  - [scsi] qla4xxx: no device add until scsi_add_host success (Chad Dupuis) [661768]
  - [fs] nfs: set lock_context field in nfs_writepage_sync (Jeff Layton) [660580]
  - [scsi] bfa: fix crash reading driver sysfs statistics (Rob Evers) [659880] {CVE-2010-4343}
  - [misc] cpufeature: avoid corrupting cpuid vendor id (Matthew Garrett) [568751]
  - [char] drm: don't set signal blocker on master process (Dave Airlie) [570604]
  - [fs] nfs: remove problematic calls to nfs_clear_request (Jeff Layton) [656492]
  - [fs] nfs: handle alloc failures in nfs_create_request (Jeff Layton) [656492]
  - [fs] nfs: clean up nfs_create_request (Jeff Layton) [656492]
  - [net] forcedeth: fix race condition in latest backport (Ivan Vecera) [658434]
  - [net] cxgb3: fix read of uninitialized stack memory (Jay Fenlason) [633155] {CVE-2010-3296}
  - [net] tg3: increase jumbo flag threshold (John Feeney) [660506]
  - [net] s2io: fix netdev initialization failure (Bob Picco) [654948]
  - [net] igb: only use vlan_gro_receive if vlans registered (Stefan Assmann) [660190] {CVE-2010-4263}
  - [net] ipv6: try all routers with unknown reachable state (Thomas Graf) [661393]
  - [misc] kernel: fix address limit override in OOPS path (Dave Anderson) [659571] {CVE-2010-4258}


author: Jarod Wilson <jarod@redhat.com> [2.6.18-238.el5]
changelog:
  - [net] bnx2: remove extra call to pci_map_page (John Feeney) [663509]
  - [fs] nfs: set lock_context field in nfs_readpage_sync (Jeff Layton) [663853]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-238.1.1.el5]
changelog:
  - [scsi] megaraid: give FW more time to recover from reset (Tomas Henzl) [667141 665427]
  - [fs] gfs2: fix statfs error after gfs2_grow (Robert S Peterson) [666792 660661]
  - [mm] prevent file lock corruption using popen(3) (Larry Woodman) [667050 664931]
  - [net] sctp: fix panic from bad socket lock on icmp error (Neil Horman) [665476 665477] {CVE-2010-4526}


author: Phillip Lougher <plougher@redhat.com> [2.6.18-238.10.1.el5]
changelog:
  - [fs] gfs2: creating large files suddenly slow to a crawl (Robert S Peterson) [690239 683155]
  - [virt] hypervisor: Overflow fix for clocks > 4GHz (Zachary Amsden) [690134 673242]
  - [usb] fix usbfs isochronous data transfer regression (Don Zickus) [696136 688926]
  - [fs] partitions: Fix corrupted OSF partition table parsing (Danny Feng) [688022 688023] {CVE-2011-1163}
  - [misc] pm: add comment explaining is_registered kabi work-around (Don Zickus) [689699 637930]
  - [media] sn9c102: fix world-wirtable sysfs files (Don Howard) [679304 679305]
  - [scsi] scsi_dh_rdac: Add two new IBM devices to rdac_dev_list (Rob Evers) [692370 691460]
  - [fs] block: fix submit_bh discarding barrier flag on sync write (Lukas Czerner) [690795 667673]
  - [net] netfilter/ipt_CLUSTERIP: fix buffer overflow (Jiri Pirko) [689339 689340]
  - [net] netfilter: ip6_tables: fix infoleak to userspace (Jiri Pirko) [689348 689349] {CVE-2011-1172}
  - [net] netfilter/ip_tables: fix infoleak to userspace (Jiri Pirko) [689331 689332] {CVE-2011-1171}
  - [net] netfilter/arp_tables: fix infoleak to userspace (Jiri Pirko) [689322 689323] {CVE-2011-1170}
  - [base] Fix potential deadlock in driver core (Don Zickus) [689699 637930]
  - [net] forcedeth/r8169: call netif_carrier_off at end of probe (Ivan Vecera) [689808 689805 664705 664707]
  - [net] ixgbe: fix for 82599 erratum on Header Splitting (Andy Gospodarek) [693751 680531]
  - [net] ixgbe: limit VF access to network traffic (Andy Gospodarek) [693751 680531]
  - [fs] lockd: make lockd_down wait for lockd to come down (Jeff Layton) [688156 653286]
  - [fs] proc: protect mm start_/end_code in /proc/pid/stat (Eugene Teo) [684570 684571] {CVE-2011-0726}
  - [net] dccp: fix oops in dccp_rcv_state_process (Eugene Teo) [682955 682956] {CVE-2011-1093}
  - [net] bluetooth: fix bnep buffer overflow (Don Howard) [681318 681319] {CVE-2011-1079}
  - [fs] nfs: break nfsd v4 lease on unlink, link, and rename (J. Bruce Fields) [693755 610093]
  - [fs] nfs: break lease on nfsd v4 setattr (J. Bruce Fields) [693755 610093]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-238.12.1.el5]
changelog:
  - [x86_64] Ignore spurious IPIs left over from crash kernel (Myron Stowe) [699610 692921]
  - [i386] Ignore spurious IPIs left over from crash kernel (Myron Stowe) [699610 692921]
  - [xen] fix MAX_EVTCHNS definition (Laszlo Ersek) [701242 701240]
  - [net] ixgbe: fix for link failure on SFP+ DA cables (Don Howard) [696181 653236]
  - [net] netxen: limit skb frags for non tso packet (Phillip Lougher) [699609 672368]
  - [block] cciss: fix lost command problem (Phillip Lougher) [696503 696153]
  - [fs] gfs2: fix filesystem hang caused by incorrect lock order (Robert S Peterson) [688855 656032]
  - [fs] gfs2: restructure reclaim of unlinked dinodes (Phillip Lougher) [688855 656032]
  - [fs] gfs2: unlock on gfs2_trans_begin error (Robert S Peterson) [688855 656032]
  - [scsi] mpt2sas: prevent heap overflows and unchecked access (Tomas Henzl) [694526 694527] {CVE-2011-1495 CVE-2011-1494}
  - [net] bridge/netfilter: fix ebtables information leak (Don Howard) [681325 681326] {CVE-2011-1080}
  - [net] bluetooth: fix sco information leak to userspace (Don Howard) [681310 681311] {CVE-2011-1078}
  - [fs] fix corrupted GUID partition table kernel oops (Jerome Marchand) [695979 695980] {CVE-2011-1577}
  - [xen] x86/domain: fix error checks in arch_set_info_guest (Laszlo Ersek) [688581 688582] {CVE-2011-1166}
  - [net] bridge: fix initial packet flood if !STP (Jiri Pirko) [701222 695369]
  - [fs] nfsd: fix auth_domain reference leak on nlm operations (J. Bruce Fields) [697448 589512]
  - [scsi] qla2xxx: no reset/fw-dump on CT/ELS pt req timeout (Chad Dupuis) [689700 660386]
  - [mm] set barrier and send tlb flush to all affected cpus (Prarit Bhargava) [696908 675793]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-238.17.1.el5]
changelog:
  - [net] bluetooth: l2cap and rfcomm: fix info leak to userspace (Thomas Graf) [703020 703021] {CVE-2011-2492}
  - [net] inet_diag: fix inet_diag_bc_audit data validation (Thomas Graf) [714538 714539] {CVE-2011-2213}
  - [misc] signal: fix kill signal spoofing issue (Oleg Nesterov) [690030 690031] {CVE-2011-1182}
  - [fs] proc: fix signedness issue in next_pidmap (Oleg Nesterov) [697826 697827] {CVE-2011-1593}
  - [char] agp: fix OOM and buffer overflow (Jerome Marchand) [699009 699010] {CVE-2011-1746}
  - [char] agp: fix arbitrary kernel memory writes (Jerome Marchand) [699005 699006] {CVE-2011-2022 CVE-2011-1745}
  - [infiniband] core: Handle large number of entries in poll CQ (Jay Fenlason) [668370 668371] {CVE-2011-1044 CVE-2010-4649}
  - [infiniband] core: fix panic in ib_cm:cm_work_handler (Jay Fenlason) [679995 679996] {CVE-2011-0695}
  - [fs] validate size of EFI GUID partition entries (Anton Arapov) [703027 703028] {CVE-2011-1776}


author: Phillip Lougher <plougher@redhat.com> [2.6.18-238.18.1.el5]
changelog:
  - [xen] disregard trailing bytes in an invalid page (Paolo Bonzini) [719066 717742]
  - [xen] prep __get_instruction_length_from_list for partial buffers (Paolo Bonzini) [719066 717742]
  - [xen] remove unused argument to __get_instruction_length (Phillip Lougher) [719066 717742]
  - [xen] let __get_instruction_length always read into own buffer (Paolo Bonzini) [719066 717742]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-238.19.1.el5]
changelog:
  - Revert: [xen] hvm: svm support cleanups (Andrew Jones) [703715 702657] {CVE-2011-1780}
  - Revert: [xen] hvm: secure svm_cr_access (Andrew Jones) [703715 702657] {CVE-2011-1780}
  - Revert: [xen] let __get_instruction_length always read into own buffer (Paolo Bonzini) [719066 717742]
  - Revert: [xen] remove unused argument to __get_instruction_length (Phillip Lougher) [719066 717742]
  - Revert: [xen] prep __get_instruction_length_from_list for partial buffers (Paolo Bonzini) [719066 717742]
  - Revert: [xen] disregard trailing bytes in an invalid page (Paolo Bonzini) [719066 717742]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-238.3.1.el5]
changelog:
  - [net] tcp: fix shrinking windows with window scaling (Jiri Pirko) [669300 627496]
  - [virt] xen: no enable extended PCI cfg space via IOports (Don Dutile) [671340 661478]
  - [net] e1000: Avoid unhandled IRQ (Dean Nelson) [670807 651512]
  - [net] e1000: fix screaming IRQ (Dean Nelson) [670807 651512]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-238.4.1.el5]
changelog:
  - [net] be2net: fix missing trans_start update (Ivan Vecera) [674273 671595]
  - [net] fix unix socket local dos (Neil Horman) [656759 656760] {CVE-2010-4249}
  - [net] core: clear allocs for privileged ethtool actions (Jiri Pirko) [672432 672433] {CVE-2010-4655}
  - [net] limit socket backlog add operation to prevent DoS (Jiri Pirko) [657308 657309] {CVE-2010-4251}
  - [block] fix accounting bug on cross partition merges (Jerome Marchand) [672253 646816]
  - [char] virtio: Wake console outvq on host notifications (Amit Shah) [673983 673459]
  - [char] virtio: make console port names a KOBJ_ADD event (Amit Shah) [673984 669909]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-238.7.1.el5]
changelog:
  - [fs] partitions: Validate map_count in Mac part tables (Danny Feng) [679283 679284] {CVE-2011-1010}
  - [x86] fix AMD family 0x15 guest boot issue on 64-bit host (Frank Arnold) [679747 667234]
  - [sound] alsa: cache mixer values on usb-audio devices (Don Zickus) [680043 678074]
  - [media] dvb: fix av7110 negative array offset (Mauro Carvalho Chehab) [672401 672402] {CVE-2011-0521}
  - [message] mptfusion: add required mptctl_release call (Tomas Henzl) [677173 660871]
  - [fs] nfs: pure nfs client performance using odirect (Jeff Layton) [677172 643441]
  - [mm] fix install_special_mapping skips security_file_mmap (Frantisek Hrbata) [662196 662197] {CVE-2010-4346}
  - [scsi] device_handler: fix alua_rtpg port group id check (Mike Snitzer) [681795 669961]
  - [net] cnic: fix big endian bug with device page tables (Steve Best) [674774 669527]
  - [net] gro: reset dev pointer on reuse (Andy Gospodarek) [674588 600350]
  - [misc] add ignore_loglevel kernel parameter (Amerigo Wang) [675665 662102]
  - [misc] add bootmem_debug kernel parameter (Amerigo Wang) [675665 662102]
  - [fs] gfs2: remove iopen glocks from cache on delete fail (Benjamin Marzinski) [675909 666080]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-238.8.1.el5]
changelog:
  - [message] mptfusion: fix msgContext in mptctl_hp_hostinfo (Tomas Henzl) [684128 646513]
  - [fs] nfs: fix use of slab alloc'd pages in skb frag list (Neil Horman) [682642 682643] {CVE-2011-1090}
  - [s390] remove task_show_regs (Danny Feng) [677852 677853] {CVE-2011-0710}
  - [misc] vdso: export wall_to_monotonic (Prarit Bhargava) [688312 675727]
  - [x86_64] Use u32, not long, to set reset vector back to 0 (Don Zickus) [682673 675258]
  - [misc] vmware: increase apic_calibration_diff to 10000 (Prarit Bhargava) [680350 665197]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-238.9.1.el5]
changelog:
  - [md] dm-mpath: fix NULL deref when path parameter missing (Mike Snitzer) [683443 673058]
  - [md] dm-mpath: wait for pg_init completion on suspend (Mike Snitzer) [683443 673058]
  - [md] dm-mpath: hold io until all pg_inits completed (Mike Snitzer) [683443 673058]
  - [md] dm-mpath: skip activate_path for failed paths (Mike Snitzer) [683443 673058]
  - [md] dm-mpath: pass struct pgpath to pg init done (Mike Snitzer) [683443 673058]
  - [md] dm-mpath: prevent io from work queue while suspended (Mike Snitzer) [683443 673058]
  - [md] dm-mpath: add mutex to sync adding and flushing work (Mike Snitzer) [683443 673058]
  - [md] dm-mpath: flush workqueues before suspend completes (Mike Snitzer) [683443 673058]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-236.el5]
changelog:
  - [powerpc] support DLPAR remove operations (Steve Best) [655089]
  - [net] igb: fix tx packet count (Stefan Assmann) [658801]
  - [usb] serial: new driver MosChip MCS7840 (Stefan Assmann) [574507]
  - [fs] exec: copy fixes into compat_do_execve paths (Oleg Nesterov) [625694] {CVE-2010-4243}
  - [fs] exec: make argv/envp memory visible to oom-killer (Oleg Nesterov) [625694] {CVE-2010-4243}
  - [misc] binfmts: kill bprm->argv_len (Oleg Nesterov) [625694] {CVE-2010-4243}
  - [mm] backport upstream stack guard page /proc reporting (Larry Woodman) [643426]
  - [mm] add guard page for stacks that grow upwards (Johannes Weiner) [630563]
  - [net] tipc: fix information leak to userland (Jiri Pirko) [649892] {CVE-2010-3877}
  - [sound] ALSA: fix sysfs unload and OSS mixer mutex issues (Jaroslav Kysela) [652165]
  - [net] tg3: fix 5719 bugs (John Feeney) [657097]
  - [net] bnx2: update firmware to 6.0.x (John Feeney) [644438]
  - [redhat] configs: add CONFIG_SECURITY_DMESG_RESTRICT (Frantisek Hrbata) [653250]
  - [misc] kernel: restrict unprivileged access to dmesg (Frantisek Hrbata) [653250]
  - [virt] xen: don't allow blkback virtual CDROM device (Andrew Jones) [635638] {CVE-2010-4238}
  - Revert: [xen] cd-rom drive does not recognize new media (Andrew Jones) [635638] {CVE-2010-4238}
  - [net] qlge: fix deadlock when interface is going down (Chad Dupuis) [654420]
  - [net] qlge: reset chip before freeing buffers (Chad Dupuis) [654420]
  - [net] qlge: restore vlan setting during ql_adapter_up (Chad Dupuis) [654420]
  - [scsi] qla4xxx: Update version to V5.02.04.00.05.06-d0 (Chad Dupuis) [656999]
  - [scsi] qla4xxx: Document Driver Versioning Scheme (Chad Dupuis) [656999]
  - [scsi] qla4xxx: Updated the Copyright header to 2010 (Chad Dupuis) [656999]
  - [scsi] qla4xxx: don't process devices untill probe done (Chad Dupuis) [656999]
  - [scsi] qla4xxx: free DDB when application calls for it (Chad Dupuis) [656999]
  - [scsi] qla4xxx: memory wedge with peg_halt test in loop (Chad Dupuis) [656999]
  - [scsi] qla4xxx: clear AF_FW_RECOVERY flag after reset (Chad Dupuis) [656999]
  - [scsi] qla4xxx: fix new IP address caching (Chad Dupuis) [656999]
  - [scsi] qla4xxx: replace hard coded values with macros (Chad Dupuis) [656999]
  - [scsi] qla4xxx: mark dev FAILED on 82XX init failure (Chad Dupuis) [656999]
  - [scsi] qla4xxx: fail init if pci mem write fails (Chad Dupuis) [656999]
  - [scsi] qla4xxx: ensure proper qla4xxx_conn_start state (Chad Dupuis) [656999]
  - [scsi] qla4xxx: do not process interrupts unconditionally (Chad Dupuis) [656999]
  - [scsi] qla4xxx: fix add w/iscsi2_create_conn not done yet (Chad Dupuis) [656999]
  - [scsi] qla4xxx: no fw hung if reset retry is in progress (Chad Dupuis) [656999]
  - [scsi] qla4xxx: correct use of cmd->host_scribble (Chad Dupuis) [656999]
  - [scsi] qla4xxx: msi init request_irq parameter usage fix (Chad Dupuis) [656999]
  - [scsi] qla4xxx: cleanup qla4xxx_wait_for_hba_online (Chad Dupuis) [656999]
  - [scsi] qla4xxx: grab hardware_lock before accessing srb (Chad Dupuis) [656999]
  - [scsi] qla4xxx: remove unwanted check for bad spd (Chad Dupuis) [656999]
  - [scsi] qla4xxx: update AER support for ISP82XX (Chad Dupuis) [656999]
  - [scsi] qla4xxx: clear rom lock if firmware died holding (Chad Dupuis) [656999]
  - [scsi] qla4xxx: CRB Register for Request Queue in-pointer (Chad Dupuis) [656999]
  - [scsi] qla4xxx: dump mailbox registers on System Error (Chad Dupuis) [656999]
  - [scsi] qla4xxx: add support for 8130/8131 AENs (Chad Dupuis) [656999]
  - [scsi] qla4xxx: fix seconds_since_last_heartbeat reset (Chad Dupuis) [656999]
  - [scsi] qla4xxx: no wait for outstanding command complete (Chad Dupuis) [656999]
  - [scsi] qla4xxx: free_irqs on failed initialize_adapter (Chad Dupuis) [656999]
  - [virt] xen: fix netback hotplug regression in xenbus fix (Laszlo Ersek) [635999]
  - [xen] fix 64-bit PV guest user mode segv crashing host (Paolo Bonzini) [658354] {CVE-2010-4255}


