# changelog

author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-17.el5_1.1
changelog:
  - add preliminary patch to fix use of uninitialized pointer / double-free in
    KDC (CVE-2008-0062,CVE-2008-0063) (#432620, #432621)
  - add backported patch to fix use-after-free in libgssapi_krb5 (CVE-2007-5901)
    (#415321)
  - add backported patch to fix double-free in libgssapi_krb5 (CVE-2007-5971)
    (#415351)
  - add preliminary patch to fix incorrect handling of high-numbered descriptors
    in the RPC library (CVE-2008-0947) (#433596)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-22
changelog:
  - add patch to fall back to TCP kpasswd servers for kdc-unreachable,
    can't-resolve-server, and response-too-big errors (#392631)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-23
changelog:
  - backport changes from 1.6.3 which allow callers of the the sendto-kdc
    functions to override the failover behavior on a per-response basis, and
    default to failing over on service-unavailable errors (#230384)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-24
changelog:
  - kdb_ldap: add patch to recognize "nsAccountLock: TRUE" as indicating that
    an entry should have the DISALLOW_ALL_TIX flag set (read only), for better
    interop with Fedora, Netscape, Red Hat Directory Server (Simo Sorce, #431784)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-25.el5_2.1
changelog:
  - backport fix from 1.6.3 to abort a sequential scan of a keytab if the
    handle to the keytab has become invalidated during the scan (via Vince
    Worthington, #461908)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-25.el5_2.2
changelog:
  - add a backported patch which adds a check on credentials obtained from
    the KDC to make sure that they're of an acceptable type, and if not, retry to
    the request to get one of the right type (Sadique Puthen, #473104)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-29.el5
changelog:
  - backport fix from 1.6.3 to abort a sequential scan of a keytab if the
    handle to the keytab has become invalidated during the scan (via Vince
    Worthington, #460911)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-30.el5
changelog:
  - backport fix from 1.6.3 to register file-based ccaches created with
    the krb5_cc_new_unique() function with the global list, so that we
    don't crash when we go to close the ccache (#468729)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-31.el5
changelog:
  - add a backported patch which adds a check on credentials obtained from
    a foreign realm to make sure that they're of an acceptable type, and
    if not, retry to the request to get one of the right type (Sadique Puthen,


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-31.el5_3.1
changelog:
  - add backport of svn patch to fix a bug in how the gssapi library
    handles certain error cases in gss_accept_sec_context (CVE-2009-0845,


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-31.el5_3.2
changelog:
  - add fix for potential buffer read overrun in the SPNEGO GSSAPI mechanism
    (#490635, CVE-2009-0844)
  - add fix for NULL pointer dereference when handling certain error cases
    in the SPNEGO GSSAPI mechanism (#490635, CVE-2009-0845)
  - add fix for attempt to free uninitialized pointer in the ASN.1 decoder
    (#490635, CVE-2009-0846)
  - add fix for bug in length validation in the ASN.1 decoder (CVE-2009-0847)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-36.el5_4.1
changelog:
  - add candidate patch to correct KDC integer overflows which could be
    triggered by malformed RC4 and AES ciphertexts (CVE-2009-4212, #546347)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-36.el5_5.2
changelog:
  - pull changes to libkrb5 to properly handle and chase "off-path" referrals
    back from 1.7 (#574387)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-36.el5_5.3
changelog:
  - add upstream patch to fix a few use-after-free bugs, including one in
    kadmind (CVE-2010-0629, #578185)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-36.el5_5.4
changelog:
  - add candidate patch to correct KDC null pointer dereference which
    could be triggered by malformed client requests (CVE-2010-1321, #583703)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-36.el5_5.5
changelog:
  - ksu: perform PAM account and session management before dropping privileges
    to those of the target user (#602967, #615261)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-36.el5_5.6
changelog:
  - incorporate candidate patch for checksum acceptance issues from
    MITKRB5-SA-2010-007 (CVE-2010-1323, #652307)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-55.el5
changelog:
  - incorporate upstream patch for checksum acceptance issues from
    MITKRB5-SA-2010-007 (CVE-2010-1323, #652308)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-55.el5_6.1
changelog:
  - add upstream patch to fix hang or crash in the KDC when using the LDAP kdb
    backend (CVE-2011-0281, CVE-2011-0282, #671096)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-55.el5_6.2
changelog:
  - incorporate a fix to teach the file labeling bits about when replay caches
    are expunged (#714188)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-62.el5
changelog:
  - incorporate a fix to teach the file labeling bits about when replay caches
    are expunged (#712453)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-68.el5
changelog:
  - backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
    to talk to a KDC by using poll() if it's detected at compile-time, revised
    (#701444, RT#6905)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-71.el5_10.1
changelog:
  - add patch based on one from Filip Krska to not call poll() with a negative
    timeout when the caller's intent is for us to just stop calling it (#1089732)


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Ran Regex: (Release: .*) => \1.slf5
  -->  Modify release string to note changes for SLF5
  - Added Source: krb5.ini
  -->  Config file for automated patch script
  - Added Patch: krb5_krb5-mwm-kshd.patch
  -->  Fix sync bug, see BZ#658217


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-78.el5
changelog:
  - gssapi: pull in upstream fix for a possible NULL dereference in spnego
    (CVE-2014-4344, #1121509)


author: Tomas Smetana <tsmetana@redhat.com> 20060214-1.5
changelog:
  - fix #242879 - memory leak
  - fix #232627 - call to exit(0) returns a status 19 
    to the calling shell script
  - fix #242878 - spins in stopped state
  - fix #243776 - ERR trap causes recursion
  - fix #219420 - unaligned access messages
  - fix #242877 - filesystem acl defaults are ignored
  - fix #278781 - fix handling of sigttou
  - fix #250362 - update manpage about subscript of index array


author: Michal Hlavinka <mhlavink@redhat.com> 20080202-12
changelog:
  - make braces non-optional for ${a[i]} inside [[...]] in the case
    where the argument can be a pattern.


author: Tomas Smetana <tsmetana@redhat.com> 20080202-1
changelog:
  - rebase to the new version
  - fix #371441 - can't display international characters
  - fix #429488 - ksh -R can cause segmentation fault
  - fix #435159 - scripts failing under ksh
  - fix #441557 - the -m option removed from the manual page


author: Tomas Smetana <tsmetana@redhat.com> 20080202-2
changelog:
  - fix #459228 - option -R not clear
  - fix #459566 - segfault on set -o vi
  - fix #456652 - exit shifts vi to background


author: Michal Hlavinka <mhlavink@redhat.com> 20080202-15
changelog:
  - fix wrong array size caused by typeset (#538857)
  - fix pids of forked commands (#520383)
  - fix memcmp-memcpy typo causing syntax error (#538655)


author: Michal Hlavinka <mhlavink@redhat.com> 20091206-1
changelog:
  - updated to 20091211
  - fix looped job list (#435159)
  - fix error code when unsetting a variable that was already unset (#508869)
  - restore shell state when return was used in .profile (#506790)
  - wait for output of background process after foreground's completed (#509326)
  - fix parser failure when alias nested in emacs mode (#513967)
  - don't mention unavailable commands in man pages (#514485)
  - ship RELEASE in doc as change log (#541654)


author: Michal Hlavinka <mhlavink@redhat.com> 20100202-1.3
changelog:
  - fix crash when ksh get SIGPIPE while already executing signal handler
  - fix wrong output redirection in SIGPIPE trap
  - fix wrong typeset handling of arrays that could caused a crash


author: Michal Hlaivnka <mhlavink@redhat.com> 20100202-1.4
changelog:
  - fix crash when unsetting IFS inside a function
  - don't forget to close files including auto loaded function definition
  - fix file io race condition when file was created, but still does not exist


author: Bill Nottingham <notting@redhat.com> - 1.2.57.1.14-1
changelog:
  - add support for FBA-DASD (#215423, <dlehman@redhat.com>)
  - forward-port EHEA ethernet support (#226600)


author: Bill Nottingham <notting@redhat.com> - 1.2.57.1.16-1
changelog:
  - don't edit/move/etc. network configurations with no HWADDR (#288441)
  - handle quoted HWADDR, SUBCHANNELS (#243653)


author: Bill Nottingham <notting@redhat.com> - 1.2.57.1.18-1
changelog:
  - don't unconfigure s390 network devices (#429594)
  - add support for virtio devices (#446230, <markmc@redhat.com>)
  - blacklist netxen management module (#455041, <mranweil@us.ibm.com>)


author: Bill Nottingham <notting@redhat.com> - 1.2.57.1.20-1
changelog:
  - ignore network devices such as wmasterX that aren't what we want (#466048, #239825)
  - don't crash looking to see if non-existent modules are loaded (#466501)


author: Bill Nottingham <notting@redhat.com> - 1.2.57.1.22-1
changelog:
  - add ibmvfc support (#503235, <brking@linux.vnet.ibm.com>)
  - fix USB handling for LG GE20-LU10 drives, among others. (#481799)
  - handle cases where single PCI devices have multiple ethernet devices. (#471657)


author: Bill Nottingham <notting@redhat.com> - 1.2.57.1.25-1
changelog:
  - don't increment internal index for things we can't configure (#579852)
  - always treat devices with identical hw address as the same (#636263)


author: Jaromir Capik <jcapik@redhat.com> - 1.2.57.1.26-2
changelog:
  - fixes #695388 - Kudzu does not report network capabilities of Infiniband devices
  - Resolves: rhbz#695388


author: Eduardo Habkost <ehabkost@redhat.com> - 83-104.el5
changelog:
  - kvm-ide-calls-register_savevm-three-times-for-pci_ide_sa.patch [bz#514887]
  - Resolves: bz#514887
    (Mouse and keyboard of guest are unavailable after migration-[kvm-83-101.el5])


author: Eduardo Habkost <ehabkost@redhat.com> - 83-105.el5
changelog:
  - kvm-kernel-KVM-MMU-handle-n_free_mmu_pages-n_alloc_mmu_pages-in.patch [bz#487857]
  - Resolves: bz#487857
    (The emulator hung after input "cpu_set 1 online" on qemuMonitor and select "System->Shutdown")


author: Eduardo Habkost <ehabkost@redhat.com> - 83-105.el5_4.1
changelog:
  - Update kversion to 2.6.18-162.el5
  - kvm-Initialize-PS2-keyboard-mouse-state-on-reset.patch [bz#517855]
  - Resolves: bz#517855
    (guest not accepting keystrokes or mouse clicks after reboot)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-105.el5_4.11
changelog:
  - kvm-qcow2-Refactor-update_refcount-take-2.patch [bz#520693]
  - kvm-qcow2-Update-multiple-refcounts-at-once-take-2.patch [bz#520693]
  - kvm-Combined-patch-of-two-upstream-commits-the-second-fi-take-2.patch.patch [bz#520693]
  - kvm-alloc_cluster_link_l2-Write-complete-sectors-take-2.patch.patch [bz#520693]
  - kvm-update_refcount-Write-complete-sectors-take-2.patch [bz#520693]
  - Resolves: bz#520693
    (Bad qcow2 performance with cache=off)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-105.el5_4.12
changelog:
  - kvm-virtio-blk-Stop-VM-on-read-errors.patch [bz#537334]
  - kvm-ide-Stop-VM-on-read-errors-respin.patch [bz#537334 bz#540406]
  - Resolves: bz#537334
    (O/S Filesystem Corruption with RHEL-5.4 on a RHEV Guest)
  - Resolves: bz#540406
    (RHEL5.4 VM image corruption with an IDE v-disk)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-105.el5_4.13
changelog:
  - kvm-kernel-KVM-x86-emulator-limit-instructions-to-15-bytes.patch [bz#541164]
  - Resolves: bz#541164
    (CVE-2009-4031 kernel: KVM: x86 emulator: limit instructions to 15 bytes [rhel-5.4.z])


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-105.el5_4.20
changelog:
  - Updated kversion to 2.6.18-164.11.1.el5 to match build root
  - kvm-qemu-add-routines-for-atomic-16-bit-accesses.patch [bz#561022]
  - kvm-qemu-virtio-atomic-access-for-index-values.patch [bz#561022]
  - Resolves: bz#561022
    (QEMU terminates without warning with virtio-net and SMP enabled)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-105.el5_4.21
changelog:
  - kvm-kernel-KVM-introduce-kvm_read_guest_virt-kvm_write_guest_vi.patch [bz#559093]
  - kvm-kernel-KVM-remove-the-vmap-usage.patch [bz#559093]
  - kvm-kernel-KVM-Use-kvm_-read-write-_guest_virt-to-read-and-writ.patch [bz#559093]
  - kvm-kernel-KVM-fix-memory-access-during-x86-emulation.patch [bz#559093]
  - kvm-kernel-Check-IOPL-level-during-io-instruction-emulation.patch [bz#560697]
  - kvm-kernel-Fix-popf-emulation.patch [bz#560697]
  - kvm-kernel-Check-CPL-level-during-privilege-instruction-emulati.patch [bz#560697]
  - kvm-kernel-KVM-PIT-control-word-is-write-only.patch [bz#560888]
  - Resolves: bz#559093
    (EMBARGOED CVE-2010-0298 kvm: emulator privilege escalation [rhel-5.4.z])
  - Resolves: bz#560697
    (EMBARGOED CVE-2010-0306 kvm: emulator privilege escalation IOPL/CPL level check [rhel-5.4.z])
  - Resolves: bz#560888
    (CVE-2010-0309 kvm: cat /dev/port in guest cause the host hang [rhel-5.4.z])


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-105.el5_4.22
changelog:
  - kvm-CVE-2010-0297-usb-linux.c-fix-buffer-overflow.patch [bz#560769]
  - Resolves: bz#560769
    (CVE-2010-0297 kvm-userspace-rhel5: usb-linux.c: fix buffer overflow [rhel-5.4.z])


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-105.el5_4.25
changelog:
  - kvm-virtio-blk-Fix-reads-turned-into-writes-after-read-e.patch [bz#562776]
  - kvm-virtio-blk-Handle-bdrv_aio_read-write-NULL-return.patch [bz#562776]
  - Resolves: bz#562776
    (Guest image corruption after RHEV-H update to 5.4-2.1.3.el5_4rhev2_1)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-105.el5_4.26
changelog:
  - kvm-kernel-KVM-Don-t-check-access-permission-when-loading-segme.patch [bz#563464]
  - kvm-kernel-KVM-Disable-move-to-segment-registers-and-jump-far-i.patch [bz#563464]
  - Resolves: bz#563464
    (EMBARGOED CVE-2010-0419 kvm: emulator privilege escalation segment selector check [rhel-5.4.z])


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-105.el5_4.27
changelog:
  - kvm-kernel-KVM-VMX-Check-cpl-before-emulating-debug-register-ac.patch [bz#563516]
  - Resolves: bz#563516
    (KVM: Check cpl before emulating debug register access [rhel-5.4.z])


author: Glauber Costa <glommer@redhat.com> - kvm-83-105.el5_4.28
changelog:
  - kvm-reduce-number-of-reinjects-on-ACK.patch [bz#565431]
  - Resolves: bz#565431
    (KVM: WIN7-32bit blue screen (IMAGE_NAME:  ntkrnlmp.exe).)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-105.el5_4.5
changelog:
  - kvm-kernel-KVM-VMX-Optimize-vmx_get_cpl.patch [bz#524125 bz#524125]
  - kvm-kernel-KVM-x86-Disallow-hypercalls-for-guest-callers-in-rin.patch [bz#524125 bz#524125]
  - Resolves: bz#524125
    (kernel: KVM: x86: Disallow hypercalls for guest callers in rings > 0 [rhel-5.4.z])


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-105.el5_4.6
changelog:
  - kvm-Revert-update_refcount-Write-complete-sectors.patch [bz#520693]
  - kvm-Revert-alloc_cluster_link_l2-Write-complete-sectors.patch [bz#520693]
  - kvm-Revert-Combined-patch-of-two-upstream-commits-the-se.patch [bz#520693]
  - kvm-Revert-qcow2-Update-multiple-refcounts-at-once.patch [bz#520693]
  - kvm-Revert-qcow2-Refactor-update_refcount.patch [bz#520693]
  - Related: bz#520693
    (Bad qcow2 performance with cache=off)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-105.el5_4.7
changelog:
  - kvm-qemu-virtio-net-do-not-return-stack-pointer-from-fun.patch [bz#524557]
  - Resolves: bz#524557
    (QEMU crash (during virtio-net WHQL tests for Win2008 R2))


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-105.el5_4.8
changelog:
  - kvm-Properly-handle-pthread_cond_timedwait-timing-out.patch [bz#526244]
  - Resolves: bz#526244
    (KVM QEMU:RHEL OS VM's became not-responding and stopped answering monitor Commands.)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-105.el5_4.9
changelog:
  - Update kversion to 2.6.18-164.2.1.el5 to match build root
  - kvm-kernel-KVM-VMX-flush-TLB-with-INVEPT-on-cpu-migration.patch [bz#527192]
  - Resolves: bz#527192
    (vmentry fails with ept misconfig)


author: Glauber Costa <glommer@redhat.com> - kvm-83-162.el5
changelog:
  - kvm-qemu-img-rebase-Add-f-option.patch [bz#569762]
  - kvm-mark-PCI-IRQs-as-edge-triggered-in-mptables.patch [bz#536749]
  - Resolves: bz#536749
    (can not boot rhel3.9 with if=virtio)
  - Resolves: bz#569762
    ('qemu-img re-base' broken on block devices)
  - Moved kver to 2.6.18-191.el5 to match build root


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-163.el5
changelog:
  - kvm-kernel-avoid-collision-between-out-of-sync-ksm-and-pci-pass.patch [bz#566385]
  - Resolves: bz#566385
    (KVM host panic due to fault in paging64_sync_page() / panic occurs in connection with PCI passthru devices)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5
changelog:
  - kvm-Fix-Windows-guests-SVVP-tests.patch [bz#495844]
  - Resolves: bz#495844
    (KVM SVVP: "Signed Driver check" failure - on the disabled vCPUs (that the VM's BIOS doesn't hide))


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.10
changelog:
  - Updated kversion to 2.6.18-194.3.1.el5 to match build root
  - kvm-kernel-KVM-MMU-bail-out-pagewalk-on-kvm_read_guest-error.patch [bz#596381]
  - kvm-kernel-KVM-Fix-wallclock-version-writing-race.patch [bz#596625]
  - kvm-qemu-img-rebase-Fix-output-image-corruption.patch [bz#596378]
  - Resolves: bz#596381
    (kvm spinning updating a guest pte, unkillable)
  - Resolves: bz#596625
    (race condition in pvclock wallclock calculation)
  - Resolves: bz#596378
    (After re-base snapshot, the file in the snapshot disappeared)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.11
changelog:
  - kvm-qcow2-Fix-corruption-after-refblock-allocation.patch [bz#602363]
  - Resolves: bz#602363
    (qcow2 corruption bug in refcount table growth)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.12
changelog:
  - kvm-qcow2-Export-synchronous-qcow_read-write-to-avoid-br.patch [bz#604188]
  - Resolves: bz#604188
    (Guest suffers kernel panic when save snapshot then restart guest)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.13
changelog:
  - kvm-virtio-blk.c-avoid-zero-every-request-structure.patch [bz#604159]
  - Resolves: bz#604159
    (virtio-blk: Avoid zeroing every request structure)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.14
changelog:
  - Updated kversion to 2.6.18-194.8.1.el5 to match build root
  - kvm-kernel-KVM-Keep-slot-ID-in-memory-slot-structure.patch [bz#610341]
  - kvm-kernel-KVM-Prevent-internal-slots-from-being-COWed.patch [bz#610341]
  - kvm-virtio-net-truncating-packet.patch [bz#610343]
  - kvm-raw-posix-Use-pread-pwrite-instead-of-lseek-read-wri.patch [bz#610344]
  - kvm-block-Cache-total_sectors-to-reduce-bdrv_getlength-c.patch [bz#610344]
  - Resolves: bz#610341
    (fork causes trouble for vcpu threads)
  - Resolves: bz#610343
    (Virtio: Transfer file caused guest in same vlan abnormally quit)
  - Resolves: bz#610344
    (Excessive lseek() causes severe performance issues with vm disk images over NFS)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.15
changelog:
  - Renumber patches on spec file to avoid patch number conflicts between
    userspace & kernel patches
  - kvm-qcow2-Fix-access-after-end-of-array.patch [bz#612508]
  - kvm-qcow2-Don-t-ignore-immediate-read-write-failures.patch [bz#612508]
  - kvm-qcow2-Return-0-errno-in-write_l2_entries.patch [bz#612508]
  - kvm-qcow2-Fix-error-return-code-in-qcow2_alloc_cluster_l.patch [bz#612508]
  - kvm-qcow2-Return-0-errno-in-write_l1_entry.patch [bz#612508]
  - kvm-qcow2-Return-0-errno-in-l2_allocate.patch [bz#612508]
  - kvm-qcow2-Allow-qcow2_get_cluster_offset-to-return-error.patch [bz#612508]
  - kvm-qcow2-Change-l2_load-to-return-0-errno.patch [bz#612508]
  - kvm-qcow2-Return-right-error-code-in-write_refcount_bloc.patch [bz#612508]
  - kvm-qcow2-Fix-corruption-after-error-in-update_refcount.patch [bz#612508]
  - kvm-qcow2-Clear-L2-table-cache-after-write-error.patch [bz#612508]
  - kvm-qcow2-Fix-error-handling-in-l2_allocate.patch [bz#612508]
  - kvm-qcow2-Restore-L1-entry-on-l2_allocate-failure.patch [bz#612508]
  - kvm-qcow2-Allow-get_refcount-to-return-errors.patch [bz#612508]
  - kvm-qcow2-Allow-alloc_clusters_noref-to-return-errors.patch [bz#612508]
  - kvm-qcow2-Return-real-error-code-in-load_refcount_block.patch [bz#612508]
  - kvm-block-Add-bdrv_-p-write_sync.patch [bz#612507]
  - kvm-qcow2-Use-bdrv_-p-write_sync-for-metadata-writes.patch [bz#612507]
  - Resolves: bz#612507
    (qcow2 image corruption when using cache=writeback)
  - Resolves: bz#612508
    (Backport qcow2 fixes to RHEL 5)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.19
changelog:
  - kvm-qcow2-Fix-qemu-img-check-segfault-on-corrupted-image.patch [bz#610342]
  - kvm-qcow2-Don-t-try-to-check-tables-that-couldn-t-be-loa.patch [bz#610342]
  - kvm-qemu-img-check-Distinguish-different-kinds-of-errors.patch [bz#618206]
  - kvm-qcow2-Change-check-to-distinguish-error-cases.patch [bz#618206]
  - Resolves: bz#610342
    ([kvm] segmentation fault when running qemu-img check on faulty image)
  - Resolves: bz#618206
    ([kvm] qemu image check returns cluster errors when using virtIO block (thinly provisioned) during e_no_space events (along with EIO errors))


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.20
changelog:
  - kvm-virtio-net-correct-packet-length-checks.patch [bz#610343]
  - Resolves: bz#610343
    (Virtio: Transfer file caused guest in same vlan abnormally quit)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.21
changelog:
  - kvm-Fix-segfault-in-mmio-subpage-handling-code.patch [bz#619412]
  - Resolves: bz#619412
    (CVE-2010-2784 qemu: insufficient constraints checking in exec.c:subpage_register() [rhel-5.5.z])


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.22
changelog:
  - Updated kversion to 2.6.18-194.11.3.el5 to match build root
  - kvm-Add-cache-unsafe-parameter-to-drive.patch [bz#629574]
  - kvm-qemu-img-convert-Use-cache-unsafe-for-output-image.patch [bz#629574]
  - Resolves: bz#629574
    (KVM: qemu-img convert poor performance ( on NFS storage ))