author: Phillip Lougher <plougher@redhat.com> [2.6.18-274.10.1.el5]
changelog:
  - [net] be2net: enable NETIF_F_LLTX and add own locking of Tx path (Ivan Vecera) [750912 731806]
  - [net] be2net: fix multicast filter programming (Ivan Vecera) [750912 731806]
  - [net] be2net: fix cmd-rx-filter not notifying MCC (Ivan Vecera) [750912 731806]
  - [net] be2net: use RX_FILTER cmd to program multicast addresses (Ivan Vecera) [750912 731806]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-274.11.1.el5]
changelog:
  - [fs] gfs2: speed up large file delete/unlink (Robert S Peterson) [743806 738440]
  - [fs] cifs: fix wrong buffer length returned by SendReceive (Sachin Prabhu) [750842 720363]
  - [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]
  - [virt] xen/netback: disable features not supported by netfront (Paolo Bonzini) [746600 746225]
  - [fs] nfs: don't redirty inodes with no outstanding commits (Jeff Layton) [750477 739665]
  - [net] tg3: call netif_carrier_off to initialize operstate value (John Feeney) [744700 635982]
  - [xen] make test_assign_device domctl dependent on intremap hw (Laszlo Ersek) [745726 740203]
  - [xen] Propagate target dom within XEN_DOMCTL_test_assign_device (Laszlo Ersek) [745726 740203]
  - [net] sctp: encode PROTOCOL VIOLATION error cause correctly (Thomas Graf) [750457 636828]
  - [fs] cifs: always do is_path_accessible check in cifs_mount (Jeff Layton) [738299 738300] {CVE-2011-3363}
  - [fs] cifs: add fallback in is_path_accessible for old servers (Jeff Layton) [738299 738300] {CVE-2011-3363}
  - [char] tpm: Zero buffer after copying to userspace (Jiri Benc) [732630 732631] {CVE-2011-1162}
  - [fs] hfs: fix hfs_find_init() sb->ext_tree NULL ptr oops (Phillip Lougher) [712775 712776] {CVE-2011-2203}
  - [net] sctp: Set correct error cause value for missing parameters (Thomas Graf) [750451 629938]
  - [misc] kernel: plug taskstats io infoleak (Jerome Marchand) [716845 716846] {CVE-2011-2494}
  - [usb] Make device reset stop retrying after disconnect (Don Zickus) [750841 709699]
  - [net] ipv6: properly use ICMP6MSGOUT_INC_STATS in ndisc_send_skb (Jiri Pirko) [743611 698728]
  - [scsi] Reduce error recovery time by reducing use of TURs (Mike Christie) [741273 694625]
  - [mm] s390: fix first time swap use results in heavy swapping (Hendrik Brueckner) [747876 722482]
  - [virt] xen: fix GFP mask handling in dma_alloc_coherent (Laszlo Ersek) [742282 730247]
  - [s390] kernel: fix system hang if hangcheck timer expires (Hendrik Brueckner) [747872 730313]
  - [usb] fix interface sysfs file-creation bug (Don Zickus) [750848 637930]
  - [usb] don't touch sysfs stuff when altsetting is unchanged (Don Zickus) [750848 637930]
  - [base] Fix potential deadlock in driver core (Don Zickus) [750848 637930]
  - [security] keys: Fix NULL deref in user-defined key type (David Howells) [751300 751301]
  - [xen] passthrough: block VT-d MSI trap injection (Paolo Bonzini) [716301 716302] {CVE-2011-1898}


author: Phillip Lougher <plougher@redhat.com> [2.6.18-274.15.1.el5]
changelog:
  - [net] e1000e: Avoid wrong check on TX hang (Dean Nelson) [766485 746272]
  - [fs] xfs: Fix memory corruption in xfs_readlink (Carlos Maiolino) [749159 749160] {CVE-2011-4077}
  - [pci] intel-iommu: Default to non-coherent for unattached domains (Don Dutile) [766803 753924]
  - [fs] nfs: remove BUG() from encode_share_access() (Jeff Layton) [755442 754901] {CVE-2011-4324}
  - [misc] irq: Check for spurious IRQ only on disabled IRQs (Prarit Bhargava) [759387 756412]
  - [fs] hfs: add sanity check for file name length (Eric Sandeen) [755432 755433] {CVE-2011-4330}
  - [fs] proc: Fix select on /proc files without ->poll (David Howells) [755483 751214]
  - [fs] nfs: Ensure we mark inode as dirty if early exit from commit (Jeff Layton) [755482 714020]
  - [x86] apic: ack all pending irqs when crashed/on kexec (hiro muneda) [750460 742079]
  - [virt] kvm: fix regression w/ 32 bit KVM clock (Rik van Riel) [747875 753789 751742 731599]
  - [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]
  - [fs] jbd/jbd2: validate sb->s_first in journal_get_superblock (Eryu Guan) [753343 706810] {CVE-2011-4132}
  - [net] igb: enable link power down (Stefan Assmann) [752735 742514]
  - [fs] proc: fix oops on invalid /proc/<pid>/maps access (Johannes Weiner) [747851 747699] {CVE-2011-3637}
  - [block] cciss: bump driver version (Tomas Henzl) [758024 714129]
  - [block] cciss: need to delay after a PCI Power Management reset (Tomas Henzl) [758024 714129]
  - [block] cciss: auto engage scsi susbsystem (Tomas Henzl) [758024 714129]
  - [block] cciss: store pdev in hba struct (Tomas Henzl) [758024 714129]
  - [block] cciss: use consistent variable names (Tomas Henzl) [758024 714129]
  - [block] cciss: add a commandline switch for simple mode (Tomas Henzl) [758024 714129]
  - [fs] proc: close race with exec in mem_read() (Johannes Weiner) [692041 692042] {CVE-2011-1020}
  - [mm] implement access_remote_vm (Johannes Weiner) [692041 692042] {CVE-2011-1020}
  - [mm] factor out main logic of access_process_vm (Johannes Weiner) [692041 692042] {CVE-2011-1020}
  - [mm] use mm_struct to resolve gate vma's in __get_user_pages (Johannes Weiner) [692041 692042] {CVE-2011-1020}
  - [mm] make in_gate_area take mm_struct instead of a task_struct (Johannes Weiner) [692041 692042] {CVE-2011-1020}
  - [mm] make get_gate_vma take mm_struct instead of task_struct (Johannes Weiner) [692041 692042] {CVE-2011-1020}
  - [x86_64] mark assoc mm when running task in 32 bit compat mode (Johannes Weiner) [692041 692042] {CVE-2011-1020}
  - [misc] sched: add ctx tag to mm running task in ia32 compat mode (Johannes Weiner) [692041 692042] {CVE-2011-1020}
  - [fs] proc: require the target to be tracable (or yourself) (Johannes Weiner) [692041 692042] {CVE-2011-1020}
  - [fs] proc: close race in /proc/*/environ (Johannes Weiner) [692041 692042] {CVE-2011-1020}
  - [fs] proc: report errors in /proc/*/*map* sanely (Johannes Weiner) [692041 692042] {CVE-2011-1020}
  - [fs] proc: shift down_read(mmap_sem) to the caller (Johannes Weiner) [692041 692042] {CVE-2011-1020}
  - [fs] detect exec transition phase with new mm but old creds (Johannes Weiner) [692041 692042] {CVE-2011-1020}
  - [net] igb: fix i350 SR-IOV failture (Stefan Assmann) [741877 714313]
  - [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
  - [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
  - [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
  - [fs] nfs: Fix an O_DIRECT Oops (Jeff Layton) [755457 754620] {CVE-2011-4325}
  - [net] sctp: Fix another race during accept/peeloff (Thomas Graf) [757146 714870] {CVE-2011-4348}
  - [scsi] isci: fix 32-bit operation when CONFIG_HIGHMEM64G=n (Phillip Lougher) [750458 713904]
  - [net] tg3: Only allow phy ioctls while netif_running (Phillip Lougher) [746343 683393]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-274.17.1.el5]
changelog:
  - Revert:  [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
  - Revert:  [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
  - Revert:  [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
  - Revert:  [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}


author: Phillip Lougher <plougher@redhat.com> [2.6.18-274.18.1.el5]
changelog:
  - [misc] Move exit_robust_list to mm_release, null lists on cleanup (Laszlo Ersek) [771774 750283] {CVE-2012-0028}
  - [block] disable SG_IO ioctls on virtio-blk devices (Paolo Bonzini) [773322 771592]
  - [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
  - [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
  - [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
  - [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
  - [fs] ext4: fix BUG_ON() in ext4_ext_insert_extent() (Lukas Czerner) [747943 747946] {CVE-2011-3638}
  - [scsi] don't fail scans when host is in recovery (Rob Evers) [772162 657345]
  - [fs] jbd2: clear BH_Delay & BH_Unwritten in journal_unmap_buffer (Eric Sandeen) [783477 783284] {CVE-2011-4086}
  - [net] igmp: Avoid zero delay when receiving odd mixture of IGMP queries (Jiri Pirko) [772868 772869] {CVE-2012-0207}


author: Phillip Lougher <plougher@redhat.com> [2.6.18-274.1.1.el5]
changelog:
  - [net] sctp: fix memory reclaim and panic in sctp_sock_rfree (Thomas Graf) [714869 714867]
  - [x86_64] Revert ACPI APIC mode test (Prarit Bhargava) [728163 721361]
  - [net] sctp: reset packet information after packet transmit (Thomas Graf) [727592 725573]
  - [fs] block: initialise bd_super in bdget (Lachlan McIlroy) [726628 707425]
  - [fs] nfs: Remove bogus call to nfs4_drop_state_owner (Jeff Layton) [726625 724923]
  - [net] be2net: clear interrupt bit in be_probe (Ivan Vecera) [723552 713703]
  - [net] be2net: remove certain cmd failure logging (Ivan Vecera) [726619 716821]
  - [wireless] nl80211: check for valid SSID size in scan operation (Stanislaw Gruszka) [718154 718155] {CVE-2011-2517}
  - [fs] xfs: handle NULL mount struct in error reports (Eric Sandeen) [727835 720551]
  - [fs] proc: restrict access to /proc/PID/io (Oleg Nesterov) [716827 716828] {CVE-2011-2495}
  - [fs] lockd: don't use file's credentials on RPCSEC_GSS mounts (Max Matveev) [722855 701574]
  - [fs] xfs: add a missing mutex_unlock to a dio error path (Jeff Moyer) [727590 718232]
  - [net] sunrpc: Don't hang forever on NLM unlock requests (Jeff Layton) [709546 709547] {CVE-2011-2491}
  - [xen] x86_emulate: Fix SAHF emulation (Igor Mammedov) [718883 718884]
  - [xen] Fix x86_emulate handling of imul with immediate operands (Igor Mammedov) [712885 700565]
  - [fs] Fix wrongly vfree'ing a kmalloc'ed area (Larry Woodman) [721300 719495]
  - [fs] dlm: bump default hash table and maximum allocatable sizes (Bryn M. Reeves) [719930 715603]
  - [net] tipc: Overhaul of socket locking logic (Max Matveev) [719746 704192]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-274.5.1.el5]
changelog:
  - [fs] proc: fix compile warning in pdeaux addition (Jarod Wilson) [732775 675781]
  - [fs] proc: Fix procfs race vs rmmod or hot-remove (David Howells) [732775 675781]
  - [net] Compute protocol seq numbers and fragment IDs using MD5 (Jiri Pirko) [732662 732663] {CVE-2011-3188}
  - [crypto] Move md5_transform to lib/md5.c (Jiri Pirko) [732662 732663] {CVE-2011-3188}
  - [fs] nfs: Fix client not honoring nosharecache mount option (David Jeffery) [734772 730097]
  - [mm] avoid wrapping vm_pgoff in mremap and stack expansion (Jerome Marchand) [716543 716544] {CVE-2011-2496}
  - [mm] Fix incorrect off-by-one centisec dirty values (Larry Woodman) [733665 691087]
  - [net] bnx2x: fix bringup of BCM57710 (Michal Schmidt) [737475 680411]
  - [virt] xen/netfront: no disable s/g when renegotiating features (Paolo Bonzini) [738392 733416]
  - [fs] aio: fix aio+dio completion path regression w/3rd-party bits (Jeff Moyer) [734157 727504]
  - [virt] xen: Allow arbitrary mtu size until frontend connected (Paolo Bonzini) [738389 697021]
  - [misc] hypervisor: fix race in interrupt hook code (Prarit Bhargava) [730689 692966]
  - [net] cnic, bnx2: Check iSCSI support early in bnx2_init_one (Neil Horman) [734761 710272]
  - [net] igb: fix WOL on 2nd port on i350 (Stefan Assmann) [730682 718988]
  - [misc] irq: fix interrupt handling for kdump under high load (Stefan Assmann) [728521 720212]


author: Don Howard <dhoward@redhat.com> [2.6.18-274.6.1.el5]
changelog:
  - [net] bridge: fix use after free in __br_deliver (Amerigo Wang) [730949 703045] {CVE-2011-2942}
  - [misc] remove	div_long_long_rem (Prarit Bhargava) [732879 732614] {CVE-2011-3209}
  - [net] be2net: fix crash receiving non-member VLAN packets (Ivan Vecera) [736430 730239] {CVE-2011-3347}
  - [net] be2net: Use NTWK_RX_FILTER command for promiscous mode (Ivan Vecera) [736430 730239] {CVE-2011-3347}
  - [net] be2net: non-member vlan pkts not received in promisc mode (Ivan Vecera) [736430 730239] {CVE-2011-3347}
  - [net] be2net: remove bogus unlikely on vlan check (Ivan Vecera) [736430 730239] {CVE-2011-3347}
  - [x86] nmi: make NMI_NONE default watchdog in x86_64 hvm guests (Laszlo Ersek) [739823 707966]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-274.7.1.el5]
changelog:
  - Revert: [xen] passthrough: block VT-d MSI trap injection (Paolo Bonzini) [716301 716302] {CVE-2011-1898}


author: Jarod Wilson <jarod@redhat.com> [2.6.18-272.el5]
changelog:
  - [xen] x86: spinlock support for up to 255 CPUs (Laszlo Ersek) [713123]
  - [xen] remove block scope mtrr identifiers shadowing file scope (Laszlo Ersek) [713123]
  - [xen] Actually hold back MTRR init while booting secondary CPUs (Laszlo Ersek) [713123]
  - [xen] remove unused mtrr_bp_restore (Laszlo Ersek) [713123]
  - [xen] x86: Fix crash on amd iommu systems (Igor Mammedov) [714275]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-273.el5]
changelog:
  - Revert: [fs] proc: Fix rmmod/read/write races in /proc entries (Jarod Wilson) [717068]
  - [xen] disregard trailing bytes in an invalid page (Paolo Bonzini) [717742]
  - [xen] prep __get_instruction_length_from_list for partial buffers (Paolo Bonzini) [717742]
  - [xen] remove unused argument to __get_instruction_length (Paolo Bonzini) [717742]
  - [xen] let __get_instruction_length always read into own buffer (Paolo Bonzini) [717742]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-307.el5]
changelog:
  - [s390] crypto: Reset sha2 index after processing partial block (David Howells) [677860]
  - Revert: [fs] xfs: implement ->dirty_inode to fix timestamp (Eric Sandeen) [653215]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-308.el5]
changelog:
  - [scsi] lpfc: Update lpfc version for 8.2.0.108.4p driver release (Rob Evers) [784073]
  - [scsi] lpfc: Fix FCP EQ memory check init w/single int vector (Rob Evers) [784073]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-308.1.1.el5]
changelog:
  - Revert: [scsi] qla2xxx: avoid SCSI host_lock dep in queuecommand (Chad Dupuis) [790907 782790]
  - Revert: [scsi] qla2xxx: fix IO failure during chip reset (Chad Dupuis) [790907 782790]
  - [net] tg3: Fix 4k tx and recovery code (John Feeney) [790910 782677]
  - [net] bnx2x: make bnx2x_close static again (Michal Schmidt) [790912 782124]
  - [net] bnx2x: add fan failure event handling (Michal Schmidt) [790912 782124]
  - [usb] cdc-acm: make lock use interrupt safe (Bryn M. Reeves) [790778 789067]
  - [kernel] sysctl: restrict write access to dmesg_restrict (Phillip Lougher) [749246 749247]
  - [net] igb: reset PHY after recovering from PHY power down (Stefan Assmann) [786168 783043]
  - [fs] prevent lock contention in shrink_dcache_sb via private list (Lachlan McIlroy) [789369 746122]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-308.9.1.el5]
changelog:
  - [fs] jbd: clear b_modified before moving the jh to a different transaction (Josef Bacik) [827205 563247]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-308.10.1.el5]
changelog:
  - [xen] x86_64: check address on trap handlers or guest callbacks (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
  - [xen] x86_64: Do not execute sysret with a non-canonical return address (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
  - [xen] x86: prevent hv boot on AMD CPUs with Erratum 121 (Laszlo Ersek) [824969 824970] {CVE-2012-2934}
  - [scsi] qla2xxx: Use ha->pdev->revision in 4Gbps MSI-X check. (Chad Dupuis) [816373 800653]
  - [fs] sunrpc: do array overrun check in svc_recv before page alloc (J. Bruce Fields) [820358 814626]
  - [fs] knfsd: fix an NFSD bug with full size non-page-aligned reads (J. Bruce Fields) [820358 814626]
  - [fs] sunrpc: fix oops due to overrunning server's page array (J. Bruce Fields) [820358 814626]
  - [fs] epoll: clear the tfile_check_list on -ELOOP (Jason Baron) [829670 817131]
  - [x86_64] sched: Avoid unnecessary overflow in sched_clock (Prarit Bhargava) [824654 818787]
  - [net] sunrpc: Don't use list_for_each_entry_safe in rpc_wake_up (Steve Dickson) [817571 809937]
  - [s390] qeth: add missing wake_up call (Hendrik Brueckner) [829059 790900]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-308.11.1.el5]
changelog:
  - [net] ixgbe: remove flow director stats (Andy Gospodarek) [832169 830226]
  - [net] ixgbe: fix default return value for ixgbe_cache_ring_fdir (Andy Gospodarek) [832169 830226]
  - [net] ixgbe: reverting setup redirection table for multiple packet buffers (Andy Gospodarek) [832169 830226]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-308.13.1.el5]
changelog:
  - [net] e1000e: Cleanup logic in e1000_check_for_serdes_link_82571 (Dean Nelson) [841370 771366]
  - [net] e1000e: Correct link check logic for 82571 serdes (Dean Nelson) [841370 771366]
  - [mm] NULL pointer dereference in __vm_enough_memory (Jerome Marchand) [840077 836244]
  - [fs] dlm: fix slow rsb search in dir recovery (David Teigland) [838140 753244]
  - [fs] autofs: propogate LOOKUP_DIRECTORY flag only for last comp (Ian Kent) [830264 814418]
  - [fs] ext4: properly dirty split extent nodes (Eric Sandeen) [840946 839770]
  - [scsi] don't offline devices with a reservation conflict (David Jeffery) [839196 835660]
  - [fs] ext4: Fix overflow caused by missing cast in ext4_fallocate (Lukas Czerner) [837226 830351]
  - [net] dl2k: Clean up rio_ioctl (Weiping Pan) [818822 818823] {CVE-2012-2313}
  - [x86] sched: Avoid unnecessary overflow in sched_clock (Prarit Bhargava) [835450 834562]
  - [net] tg3: Fix TSO handling (John Feeney) [833182 795672]
  - [input] evdev: use after free from open/disconnect race (David Jeffery) [832448 822166]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-308.15.1.el5]
changelog:
  - [net] sfc: Fix max no of TSO segments and min TX queue size (Michal Schmidt) [845554 845555] {CVE-2012-3412}
  - [kernel] xacct_add_tsk: fix pure theoretical ->mm use-after-free (Nikola Pajkovsky) [849723 849725] {CVE-2012-3510}
  - [fs] hfsplus: Buffer overflow in the HFS plus filesystem (Jacob Tanenbaum) [820255 820256] {CVE-2012-2319}
  - [net] netfilter: add dscp netfilter match (Thomas Graf) [847327 842029]
  - [net] rds: set correct msg_namelen (Weiping Pan) [822727 822728] {CVE-2012-3430}
  - [misc] ERESTARTNOINTR seen from fork call in userspace (Oleg Nesterov) [847359 693822]
  - [fs] quota: manage reserved space when quota is not active (Eric Sandeen) [847326 818087]
  - [fs] quota: Fix warning if delayed write before quota is enabled (Eric Sandeen) [847326 818087]
  - [fs] ext3: pass custom EOF to generic_file_llseek_size() (Eric Sandeen) [847943 784191]
  - [fs] ext4: use core vfs llseek code for dir seeks (Eric Sandeen) [847943 784191]
  - [fs] vfs: allow custom EOF in generic_file_llseek code (Eric Sandeen) [847943 784191]
  - [fs] ext4: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
  - [fs] ext4: improve llseek error handling for large seek offsets (Eric Sandeen) [847943 784191]
  - [fs] ext3: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
  - [s390/ppc64] add is_compat_task() for s390 and ppc64 (Eric Sandeen) [847943 784191]
  - [fs] vfs: add generic_file_llseek_size (Eric Sandeen) [847943 784191]
  - [fs] nfsd: vfs_llseek() with 32 or 64 bit offsets (hashes) (Eric Sandeen) [847943 784191]
  - [fs] nfsd: rename 'int access' to 'int may_flags' in nfsd_open() (Eric Sandeen) [847943 784191]
  - [fs] add new FMODE flags: FMODE_32bithash and FMODE_64bithash (Eric Sandeen) [847943 784191]
  - [fs] nfsd4: Remove check for a 32-bit cookie in nfsd4_readdir() (Eric Sandeen) [847943 784191]
  - [xen] x86: whitelist Enhanced SpeedStep for dom0 (Laszlo Ersek) [846125 809103]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-308.16.1.el5]
changelog:
  - Revert: [fs] nfsd4: Remove check for a 32-bit cookie in nfsd4_readdir() (Eric Sandeen) [847943 784191]
  - Revert: [fs] add new FMODE flags: FMODE_32bithash and FMODE_64bithash (Eric Sandeen) [847943 784191]
  - Revert: [fs] nfsd: rename 'int access' to 'int may_flags' in nfsd_open() (Eric Sandeen) [847943 784191]
  - Revert: [fs] nfsd: vfs_llseek() with 32 or 64 bit offsets (hashes) (Eric Sandeen) [847943 784191]
  - Revert: [fs] vfs: add generic_file_llseek_size (Eric Sandeen) [847943 784191]
  - Revert: [s390/ppc64] add is_compat_task() for s390 and ppc64 (Eric Sandeen) [847943 784191]
  - Revert: [fs] ext3: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
  - Revert: [fs] ext4: improve llseek error handling for large seek offsets (Eric Sandeen) [847943 784191]
  - Revert: [fs] ext4: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
  - Revert: [fs] vfs: allow custom EOF in generic_file_llseek code (Eric Sandeen) [847943 784191]
  - Revert: [fs] ext4: use core vfs llseek code for dir seeks (Eric Sandeen) [847943 784191]
  - Revert: [fs] ext3: pass custom EOF to generic_file_llseek_size() (Eric Sandeen) [847943 784191]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-308.19.1.el5]
changelog:
  - [net] be2net: Remove code that stops further access to BE NIC based on UE bits (Alexander Gordeev) [867896 862811]
  - [net] netpoll: fix an incorrect check for NULL pointer (Alexander Gordeev) [856079 848098]
  - [net] mlx4: Add support for EEH error recovery (Alexander Gordeev) [847404 798048]
  - [fs] ext4: fix undefined bit shift result in ext4_fill_flex_info (Eric Sandeen) [809688 809689] {CVE-2012-2100}
  - [fs] ext4: fix undefined behavior in ext4_fill_flex_info (Eric Sandeen) [809688 809689] {CVE-2012-2100}
  - [fs] fix crash if block {device|size} read & changed at sametime (Mikulas Patocka) [864823 756506]
  - [x86] mm: randomize SHLIB_BASE (Dave Anderson) [804953 804954] {CVE-2012-1568}
  - [net] ipv6: Fix fib6_dump_table walker leak (Jiri Benc) [861387 819830]
  - [fs] cifs: update cifs_dfs_d_automount caller path (Sachin Prabhu) [858774 857448]
  - [xen] x86: change the default behaviour of CVE-2012-2934 fix (Petr Matousek) [859946 858724]
  - [net] ipvs: allow transmit of GRO aggregated skbs (Jesper Brouer) [857966 854067]
  - [scsi] isci: fixup linkspeed definitions (David Milburn) [854986 833000]
  - [fs] nfs: nfs_d_automount update caller path after do_add_mount (Carlos Maiolino) [857552 834379]
  - [fs] vfs: Fix vfsmount overput on simultaneous automount (Carlos Maiolino) [857552 834379]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-308.23.1.el5]
changelog:
  - [net] bnx2x: Add remote-fault link detection (Alexander Gordeev) [870120 796905]
  - [net] bnx2x: Cosmetic changes (Alexander Gordeev) [870120 796905]
  - [net] rds-ping cause kernel panic (Alexander Gordeev) [822755 822756] {CVE-2012-2372}
  - [xen] add guest address range checks to XENMEM_exchange handlers (Igor Mammedov) [878033 878034] {CVE-2012-5513}
  - [xen] x86/physmap: Prevent incorrect updates of m2p mappings (Igor Mammedov) [870148 870149] {CVE-2012-4537}
  - [xen] VCPU/timer: Dos vulnerability prev overflow in calculations (Igor Mammedov) [870150 870151] {CVE-2012-4535}
  - [scsi] sg: fix races during device removal (Ewan Milne) [868950 861004]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-308.3.1.el5]
changelog:
  - [net] be2net: cancel be_worker during EEH recovery (Ivan Vecera) [805462 773735]
  - [net] be2net: add vlan/rx-mode/flow-control config to be_setup (Ivan Vecera) [805462 773735]
  - [x86] disable TSC synchronization when using kvmclock (Marcelo Tosatti) [805460 799170]
  - [fs] vfs: fix LOOKUP_DIRECTORY not propagated to managed_dentry (Ian Kent) [801726 798809]
  - [fs] vfs: fix d_instantiate_unique (Ian Kent) [801726 798809]
  - [fs] nfs: allow high priority COMMITs to bypass inode commit lock (Jeff Layton) [799941 773777]
  - [fs] nfs: don't skip COMMITs if system under is mem pressure (Jeff Layton) [799941 773777]
  - [scsi] qla2xxx: Read the HCCR register to flush any PCIe writes (Chad Dupuis) [798748 772192]
  - [scsi] qla2xxx: Complete mbox cmd timeout before next reset cycle (Chad Dupuis) [798748 772192]
  - [s390] qdio: wrong buffers-used counter for ERROR buffers (Hendrik Brueckner) [801724 790840]
  - [net] bridge: Reset IPCB when entering IP stack (Herbert Xu) [804721 749813]
  - [fs] procfs: add hidepid= and gid= mount options (Jerome Marchand) [770649 770650]
  - [fs] procfs: parse mount options (Jerome Marchand) [770649 770650]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-308.6.1.el5]
changelog:
  - [scsi] fc class: fix scanning when devs are offline (Mike Christie) [816684 799530]
  - [md] dm-multipath: delay retry of bypassed pg (Mike Christie) [816684 799530]
  - [net] bonding: properly unset current_arp_slave on slave link up (Veaceslav Falico) [811927 800575]
  - [net] bonding: remove {master,vlan}_ip and query devices instead (Andy Gospodarek) [810321 772216]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-308.8.1.el5]
changelog:
  - [net] sock: validate data_len before allocating skb in sock_alloc_send_pskb() (Jason Wang) [816290 816106] {CVE-2012-2136}
  - [net] tg3: Fix VLAN tagging assignments (John Feeney) [817691 797011]
  - [net] ixgbe: do not stop stripping VLAN tags in promiscuous mode (Andy Gospodarek) [809791 804800]
  - [s390] zcrypt: Fix parameter checking for ZSECSENDCPRB ioctl (Hendrik Brueckner) [810123 808489]
  - [x86] unwind information fix for the vsyscall DSO (Prarit Bhargava) [807930 805799]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-308.8.2.el5]
changelog:
  - [xen] x86_64: check address on trap handlers or guest callbacks (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
  - [xen] x86_64: Do not execute sysret with a non-canonical return address (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
  - [xen] x86: prevent hv boot on AMD CPUs with Erratum 121 (Laszlo Ersek) [824969 824970]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-306.el5]
changelog:
  - [s390] pfault: ignore leftover completion interrupts (Jarod Wilson) [753194]
  - [cpufreq] powernow-k8: Fix indexing issue (Frank Arnold) [782773]
  - [scsi] device_handler: optimize transition retries (Rob Evers) [733635]
  - [net] qlge: fix size of external list for TX address descriptors (Chad Dupuis) [772696]
  - [net] igmp: Avoid zero delay when rx'ing odd mix of IGMP queries (Jiri Pirko) [772869]
  - [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [773114]
  - [net] ipv6: track device renames in snmp6 (Andy Gospodarek) [758923]
  - [fs] jbd2: clear BH_Delay & BH_Unwritten in journal_unmap_buffer (Eric Sandeen) [783284] {CVE-2011-4086}
  - [fs] epoll: workarounds to preserve kernel ABI (Jason Baron) [681692] {CVE-2011-1083}
  - [fs] epoll: limit paths (Jason Baron) [681692] {CVE-2011-1083}
  - [fs] epoll: prevent creating circular epoll structures (Jason Baron) [681692] {CVE-2011-1083}
  - [fs] epoll: add ep_call_nested() (Jason Baron) [681692] {CVE-2011-1083}
  - [fs] gfs2: additional fix for inode allocation error path (Robert S Peterson) [767377]
  - [fs] gfs2: Revert clean up fsync changes (Robert S Peterson) [767377]
  - [fs] ext4: ignore EXT4_INODE_JOURNAL_DATA flag with delalloc (Lukas Czerner) [769386]
  - [mm] filemap: Make write(2) interruptible by a fatal signal (Lukas Czerner) [740898]
  - [mm] Make task in balance_dirty_pages killable (Lukas Czerner) [740898]
  - [fs] ext4: fix the deadlock in mpage_da_map_and_submit (Lukas Czerner) [740898]
  - [fs] ext4: fix deadlock in ext4_ordered_write_end (Lukas Czerner) [740898]
  - [fs] ext4: mark multi-page IO complete on mapping failure (Lukas Czerner) [740898]
  - [fs] ext4: make invalidate pages handle page range properly (Lukas Czerner) [740898]
  - [fs] ext4: call mpage_da_submit_io from mpage_da_map_blocks (Lukas Czerner) [740898]
  - [fs] nfsd: Avoid excess stack usage in svc_tcp_recvfrom (J. Bruce Fields) [765751]
  - [fs] nfsd: Replace two page lists in struct svc_rqst with one (J. Bruce Fields) [765751]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-347.el5]
changelog:
  - [xen] add guest address range checks to XENMEM_exchange handlers (Igor Mammedov) [878034] {CVE-2012-5513}
  - [xen] x86/physmap: Prevent incorrect updates of m2p mappings (Igor Mammedov) [870149] {CVE-2012-4537}