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.23
changelog:
  - kvm-qemu-don-t-strip-qemu-img-and-qemu-io-in-make-instal.patch [bz#629635]
  - Resolves: bz#629635
    ([kvm] debug-info missing from kvm-qemu-img-83-164.el5_5.12)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.24
changelog:
  - Updated kversion to 2.6.18-194.17.1.el5 to match build root
  - kvm.spec: fix ./configure arguments
    (ensure spice, kvm-cap-pit and kvm-cap-device-assignment are always enabled)
  - kvm-kernel-KVM-Fix-fs-gs-reload-oops-with-invalid-ldt.patch [bz#639886]
  - Resolves: bz#639886
    (CVE-2010-3698 kvm: invalid selector in fs/gs causes kernel panic [rhel-5.5.z])
  - CVE: CVE-2010-3698


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.25
changelog:
  - Adding load_gs_index to kmod symbol greylist
  - Related: bz#639886
    (CVE-2010-3698 kvm: invalid selector in fs/gs causes kernel panic [rhel-5.5.z])


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.28
changelog:
  - kvm-implement-dummy-PnP-support.patch [bz#659850]
  - kvm-load-registers-after-restoring-pvclock-msrs.patch [bz#660239]
  - Resolves: bz#659850
    (If VM boot seq. is set up as nc (PXE then disk) the VM is always stuck on trying to PXE boot)
  - Resolves: bz#660239
    (clock drift when migrating a guest between mis-matched CPU clock speed)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.29
changelog:
  - kvm-kernel-KVM-Don-t-spin-on-virt-instruction-faults-during-reb.patch [bz#661397]
  - kvm-kernel-KVM-VMX-Return-0-from-a-failed-VMREAD.patch [bz#661397]
  - Resolves: bz#661397
    (reboot(RB_AUTOBOOT) fails if kvm instance is running)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.30
changelog:
  - Revert the bz#661397 patches as they are not enough
    - kvm-kernel-Revert-KVM-VMX-Return-0-from-a-failed-VMREAD.patch [bz#661397]
    - kvm-kernel-Revert-KVM-Don-t-spin-on-virt-instruction-faults-dur.patch [bz#661397]
  - Related: bz#661397
    (reboot(RB_AUTOBOOT) fails if kvm instance is running)
  - kvm-kernel-KVM-fix-AMD-initial-TSC-offset-problems-additional-f.patch [bz#656984]
  - Resolves: bz#656984
    (TSC offset of virtual machines is not initialized correctly by 'kvm_amd' kernel module.)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.7
changelog:
  - kvm-qcow2-Remove-abort-on-free_clusters-failure.patch [bz#583947 bz#586246]
  - Resolves: bz#583947
    (Guest aborted when make guest stop on write error)
  - Resolves: bz#586246
    (Guest aborted when make guest stop on write error)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.8
changelog:
  - kvm-Revert-fix-wrong-acpi-mapping-rhel5.x-kvm-userspace.patch [bz#581758]
    - Patch causes issues (see bz#581758 comment 8)
  - Related: bz#581758
    (Win7/32 stuck on 100% CPU (in testing VDI driver unclassified WHQL tests))


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5_5.9
changelog:
  - Remove bios-nohotplug.bin from package
  - Related: bz#579737
    (QEMU: Too many devices are available for unplug in Windows XP (and we don't support that))


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-222.el5
changelog:
  - kvm-kernel-kvm-change-signed-int-to-unsigned-in-mmu_shrink.patch [bz#661117]
  - Resolves: bz#661117
    ([RHEL5.6 CC] mmu_shrink patch)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-223.el5
changelog:
  - Updated kversion to 2.6.18-237.el to match build root
  - Reverting patches for bz#608709 as they are not complete
    - kvm-kernel-Revert-KVM-VMX-Return-0-from-a-failed-VMREAD.patch [bz#608709]
    - kvm-kernel-Revert-KVM-Don-t-spin-on-virt-instruction-faults-dur.patch [bz#608709]
  - bz#608709: reboot(RB_AUTOBOOT) fails if kvm instance is running
  - Related: bz#661117


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-224.el5
changelog:
  - kvm-kernel-KVM-x86-zero-kvm_vcpu_events-interrupt.pad.patch [bz#665407]
  - Resolves: bz#665407
    (kvm_vcpu_events.interrupt.pad must be zeroed)
  - CVE: CVE-2010-4525


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-224.el5_6.1
changelog:
  - Updated kversion to 2.6.18-238.9.1.el to match build root
  - kvm-Make-migration-robust-to-trashing-workloads.patch [bz#696155]
  - Resolves: bz#696155
    (Enlarging migrate_set_speed does not raise migration network transfer rates to the real network bandwidth)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-237.el5
changelog:
  - Updated kversion to 2.6.18-266.el to match build root
  - kvm-floppy-save-and-restore-DIR-register.patch [bz#699370]
  - Resolves: bz#699370
    (floppy I/O error after live migration while floppy in use)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-238.el5
changelog:
  - Updated kversion to 2.6.18-268.el to match build root
  - kvm-Revert-floppy-save-and-restore-DIR-register.patch [bz#699370]
  - Related: bz#699370
    (floppy I/O error after live migration while floppy in use)
  - Resolves: bz#713389
    (Migration from host RHEL5.7 to host RHEL5.6.z failed with floppy)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-239.el5
changelog:
  - Updated kversion to 2.6.18-269.el to match build root
  - kvm-Revert-Make-migration-robust-to-trashing-workloads.patch [bz#713392]
  - Resolves: bz#713392
    (Increase migration max_downtime/or speed cause guest stalls.)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-239.el5_7.1
changelog:
  - kvm-e1000-prevent-buffer-overflow-when-processing-legacy.patch [bz#772079]
  - Resolves: bz#772079
    (EMBARGOED CVE-2012-0029 qemu-kvm: e1000: process_tx_desc legacy mode packets heap overflow [rhel-5.7.z])
  - kvm-Fix-external-module-compat.c-not-to-use-unsupported-.patch [bz#753860]
    (build fix)
  - kvm-kernel-KVM-x86-Prevent-starting-PIT-timers-in-the-absence-o.patch [bz#770100]
  - Resolves: bz#770100
    (CVE-2011-4622 kernel: kvm: pit timer with no irqchip crashes the system [rhel-5.7.z])


author: Michal Novotny <minovotn@redhat.com> - kvm-83-248.el5
changelog:
  - kvm-e1000-prevent-buffer-overflow-when-processing-legacy.patch [bz#772080]
  - CVE: CVE-2012-0029
  - Resolves: bz#772080
    (EMBARGOED CVE-2012-0029 qemu-kvm: e1000: process_tx_desc legacy mode packets heap overflow [rhel-5.8])


author: Michal Novotny <minovotn@redhat.com> - kvm-83-249.el5
changelog:
  - kvm-kernel-KVM-x86-Prevent-starting-PIT-timers-in-the-absence-o.patch [bz#770101]
  - CVE: CVE-2011-4622
  - Resolves: bz#770101
    (CVE-2011-4622 kernel: kvm: pit timer with no irqchip crashes the system [rhel-5.8])


author: Michal Novotny <minovotn@redhat.com> - kvm-83-249.el5_8.2
changelog:
  - kvm-kernel-KVM-Ensure-all-vcpus-are-consistent-with-in-kernel-i.patch [bz#808205]
  - Resolves: bz#808205
    (CVE-2012-1601 kernel: kvm: irqchip_in_kernel() and vcpu->arch.apic inconsistency [rhel-5.8.z])


author: Michal Novotny <minovotn@redhat.com> - kvm-83-249.el5_8.3
changelog:
  - kvm-fix-l1_map-buffer-overflow.patch [bz#816207]
  - Resolves: bz#816207
    (qemu-kvm segfault in tb_invalidate_phys_page_range())


author: Michal Novotny <minovotn@redhat.com> - kvm-83-249.el5_8.4
changelog:
  - kvm-kernel-KVM-unmap-pages-from-the-iommu-when-slots-are-remove.patch [bz#814151]
  - CVE: CVE-2012-2121
  - Resolves: bz#814151
    (CVE-2012-2121 kvm: device assignment page leak [rhel-5.8])


author: Michal Novotny <minovotn@redhat.com> - kvm-83-249.el5_8.5
changelog:
  - kvm-console-bounds-check-whenever-changing-the-cursor-du-58.patch [bz#851255]
  - CVE: CVE-2012-3515
  - Resolves: bz#851255
    (EMBARGOED CVE-2012-3515 qemu/kvm: VT100 emulation vulnerability [rhel-5.8.z])


author: Michal Novotny <minovotn@redhat.com> - kvm-83-249.el5_8.1
changelog:
  - kvm-posix-aio-compat-fix-thread-accounting-leak.patch [bz#802429]
  - Resolves: bz#802429
    ([RHEL5.8 Snapshot2]RHEL5.8 KVMGuest hung during Guest OS booting up)


author: Michal Novotny <minovotn@redhat.com> - kvm-83-260.el5
changelog:
  - kvm-console-bounds-check-whenever-changing-the-cursor-du.patch [bz#851256]
  - Resolves: bz#851256
    (EMBARGOED CVE-2012-3515 qemu: VT100 emulation vulnerability [rhel-5.9])


author: Michal Novotny <minovotn@redhat.com> - kvm-83-261.el5
changelog:
  - kvm-vnc-disable-VNC-password-authentication-security-typ.patch [bz#805676]
  - Resolves: bz#805676
    (FIPS 140-2 kernel and KVM)


author: Michal Novotny <minovotn@redhat.com> - kvm-83-262.el5
changelog:
  - kvm-virtio-Factor-virtqueue_map_sg-out.patch [bz#684745]
  - kvm-virtio-blk-fix-the-list-operation-in-virtio_blk_load.patch [bz#684745]
  - kvm-virtio-blk-Fix-migration-of-queued-requests.patch [bz#684745]
  - kvm-block-prevent-snapshot-mode-TMPDIR-symlink-attack.patch [bz#825687]
  - Resolves: bz#684745
    (Guest I/O can't be resumed after I/O failure on one host and then migration to another host)
  - Resolves: bz#825687
    (CVE-2012-2652 qemu: vulnerable to temporary file symlink attacks [rhel-5.9])


author: Michal Novotny <minovotn@redhat.com> - kvm-83-262.el5_1
changelog:
  - kvm-e1000-Discard-packets-that-are-too-long-if-SBP-and-L.patch [bz#910839]
  - kvm-e1000-Discard-oversized-packets-based-on-SBP-LPE.patch [bz#910839]
  - Resolves: bz#910839
    (CVE-2012-6075  qemu (e1000 device driver): Buffer overflow when processing large packets when SBP and LPE flags are disabled [rhel-5.9.z])


author: Michal Novotny <minovotn@redhat.com> - kvm-83-262.el5_2
changelog:
  - kvm-kernel-KVM-Fix-for-buffer-overflow-in-handling-of-MSR_KVM_S.patch [bz#917018]
  - kvm-kernel-KVM-Convert-MSR_KVM_SYSTEM_TIME-to-use-kvm_write_gue.patch [bz#917022]
  - kvm-kernel-KVM-Fix-bounds-checking-in-ioapic-indirect-register-.patch [bz#917028]
  - kvm-kernel-do-not-GP-on-unaligned-MSR_KVM_SYSTEM_TIME-write.patch [bz#bz917019]
  - Resolves: bz#917018
    (CVE-2013-1796 kernel: kvm: buffer overflow in handling of MSR_KVM_SYSTEM_TIME [rhel-5.9.z])
  - Resolves: bz#917022
    (CVE-2013-1797 kernel: kvm: after free issue with the handling of MSR_KVM_SYSTEM_TIME [rhel-5.9.z])
  - Resolves: bz#917028
    (CVE-2013-1798 kernel: kvm: out-of-bounds access in ioapic indirect register reads [rhel-5.9.z])


author: Michal Novotny <minovotn@redhat.com> - kvm-83-262.el5_3
changelog:
  - kvm-kernel-kvm-accept-unaligned-MSR_KVM_SYSTEM_TIME-writes.patch [bz#947363]
  - Resolves: bz#947363
    (RHEL.5.8.32 guest hang when installing)


author: Michal Novotny <minovotn@redhat.com> - kvm-83-262.el5_4
changelog:
  - Add missing kvm-fix-l1_map-buffer-overflow.patch [bz#958359]
  - Resolves: bz#958359
    (qemu-kvm segfault in tb_invalidate_phys_page_range())