  - [xen] VCPU/timer: Dos vulnerability prev overflow in calculations (Igor Mammedov) [870151] {CVE-2012-4535}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.1.1.el5]
changelog:
  - [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
  - [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
  - [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
  - [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
  - [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
  - [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
  - [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
  - [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
  - [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
  - [fs] nfs: move wait for server->active from put_super to kill_sb (Jeff Layton) [884708 839839]
  - [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
  - [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
  - [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
  - [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
  - [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.10.1.el5]
changelog:
  - [net] Bluetooth: fix possible info leak in bt_sock_recvmsg() (Radomir Vrbovsky) [955600 955601] {CVE-2013-3224}
  - [net] Bluetooth: HCI & L2CAP information leaks (Jacob Tanenbaum) [922415 922416] {CVE-2012-6544}
  - [misc] signal: use __ARCH_HAS_SA_RESTORER instead of SA_RESTORER (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
  - [misc] signal: always clear sa_restorer on execve (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
  - [misc] signal: Def __ARCH_HAS_SA_RESTORER for sa_restorer clear (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
  - [net] cxgb4: zero out another firmware request struct (Jay Fenlason) [971872 872531]
  - [net] cxgb4: clear out most firmware request structures (Jay Fenlason) [971872 872531]
  - [kernel] Make futex_wait() use an hrtimer for timeout (Prarit Bhargava) [958021 864648]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.11.1.el5]
changelog:
  - Revert: [kernel] kmod: make request_module() killable (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
  - Revert: [kernel] kmod: avoid deadlock from recursive kmod call (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
  - Revert: [kernel] wait_for_helper: remove unneeded do_sigaction() (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
  - Revert: [kernel] Fix ____call_usermodehelper errs being silently ignored (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
  - Revert: [kernel] wait_for_helper: SIGCHLD from u/s cause use-after-free (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
  - Revert: [kernel] kmod: avoid deadlock from recursive request_module call (Frantisek Hrbata) [957152 949568]
  - Revert: [x86-64] non lazy sleazy fpu implementation (Prarit Bhargava) [948187 731531]
  - Revert: [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
  - Revert: [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
  - Revert: [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.12.1.el5]
changelog:
  - Revert: [fs] afs: export a couple of core functions for AFS write support (Lukas Czerner) [960014 692071]
  - Revert: [fs] ext4: drop ec_type from the ext4_ext_cache structure (Lukas Czerner) [960014 692071]
  - Revert: [fs] ext4: handle NULL p_ext in ext4_ext_next_allocated_block() (Lukas Czerner) [960014 692071]
  - Revert: [fs] ext4: make FIEMAP and delayed allocation play well together (Lukas Czerner) [960014 692071]
  - Revert: [fs] ext4: Fix possibly very long loop in fiemap (Lukas Czerner) [960014 692071]
  - Revert: [fs] ext4: prevent race while walking extent tree for fiemap (Lukas Czerner) [960014 692071]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.14.1.el5]
changelog:
  - [net] Fix panic for vlan over gre via tun (Thomas Graf) [983452 981337]
  - [x86] mm: introduce proper mem barriers smp_invalidate_interrupt (Rafael Aquini) [983628 865095]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.15.1.el5]
changelog:
  - [fs] nfs: flush cached dir information slightly more readily (Scott Mayhew) [976441 853145]
  - [fs] nfs: Fix resolution prob with cache_change_attribute (Scott Mayhew) [976441 853145]
  - [fs] nfs: define function to update nfsi->cache_change_attribute (Scott Mayhew) [976441 853145]
  - [net] af_key: fix info leaks in notify messages (Jiri Benc) [980999 981000] {CVE-2013-2234}
  - [net] af_key: initialize satype in key_notify_policy_flush() (Jiri Benc) [981222 981224] {CVE-2013-2237}
  - [net] ipv6: ip6_sk_dst_check() must not assume ipv6 dst (Jiri Pirko) [981556 981557] {CVE-2013-2232}
  - [net] fix invalid free in ip_cmsg_send() callers (Petr Matousek) [980141 980142] {CVE-2013-2224}
  - [x86_64] Early segment setup for VT (Paolo Bonzini) [979920 978305]
  - [block] cpqarray: info leak in ida_locked_ioctl() (Tomas Henzl) [971245 971246] {CVE-2013-2147}
  - [block] cdrom: use kzalloc() for failing hardware (Frantisek Hrbata) [973103 973104] {CVE-2013-2164}
  - [mm] Break out when there is nothing more to write for the fs. (Larry Woodman) [972583 965359]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.16.1.el5]
changelog:
  - [x86_64] Fix kdump failure due to 'x86_64: Early segment setup' (Paolo Bonzini) [988251 987244]
  - [xen] skip tracing if it was disabled instead of dying (Igor Mammedov) [987976 967053]
  - [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]
  - [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
  - [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
  - [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.17.1.el5]
changelog:
  - [net] be2net: Fix to avoid hardware workaround when not needed (Ivan Vecera) [999819 995961]
  - [net] be2net: Mark checksum fail for IP fragmented packets (Ivan Vecera) [983864 956322]
  - [net] be2net: Avoid double insertion of vlan tags (Ivan Vecera) [983864 956322]
  - [net] be2net: disable TX in be_close() (Ivan Vecera) [983864 956322]
  - [net] be2net: fix EQ from getting full while cleaning RX CQ (Ivan Vecera) [983864 956322]
  - [net] be2net: avoid napi_disable() when not enabled (Ivan Vecera) [983864 956322]
  - [net] be2net: Fix receive Multicast Packets w/ Promiscuous mode (Ivan Vecera) [983864 956322]
  - [net] be2net: Fixed memory leak (Ivan Vecera) [983864 956322]
  - [net] be2net: Fix PVID tag offload for packets w/ inline VLAN tag (Ivan Vecera) [983864 956322]
  - [net] be2net: fix a Tx stall bug caused by a specific ipv6 packet (Ivan Vecera) [983864 956322]
  - [net] be2net: Remove an incorrect pvid check in Tx (Ivan Vecera) [983864 956322]
  - [net] be2net: Fix issues in error recovery with wrong queue state (Ivan Vecera) [983864 956322]
  - [net] netpoll: revert 6bdb7fe3104 and fix be_poll() instead (Ivan Vecera) [983864 956322]
  - [net] be2net: Fix to parse RSS hash Receive completions correctly (Ivan Vecera) [983864 956322]
  - [net] be2net: Fix cleanup path when EQ creation fails (Ivan Vecera) [983864 956322]
  - [net] be2net: Fix Endian (Ivan Vecera) [983864 956322]
  - [net] be2net: Fix to trim skb for padded vlan packets (Ivan Vecera) [983864 956322]
  - [net] be2net: Explicitly clear reserved field in Tx Descriptor (Ivan Vecera) [983864 956322]
  - [net] be2net: remove unnecessary usage of unlikely() (Ivan Vecera) [983864 956322]
  - [net] be2net: do not modify PCI MaxReadReq size (Ivan Vecera) [983864 956322]
  - [net] be2net: cleanup be_vid_config() (Ivan Vecera) [983864 956322]
  - [net] be2net: don't call vid_config() when there no vlan config (Ivan Vecera) [983864 956322]
  - [net] be2net: Ignore status of some ioctls during driver load (Ivan Vecera) [983864 956322]
  - [net] be2net: Fix wrong status getting returned for MCC commands (Ivan Vecera) [983864 956322]
  - [net] be2net: Fix VLAN/multicast packet reception (Ivan Vecera) [983864 956322]
  - [net] be2net: fix wrong frag_idx reported by RX CQ (Ivan Vecera) [983864 956322]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.18.1.el5]
changelog:
  - [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [1005239 987539]
  - [kernel] signals: stop info leak via tkill and tgkill syscalls (Oleg Nesterov) [970874 970875] {CVE-2013-2141}
  - [net] ipv6: do udp_push_pending_frames AF_INET sock pending data (Jiri Benc) [987647 987648] {CVE-2013-4162}
  - [mm] use-after-free in madvise_remove() (Jacob Tanenbaum) [849735 849736] {CVE-2012-3511}
  - [fs] autofs: remove autofs dentry mount check (Ian Kent) [1001488 928098]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.2.1.el5]
changelog:
  - [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
  - [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
  - [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
  - [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
  - [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
  - [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
  - [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
  - [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.20.1.el5]
changelog:
  - [net] be2net: don't use GRO for packets w/ re-inserted VLAN tags (Ivan Vecera) [1023347 1008691]
  - [net] be2net: fix calling __vlan_put_tag() after eth_type_trans() (Ivan Vecera) [1019893 916640]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.21.1.el5]
changelog:
  - [md] dm snapshot: fix data corruption (Mikulas Patocka) [1019678 975353] {CVE-2013-4299}
  - [misc] backport fixes for percpu-rw-semaphore (Mikulas Patocka) [884735 867997]
  - [net] be2net: Activate new FW after FW download for Lancer (Ivan Vecera) [1019892 982590]
  - [net] be2net: Fix initialization sequence for Lancer (Ivan Vecera) [1019892 982590]
  - [net] be2net: Fix FW download in Lancer (Ivan Vecera) [1019892 982590]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.22.1.el5]
changelog:
  - [char] ipmi: fix message handling during panics (Tony Camuso) [1049730 995293]
  - [net] igb: Use 32bit mask calculating the flow control watermarks (Stefan Assmann) [1036117 1036115]
  - [x86] fix timeout of poll(2) w/ 32-bit processes on x86_64 (Naoya Horiguchi) [1037437 794670]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.23.1.el5]
changelog:
  - [net] be2net: don't use skb_get_queue_mapping() (Ivan Vecera) [1066299 1063955]
  - [net] be2net: prevent Tx stall on SH-R when packet size < 32 (Ivan Vecera) [1051534 1007995]
  - [net] be2net: Trim padded packets for Lancer (Ivan Vecera) [1051534 1007995]
  - [net] be2net: Pad skb to meet min Tx pkt size in lancer (Ivan Vecera) [1051534 1007995]
  - [net] be2net: refactor HW workarounds in be_xmit() (Ivan Vecera) [1051534 1007995]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.3.1.el5]
changelog:
  - [utrace] ensure arch_ptrace() can never race with SIGKILL (Oleg Nesterov) [912071 912072] {CVE-2013-0871}
  - [x86] msr: Add capabilities check (Nikola Pajkovsky) [908696 908697] {CVE-2013-0268}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.4.1.el5]
changelog:
  - [virt] xen-netback: backports (Andrew Jones) [910884 910885] {CVE-2013-0216}
  - [virt] xen-netback: netif_schedulable should take a netif (Andrew Jones) [910884 910885] {CVE-2013-0216}
  - [virt] pciback: rate limit error mess from pciback_enable_msi() (Igor Mammedov) [910876 910877] {CVE-2013-0231}
  - [net] be2net: remove BUG_ON() in be_mcc_compl_is_new() (Ivan Vecera) [923910 907524]
  - [net] ipv4: Update MTU to all related cache entries (Amerigo Wang) [923353 905190]
  - [net] annotate rt_hash_code() users (Amerigo Wang) [923353 905190]
  - [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922426 922427] {CVE-2012-6537}
  - [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922426 922427] {CVE-2012-6537}
  - [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922426 922427] {CVE-2012-6537}
  - [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922384 922385] {CVE-2012-6546}
  - [net] atm: fix info leak via getsockname() (Thomas Graf) [922384 922385] {CVE-2012-6546}
  - [net] tun: fix ioctl() based info leaks (Thomas Graf) [922348 922349] {CVE-2012-6547}
  - [net] llc, zero sockaddr_llc struct (Thomas Graf) [922327 922329] {CVE-2012-6542}
  - [net] llc: fix info leak via getsockname() (Thomas Graf) [922327 922329] {CVE-2012-6542}
  - [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919386 919387] {CVE-2013-1826}
  - [net] ixgbevf: allocate room for mailbox MSI-X interrupt's name (Laszlo Ersek) [924134 862862]
  - [fs] knfsd: allow nfsd READDIR to return 64bit cookies (Niels de Vos) [924087 918952]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.6.1.el5]
changelog:
  - [char] ipmi: use a tasklet for handling received messages (Tony Camuso) [953435 947732]
  - [char] ipmi: do run_to_completion properly in deliver_recv_msg (Tony Camuso) [953435 947732]
  - [fs] nfs4: fix locking around cl_state_owners list (Dave Wysochanski) [954296 948317]
  - [fs] nfs: Fix bugs on short read (Sachin Prabhu) [952098 924011]
  - [xen] AMD IOMMU: spot missing IO-APIC entries in IVRS table (Igor Mammedov) [910912 910913] {CVE-2013-0153}
  - [xen] AMD, IOMMU: Make per-device interrupt remap table default (Igor Mammedov) [910912 910913] {CVE-2013-0153}
  - [xen] AMD, IOMMU: Disable IOMMU if SATA Combined mode is on (Igor Mammedov) [910912 910913] {CVE-2013-0153}
  - [xen] AMD, IOMMU: On creating entry clean up in remapping tables (Igor Mammedov) [910912 910913] {CVE-2013-0153}
  - [xen] ACPI: acpi_table_parse() should return handler's err code (Igor Mammedov) [910912 910913] {CVE-2013-0153}
  - [xen] introduce xzalloc() & Co (Igor Mammedov) [910912 910913] {CVE-2013-0153}
  - [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
  - [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
  - [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-346.el5]
changelog:
  - [mm] check for populated zone in __drain_pages (Rafael Aquini) [873708]
  - [mm] do not allocate pagesets for unpopulated zones (Rafael Aquini) [873708]
  - [mm] do not check unpopulated zones for draining/counter updates (Rafael Aquini) [873708]
  - [x86] Mark Haswell HDMI Audio as unsupported. (Prarit Bhargava) [874248]
  - [misc] Backport mark_hardware_unsupported() (Prarit Bhargava) [874248]
  - [fs] ext4: race-cond protect for convert_unwritten_extents_endio (Lukas Czerner) [869911] {CVE-2012-4508}
  - [fs] ext4: serialize fallocate w/ ext4_convert_unwritten_extents (Lukas Czerner) [869911] {CVE-2012-4508}
  - [fs] ext4: flush the i_completed_io_list during ext4_truncate (Lukas Czerner) [869911] {CVE-2012-4508}
  - [fs] ext4: init pagevec in ext4_da_block_invalidatepages (Eric Sandeen) [869980]
  - [scsi] megaraid_sas: mark Invader support as tech preview (Tomas Henzl) [855434]
  - [scsi] mpt2sas: Fix panic when drives removed during diag reset (Tomas Henzl) [871422]
  - [net] bnx2x: Fix 57810 1G-KR link against certain switches. (Michal Schmidt) [865639]
  - [fs] Fix FREEZE/THAW compat_ioctl regression (Lukas Czerner) [874029]
  - [net] WARN if struct ip_options was allocated directly by kmalloc (Jiri Pirko) [872612]
  - [net] ipv4: add RCU protection to inet->opt (Jiri Pirko) [855302] {CVE-2012-3552}
  - [net] rds-ping cause kernel panic (Jay Fenlason) [822756] {CVE-2012-2372}
  - [x86] exclude iomem resource over 4G for i686 non PAE kernel (Dave Young) [875743]
  - [fs] ext4: remove mb_groups before tearing down the buddy_cache (Carlos Maiolino) [869135]
  - [fs] ext3: retry failed direct IO allocations (Carlos Maiolino) [657575]
  - [net] svcrpc: enforce a maximum socket buffer size (J. Bruce Fields) [863535]
  - [x86] Revert 'mm: randomize SHLIB_BASE' (Dave Anderson) [871692]
  - [xen] x86: whitelist AMD thermal & power management for dom0 (Laszlo Ersek) [872306]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-371.1.1.el5]
changelog:
  - [crypto] ansi_cprng fix off by one err in non-block size request (Neil Horman) [1007692 1007693] {CVE-2013-4345}
  - [fs] gfs2: yield() in shrinker to allow glock_workqueues to run (Abhijith Das) [1014714 928518]
  - [net] ipv6: ipv6_create_tempaddr cleanup (Petr Holasek) [999361 999362] {CVE-2013-0343}
  - [net] ipv6: remove max_addresses check from ipv6_create_tempaddr (Petr Holasek) [999361 999362] {CVE-2013-0343}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-371.1.2.el5]
changelog:
  - [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
  - [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-371.9.1.el5]
changelog:
  - [nfs] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1095062 976201]
  - [scsi] lpfc: Remove NDLP reference put in lpfc_cmpl_els_logo_acc (Rob Evers) [1096061 1075228]
  - [infiniband] rds: dereference of a NULL device (Jacob Tanenbaum) [1079216 1079217] {CVE-2013-7339}
  - [kernel] futex: check relative timeouts for overflow (Denys Vlasenko) [1091832 1084168]
  - [virt] kvm: correctly detect KVM when hv emulation is enalbed (Jason Wang) [1094152 985767]
  - [security] Fix spurious warnings in security_ops_task_setrlimit (Mateusz Guzik) [1092869 916235]
  - [block] floppy: don't write kernel-only members to FDRAWCMD output (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}
  - [block] floppy: ignore kernel-only members in FDRAWCMD input (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-371.11.1.el5]
changelog:
  - [fs] dcache: fix cleanup on warning in d_splice_alias (Denys Vlasenko) [1109720 1080606]
  - [net] neigh: Make neigh_add_timer symmetrical to neigh_del_timer (Marcelo Ricardo Leitner) [1111195 1109888]
  - [net] neigh: set NUD_INCOMPLETE when probing router reachability (Marcelo Ricardo Leitner) [1106354 1090806]
  - [net] ipv6: router reachability probing (Marcelo Ricardo Leitner) [1106354 1090806]
  - [net] ipv6: probe routes asynchronous in rt6_probe (Marcelo Ricardo Leitner) [1106354 1090806]
  - [net] ndisc: Update neigh->updated with write lock (Marcelo Ricardo Leitner) [1106354 1090806]
  - [net] ipv6: remove the unnecessary statement in find_match() (Marcelo Ricardo Leitner) [1106354 1090806]
  - [net] ipv6: fix route selection if CONFIG_IPV6_ROUTER_PREF unset (Marcelo Ricardo Leitner) [1106354 1090806]
  - [net] ipv6: Fix def route failover when CONFIG_IPV6_ROUTER_PREF=n (Marcelo Ricardo Leitner) [1106354 1090806]
  - [net] ipv6: Prefer reachable nexthop only if the caller requests (Marcelo Ricardo Leitner) [1106354 1090806]
  - [fs] ext4/jbd2: don't wait forever stale tid caused by wraparound (Eric Sandeen) [1097528 980268]
  - [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [1097528 980268]
  - [fs] jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [1097528 980268]
  - [fs] jbd2: fix fsync() tid wraparound bug (Eric Sandeen) [1097528 980268]
  - [infiniband] rds: do not deref NULL dev in rds_iw_laddr_check() (Jacob Tanenbaum) [1093311 1093312] {CVE-2014-2678}
  - [fs] nfs4: Add recovery for individual stateids - partial backport. (Dave Wysochanski) [1113468 867570]
  - [fs] nfs4: Don't start state recovery in nfs4_close_done - clean backport. (Dave Wysochanski) [1113468 867570]
  - [xen] page-alloc: scrub anonymous domain heap pages upon freeing (Vitaly Kuznetsov) [1103648 1103649] {CVE-2014-4021}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-371.12.1.el5]
changelog:
  - [audit] auditsc: audit_krule mask accesses need bounds checking (Denys Vlasenko) [1102702 1102703] {CVE-2014-3917}
  - [mm] writeback: Fix hang when low on memory due to NFS traffic (Larry Woodman) [1125246 1080194]
  - [net] tg3: Fix Read DMA workaround for 5719 A0 (Ivan Vecera) [1121017 924590]
  - [fs] jbd: don't wake kjournald unnecessarily (Denys Vlasenko) [1116027 1081785]
  - [fs] jbd: don't wait (forever) for stale tid caused by wraparound (Denys Vlasenko) [1116027 1081785]
  - [fs] ext4: fix waiting and sending of barrier in ext4_sync_file() (Denys Vlasenko) [1116027 1081785]
  - [fs] jbd2: Add function jbd2_trans_will_send_data_barrier() (Denys Vlasenko) [1116027 1081785]
  - [fs] jbd2: fix sending of data flush on journal commit (Denys Vlasenko) [1116027 1081785]
  - [fs] ext4, jbd2: Add barriers for file systems with ext journals (Denys Vlasenko) [1116027 1081785]
  - [fs] jbd: fix fsync() tid wraparound bug (Denys Vlasenko) [1116027 1081785]
  - [fs] ext4: fix fdatasync() for files with only i_size changes (Eric Sandeen) [1117665 1102768]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-371.2.1.el5]
changelog:
  - [scsi] mpt2sas: bump version (Tomas Henzl) [1018458 956330]
  - [scsi] mpt2sas: fix the incorrect scsi_dma_map error checking (Tomas Henzl) [1018458 956330]
  - [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
  - [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-371.3.1.el5]
changelog:
  - [net] be2net: don't use GRO for packets w/ re-inserted VLAN tags (Ivan Vecera) [1023348 1008691]
  - [net] tg3: call pci_enable_wake() to set power state (John Feeney) [1014973 996331]
  - [misc] backport fixes for percpu-rw-semaphore (Mikulas Patocka) [1014715 867997]
  - [xen] information leak via I/O instruction emulation (Igor Mammedov) [1009602 1009603] {CVE-2013-4355}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-371.4.1.el5]
changelog:
  - [char] ipmi: fix message handling during panics (Tony Camuso) [1049731 995293]
  - [net] igb: Use 32bit mask calculating the flow control watermarks (Stefan Assmann) [1041694 1036115]
  - [fs] NTLM auth and sign - Use appropriate server challenge (Sachin Prabhu) [1029865 1018286]
  - [xen] gnttab: correct locking order reversal (Radim Krcmar) [1026245 1026246] {CVE-2013-4494}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-371.6.1.el5]
changelog:
  - [net] be2net: don't use skb_get_queue_mapping() (Ivan Vecera) [1066302 1063955]
  - [ipc] change refcount to atomic_t (Phillip Lougher) [1024866 1024868] {CVE-2013-4483}
  - [s390] qeth: buffer overflow in snmp ioctl (Jacob Tanenbaum) [1034402 1034404] {CVE-2013-6381}
  - [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1033531 1033532] {CVE-2013-6383}
  - [xen] x86/AMD: work around erratum 793 (Radim Krcmar) [1035834 1035836] {CVE-2013-6885}
  - [xen] do not expose hypercalls to rings 1 and 2 of HVM guests (Andrew Jones) [1029112 1029113] {CVE-2013-4554}
  - [redhat] kabi: Adding symbol print_hex_dump (Jiri Olsa) [1054055 662558]
  - [scsi] Add 'eh_deadline' to limit SCSI EH runtime (Ewan Milne) [1050097 956132]
  - [scsi] remove check for 'resetting' (Ewan Milne) [1050097 956132]
  - [scsi] dc395: Move 'last_reset' into internal host structure (Ewan Milne) [1050097 956132]
  - [scsi] tmscsim: Move 'last_reset' into host structure (Ewan Milne) [1050097 956132]
  - [scsi] advansys: Remove 'last_reset' references (Ewan Milne) [1050097 956132]
  - [scsi] dpt_i2o: return SCSI_MLQUEUE_HOST_BUSY when in reset (Ewan Milne) [1050097 956132]
  - [scsi] dpt_i2o: Remove DPTI_STATE_IOCTL (Ewan Milne) [1050097 956132]
  - [net] ipv6: fix leaking uninit port number of offender sockaddr (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
  - [net] fix addr_len/msg->msg_namelen assign in recv_error funcs (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
  - [net] prevent leakage of uninitialized memory to user in recv (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
  - [net] be2net: prevent Tx stall on SH-R when packet size < 32 (Ivan Vecera) [1051535 1007995]
  - [net] be2net: Trim padded packets for Lancer (Ivan Vecera) [1051535 1007995]
  - [net] be2net: Pad skb to meet min Tx pkt size in lancer (Ivan Vecera) [1051535 1007995]
  - [net] be2net: refactor HW workarounds in be_xmit() (Ivan Vecera) [1051535 1007995]
  - [fs] exec/ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039483 1039484] {CVE-2013-2929}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-371.7.1.el5]
changelog:
  - [s390x] af_iucv: Kernel panic during connect (IUCV transport) (Hendrik Brueckner) [1077045 1026388]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-371.8.1.el5]
changelog:
  - [virt] HID: memory corruption flaw drivers/usb/input/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
  - [virt] HID: memory corruption flaw in drivers/hv/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
  - [scsi] lpfc: Fix task management commands having a fixed timeout (Ewan Milne) [1073123 1061120]
  - [net] tcp: drop SYN+FIN messages (Jiri Pirko) [1066057 1066058] {CVE-2012-6638}
  - [fs] GFS2: Check if glock held in gfs2_readpage (Robert S Peterson) [1073953 1063434]
  - [net] sunrpc: fix deadlock in task wakeup code (Jeff Layton) [1073731 998126]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-369.el5]
changelog:
  - [fs] nlm: Ensure we resend pending blocking locks after a reclaim (Steve Dickson) [918592]
  - [kernel] kmod: kthread_run causes oom killer deadlock (Frantisek Hrbata) [983506]
  - [fs] nfs4: ratelimit some messages, add name to bad seq-id mess (Dave Wysochanski) [953121]
  - [fs] nfsd: fix EXDEV checking in rename (J. Bruce Fields) [515599]
  - [misc] tty: Fix abusers of current-sighand->tty (Aaron Tomlin) [858981]
  - [net] ipv6: don't call addrconf_dst_alloc again when enable lo (Jiri Benc) [981417]
  - [redhat] kabi: Adding symbol fc_fabric_login (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fcoe_ctlr_recv (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_exch_mgr_reset (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_lport_init (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_exch_recv (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_lport_destroy (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fcoe_ctlr_els_send (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fcoe_ctlr_destroy (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_exch_init (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_fabric_logoff (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_set_mfs (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_elsct_init (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fcoe_ctlr_link_up (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fcoe_ctlr_recv_flogi (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_change_queue_depth (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fcoe_ctlr_init (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fcoe_ctlr_link_down (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_change_queue_type (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_exch_mgr_free (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_exch_mgr_alloc (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_lport_config (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_disc_init (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol strict_strtoul (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_rport_init (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_get_host_port_state (Jiri Olsa) [864256]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-370.el5]
changelog:
  - [net] be2net: Fix to avoid hardware workaround when not needed (Ivan Vecera) [995961]
  - [kernel] signals: stop info leak via tkill and tgkill syscalls (Oleg Nesterov) [970875] {CVE-2013-2141}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-396.el5]
changelog:
  - [s390] kernel: fix restore of invalid floating-point-control (Hendrik Brueckner) [1121953]
  - [fs] cifs: Use cifs_set_ops() in fill_in_inode() functions (Sachin Prabhu) [1108624]
  - [fs] cifs: Fix cifs_set_ops() (Sachin Prabhu) [1108624]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-397.el5]
changelog:
  - [fs] gfs2: Detect and release delayed bufdata structures (Robert S Peterson) [516025]
  - [fs] nfs: don't invalidate dentries that act as mountpoints (Steve Dickson) [1117211]
  - [audit] auditsc: audit_krule mask accesses need bounds checking (Denys Vlasenko) [1102703] {CVE-2014-3917}
  - [scsi] Initialize eh_timeout value earlier on probe (Ewan Milne) [1119532]
  - [mm] writeback: Fix hang when low on memory due to NFS traffic (Larry Woodman) [1080194]
  - [fs] skip atime update on a frozen filesystem (Aaron Tomlin) [1000836]
  - [xen] x86: check segment descriptor read in 64-bit OUTS emulation (Radim Krcmar) [1012959]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-400.el5]
changelog:
  - [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
  - [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
  - [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
  - [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
  - [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
  - [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
  - [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
  - [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
  - [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-402.el5]
changelog:
  - [block] virtio: Reset device after blk_cleanup_queue() (Stefan Hajnoczi) [1006536]
  - [block] virtio: Call del_gendisk() before disable guest kick (Stefan Hajnoczi) [1006536]
  - [block] virtio: Drop unused request tracking list (Stefan Hajnoczi) [1006536]
  - [fs] cifs: setfacl removes part of ACL when setting POSIX ACLs (Sachin Prabhu) [1105625]
  - [fs] splice: perform generic write checks (Eric Sandeen) [1155908] {CVE-2014-7822}
  - [fs] ext4: verify block bitmap (Lukas Czerner) [1034403]
  - [fs] ext4: fix type declaration of ext4_validate_block_bitmap (Lukas Czerner) [1034403]
  - [fs] ext4: error out if verifying the block bitmap fails (Lukas Czerner) [1034403]
  - [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-403.el5]
changelog:
  - [s390] zcrypt: Toleration of new crypto hardware (Hendrik Brueckner) [1182522]
  - [fs] cifs: Use pid from cifsFileInfo in wrt pages/set_file_size (Sachin Prabhu) [1169304]
  - [xen] x86: confine internally handled MMIO to solitary regions (Denys Vlasenko) [1164256] {CVE-2014-8867}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-404.el5]
changelog:
  - [infiniband] core: Prevent integer overflow in ib_umem_get (Doug Ledford) [1179353] {CVE-2014-8159}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-405.el5]
changelog:
  - [net] tcp: zero retrans_stamp if all retrans were acked (Marcelo Leitner) [1205521]
  - [net] tcp: fix retrans_stamp advancing in error cases (Marcelo Leitner) [1205521]
  - [net] tcp: Fix inconsistency source (Marcelo Leitner) [1205521]
  - [ipc] sem: fix the potential use-after-free in freeary() (Oleg Nesterov) [1124574]
  - [scsi] lpfc: Fix crash in device reset handler (Rob Evers) [1070964]
  - [mm] fix broken max_reclaims_in_progress memory reclaim throttle (Lachlan McIlroy) [1164105]
  - [x86_64] fpu: save_i387() must clr TS_USEDFPU along with stts() (Oleg Nesterov) [1193505]
  - [block] virtio: Call revalidate_disk() upon online disk resize (Stefan Hajnoczi) [1200855]
  - [block] virtio: fix config handler race (Stefan Hajnoczi) [1200855]
  - [block] virtio: allow re-reading config space at runtime (Stefan Hajnoczi) [1200855]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-406.el5]
changelog:
  - [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Mateusz Guzik) [1203787] {CVE-2015-1805}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-407.el5]
changelog:
  - [utrace] check ->utrace != NULL in utrace_unsafe_exec() (Oleg Nesterov) [1226967]
  - [s390] zcrypt: Fixed reset and interrupt handling of AP queues (Hendrik Brueckner) [1238991]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-408.el5]
changelog:
  - [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
  - [net] ipv6/udp: Use correct var to determine non-blocking cond (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
  - [net] SNMP: Restore Udp6InErrors incrementation (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-409.el5]
changelog:
  - [fs] ext4: limit group search loop for non-extent files (Lukas Czerner) [1301100]
  - [fb] vm: convert fb_mmap to vm_iomap_memory() helper (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
  - [s390] add dummy io_remap_pfn_range() to asm-s390/pgtable.h (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
  - [mm] vm: add vm_iomap_memory() helper function (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
  - [sched] prevent division by zero x->cpu_power (Denys Vlasenko) [1209728]
  - [xen] x86: fully ignore segment override for register-only ops (Mateusz Guzik) [1200373] {CVE-2015-2151}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-412.el5]
changelog:
  - [s390] kernel: Fix tlb flushing with idte. (Hendrik Brueckner) [1350541]
  - [fs] Do not double unlock the dcache_lock in d_materialise_unique (Miklos Szeredi) [1198315]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-415.el5]
changelog:
  - [fs] gfs2: Initialize atime of I_NEW inodes (Andreas Grunbacher) [1374861]
  - [fs] gfs2: Update file times after grabbing glock (Andreas Grunbacher) [1374861]
  - Revert: [fs] gfs2: Only refresh newer in-memory timestamps (Andreas Grunbacher) [1374861]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-417.el5]
changelog:
  - [virt] hv: do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1391167]
  - [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390044] {CVE-2016-7117}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-419.el5]
changelog:
  - [net] dccp: Use AF-independent rebuild_header routine (Hannes Frederic Sowa) [1424751]
  - [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424633] {CVE-2017-6074}
  - [redhat] kernel.spec.template: disable autoloading for dccp proto (Hannes Frederic Sowa) [1425177]