author: Michal Novotny <minovotn@redhat.com> - kvm-83-265.el5
changelog:
  - kvm-kernel-kvm-accept-unaligned-MSR_KVM_SYSTEM_TIME-writes.patch [bz#924597]
  - Resolves: bz#924597
    (RHEL.5.8.32 guest hang when installing)


author: Michal Novotny <minovotn@redhat.com> - kvm-83-266.el5
changelog:
  - Updated kversion to 2.6.18-348.4.1.el5
  - kvm-fix-l1_map-buffer-overflow.patch [bz#956511]
  - Resolves: bz#956511
    (qemu-kvm segfault in tb_invalidate_phys_page_range())


author: Miroslav Rezanina <mrezanin@redhat.com> - kvm-83-266_10.1.el5
changelog:
  - KVM: x86: prevent cross page vapic_addr access (CVE-2013-6368) [bz#1032219]
  - KVM: x86: Fix potential divide by 0 in lapic (CVE-2013-6367) [bz#1032216]
  - Resolves: bz#1032219
    (CVE-2013-6368 kvm: cross page vapic_addr access [rhel-5.10])
  - Resolves: bz#1032216
    CVE-2013-6367 kvm: division by zero in apic_get_tmcct() [rhel-5.10.z]


author: Miroslav Rezanina <mrezanin@redhat.com> - kvm-83-267.el5
changelog:
  - KVM: x86: prevent cross page vapic_addr access (CVE-2013-6368) [bz#1032220]
  - Resolves: bz#1032220
    (CVE-2013-6368 kvm: cross page vapic_addr access [rhel-5.11])


author: Miroslav Rezanina <mrezanin@redhat.com> - kvm-83-268.el5
changelog:
  - KVM: x86: Fix potential divide by 0 in lapic (CVE-2013-6367) [bz#1032217]
  - Resolves: bz#1032217
   (CVE-2013-6367 kvm: division by zero in apic_get_tmcct() [rhel-5.11])


author: Miroslav Rezanina <mrezanin@redhat.com> - kvm-83-269.el5
changelog:
  - KVM: x86: Improve thread safety in pit
  - Resolves: bz#1152985
   (CVE-2014-3611 kernel: kvm: PIT timer race condition)


author: Jeff E. Nelson <jen@redhat.com> - kvm-83-270.el5
changelog:
  - KVM: x86: Check non canonical addresses upon WRMSR
  - Resolves: bz#1152982
   (CVE-2014-3610 kernel: kvm: noncanonical MSR writes [rhel-5.11.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - kvm-83.272.el5
changelog:
  - kvm-fdc-force-the-fifo-access-to-be-in-bounds-of-the-all.patch [bz#1219266]
  - Resolves: bz#1219266
    (kvm: qemu: floppy disk controller flaw [rhel-5.11.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - kvm-83.273.el5
changelog:
  - kvm-pcnet-Properly-handle-TX-requests-during-Link-Fail.patch [bz#1225896]
  - kvm-pcnet-fix-Negative-array-index-read.patch [bz#1225896]
  - kvm-pcnet-force-the-buffer-access-to-be-in-bounds-during.patch [bz#1225896]
  - Resolves: bz#1225896 
    (EMBARGOED CVE-2015-3209 kvm: qemu: pcnet: multi-tmd buffer overflow in the tx path [rhel-5.11.z)


author: Jeff E. Nelson <jen@redhat.com> - kvm-83.274.el5
changelog:
  - net-add-checks-to-validate-ring-buffer-pointers.patch [bz#1263272]
  - Resolves: bz#1263272
    (CVE-2015-5279 kvm: qemu: Heap overflow vulnerability in ne2000_receive() function [rhel-5.11.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - kvm-83.275.el5
changelog:
  - kvm-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch [bz#1334173]
  - Resolves: bz#1334173
    CVE-2016-3710 kvm: qemu: incorrect banked access bounds checking in vga module [rhel-5.11.z]


author: Miroslav Rezanina <mrezanin@redhat.com> - 83-275.el5_11
changelog:
  - kvm-virtio-error-out-if-guest-exceeds-virtqueue-size.patch [bz#1359723]
  - Resolves: bz#1359723
    CVE-2016-5403 kvm: Qemu: virtio: unbounded memory allocation on host via guest leading to DoS [rhel-5.11.z]


author: Miroslav Rezanina <mrezanin@redhat.com> - 83-277.el5_11
changelog:
  - kvm-Fix-hardware-accelerated-video-to-video-copy-on-Cirr.patch [bz#1421564]
  - kvm-cirrus_vga-fix-division-by-0-for-color-expansion-rop.patch [bz#1421564]
  - kvm-cirrus-fix-blit-region-check.patch [bz#1421564]
  - kvm-cirrus-don-t-overflow-CirrusVGAState-cirrus_bltbuf.patch [bz#1421564]
  - kvm-cirrus_vga-fix-off-by-one-in-blit_region_is_unsafe.patch [bz#1421564]
  - kvm-display-cirrus-check-vga-bits-per-pixel-bpp-value.patch [bz#1421564]
  - kvm-display-cirrus-ignore-source-pitch-value-as-needed-i.patch [bz#1421564]
  - kvm-cirrus-handle-negative-pitch-in-cirrus_invalidate_re.patch [bz#1421564]
  - kvm-cirrus-allow-zero-source-pitch-in-pattern-fill-rops.patch [bz#1421564]
  - kvm-cirrus-fix-blit-address-mask-handling.patch [bz#1421564]
  - kvm-cirrus-fix-oob-access-issue-CVE-2017-2615.patch [bz#1421564]
  - kvm-cirrus-fix-patterncopy-checks.patch [bz#1421564]
  - kvm-Revert-cirrus-allow-zero-source-pitch-in-pattern-fil.patch [bz#1421564]
  - kvm-cirrus-add-blit_is_unsafe-call-to-cirrus_bitblt_cput.patch [bz#1421564]
  - Resolves: bz#1421564
    (CVE-2017-2615 kvm: Qemu: display: cirrus: oob access while doing bitblt copy backward mode [rhel-5.11.z])


author: Doug Ledford <dledford@redhat.com> - 2:7.1.2-10
changelog:
  - Fix the sed substitutions to be global so they catch all the items
    that need to be substituted
  - RESOLVES: bz240457


author: Doug Ledford <dledford@redhat.com> - 2:7.1.2-11
changelog:
  - On upgrade we loose our alternatives links.  This is because of a bug in
    the previous lam package.  Correct our pre/post scripts so the bug will
    no longer exist, but it will require running upgrade twice in order to
    recreate the missing alternatives links.


author: Doug Ledford <dledford@redhat.com> - 2:7.1.2-12
changelog:
  - Convert over to use mpi-selector and resolve the alternatives links
    issue once and for all
  - Related: bz428199


author: Doug Ledford <dledford@redhat.com> - 2:7.1.2-14
changelog:
  - Oops, I had the post/preun scripts attached to the -libs packages, while
    the mpivars.* files mpi-selector needed was installed in the base
    package.  This presented a race condition where the mpivars.* files might
    or might not be present by the time the post script ran.  We attach to the
    right package now.
  - Resolves: bz440397
  - Related: bz428199


author: Matthias Saou <http://freshrpms.net/> 3.96.1-5
changelog:
  - Clear not needed executable stack flag bit from the library to make it work
    with selinux, add prelink build requirement (need to remove for old distros).


author: Tomas Bzatek <tbzatek@redhat.com> - 1.15-1.2.2.el5_2.1
changelog:
  - Fix insufficient input validation in ReadEmbeddedTextTag
  - Fix unsigned -> signed integer cast issue in cmsAllocGamma
  - Resolves: #473469


author: Tomas Bzatek <tbzatek@redhat.com> - 1.18-beta1.1.el5_3.1
changelog:
  - Rebase to upstream 1.18beta1
  - CVE-2009-0581 LittleCms memory leak
  - CVE-2009-0723 LittleCms integer overflow
  - CVE-2009-0733 LittleCms lack of upper-bounds check on sizes
  - Resolves: #487513


author: Vivek Lakshmanan <vivekl@redhat.com> 0:4.18-2jpp.2
changelog:
  - Add gcj aot-compilation
  - Replace packaged jars with build-system's jars
  - Bring upto Jpackage standards


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 436-9
changelog:
  - Fix debuginfo source files permissions
  - Fix gcc warning: type-punning to incomplete type might break strict-aliasing rules


author: Jiri Skala <jskala@redhat.com> - 3.7.11-2
changelog:
  - Resolves: #504591 - Problems with spaces in file names over HTTP
  - Resolves: #504594 - Alias ''edit' has multiple flaws


author: Ondrej Vasik <ovasik@redhat.com> - 3.7.11-4.el5_5.2
changelog:
  - Related: CVE-2010-2251 - describe new option xfer:auto-rename 
    which could restore old behaviour in manpage


author: Ondrej Vasik <ovasik@redhat.com> - 3.7.11-4.el5_5.3
changelog:
  - Related: CVE-2010-2251 - document change of xfer:clobber default
    value in manpage, respect xfer:clobber on with xfer:auto-rename on
    (old behaviour)


author: Ondrej Vasik <ovasik@redhat.com> - 3.7.11-5
changelog:
  - Resolves: CVE-2010-2251 - multiple HTTP client download filename
    vulnerability (#617871)
  - describe new option xfer:auto-rename  which could restore old
    behaviour in manpage


author: Jiri Skala <jskala@redhat.com> - 3.7.11-6
changelog:
  - Resolves: #532099 - lftp doesn't work with ssl
  - Resolves: #570495 - lftp in RHEL 5 doesn't properly implement CCC


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.3-10.el5
changelog:
  - increase_makekeys.patch: Increase size of working arrays in the makekeys
    utility program to prevent build errors.
  - keysyms.patch: add key symbols for various multimedia keys (#496184)


author: Adam Jackson <ajax@redhat.com> 1.0.3-8.el5
changelog:
  - libX11-GB18030.patch: Fix the previous patch to unbreak input for non-UTF8
    locales (BIG5, etc.) (#220040)


author: Soren Sandmann <ssp@redhat.com> 1.2.2-1.0.5.el5
changelog:
  - cve-2013-6462.patch: sscanf overflow (bug 1049684)
  - sscanf-hardening.patch: Some other sscanf hardening fixes (1049684)


author: Benjamin Tissoires <btissoir@redhat.com> 1.2.2-1.0.6
changelog:
  - CVE-2014-0209: integer overflow of allocations in font metadata file parsing (bug 1163602, bug 1163601)
  - CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies (bug 1163602, bug 1163601)
  - CVE-2014-0211: integer overflows calculating memory needs for xfs replies (bug 1163602, bug 1163601)


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Added "Requires: xorg-x11-proto-devel" to devel package for xi.pc
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.0.2-3.fc6
changelog:
  - Add the {_datadir}/X11/app-defaults directory to the file manifest, as
    libXt is the canonical owner of the directory.  Discovered in (#198025).


author: Ray Strode <rstrode@redhat.com> 2.16.0-1.1
changelog:
  - Tie bonobo-activation-server to session if the
    BONOBO_ACTIVATION_RUN_SERVER_PER_SESSION environment variable
    is set.
    Resolves: #641814


author: Caius Chance <cchance@redhat.com> - 0.3.0-8.el5
changelog:
  - Resolves: rhbz#219431 (Up arrow button in candidate window doesn't work.)
  - Resolves: rhbz#220290 (Candidate list (symbol) page change inaccuracy.)
  - Resolves: rhbz#218565 (Candidate list not cleared before re-display.)
    <<< rhbz#220288 is replaced by rhbz#218565.