author: Anton Arapov <aarapov@redhat.com> [2.6.18-53.1.11.el5]
changelog:
  - [ia64] enable CMCI on hot-plugged processors (Fabio Olive Leite ) [430632]
  - [audit] break execve records into smaller parts (Eric Paris ) [429691]
  - [s390] data corruption on DASD while toggling CHPIDs (Hans-Joachim Picht ) [402911]
  - [xen] ia64: hv hangs on Corrected Platform Errors (Tetsu Yamamoto ) [428290]
  - [xen] ia64: running java-vm causes dom0 to hang (Tetsu Yamamoto ) [424191]


author: Don Howard <dhoward@redhat.com> [2.6.18-53.1.13]
changelog:
  - revert to 2.6.18-53.1.6.el5
  - [x86_64] kernel vmsplice_to_pipe flaw (Alexander Viro ) [432252] {CVE-2008-0600}


author: Don Howard <dhoward@redhat.com> [2.6.18-53.1.13.el5]
changelog:
  - revert to 2.6.18-53.1.6.el5
  - [x86_64] check permissions in vmsplice_to_pipe (Alexander Viro ) [432252] {CVE-2008-0600}


author: Anton Arapov <aarapov@redhat.com> [2.6.18-53.1.14.el5]
changelog:
  - merge from 2.6.18-53.1.13 to 2.6.18-53.1.12
  - [nfs] potential file corruption issue when writing (Jeff Layton ) [432078]
  - [ppc] chrp: fix possible strncmp NULL pointer usage (Vitaly Mayatskikh ) [396821]
  - [isdn] i4l: fix memory overruns (Vitaly Mayatskikh ) [425171]
  - [isdn] fix possible isdn_net buffer overflows (Aristeu Rozanski ) [392151] {CVE-2007-6063}
  - [mm] hugepages: leak due to pagetable page sharing (Larry Woodman ) [431522]
  - [net] NULL dereference in iwl driver (Vitaly Mayatskikh ) [401421] {CVE-2007-5938}
  - [misc] Denial of service with wedged processes (Jerome Marchand ) [221403]
  - [xen] ia64: hvm guest memory range checking (Jarod Wilson ) [408701]


author: Don Howard <dhoward@redhat.com> [2.6.18-53.1.17.el5]
changelog:
  - [fs] fix race condition in dnotify (Alexander Viro ) [439758] {CVE-2008-1375}
  - [pci] hotplug: PCI Express problems with bad DLLPs (Kei Tokunaga ) [440438]
  - [nfs] stop sillyrenames and unmounts from racing (Steve Dickson ) [440447]
  - [x86] clear df flag for signal handlers (Jason Baron ) [437316] {CVE-2008-1367}
  - [xen] ia64: ftp stress test fixes between HVM/Dom0 (Tetsu Yamamoto ) [427400] {CVE-2008-1619}
  - [xen] ia64: fix ssm_i emulation barrier and vdso pv (Tetsu Yamamoto ) [427400] {CVE-2008-1619}


author: Anton Arapov <aarapov@redhat.com> [2.6.18-53.1.19.el5]
changelog:
  - [xen] check num of segments in block backend driver (Bill Burns ) [378281]
  - [x86_64] update IO-APIC dest field to 8-bit for xAPIC (Dave Anderson ) [442922]
  - Update: [fs] fix race condition in dnotify (Alexander Viro ) [439758] {CVE-2008-1375}
  - Update: [xen] ia64: ftp stress test fixes between HVM/Dom0 (Tetsu Yamamoto ) [427400] {CVE-2008-1619}


author: Anton Arapov <aarapov@redhat.com> [2.6.18-53.1.21.el5]
changelog:
  - [misc] infinite loop in highres timers (Michal Schmidt ) [440001]
  - [video] PWC driver DoS (Pete Zaitcev ) [308521]
  - [x86_64] fix unprivileged crash on %cs corruption (Jarod Wilson ) [439787]
  - [net] ESP: ensure IV is in linear part of the skb (Thomas Graf ) [427247]
  - [cpufreq] booting with maxcpus=1 panics (Doug Chapman ) [429516]
  - [net] sunrpc: lockd recovery is broken (Steve Dickson ) [445360]
  - [cpufreq] don't take sem in cpufreq_quick_get (Doug Chapman ) [400821]
  - [cpufreq] remove hotplug cpu cruft (Doug Chapman ) [400821]
  - [cpufreq] governor: use new rwsem locking in work cb (Doug Chapman ) [400821]
  - [cpufreq] ondemand governor restructure the work cb (Doug Chapman ) [400821]
  - [cpufreq] rewrite lock to eliminate hotplug issues (Doug Chapman ) [400821]


author: Anton Arapov <aarapov@redhat.com> [2.6.18-53.1.2.el5]
changelog:
  - [net] bnx2: Add PHY workaround for 5709 A1 (Andy Gospodarek ) [345131]
  - [cifs] fix memory corruption due to bad error handling (Jeff Layton ) [345171]
  - [audit] improper handling of audit_log_start return values (Eric Paris ) [345151]
  - [fs] jbd: wait for t_sync_datalist buffer to complete (Eric Sandeen ) [345141]
  - [mm] ia64: flush i-cache before set_pte (Luming Yu ) [345161]
  - [x86] Fixes for the tick divider patch (Chris Lalancette ) [305011]
  - [alsa] Convert snd-page-alloc proc file to use seq_file (Jerome Marchand ) [297761] {CVE-2007-4571}


author: Anton Arapov <aarapov@redhat.com> [2.6.18-53.1.3.el5]
changelog:
  - [fs] missing dput in do_lookup error leaks dentries (Eric Sandeen ) [363481] {CVE-2007-5494}
  - [ppc] System cpus stuck in H_JOIN after migrating (Scott Moser ) [381151]
  - [scsi] ibmvSCSI: Unable to continue migrating lpar after errors (Scott Moser ) [381141]
  - [scsi] ibmvSCSI: client can't handle deactive/active device from server (Scott Moser ) [381121]
  - [audit] still allocate contexts when audit is disabled (Alexander Viro ) [381001]
  - [autofs4] fix race between mount and expire (Ian Kent ) [381071]
  - [net] ieee80211: off-by-two integer underflow (Anton Arapov ) [346391] {CVE-2007-4997}
  - [fs] sysfs: fix race condition around sd->s_dentry (Eric Sandeen ) [245777] {CVE-2007-3104}
  - [fs] sysfs: fix condition check in sysfs_drop_dentry() (Eric Sandeen ) [245777] {CVE-2007-3104}
  - [fs] sysfs: store inode nrs in s_ino (Eric Sandeen ) [245777] {CVE-2007-3104}
  - [nfs] v4: umounts oops in shrink_dcache_for_umount (Steve Dickson ) [381111]
  - [net] forcedeth: MSI interrupt bugfix (Andy Gospodarek ) [381131]
  - [ppc] kexec/kdump kernel hung on Power5+ and Power6 (Scott Moser ) [381101]


author: Anton Arapov <aarapov@redhat.com> [2.6.18-53.1.4.el5]
changelog:
  - Revert: [fs] sysfs: fix race condition around sd->s_dentry (Eric Sandeen ) [245777] {CVE-2007-3104}
  - Revert: [fs] sysfs: fix condition check in sysfs_drop_dentry() (Eric Sandeen ) [245777] {CVE-2007-3104}
  - Revert: [fs] sysfs: store inode nrs in s_ino (Eric Sandeen ) [245777] {CVE-2007-3104}
  - [net] tg3: Fix performance regression on 5705 (Andy Gospodarek ) [381021]


author: Anton Arapov <aarapov@redhat.com> [2.6.18-53.1.5.el5]
changelog:
  - [ia64] ptrace: access to user register backing (Roland McGrath ) [259801]
  - [fs] cifs: buffer overflow due to corrupt response (Jeff Layton ) [372991]
  - [net] s2io: correct VLAN frame reception (Andy Gospodarek ) [426289]
  - [net] s2io: allow VLAN creation on interfaces (Andy Gospodarek ) [426289]
  - [misc] tux: get rid of O_ATOMICLOOKUP (Michal Schmidt ) [426494]
  - [x86_64] fix race conditions in setup_APIC_timer (Geoff Gustafson ) [424181]
  - [fs] core dump file ownership (Don Howard ) [396991]
  - [nfs] let rpciod finish sillyrename then umount (Steve Dickson ) [414041]
  - [nfs] fix a race in silly rename (Steve Dickson ) [414041]
  - [nfs] clean up the silly rename code (Steve Dickson ) [414041]
  - [nfs] infrastructure changes for silly renames (Steve Dickson ) [414041]
  - [nfs] introduce nfs_removeargs and nfs_removeres (Steve Dickson ) [414041]
  - [ia64] remove stack hard limit (Aron Griffis ) [412091]
  - [fs] sysfs: fix race condition around sd->s_dentry (Eric Sandeen ) [245777] {CVE-2007-3104}
  - [fs] sysfs: fix condition check in sysfs_drop_dentry() (Eric Sandeen ) [245777] {CVE-2007-3104}
  - [fs] sysfs: store inode nrs in s_ino (Eric Sandeen ) [245777] {CVE-2007-3104}
  - [xen] ia64: vulnerability of copy_to_user in PAL emu (Jarod Wilson ) [425938]


author: Don Zickus <dzickus@redhat.com> [2.6.18-51.el5]
changelog:
  - [GFS2] dlm: schedule during recovery loops (David Teigland ) [250464]
  - Revert: [pata] IDE (siimage) panics when DRAC4 reset (John Feeney ) [212391]


author: Don Zickus <dzickus@redhat.com> [2.6.18-52.el5]
changelog:
  - [net] iwlwifi: avoid BUG_ON in tx cmd queue processing (John W. Linville ) [306831]
  - [GFS2] Get super block a different way (Steven Whitehouse ) [306621]


author: Don Zickus <dzickus@redhat.com> [2.6.18-53.el5]
changelog:
  - [GFS2] handle multiple demote requests (Wendy Cheng ) [295641]
  - [scsi] megaraid_sas: kabi fix for /proc entries (Chip Coldwell ) [323231]
  - [sound] allow creation of null parent devices (Brian Maly ) [323771]


author: Don Howard <dhoward@redhat.com> [2.6.18-8.1.9.el5]
changelog:
  - [misc] cpuset information leak (Prarit Bhargava ) [245773] {CVE-2007-2875}
  - [net] ip_conntrack_sctp: fix remotely triggerable panic (Don Howard ) [245774] {CVE-2007-2876}
  - [misc] Overflow in CAPI subsystem (Anton Arapov ) [232260] {CVE-2007-1217}
  - [CIFS] fix signing sec= mount options (Jeff Layton ) [253315] {CVE-2007-3843}
  - [CIFS] respect umask when unix extensions are enabled (Jeff Layton ) [253314] {CVE-2007-3740}
  - [misc] i915_dma: fix batch buffer security bit for i965 chipsets (Aristeu Rozanski ) [252305] {CVE-2007-3851}
  - [fs] - Move msdos compat ioctl to msdos dir (Eric Sandeen ) [253317]
  - [fs] - fix VFAT compat ioctls on 64-bit systems (Eric Sandeen ) [253317] {CVE-2007-2878}


author: Don Howard <dhoward@redhat.com> [2.6.18-8.1.10.el5]
changelog:
  - [mm] Prevent the stack growth into hugetlb reserved regions (Konrad Rzeszutek) [253313] {CVE-2007-3739}


author: Anton Arapov <aarapov@redhat.com> [2.6.18-8.1.11.el5]
changelog:
  - [xen] Guest access to MSR may cause system crash/data corruption (Bhavana Nagendra ) [253312] {CVE-2007-3733}
  - [dlm] A TCP connection to DLM port blocks DLM operations (Patrick Caulfield ) [245922] {CVE-2007-3380}
  - [ppc] 4k page mapping support for userspace in 64k kernels (Scott Moser ) [275841] {CVE-2007-3850}
  - [ptrace] NULL pointer dereference triggered by ptrace (Anton Arapov ) [275981] {CVE-2007-3731}
  - [fs] hugetlb: fix prio_tree unit (Konrad Rzeszutek ) [253929] {CVE-2007-4133}


author: Anton Arapov <aarapov@redhat.com> [2.6.18-8.1.12.el5]
changelog:
  - [x86_64] Don't leak NT bit into next task (Dave Anderson ) [298151] {CVE-2007-4574}
  - [fs] Reset current->pdeath_signal on SUID binary execution (Peter Zijlstra ) [252307] {CVE-2007-3848}
  - [misc] Bounds check ordering issue in random driver (Anton Arapov ) [275961] {CVE-2007-3105}
  - [usb] usblcd: Locally triggerable memory consumption (Anton Arapov ) [276001] {CVE-2007-3513}
  - [x86_64] Zero extend all registers after ptrace in 32bit entry path (Anton Arapov ) [297871] {CVE-2007-4573}
  - [net] igmp: check for NULL when allocating GFP_ATOMIC skbs (Neil Horman ) [303281]


author: Don Howard <dhoward@redhat.com> [2.6.18-8.1.14.el5]
changelog:
  - Revert changes back to 2.6.18-8.1.10.
  - [x86_64] Zero extend all registers after ptrace in 32bit entry path (Anton Arapov ) [297871] {CVE-2007-4573}


author: Anton Arapov <aarapov@redhat.com> [2.6.18-8.1.15.el5]
changelog:
  - [dlm] A TCP connection to DLM port blocks DLM operations (Patrick Caulfield ) [245922] {CVE-2007-3380}
  - [ppc] 4k page mapping support for userspace in 64k kernels (Scott Moser ) [275841] {CVE-2007-3850}
  - [ptrace] NULL pointer dereference triggered by ptrace (Anton Arapov ) [275981] {CVE-2007-3731}
  - [fs] hugetlb: fix prio_tree unit (Konrad Rzeszutek ) [253929] {CVE-2007-4133}
  - [x86_64] Don't leak NT bit into next task (Dave Anderson ) [298151] {CVE-2007-4574}
  - [fs] Reset current->pdeath_signal on SUID binary execution (Peter Zijlstra ) [252307] {CVE-2007-3848}
  - [misc] Bounds check ordering issue in random driver (Anton Arapov ) [275961] {CVE-2007-3105}
  - [usb] usblcd: Locally triggerable memory consumption (Anton Arapov ) [276001] {CVE-2007-3513}
  - [net] igmp: check for NULL when allocating GFP_ATOMIC skbs (Neil Horman ) [303281]
  - [scsi] aacraid: Missing ioctl() permission checks (Vitaly Mayatskikh ) [298371] {CVE-2007-4308}
  - [xen] Guest access to MSR may cause system crash/data corruption (Bhavana Nagendra ) [253312] {CVE-2007-3733}


author: Don Howard <dhoward@redhat.com> [2.6.18-8.1.1.el5]
changelog:
  - [cpufreq] Remove __initdata from tscsync (Prarit Bhargava ) [229887]
  - [security] Fix key serial number collision problem (David Howells ) [229883] {CVE-2007-0006}
  - [fs] Don't core dump read-only binarys (Don Howard ) [229885] {CVE-2007-0958}
  - [xen] Enable booting on machines with > 64G (Chris Lalancette) [230117]
  - Fix potential buffer overflow in cardman 4040 cmx driver (Don Howard) [229884] {CVE-2007-0005}


author: Don Howard <dhoward@redhat.com> [2.6.18-8.1.2.el5]
changelog:
  - [utrace] exploit and unkillable cpu fixes (Roland McGrath ) [228816] (CVE-2007-0771)
  - [net] IPV6 security holes in ipv6_sockglue.c - 2 (David S. Miller ) [232257] {CVE-2007-1000}
  - [net] IPV6 security holes in ipv6_sockglue.c (David S. Miller ) [232255] {CVE-2007-1388}
  - [audit] GFP_KERNEL allocations in non-blocking context fix (Alexander Viro ) [233157]


author: Don Howard <dhoward@redhat.com> [2.6.18.8.1.4.el5]
changelog:
  - [ipv6] Fix routing regression. (David S. Miller ) [238046]
  - [mm] Gdb does not accurately output the backtrace. (Dave Anderson ) [235511]
  - [NMI] change watchdog timeout to 30 seconds (Larry Woodman ) [237655]
  - [dlm] fix mode munging (David Teigland ) [238731]
  - [net] kernel-headers: missing include of types.h (Neil Horman ) [238749]
  - [net] fib_semantics.c out of bounds check (Thomas Graf ) [238948] {CVE-2007-2172}
  - [net] disallow RH0 by default (Thomas Graf ) [238949] {CVE-2007-2242}
  - [net] Fix user OOPS'able bug in FIB netlink (David S. Miller ) [238960] {CVE-2007-1861}
  - [net] IPv6 fragments bypass in nf_conntrack netfilter code (Thomas Graf ) [238947] {CVE-2007-1497}
  - [net] ipv6_fl_socklist is inadvertently shared (David S. Miller ) [238944] {CVE-2007-1592}
  - [net] Various NULL pointer dereferences in netfilter code (Thomas Graf ) [238946] {CVE-2007-1496}


author: Jerome Marchand <jmarchan@redhat.com> [2.6.18-8.1.5.el5]
changelog:
  - [fs] prevent oops in compat_sys_mount (Jeff Layton ) [240456] {CVE-2006-7203}
  - [e1000] fix watchdog timeout panics (Andy Gospodarek ) [238048]
  - [ext3] return ENOENT from ext3_link when racing with unlink (Eric Sandeen ) [239787]


author: Don Howard <dhoward@redhat.com> [2.6.18.8-1.6.el5]
changelog:
  - [bluetooth] close information leaks in setsockopt (Marcel Holtmann ) [241862]{CVE-2007-1353}
  - [net] fix memory leak in PPPoE (Neil Horman ) [241863] {CVE-2007-2525}
  - [random] fix seeding of dev/random (Aristeu Rozanski ) [241888]


author: Don Zickus <dzickus@redhat.com> [2.6.18-91.el5]
changelog:
  - [scsi] cciss: allow kexec to work (Chip Coldwell ) [230717]
  - [xen] ia64: set memory attribute in inline asm (Tetsu Yamamoto ) [426015]
  - [xen] fix VT-x2 FlexPriority (Bill Burns ) [252236]