author: Doug Ledford <dledford@redhat.com> - 1.1.2-2
changelog:
  - Obsolete the old -devel package (which really was just a static
    lib, no real devel environment, hence the name change to -static)
  - Resolves: bz432769


author: Doug Ledford <dledford@redhat.com> - 1.1.4-1
changelog:
  - Update to 1.1.4 to match OFED 1.3
  - Add a modprobe conf file in /etc/modprobe.d so that the iw_cxgb3 module
    will always be loaded after the cxgb3 net module
  - Related: bz428197


author: Doug Ledford <dledford@redhat.com> - 1.3.1-2.el5
changelog:
  - Bump and rebuild against latest libibverbs
  - Modify Provides for libibverbs-driver to be arch specific to match
    what libibverbs expects
  - Related: bz802619


author: Doug Ledford <dledford@redhat.com> - 1.2.0-2
changelog:
  - Bump and rebuild against new libibvers
  - Update Provides libibverbs-driver to include arch as libibverbs expects
  - Related: bz802620


author: David Cantrell <dcantrell@redhat.com> - 1.20-10
changelog:
  - Fix loader SIGSEGV when getting an IP address
    Resolves: rhbz#500775
  - Fix problem when configuring interface and receiving EBUSY from libnl
    Resolves: rhbz#444919


author: David Cantrell <dcantrell@redhat.com> - 1.20-12
changelog:
  - Do not pass invalid flags to rtnl_link_set_flags()
    Resolves: rhbz#616865
  - Iterate over libnl nic cache use nl_cache_get_first() and
    nl_cache_get_next() to keep index numbers in sequence.
    Resolves: rhbz#599633


author: David Cantrell <dcantrell@redhat.com> - 1.20-2
changelog:
  - Request and handle static-routes option for IPv4 requests
  - Resolves: rhbz#236936
  - libdhcp-devel obsoletes pump-devel <= 0.8.24
  - Resolves: rhbz#238866


author: Richard Hughes <rhughes@redhat.com> - 0.6.20-1.el5_7.1
changelog:
  - Update to 0.6.20
  - Repackage a newer version of libexif-docs
  - Convert doc files to utf-8
  - Update the license field
  - Resolves: #689614


author: Richard Hughes <rhughes@redhat.com> - 0.6.21-1
changelog:
  - Update to version 0.6.21 fixing many bugs and CVEs
  - Remove upstreamed patches
  - Resolves: #839913


author: Tomas Mraz <tmraz@redhat.com> 1.4.4-1
changelog:
  - update to 1.4.4 (#444803)
  - do not abort when the fips mode kernel flag is inaccessible
    due to permissions
  - hobble the library to drop the ECC support
  - add hmac FIPS integrity verification check


author: Jan Zeleny <jzeleny@redhat.com> - 2.2-3
changelog:
  - minor changes in spec file - filenames change, removal of
    duplicate patch files (included in build source tarball)


author: Jan Zeleny <jzeleny@redhat.com> - 1.0.7-3
changelog:
  - replaced unofficial 1.0.7 source tarball with official one
  - update of Makefile, part of it moved to postinstall section
    of spec file


author: Nils Philippsen <nphilipp@redhat.com> - 1.2-4
changelog:
  - add "Provides/Requires: libhugetlbfs-%{arch} ..." to base and -devel
    packages to avoid upgrade problems on multilib systems (#432799)
  - change license tag to LGPLv2+


author: Doug Ledford <dledford@redhat.com> - 1.2.0-1.el5
changelog:
  - Update to the latest (and last) upstream release.  This library is now
    deprecated and users should not expect any further updates.  In addtion,
    users are strongly encouraged to discontinue use of this library as it may
    disappear in the future.
  - Related: bz518218


author: Doug Ledford <dledford@redhat.com> - 1.3.3-1.el5
changelog:
  - Update to latest upstream source
  - Remove dependence on libibcommon since we no longer use it
  - Related: bz518218


author: Doug Ledford <dledford@redhat.com> - 1.3.7-1.el5
changelog:
  - Backport rhel6.3 version to rhel5.9 (adds FDR support)
  - Related: bz771441 (updated mlx4 driver with FDR support)


author: Doug Ledford <dledford@redhat.com> - 1.1.2-1
changelog:
  - Update to latest upstream version
  - Add ppc wmb patch
  - Add requires on openib base package
  - Resolves: bz451453, bz459521


author: Doug Ledford <dledford@redhat.com> - 1.1.2-2.el5.xrc
changelog:
  - Update to ofed-1.4.1-rc3 libibverbs, which has xrc support in the tarball
    even though it has the same version release as Roland's upstream tarball,
    and Roland's upstream tarball does *not* have xrc support yet, so
    rename the tarball appropriately.
  - Remove unneeded patch
  - Related: bz459652


author: Doug Ledford <dledford@redhat.com> - 1.1.2-3.el5
changelog:
  - Remove XRC support since it's likely to change during integration with
    upstream sources
  - Compile with valgrind support (all except ia64 where valgrind doesn't
    exist)
  - Resolves: bz506258, bz504284


author: Doug Ledford <dledford@redhat.com> - 1.1.6-1.el5
changelog:
  - Backport latest rhel6 libibverbs to rhel5
  - Update build requires for new valgrind packaging
  - Related: bz787610
  - Resolves: bz578640


author: Doug Ledford <dledford@redhat.com> - 1.1.6-2.el5
changelog:
  - Change the static package back to the right name so that the multilib
    setup is not fooled (build system requirement)
  - Related: bz771441


author: Doug Ledford <dledford@redhat.com> - 1.1.6-3.el5
changelog:
  - Keep ibv_rc_pingpong test from failing when given a size argument
    outside of reason
  - Resolves: bz571779


author: Doug Ledford <dledford@redhat.com> - 1.1-10
changelog:
  - Update to the OFED 1.3 version of libipathverbs-1.1.tar.gz (there is a 300k
    size difference between the libipathverbs-1.1.tar.gz in the OFED release
    and the file by the same name at openfabrics.org/downloads/...which is
    just insane, they should have different release numbers, but they don't,
    so for anyone to duplicate what I have here, you will need to get the
    libipathverbs-1.1.tar.gz file out of the libipathverbs-1.1-1.ofed1.3 src
    rpm out of the OFED-1.3.tar.gz download at the openfabrics site)
  - Related: bz428197


author: Doug Ledford <dledford@redhat.com> - 1.2-3.el5
changelog:
  - Update to new libibverbs-driver provide method
  - Backport rhel6.3 changes to rhel5.9
  - Related: bz771441


author: Doug Ledford <dledford@redhat.com> - 1.0-3
changelog:
  - Add a modprobe conf file so that the mlx4 IB driver will get loaded after
    the core driver is loaded
  - Related: bz428197


author: Doug Ledford <dledford@redhat.com> - 1.0-5.el5.xrc
changelog:
  - Add xrc support from OFED 1.4.1-rc3
  - Add support for setting port types at core module load time
  - Related: bz459652


author: Doug Ledford <dledford@redhat.com> - 1.0.1-1.el5
changelog:
  - Update to upstream bug fix release
  - Compile against non-XRC libibverbs
  - Enable valgrind annotations
  - Related: bz506258, bz504284
  - Resolves: bz505553


author: Doug Ledford <dledford@redhat.com> - 1.0.1-3.el5
changelog:
  - Pull various fixes out of upstream git repo that are queued for next release
  - Resolves: bz511190
  - Related: bz518218


author: Jay Fenlason <fenlason@redhat.com> 1.0.1-6.el5
changelog:
  - change build-requires from valgrind to valgrind-devel to make this
    actually build
    Related: bz670887 Add new PCI IDs to libmlx4


author: Doug Ledford <dledford@redhat.com> - 1.0.5-2.el5.xrc
changelog:
  - Update tarball to ofed 1.4.1-rc3 tarball so it compiles cleanly with the
    xrc enabled libibverbs
  - Related: bz459652


author: Doug Ledford <dledford@redhat.com> - 1.0.5-5.el5
changelog:
  - Update to new libibverbs API
  - Pick up currently accepted but not yet released patches from upstream repo
  - Related: bz518218


author: Doug Ledford <dledford@redhat.com> - 0.5-3
changelog:
  - Upstream has updated the libnes tarball without changing the version.  Pick
    up the libnes-0.5.tar.gz tarball that's dated 13-Jun-2008
  - Resolves: bz451470


author: Doug Ledford <dledford@redhat.com> - 0.5-5.el5
changelog:
  - Fix a minor memleak (from upstream)
  - Rebuild against libibverbs that has xrc support
  - Related: bz459652


author: Doug Ledford <dledford@redhat.com> - 0.6-1.el5
changelog:
  - Build against non-XRC libibverbs
  - Update to ofed 1.4.1 final bits
  - Remove no longer needed memleak patch
  - Related: bz506258, bz506097


author: Tom Lane <tgl@redhat.com> 2:1.2.10-13
changelog:
  - Back-port fixes for CVE-2011-2690, CVE-2011-2692
    Note: CVE-2011-2691, announced at the same time, does not apply to 1.2.10;
    likewise for CVE-2011-2501
  Resolves: #721304


author: Tom Lane <tgl@redhat.com> 2:1.2.10-7.0.3
changelog:
  - Back-port critical fixes from libpng 1.2.22, primarily to fix CVE-2007-5269
  Resolves: #337521
  - Update License tag and some other obsolete bits in specfile


author: Tom Lane <tgl@redhat.com> 2:1.2.10-7.1.el5_5.3
changelog:
  - Back-port fixes for CVE-2009-2042, CVE-2010-0205, CVE-2010-1205,
    CVE-2010-2249
  Resolves: #609921


author: Tom Lane <tgl@redhat.com> 2:1.2.10-7.1.el5_7.4
changelog:
  - Back-port fixes for CVE-2011-2690, CVE-2011-2692
    Note: CVE-2011-2691, announced at the same time, does not apply to 1.2.10;
    likewise for CVE-2011-2501
  Resolves: #721303


author: Doug Ledford <dledford@redhat.com> - 1.0.8-4.el5
changelog:
  - Rename tarball to reflect that it's from the OFED 1.4.1 package as the md5sum
    of the ofed version of this tarball and the upstream version of the
    same tarball differ


author: Doug Ledford <dledford@redhat.com> - 1.1.99-10
changelog:
  - Add an epoch back in (evidently when libsdp was part of the openib package
    it had an epoch that was missed when it was split out)
  - Resolves: bz448733


author: Doug Ledford <dledford@redhat.com> - 1.1.99-10
changelog:
  - Add an epoch back in (evidently when libsdp was part of the openib package
    it had an epoch that was missed when it was split out)
  - Resolves: bz451637


author: Dan Walsh <dwalsh@redhat.com> - 1.33.4-3
changelog:
  - Fix python selinux module segfault in getfilecon
  - Fix get_default_context_with_level
  Resolves: #224637


author: Dan Walsh <dwalsh@redhat.com> - 1.33.4-5.1
changelog:
  - Break out utilities into separate package so rpm -V libselinux will work
  - Stop writing to stderr when matchpathcon has an error
  Resolves: #190314


author: Miroslav Grepl <mgrepl@redhat.com> - 1.33.4-5.6
changelog:
  - Add
    - selinux_virtual_domain_context_path
    - selinux_virtual_image_context_path
  Resolves:#582612


author: Dan Walsh <dwalsh@redhat.com> 1.15.1-1
changelog:
  - Upgrade to latest from NSA
  	* Merged fix for version comparison that was preventing range
  	  transition rules from being written for a version 5 base policy
  	  from Darrel Goeddel.


author: Dan Walsh <dwalsh@redhat.com> 1.15.2-1.el5
changelog:
  - Upgrade to latest from NSA
  	* Merged fix from Karl MacMillan for a segfault when linking
  	  non-MLS modules with users in them.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.0.1-11
changelog:
  - Resolves: rhbz#643038 - libtalloc needs to support the older library for
  -                         backward compatibility


author: Stephen Gallagher <sgallagh@redhat.com> - 2.0.1-13
changelog:
  - Run 'make test' during RPM build
  - Resolves: rhbz#837853 - talloc doesn't ensure that the sibling linked list
                            remains valid during a free


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.7-1
changelog:
  - Rebase to 2.0.7
  - Resolves: rhbz#855862 - Rebase libtalloc to version 2.0.7 to pick
                            the latest bug fixes


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.7-2
changelog:
  - Mark libraries as executable so that they are stripped and included
    in the -debuginfo
  - Resolves: rhbz#855862 - Rebase libtalloc to version 2.0.7 to pick
                            the latest bug fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-6
changelog:
  - Resolves: rhbz#693785 - tdb_extend() can cause a memory-usage explosion if
  -                         the size of its entries are very large


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.10-1
changelog:
  - Rebase to version 1.2.10 to support new samba 3.6.6
  - Resolves: rhbz#837865 - Rebase libtdb to version 1.2.10 in RHEL 5.9


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.18-1
changelog:
  - Resolves: rhbz#951045 - Rebase libtevent to version 0.9.18
  - Relax libtalloc requirements - only require 2.0.7 and do not check for
    pytalloc presence if python is disabled
  - Drop the ABI compatibility patch (no longer needed)
  - Drop the tevent_signal segv patch (upstreamed)


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.18-2
changelog:
  - Resolves: rhbz#975488 - Additional flags might have no effect
                            on 32bit architectures


author: Tom Lane <tgl@redhat.com> 3.8.2-13
changelog:
  - Fix incorrect fix for CVE-2011-0192
  Resolves: #688828
  - Add fix for CVE-2011-1167
  Resolves: #688745


author: Tom Lane <tgl@redhat.com> 3.8.2-17
changelog:
  - Fix incomplete patch for CVE-2012-3401
  - Add libtiff-tiffinfo-exif.patch so that our test case for CVE-2012-5581 works
    with pre-4.0.2 libtiff
  Resolves: #885308


author: Tom Lane <tgl@redhat.com> 3.8.2-17
changelog:
  - Fix incomplete patch for CVE-2012-3401
  - Add libtiff-tiffinfo-exif.patch so that our test case for CVE-2012-5581 works
    with pre-4.0.2 libtiff
  Resolves: #885309


author: Petr Hracek <phracek@redhat.com> - 3.8.2-19
changelog:
  - Resolves: #1063460 CVE-2013-1960 CVE-2013-1961 CVE-2013-4231 CVE-2013-4232 CVE-2013-4243 CVE-2013-4244
    libtiff various flaws


author: Tom Lane <tgl@redhat.com> 3.8.2-7.el5.1
changelog:
  - Fix LZW decoding vulnerabilities (CVE-2008-2327)
  Resolves: #458812
  - Remove sgi2tiff.1 and tiffsv.1, since they are for programs we don't ship
  Resolves: #460120


author: Tom Lane <tgl@redhat.com> 3.8.2-7.el5.3
changelog:
  - Fix some more LZW decoding vulnerabilities (CVE-2009-2285)
  Resolves: #507725
  - Update upstream URL


author: Tom Lane <tgl@redhat.com> 3.8.2-7.el5_6.7
changelog:
  - Fix incorrect fix for CVE-2011-0192
  Resolves: #688827
  - Add fix for CVE-2011-1167
  Resolves: #688744


author: Karsten Hopp <karsten@redhat.com> 1.5.22-7
changelog:
  - add fix for CVE-2009-3736,
    libltdl may load and execute code from a library in the current directory


author: Miloslav Trmač <mitr@redhat.com> - 0.54.7-2.el5.3
changelog:
  - When changing passwords, only silently ignore known shadow markers, not all
    invalid hashes
    Resolves: #225495
  - Update the last password change date field when changing passwords
    Resolves: #243854


author: Miloslav Trmač <mitr@redhat.com> - 0.54.7-3
changelog:
  - Default commonName to user name if gecos is empty
    Resolves: #670279
  - Fix segfault when reading database files with certain sizes
    Resolves: #758117


author: Mike A. Harris <mharris@redhat.com> 1.1.4-2.fc6
changelog:
  - Removed usage of rpm macros inside the spec changelog (#200051)
  - Removed non-UTF-8 chars from changelog.


author: Daniel Veillard <veillard@redhat.com> - 0.5.5-1.el5
changelog:
  - Rebase against new upstream release 0.5.5 fixing some leaks
  - Resolves: rhbz#474681
  - fix an unowned directory
  - Resolves: rhbz#481810


author: Daniel Veillard <veillard@redhat.com> - 0.2.3-9.el5
changelog:
  - patch to fix the pvfb vncdisplay port in XML dumps
  - Resolves: rhbz #254188
  - Related: rhbz #250789


author: Daniel P. Berrange <berrange@redhat.com> - 0.3.3-14.el5_3.1
changelog:
  - Add missing readonly checks for APIs (CVE-2008-5086)
  - Add missing buf check in proxy daemon (CVE-2009-0036)


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-3.el5
changelog:
  - add patch to fix NUMA compatibility problem with backport to xen-3.0.3
  - re-add a RHEL specific patch for PVFB on 3.0.3
  - renamed the second disk ID patch
  - Resolves: rhbz#426324


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-5.el5
changelog:
  - fix network Paravirt drivers on HVM
  - clarify documentation for virsh setcpus and setmem commands
  - Resolves: rhbz#429301
  - Resolves: rhbz#429186


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-20.el5
changelog:
  - redefining a Xen domain could reset the domain id
  - fix Xen inotify checking of /etc/xen and avoid vanishing domains
  - resolves: rhbz#508278


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.3-31.el5
changelog:
  - Fix ACS with root devices (rhbz 526713)
  - Fix PCI device re-assignment (rhbz 500217)
  - Fix a race between KVM and libvirt (rhbz 500217)
  - Fix state bug in libvirtd (rhbz 500217)
  - Set machine type to "rhel5.4.0" by default (rhbz 542665)
  - Correct erroneous expression in pciDeviceDownstreamLacksACS (rhbz 526713)


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.3-32.el5
changelog:
  - Make numa errors non-fatal (rhbz 559755)
  - Create raw storage files with O_DSYNC (rhbz 563151)
  - Increase qemu guest startup timeout to 30 seconds (rhbz 563151)


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.3-33.el5
changelog:
  - Conflict with kvm release older than kvm-83-142.el5 (rhbz 569372)
  - Call fsync() at the end instead of opening raw files with O_DSYNC (rhbz 563151)


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.3-33.el5_5.2
changelog:
  - Fix discrepancy between xm list and virsh list (rhbz 618200)
  - Set a stable & high MAC addr for guest TAP devices on host (rhbz 617243)


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.3-33.el5_5.3
changelog:
  - Explicitly set qcow2 backing store format (CVE-2010-2239)
  - Remap privileged source ports from guests behind NAT (CVE-2010-2242)
  - Eliminate memory leak in xenUnifiedDomainInfoListFree (rhbz 619711)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-13.el5
changelog:
  - Fix warnings in text monitor events (rhbz #574017)
  - Fix host CPU counting on unusual NUMA topologies (rhbz #654540)
  - Properly escape & character in xen driver (rhbz #472437)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-15.el5_6.3
changelog:
  - Properly report error in virConnectDomainXMLToNative (CVE-2011-1146)
  - Guess rhel macro based on dist macro (rhbz#688728)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-20.el5
changelog:
  - Support enabling or disabling the HPET for Xen domains (rhbz#703193)
  - SMBIOS support (rhbz#661365)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.8.2-23.el5
changelog:
  - network: Only attempt removal of the rule allowing tftp if it was added (rhbz#676622)
  - Prevent crash from dlclose() of libvirt.so (rhbz#735127)
  - Fix order of disks and controllers (rhbz#719435)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.8.2-24.el5
changelog:
  - qemuConnectMonitor: Fix a bug that would have masked SELinux failure (rhbz#747514)
  - xml: Avoid compiler warning (rhbz#747514)
  - Fixes for several memory leaks (rhbz#747514)
  - storage: Avoid memory leak (rhbz#747514)
  - Add missing error reporting when loading mac filter config for QEMU (rhbz#747514)
  - qemu: Avoid memory leaks (rhbz#747514)
  - qemu: Avoid leaking uninit data from hotplug to dumpxml (rhbz#747514)
  - qemu: Avoid leaking uninit data from hotplug to dumpxml (rhbz#747514)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.8.2-28.el5
changelog:
  - qemu: Rollback on used USB devices (rhbz#816601)
  - qemu: Don't delete USB device on failed qemuPrepareHostdevUSBDevices (rhbz#816601)


author: Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.12.el5_7.2
changelog:
  - Fix the semantic of XPath axis for namespace/attribute nodes CVE-2010-4008
  - Fix an off by one error in encoding CVE-2011-0216
  - Fix some potential problems on reallocation failures CVE-2011-1944
  - Fix missing error status in XPath evaluation CVE-2011-2834
  - Make sure the parser returns when getting a Stop order CVE-2011-3905
  - Fix an allocation error when copying entities CVE-2011-3919.patch
  - Resolves: rhbz#771906


author: Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.15.el5
changelog:
  - Fix the semantic of XPath axis for namespace/attribute nodes CVE-2010-4008
  - Fix an off by one error in encoding CVE-2011-0216
  - Fix some potential problems on reallocation failures CVE-2011-1944
  - Fix missing error status in XPath evaluation CVE-2011-2834
  - Make sure the parser returns when getting a Stop order CVE-2011-3905
  - Fix an allocation error when copying entities CVE-2011-3919.patch
  - Resolves: rhbz#771907


author: Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.15.el5_8.3
changelog:
  - Fix parser local buffers size problems (rhbz#843739)
  - Fix entities local buffers size problems (rhbz#843739)
  - Fix an error in previous commit (rhbz#843739)


author: Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.15.el5_8.5
changelog:
  - Implement some default limits in the XPath module (CVE-2011-1944)
  - Change the XPath code to percolate allocation errors (CVE-2011-1944)


author: Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.21.el5_9.2
changelog:
  - Fix some Relax-NG and XSD validation failures (rhbz#915350)
  - xmlDOMWrapCloneNode discards namespace of the node parameter(rhbz#915837)


author: Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.21.el5_9.3
changelog:
  - fixed one regexp bug and added a (rhbz#987321)
  - Another small change on the algorithm for the elimination of epsilon (rhbz#987321)


author: Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.24.el5
changelog:
  - fixed one regexp bug and added a (rhbz#922450)
  - Another small change on the algorithm for the elimination of epsilon (rhbz#922450)


author: Daniel Veillard <veillard@redhat.com> - 1.1.17-4.el5_8.1
changelog:
  - fixes CVE-2011-1202 CVE-2011-3970 CVE-2012-2825 CVE-2012-2871 CVE-2012-2870
  - Fix portability to upcoming libxml2-2.9.0
  - Fix generate-id() to not expose object addresses (CVE-2011-1202)
  - Fix some case of pattern parsing errors (CVE-2011-3970)
  - Fix a bug in selecting XSLT elements (CVE-2012-2825)
  - Fix default template processing on namespace nodes (CVE-2012-2871)
  - Fixed problem with namespace on compound predicate
  - Fix direct pattern matching bug
  - Big fixes of pattern compilations
  - Fixes #527297 general patter comps fix and cleanup other cleanups Daniel
  - QName parsing fix for patterns
  - Cleanup of the pattern compilation code (CVE-2012-2870)
  - Hardening of code checking node types in various entry point (CVE-2012-2870)
  - Hardening of code checking node types in EXSLT (CVE-2012-2870)
  - Fix system-property with unknown namespace
  - Xsltproc should return an error code if xinclude fails
  - Fix a dictionary string usage
  - Avoid a heap use after free error


author: Aristeu Rozanski <aris@redhat.com> 0.7.8.3-11.1.el5
changelog:
  - fixed maximum distance for cursor device [843859]
  - fixed initial tool value for when the server starts and the tool is in proximity [843859]


author: Aristeu Rozanski <arozansk@redhat.com> 0.7.8.3-6.el5
changelog:
  - wacomcpl: show device name on windows' description
  - udev rules updated to create symbolic links to PnP serial tablets


author: Nikola Pajkovsky <npajkovs@redhat.com> 2.10.7-7
changelog:
  - Resolves: #513099	Add support for new chip models supported by fschmd to lm_sensors
  - add FSC Syleus
  - add FSC Hades


author: Yuval Kashtan <ykashtan@redhat.com> - 1.0-3.el5
changelog:
  - fix log4cpp needs rebuild to increase version number to be greater than version used in RHEVH branch (#502047)
  Resolves: #502047