author: Anton Arapov <aarapov@redhat.com> [2.6.18-92.1.1.el5]
changelog:
  - [xen] netfront: send fake arp when link gets carrier (Herbert Xu ) [447684 441716]
  - [net] fix xfrm reverse flow lookup for icmp6 (Neil Horman ) [447688 446250]
  - [net] negotiate all algorithms when id bit mask zero (Neil Horman ) [447685 442820]
  - [net] 32/64 bit compat MCAST_ sock options support (Neil Horman ) [447687 444582]
  - [misc] add CPU hotplug support for relay functions (Kei Tokunaga ) [447522 441523]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-92.1.8.el5]
changelog:
  - [net] randomize udp port allocation (Eugene Teo ) [454571 454572]
  - [tty] add NULL pointer checks (Aristeu Rozanski ) [453425 453154] {CVE-2008-2812}
  - [net] sctp: make sure sctp_addr does not overflow (David S. Miller ) [452482 452483] {CVE-2008-2826}
  - [sys] sys_setrlimit: prevent setting RLIMIT_CPU to 0 (Neil Horman ) [437121 437122] {CVE-2008-1294}
  - [net] sit: exploitable remote memory leak (Jiri Pirko ) [446038 446039] {CVE-2008-2136}
  - [misc] ttyS1 lost interrupt, stops transmitting v2 (Brian Maly ) [455256 451157]
  - [misc] ttyS1 loses interrupt and stops transmitting (Simon McGrath ) [443071 440121]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-92.1.9.el5]
changelog:
  - [misc] signaling msgrvc() should not pass back error (Jiri Pirko ) [455278 452533]
  - [ia64] properly unregister legacy interrupts (Prarit Bhargava ) [450337 445886]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-92.1.11.el5]
changelog:
  - [mm] xpmem: inhibit page swapping under heavy mem use (George Beshers ) [456946 456574]
  - [xen] HV: memory corruption with large number of cpus (Chris Lalancette ) [455768 449945]
  - [fs] missing check before setting mount propagation (Eugene Teo ) [454392 454393]
  - [openib] small ipoib packet can cause an oops (Doug Ledford ) [447913 445731]
  - [misc] fix race in switch_uid and user signal accounting (Vince Worthington ) [456235 441762 440830]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-92.1.12.el5]
changelog:
  - [mm] tmpfs: restore missing clear_highpage (Eugene Teo ) [426082 426083]{CVE-2007-6417}
  - [fs] vfs: fix lookup on deleted directory (Eugene Teo ) [457865 457866]{CVE-2008-3275}
  - [net] ixgbe: remove device ID for unsupported device (Andy Gospodarek ) [457484 454910]
  - [ppc] Event Queue overflow on eHCA adapters (Brad Peters ) [458779 446713]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-92.1.13.el5]
changelog:
  - [md] fix crashes in iterate_rdev (Doug Ledford ) [460128 455471]
  - [sound] snd_seq_oss_synth_make_info info leak (Eugene Teo ) [458000 458001] {CVE-2008-3272}
  - [ipmi] control BMC device ordering (peterm@redhat.com ) [459071 430157]
  - [ia64] fix to check module_free parameter (Masami Hiramatsu ) [460639 457961]
  -  [misc] NULL pointer dereference in kobject_get_path (Jiri Pirko ) [459776 455460]
  - [xen] ia64: SMP-unsafe with XENMEM_add_to_physmap on HVM (Tetsu Yamamoto ) [459780 457137]
  - [net] bridge: eliminate delay on carrier up (Herbert Xu ) [458783 453526]
  - [fs] dio: lock refcount operations (Jeff Moyer ) [459082 455750]
  - [misc]  serial: fix break handling for i82571 over LAN (Aristeu Rozanski ) [460509 440018]
  - [fs] dio: use kzalloc to zero out struct dio (Jeff Moyer ) [461091 439918]
  - [fs] lockd: nlmsvc_lookup_host called with f_sema held (Jeff Layton ) [459083 453094]
  - [net] bnx2x: chip reset and port type fixes (Andy Gospodarek ) [441259 442026]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-92.1.15.el5]
changelog:
  - [pci] fix problems with msi interrupt management (Neil Horman ) [461894 428696]
  - [x86_64] revert time syscall changes (Prarit Bhargava ) [466427 461184]
  - [xen] allow guests to hide the TSC from applications (Chris Lalancette ) [378471 378481] {CVE-2007-5907}
  - [scsi] qla2xxx: additional residual-count correction (Marcus Barrow ) [465741 462117]
  - [char] add range_is_allowed check to mmap_mem (Eugene Teo ) [460858 460857]
  - [fs] binfmt_misc: avoid potential kernel stack overflow (Vitaly Mayatskikh ) [459464 459463]
  - [misc] cpufreq: fix format string bug (Vitaly Mayatskikh ) [459461 459460]
  - [dlm] user.c input validation fixes (David Teigland ) [458759 458760]
  - [nfs] pages of a memory mapped file get corrupted (Peter Staubach ) [450335 435291]
  - [x86_64] gettimeofday fixes for HPET, PMTimer, TSC (Prarit Bhargava ) [462860 250708]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-92.1.16.el5]
changelog:
  - [i386] vDSO: use install_special_mapping (Peter Zijlstra ) [460275 460276] {CVE-2008-3527}
  - [scsi] aacraid: remove some quirk AAC_QUIRK_SCSI_32 bits (Tomas Henzl ) [466885 453472]
  - [fs] remove SUID when splicing into an inode (Eric Sandeen ) [464451 464452] {CVE-2008-3833}
  - [fs] open() allows setgid bit when user is not in group (Eugene Teo ) [463867 463687] {CVE-2008-4210}
  - [xen] ia64: fix INIT injection (Tetsu Yamamoto ) [467105 464445]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-92.1.20.el5]
changelog:
  - [input] atkbd: cancel delayed work before freeing struct (Jiri Pirko ) [461232 461233]
  - [drm] i915 driver arbitrary ioremap (Eugene Teo ) [464508 464509] {CVE-2008-3831}
  - [fs] don't allow splice to files opened with O_APPEND (Eugene Teo ) [466709 466710] {CVE-2008-4554}
  - [xen] x86: allow the kernel to boot on pre-64 bit hw (Chris Lalancette ) [470040 468083]
  - [net] ipv4: fix byte value boundary check (Jiri Pirko ) [469649 468148]
  - [ia64] fix ptrace hangs when following threads (Denys Vlasenko ) [469150 461456]
  - [net] sctp: INIT-ACK indicates no AUTH peer support oops (Eugene Teo ) [466081 466082] {CVE-2008-4576}
  - [input] atkbd: delay executing of LED switching request (Jiri Pirko ) [461232 461233]
  - [xen] ia64: make viosapic SMP-safe by adding lock/unlock (Tetsu Yamamoto ) [467727 466552]
  - [xen] allow guests to hide the TSC from applications (Chris Lalancette ) [378471 378481] {CVE-2007-5907}
  - [nfs] v4: don't reuse expired nfs4_state_owner structs (Jeff Layton ) [469650 441884]
  - [nfs] v4: credential ref leak in nfs4_get_state_owner (Jeff Layton ) [469650 441884]
  - [nfs] v4: Poll aggressively when handling NFS4ERR_DELAY (Jeff Layton ) [469650 441884]
  - [xen] ia64: speed up hypercall for guest domain creation (Tetsu Yamamoto ) [459080 456171]
  - [xen] use unlocked_ioctl in evtchn, gntdev and privcmd (Tetsu Yamamoto ) [459080 456171]
  - [xen] page scrub: serialise softirq with a new lock (Tetsu Yamamoto ) [459080 456171]
  - [xen] serialize scrubbing pages (Tetsu Yamamoto ) [459080 456171]
  - [nfs] pages of a memory mapped file get corrupted (Peter Staubach ) [450335 435291]
  - [x86_64] xen: fix syscall return when tracing (Chris Lalancette ) [470853 453394]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-92.1.22.el5]
changelog:
  - [misc] hugepages: ia64 stack overflow and corrupt memory (Larry Woodman ) [474347 472802]
  - [misc] allow hugepage allocation to use most of memory (Larry Woodman ) [474760 438889]


author: Anton Arapov <aarapov@redhat.com> [2.6.18-92.1.5.el5]
changelog:
  - [x86_64] copy_user doesn't zero tail bytes on page fault (Vitaly Mayatskikh) [451275 451276] {CVE-2008-2729}


author: Don Zickus <dzickus@redhat.com> [2.6.18-90.el5]
changelog:
  - [x86_64] page faults from user mode are user faults (Dave Anderson ) [442101]
  - [ia64] kdump: add save_vmcore_info to INIT path (Neil Horman ) [442368]
  - [misc] infinite loop in highres timers (Michal Schmidt ) [440002]
  - [net] add aes-ctr algorithm to xfrm_nalgo (Neil Horman ) [441425]
  - [x86_64] 32-bit address space randomization (Peter Zijlstra ) [213483]
  - Revert: [scsi] qla2xxx: pci ee error handling support (Marcus Barrow ) [441779]
  - [pci] revert 'PCI: remove transparent bridge sizing' (Ed Pollard ) [252260]
  - [ppc64] eHEA: fixes receive packet handling (Brad Peters ) [441364]


author: Don Zickus <dzickus@redhat.com> [2.6.18-83.el5]
changelog:
  - [xen] x86: fix change frequency hypercall (Bhavana Nagendra ) [430938]
  - [xen] resync TSC extrapolated frequency (Bhavana Nagendra ) [430938]
  - [xen] new vcpu lock/unlock helper functions (Bhavana Nagendra ) [430938]


author: Stephan Wiesand <stephan wiesand desy de> 1.4.10-74.SLx
changelog:
  - upstream release 1.4.10
  - removed patches 1062..65
  - updated CellServDB from grand.central.org; remove wallace from RAL entry


author: Stephan Wiesand <stephan wiesand desy de> 1.4.11-75.SLx
changelog:
  - upstream release 1.4.11
  - updated CellServDB from grand.central.org
  - install release notes and changelog into /usr/share/doc/openafs-<version>
  - explicitly build src/auth/setkey (for -debug package)
  - do not install the new compile_et manpage, it clashes with e2fsprogs-devel
  - do not install the new rmtsysd manpage, this doesn't exist for linux yet
  - copyauth is no longer built; delete the manpage as well
  - package new manpages for restorevol, vsys
  - added post-1.4.11 fixes from stable-1_4_x git branch:
    1066: export-ktc-curpag-everywhere-20090713
    1067: fix-getvolume-for-nonroot-dynroot-fids-20090722


author: Stephan Wiesand <stephan wiesand desy de> 1.4.11-76.SLx
changelog:
  - added more post-1.4.11 fixes from stable-1_4_x git branch:
    1068: fix-linux24-builds-20090718
    1069: kernel-init-vrequest-structure-20090914


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.7-68.SLx
changelog:
  - replace 1056 by 1057: linux-hlist-unhashed-opencoding-20080520
  - more post-1.4.7 patches (either trivial, or serious and simple):
    1058: butc-xbsa-lwp-protoize-damage-20080501
    1059: uuid-corrected-duplicate-check-20080501
    1060: viced-large-more-threads-20080506
    1061: vos-sync-flag-voltype-properly-20080521


author: Stephan Wiesand <stephan wiesand desy de> 1.4.12-79.SLx
changelog:
  - 1.4.12 release, no additional patches
  - updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)


author: Stephan Wiesand <stephan wiesand desy de> 1.4.14-80.SLx
changelog:
  - 1.4.14 release, no additional patches
  - updated CellServDB from grand.central.org (last changed 2010-12-13)


author: Stephan Wiesand <stephan wiesand desy de> 1.4.14-80.1.SLx
changelog:
  - patch 1073: dont-afs_flushvcbs-under-xvcache-lock-20100623
  - this hopefully fixes the client hangups on parallel directory acces


author: Stephan Wiesand <stephan wiesand desy de> 1.4.14-82.SLx
changelog:
  - patch 1075 to fix buffer overflows (backport from 1.6.2 release)
  - backed out patch 1074 to make this is a security-only release


author: Stephan Wiesand <stephan wiesand desy de> 1.4.15-83.SLx
changelog:
  - 1.4.15 security release addressing openafs-sa-2013-0003 and -0004
  - see SECURITY.txt for important info on how to actually secure your site
  - just updating to this build is *not* sufficient


author: Stephan Wiesand <stephan wiesand desy de> 1.4.15-86.SLx
changelog:
  - apply relevant security fixes from openafs-1.6.13 (patches 1082..1086)
  - (the 6th patch in that release is specific to Solaris)


author: Stephan Wiesand <stephan wiesand desy de> 1.4.15-87.SLx
changelog:
  - implement the vlserver fix from openafs-1.6.14:
  - back out patch 1086 (which disabled querying the vldb by regex)
  - new patches 1087, 1088 to limit this to admins and fix buffer overflows


author: Stephan Wiesand <stephan wiesand desy de> 1.4.15-88.SLx
changelog:
  - added OPENAFS-SA-2015-007.1.4.patch, fix for CVE-2015-7762 from 1.6.15
  - note tat CVE-2015-7763 does not apply to openafs-1.4


author: Stephan Wiesand <stephan wiesand desy de> 1.4.15-89.SLx
changelog:
  - patch 1090 to fix CVE-2015-8312 (from release 1.6.16)
  - patches 1091..1095 to fix OPENAFS-SA-2016-001 & 2 (from release 1.6.17)


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.5-56.SLx
changelog:
  - first patches from cvs
    1051: krb5-klog-20071101
    1052: cbd-use-callback-size-for-callbacks-20071105
    1053: linux-nsec-timestamp-zero-20071106
    1054: viced-missing-lock-20071109
    1055: viced-accurately-track-file-callbacks-20071112
  - krb5 capable klog packaged as klog.krb5 in openafs-krb5


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.6-58.SLx
changelog:
  - new upstream release; fixes fileserver bugs (OPENAFS-SA-2007-003, DOS)
  - this obsoletes patches 1052,54,55;
  - also removed linux-nsec-timestamp-zero (1053) for the time being
  - renamed klog.krb5 to k5log
  - => this is a build of pristine openafs-1.4.6, except for the extra k5log
  - largefile-fileserver is the default since 1.4.5 -> adapt configure options
  - added "--with debugsyms" build option


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.3-0.rc3.39.SLx
changelog:
  - added patch to make sure afs_pag_destroy() holds the glock, from 
    https://lists.openafs.org/pipermail/openafs-devel/2007-March/014985.html
  - for SL5, changed comments on afsd options in the sysconfig file
  - for SL5, changed default afsd options to " " (as recommended by developers)


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.4-42.SLx
changelog:
  - upstream release with new default of -nosuid for local cell, see OPENAFS-SA-2007-001
    * this may break things for sites relying on setuid files in AFS *
  - added a word of warning to the SuidCells config file
  - updated CellServDB to version from grand.central.org as of 2007-03-21
  - added linux-task-pointer-safety-20070320 from CVS (see RT #55973)


author: Jarod Wilson <jwilson@redhat.com> - 1.101-194.4
changelog:
  - Use PAE kernel for i686 xen kdump if mem > 4GB (bz 284821)
  - Warn users in firstboot if they need kernel-PAE (bz 284841)


author: Dave Young <dyoung@redhat.com> - 1.102pre-159
changelog:
  - Support multipath dump target, Resolves: bz587361
  - do not add same network device multiple time to "interface" file, Resolves: bz587361


author: Baoquan He <bhe@redhat.com> - 1.102pre-163
changelog:
  - Add makedumpfile manual into rhel5, Resolves: bz919962
  - kdump.init: modify wrongly computing MEMSZ, Resolves: bz919369


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Source: krb5-auth-dialog.ini
  -->  Config file for automated patch script
  - Ran Regex: (Release: .*) => \1.slf5
  -->  Modify release string to note changes for SLF5
  - Added Patch: fix-session-manager.patch
  -->  Fix Session bug, see BZ1140848/RITM0115117


author: Nalin Dahyabhai <nalin@redhat.com> 1.5-25
changelog:
  - add patch to fix buffer overflow and double-free in rpc library (#239073,
    CVE-2007-2442/CVE-2007-2443)


author: Nalin Dahyabhai <nalin@redhat.com> 1.5-28
changelog:
  - add preliminary patch to fix buffer overflow in rpcsec_gss implementation
    in libgssrpc (#250973, CVE-2007-3999) and write through uninitialized
    pointer in kadmind (#250976, CVE-2007-4000)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-17
changelog:
  - ftpd: also do PAM session and credential management when ftp clients use
    strong authentication (#286291)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix storage of delegated krb5 credentials when they've been wrapped up in
    spnego (#436460)
  - return a delegated credential handle even if the application didn't pass a
    location to store the flags which would be used to indicate that credentials
    were delegated (#436465)
  - add patch to fall back to TCP kpasswd servers for kdc-unreachable,
    can't-resolve-server, and response-too-big errors (#436467)
  - use the right sequence numbers when generating password-set/change requests
    for kpasswd servers after the first one (#436468)
  - backport from 1.6.3 to initialize a library-allocated get_init_creds_opt
    structure the same way we would one which was allocated by the calling
    application, to restore kinit's traditional behavior of doing a password
    change right when it detects an expired password (#436470)