author: Yuval Kashtan <ykashtan@redhat.com> - 1.0-4.el5
changelog:
  - limit rpm to x86_64, because it is used only by qspice, to fix #513407: "stack smashing detected" error on ia64 
  Workaround: #513407


author: Yuval Kashtan <ykashtan@redhat.com> - 1.0-5.el5
changelog:
  - add i386, for qspice-xpi, to fix #552566: log4cpp is not built for i386 
  - resolve: #502679: multilib conflict in log4cpp-1.0-3.el5


author: Jan Kaluza <jkaluza@redhat.com> - 3.7.4-12
changelog:
  - fix #474013 - mention scripts arguments in man page
  - fix #461494 - proper exit code when logrotate.status is corrupted
  - fix #484075 - logrotate "size" directive can exceed 1895825408 bytes
  - fix #485553 - add proper /var/log/btmp pattern into default logrotaet config
  - fix #540119 - fixed missingok problem with globs
  - fix #567365 - handle errors during rename call
  - fix #638591 - better documentation of "size" parameter
  - fix #622059 - mention authors in man page
  - fix #579680 - fixed logrotate postrotate script args with nosharedscripts
  - fix #642936 - mention all options in manpage
  - fix #574784 - prevent recursive include


author: Jan Kaluza <jkaluza@redhat.com> - 3.7.4-13
changelog:
  - fix #795405 - added .rhn-cfg-tmp-* to default taboext
  - fix #736045 - check for brackets order in config file


author: Tomas Smetana <tsmetana@redhat.com> - 3.7.4-8
changelog:
  - fix #247410 - logrotate does not honor size directive
  - fix #250059 - logrotate manual page bug
  - fix #259281 - logrotates default config rotates wtmp irrationally often


author: Tomas Smetana <tsmetana@redhat.com> - 3.7.4-9
changelog:
  - fix #431836 - memory error on corrupted status file
  - fix #445554 - lgrotate ignores pre/postrotating scripts arguments
  - fix #447022 - logrotate doesn't rotate logs if status file is corrupted


author: Peter Schiffer <pschiffe@redhat.com> 4.78-4
changelog:
  - resolves: #733684
    [RFE] Add ability to exclude a file descriptors corresponding to a particular file system


author: Peter Schiffer <pschiffe@redhat.com> 4.78-5
changelog:
  - resolves: #513613
    lsof fails to suppress warning messages if -b -w option is used and some nfs volume mounted
  - related: #733684
    fixed bug when multiple +|-e options were ignored


author: Petr Machata <pmachata@redhat.com> - 0.5-11.45svn
changelog:
  - patch from Supriya Kannery implements fetching 5th and further
    function arguments on s390
  - fix testsuite for interaction of -c and -o
  - added fork/exec patches, mostly IBM's work
  - added trace-exec tests into suite
  - fix handling of the case where forked child is reported before
    parent's fork event
  - Resolves: #265941
  - Resolves: #426352
  - Resolves: #485779


author: Petr Machata <pmachata@redhat.com> - 0.5-12.45svn
changelog:
  - support tracing of 31-bit binaries with 64-bit ltrace on s390
  - remove bogus "wrong pid" message from earlychild patch
  - Resolves: #265941


author: Petr Machata <pmachata@redhat.com> - 0.5-13.45svn
changelog:
  - fix tracing of fork of 64-bit binaries with 64-bit ltrace on ppc
  - improve earlychild patch
  - Resolves: #265941


author: Petr Machata <pmachata@redhat.com> - 0.5-13.45svn.12
changelog:
  - Add clone support patch that was ported by Martin Osvald
  - Rebase upstream patchset for tracing multi-threaded processes
  - Rebase upstream attach/detach fixes
  - Fix syscall detection
  - Rebase upstream patches for tracing across vfork
  - Add RHEL-6 patch for SIGTRAP masked as SIGILL
  - Resolves: #733216


author: Petr Machata <pmachata@redhat.com> - 0.5-16.45svn
changelog:
  - Add clone support patch that was ported by Martin Osvald
  - Rebase upstream patchset for tracing multi-threaded processes
  - Rebase upstream attach/detach fixes
  - Fix syscall detection
  - Rebase upstream patches for tracing across vfork
  - Add RHEL-6 patch for SIGTRAP masked as SIGILL
  - Resolves: #526007


author: Petr Machata <pmachata@redhat.com> - 0.5-17.45svn
changelog:
  - Add support for tracing PPC32 processes with secure PLT
    (ltrace-0.5-ppc-glink.patch)
  - Add support for PIE binaries (ltrace-0.5-pie.patch)
  - Fix a double free when tracing across fork
    (ltrace-0.5-clone-filename.patch)
  - Fix SIGSEGV on PPC where -e was given, but no symbols matched
    (ltrace-0.5-no-events-sigsegv.patch)


author: Petr Machata <pmachata@redhat.com> - 0.5-5.45svn
changelog:
  - fix plt handling on ppc32 (symval patch)
  - fix attaching to process (attach patch)
  - add fork & exec patches from IBM
  - adjust weak symbol handling (ppc32fc5 patch)


author: Hans de Goede <j.w.r.degoede@hhs.nl> 5.1.1-2
changelog:
  - Only link /usr/bin/lua with readline / do not link %{_libdir}/liblua-5.1.so
    with readline so that we don't cause any License troubles for packages
    linking against liblua-5.1.so, otherwise lua could drag the GPL only readline
    lib into the linking of non GPL apps.


author: Alasdair Kergon <agk@redhat.com> - 2.02.16-2
changelog:
  - Adjust some alignments for ia64. 
  - Fix VG clustered read locks to use PR not CR. 
  - Add startup timeout to clvmd startup script.


author: Milan Broz <mbroz@redhat.com> - 2.02.32-3
changelog:
  - clvmd no longer crashes if it sees nodeids over 50.
  - Fix potential deadlock in clvmd thread handling.
    Resolves: #437446 #438434


author: Milan Broz <mbroz@redhat.com> - 2.02.40-6
changelog:
  - Avoid overwriting in-use on-disk text metadata.
  - Fix mirror upconvert for active mirrors.
    Resolves: #467435 #455670


author: Milan Broz <mbroz@redhat.com> - 2.02.46-6
changelog:
  - Fix partial activation and lvconvert --repair on clusters.
    Resolves: #505141
    Related:  #505143


author: Milan Broz <mbroz@redhat.com> - 2.02.46-8.el5_4.1
changelog:
  - Add write lock write prioritization to avoid possible starvation.
  - Fix orphan order locking (fix vgextend to use blocking lock).
  - Use read lock for lvchange activation commands.
    Related: #523440 #523441


author: Milan Broz <mbroz@redhat.com> - 2.02.56-7
changelog:
  - Make mirror repair exit with success when no action is needed.
  - Fix inappropriate second resync when adding mimage to core-logged mirror.
    Related: #528208 #562004 #510526


author: Milan Broz <mbroz@redhat.com> - 2.02.74-3
changelog:
  - Align code to changes in lvm2 and device-mapper library.
    Related: #486994 #643365 #649710 #651349


author: Milan Broz <mbroz@redhat.com> - 2.02.74-3.el5_6.1
changelog:
  - Always use O_DIRECT when opening block devices in filters.
    Resolves: #673980
    Related: #673986 #673981


author: Milan Broz <mbroz@redhat.com> - 2.02.88-8
changelog:
  - Do not print warning for pv_min_size set in range between 512KB and 2MB.
  - Fix division by zero if PV with zero PE count is used during vgcfgrestore.
    Related: #786009 #820237 #824813


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.88-9
changelog:
  - Fix alloc cling to cling to PVs already found with contiguous policy.
  - Fix cling policy not to behave like normal policy if no previous LV seg.
  - Fix allocation loop not to use later policies when --alloc cling without tags.
  - Append _TO_LVSEG to names of internal A_CONTIGUOUS and A_CLING flags.
    Resolves: #821013


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.88-10
changelog:
  - Always send the whole clvmd packet header in refresh commands.
  - Fix 3-thread clvmd deadlock triggered by cleanup on EOF from client.
  - Verify clvmd message validity before processing and log error if incorrect.
  - Ensure clvmd mesage is always NUL-terminated after read.
  - Limit the max size of processed clvmd message to ~8KB.
  - Do not send uninitialised bytes in cluster error reply messages.
  - Fix clvmd processing of invalid request on local socket.
  - Remove unused and wrongly set cluster VG flag from clvmd lock query command.


author: Milan Broz <mbroz@redhat.com> - 2.02.88-5
changelog:
  - Fix mirror log conversion and vgsplit for mirrored logs.
  - Fix dmeventd automatic snapshot extension.
    Related: #754598 #755762 #754198


author: Milan Broz <mbroz@redhat.com> - 2.02.88-6
changelog:
  - Fix lvm1 format snapshot handling.
  - Make memory lock error message clearer.
    Related: #758833 #769053


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.88-9.el5_10.1
changelog:
  - Verify clvmd message validity before processing and log error if incorrect.
  - Ensure clvmd mesage is always NUL-terminated after read.
  - Limit the max size of processed clvmd message to ~8KB.
  - Do not send uninitialised bytes in cluster error reply messages.
  - Fix clvmd processing of invalid request on local socket.


author: Milan Broz <mbroz@redhat.com> - 2.02.26-1
changelog:
  - Update to latest upstream release.
  - Add conflict with lvm2-cluster package from different update.
    Resolves: #210365 #224468 #232238 #203745 
    Resolves: #244791 #244792 #244793 #244794 #244795 #244796


author: Milan Broz <mbroz@redhat.com> - 2.02.26-2
changelog:
  - Fix spec to create /etc/lvm/cache correctly.
  - Fix warning for unsupported mirror configuration.
  - Fix lvm2-monitor initscript to not display some invalid errors.
    Resolves: #246272 #219189 #245174


author: Milan Broz <mbroz@redhat.com> - 2.02.30-1
changelog:
  - Update to latest upstream release.
    Resolves: #252150 #210724 #245563 #363931 #291411 #246115
    Resolves: #427360 #421191 #180436 #220568 #429122 #429124
    Resolves: #429118 #427294 #251992


author: Milan Broz <mbroz@redhat.com> - 2.02.32-4
changelog:
  - Fix vgsplit locking of new VG.
  - Fix another allocation bug with clvmd and large node IDs.
    Resolves: #438434 #438249


author: Milan Broz <mbroz@redhat.com> - 2.02.46-7
changelog:
  - Ignore suspended devices during repair.
  - Call vgreduce --removemissing automatically.
    Resolves: #505604


author: Milan Broz <mbroz@redhat.com> - 2.02.46-8
changelog:
  - Reintruduce old mirror repair behaviour.
  - Fix various memory leaks in command context manipulation 
  - Enhance and fix various problems in vgimportclone.
    Resolves: #504699 #504877


author: Milan Broz <mbroz@redhat.com> - 2.02.46-8.el5_4.1
changelog:
  - Add write lock write prioritization to avoid possible starvation.
  - Fix orphan order locking (fix vgextend to use blocking lock).
  - Use read lock for lvchange activation commands.
    Resolves: #523440 #523441


author: Milan Broz <mbroz@redhat.com> - 2.02.56-6
changelog:
  - Fix dmeventd crash if both snapshot and mirror monitoring DSO are used.
  - Fix pvmove abort to be cluster-aware when temporary mirror activation fails.
    Resolves: #538571 #557104


author: Milan Broz <mbroz@redhat.com> - 2.02.56-7
changelog:
  - Make mirror repair exit with success when no action is needed.
  - Fix inappropriate second resync when adding mimage to core-logged mirror.
    Resolves: #562004 #510526


author: Milan Broz <mbroz@redhat.com> - 2.02.56-8.el5_5.1
changelog:
  - Mask LCK_HOLD flag in cluster VG locks for compatibility reasons.
  - Always use blocking lock for VGs and orphan locks.
    Resolves: #582218 #582232


author: Milan Broz <mbroz@redhat.com> - 2.02.56-8.el5_5.5
changelog:
  - Fix initialisation of logging to file to not cause boot failure.
  - Fix lvchange --refresh to require partial flag if PVs are missing.
    Resolves: #601079 #601078


author: Milan Broz <mbroz@redhat.com> - 2.02.74-5.el5_6.1
changelog:
  - Always use O_DIRECT when opening block devices in filters.
  - Do not scan devices unnecessarily in dev_reset_error_count().
  - Do not print lock warnings with --ignorelockingfailure.
    Resolves: #673981 #673986 #673975


author: Milan Broz <mbroz@redhat.com> - 2.02.88-8
changelog:
  - Do not print warning for pv_min_size set in range between 512KB and 2MB.
  - Fix division by zero if PV with zero PE count is used during vgcfgrestore.
    Resolves: #786009 #820237


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.88-11
changelog:
  - Refuse to init a snapshot merge in lvconvert if there's no kernel support.
  - Remove warning that manual cleanup is needed after mirror up-convert failure.
  - vgimport '--force' now allows users to import VGs with missing PVs.
  - Mirrored log is now fixed before its mirror when double-fault occurs.
  - Allow lvconvert --stripes/stripesize only with --mirrors and --repair.
  - Increase limit for major:minor to 4095:1048575 when using -My option.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.88-13
changelog:
  - Keep exclusive activation in pvmove if LV is already active.
  - Disallow pvmove for exclusive LV if some affected LVs are not exclusively activated.
  - Add internal tags command to display any tags defined on the host.
  - Don't require --major to be specified when using -My option on kernels > 2.4.


author: Milan Broz <mbroz@redhat.com> - 2.02.88-5
changelog:
  - Fix mirror log conversion and vgsplit for mirrored logs.
  - Fix dmeventd automatic snapshot extension.
    Resolves: #754598 #755762 #754198


author: Milan Broz <mbroz@redhat.com> - 2.02.88-6
changelog:
  - Fix lvm1 format snapshot handling.
  - Make memory lock error message clearer.
    Resolves: #758833 #769053


author: Tomas Hoger <thoger@redhat.com> - 2.8.5-28.1.1
changelog:
  - add patch for CVE-2008-4690 (rhbz#468184)
    - prompt user before executing commands from the lynxcgi: handler,
      even in the advanced user mode
    - mark all lynxcgi: URIs as untrusted in the default lynx.cfg
  - add patch to prevent lynx from opening configuration files in the
    current working directory (CVE to be assigned) (rhbz#214205)


author: Miloslav Trmac <mitr@redhat.com> - 0.16-6
changelog:
  - Add support for SSL socket timeouts (based on a patch by James Bowes
    <jbowes@redhat.com>)
    Resolves: #219966


author: Miloslav Trmač <mitr@redhat.com> - 0.16-6.el5.2
changelog:
  - Send the Host: header when using a HTTP/1.1 proxy for https (patch by Karl
    Grindley)
    Resolves: #239034
  - Backport support of multiple CN values and multiple patterns in subjectAltName
    from m2crypto-0.18
    Resolves: #363591


author: Miloslav Trmač <mitr@redhat.com> - 0.16-6.el5.4
changelog:
  - Drop the Python lock around operations that can block for a long time.
    Resolves: #472690
  - Only send the "selector" part of URL in requests sent over a proxy.  Patch by
    James Bowes <jbowes@redhat.com>.
    Resolves: #491674
  - Explicitly close sockets underlying https connections.
    Resolves: #460692


author: Miloslav Trmač <mitr@redhat.com> - 0.16-6.el5.7
changelog:
  - Don't use '!# /usr/bin/env python'
    Resolves: #521887
  - Allow overriding SSL.Connection.postConnectionCheck from m2urllib2
    Resolves: #524855


author: Miloslav Trmač <mitr@redhat.com> - 0.16-8
changelog:
  - Fix handling of large ASN.1 integers
    Resolves: #703648
  - Fix a memory leak in AES_crypt
    Resolves: #659881


author: Miloslav Trmač <mitr@redhat.com> - 0.16-9
changelog:
  - Add a missing string parameter to M2Crypto.SSL.SSLTimeoutError
    Resolves: #520817
  - Support IPv6 in M2Crypto.httpslib
    Resolves: #761596


author: Urs Beyerle <urs.beyerle@psi.ch> - 0.9.2.1-8.sl4.psi
changelog:
  - add madwifi-0.9.2-rhel4.patch from ATrpms
  - Introduce epoch since SL4 has 0.9.6 already. :/ 
  - update to 0.9.2.1
  - many changes in the spec file


author: Urs Beyerle <urs.beyerle@psi.ch> - 0.9.2.1-9.sl5.psi
changelog:
  - add xen PAE kernel packages
  - add madwifi-2.6.18-autoconf.patch
  - remove madwifi-0.9.2-rhel4.patch
  - build for SL5


author: Urs Beyerle <urs.beyerle@psi.ch> - 0.9.3-10.sl5
changelog:
  - madwifi-2.6.18-autoconf.patch no longer needed
  - add modules matching ath_rate_*.*o
  - update to 0.9.3


author: Tomas Smetana <tsmetana@redhat.com> - 3:2.1.9-4
changelog:
  - fix #252185 init script prevents proper SELinux domain transitions
  - fix #242672 wrong init script return value


author: Jan Kaluza <jkaluza@redhat.com> - 3:2.1.9-5
changelog:
  - fix #290661 - use relative symlink in /etc/smrsh
  - fix #461707 - break CC field correctly
  - fix #453377 - don't parse problematic mails many times, but isolate them
  - fix #521888 - fix instances of #!/usr/bin/env python in mailman
  - fix #515157 - fixed traceback when changing email address globally


author: Petr Machata <pmachata@redhat.com> - 1:3.81-1
changelog:
  - Upstream 3.81:
    - Contains several backwards incompatible changes.  See NEWS inside
      the source package to find out more.
  - memory patch and error reporting patch were ported to this version.


author: Petr Machata <pmachata@redhat.com> - 2:3.81-2
changelog:
  - Fix parallel builds with reexec.
  - make now restores rlimit to its original values before launching
    subprocess
  - Resolves: #211290
  - Resolves: #214033


author: Ivana Hutarova Varekova <varekova@redhat.com> - 1.6d-2
changelog:
  - Resolves: #558732
    enable the man-page-overrides subdirectory
  - Resolves: #560585
    fix TMP variable name


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-33
changelog:
  - attempt to fcntl() descriptors appropriatelly so that subshell
    doesn't leave them open while execve()ing commands (#217027)


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-35
changelog:
  - allow mc to enter directories containing '_' (#236550)
  - search in viewer remembers its last search string (#238417)
  Resolves: #236550, #238417


author: Prarit Bhargava <prarit@redhat.com>
changelog:
  - Backport 21823b95a6bc5a9c5b1b96a66997e7f624976c47 [BZ 642778]
  - Fix length calculation of SMBIOS mapping


author: Dan Walsh <dwalsh@redhat.com> 0.2.11-1
changelog:
  - Jump to latest in rawhide
    - Eliminate memory leaks
    - More fixes from Jim Meyering
    - More error checking on failed strdup
    - Start mcstrans before netlabel
    - Fix error handling
  Resolves: #457179


author: Steve Conklin <sconklin@redhat.com> - 0.2.7-1
changelog:
  - Fixed a translation error
  - Folded the init script patch into the source tarball.
  - Fixed a memory leak I found
  Resolves: #339951


author: Doug Ledford <dledford@redhat.com> - 2.6.4-1
changelog:
  - Update to 2.6.4
  - Fix init script issues
  - Remove patches accepted upstream
  - Fix mdadm -Q output
  - Resolves: bz242686, bz335911, bz233372


author: Doug Ledford <dledford@redhat.com> - 2.6.9-1
changelog:
  - Update to 2.6.9 (latest in the 2.6 stable series)
  - Add automatic weekly data scrubbing of active raid arrays (bz233972)
  - Various mdadm.8 man page edits (bz434670, bz434671, bz489476)
  - Fix recognition of short options -Y and -N (bz478977)
  - Resolves: bz233972, bz434670, bz434671, bz489476, bz478977


author: Doug Ledford <dledford@redhat.com> - 2.6.9-2
changelog:
  - Update the raid-check script to run last, modify script to get config
    from sysconfig/raid-check, make sure we don't do a check operation on
    a device that doesn't support it, wait for the checks to complete in
    order to check the mismatch_count on the devices and notify sysadmin
    if any mismatches were found.
  - Resolves: bz513200, bz513473


author: Doug Ledford <dledford@redhat.com> - 2.6.9-3
changelog:
  - If we have more than one array per drive, then the raid-check script will
    only check one of the arrays, the others will get skipped.  Correct that.
  - Resolves: bz523000


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 2.6.9-4
changelog:
  - Fix /sbin/raid-check to not report non-0 mismatch counts on raid1
    arrays, as these can happen legitimately on raid1 arrays.
  - Fix build problem due to CVS Revision ID change in mdmpd due to
    switch from CVS to git.
  - Resolves: bz566828


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 2.6.9-5
changelog:
  - Update the raid-check script to run checks on arrays that are clean
    and either 'idle' or 'active' as opposed to just 'idle'. Otherwise
    checks will often be missed on arrays that are regularly busy.
  - Resolves: bz735803


author: Adam Jackson <ajax@redhat.com> 6.5.1-7.10
changelog:
  - mesa-6.5.1-nonconformant-visual.patch: Don't warn about the non-
    conformant synthetic Composite visual (#442738)


author: Soren Sandmann <sandmann@redhat.com> - 2.16.0-9
changelog:
  - Add patch from http://bugzilla.gnome.org/show_bug.cgi?id=348305 to fix
    https://bugzilla.redhat.com/show_bug.cgi?id=220283. Basically a big 
    s/Time/guint32/ due to braindamage in Xlib.


author: Soren Sandmann <sandmann@redhat.com> - 2.16.0-12
changelog:
  - Add patch to drop the grab on the focused window in click-to-focus
    mode without click to raise. Bug 442769


author: Owen Taylor <otaylor@redhat.com> - 2.16.0-12.1
changelog:
  - Add patch to allow the focused client to raise any of its windows,
    not just windows in the same group.
    Resolves: bug 537023
  - Add patch to trap errors fixing BadWindow when closing windows
    Resolves: bug 537024


author: Owen Taylor <otaylor@redhat.com> - 2.16.0-13
changelog:
  - Add patch to allow the focused client to raise any of its windows,
    not just windows in the same group.
    Resolves: bug 503522


author: Owen Taylor <otaylor@redhat.com> - 2.16.0-14
changelog:
  - Add patch to allow apps to raise windows even when raise_on_click is false
    Resolves: bug 526045
  - Add patch to fix flicker when moving windows between monitors
    Resolves: bug 495939
  - Add patch to trap errors fixing BadWindow when closing windows
    Resolves: bug 523777
  - Add patch to fix problems when moving window with a modal dialog
    to another workspace
    Resolves: bug 237158
  - Add patch to fix KDE windows flashing when switching workspaces
    Resolves: bug 506537
  - Add patch to fix strict focus mode to check for terminals
    by res_class, not by res_name
    Resolves: bug 504223
  - Add patch to add a config option:
    /apps/general/metacity/place_on_current_monitor
    to enable the metacity >= 2.20 behavior where new windows are always
    placed on the current monitor
    Resolves: bug 523841
  - Add a patch so that when the pointer moves, and the window under
    the pointer isn't focused, it will be focused.
    Resolves: bug 530261
  - Add a patch to add a config option:
    /apps/general/metacity/no_focus_windows
    Which allows specifying expressions to match new windows that
    shouldn't be focused.
    Resolves: bug 530262
  - Add a patch to add a config option:
    /apps/general/metacity/new_windows_always_on_top
    Which, when set, will result in new windows always being placed on top.
    Resolves: bug 530263


author: Owen Taylor <otaylor@redhat.com> - 2.16.0-16
changelog:
  - Add patch to apply new_windows_always_on_top to windows that
    are raised or activated but denied focus as well.
    Resolves: bug 582769
  - Add patch to exclude the current application from the effect of
    no_focus_windows preference
    Resolves: bug 591944


author: Jon Masters <jcm@redhat.com>
changelog:
  - Update to microcode 1.15 for real this time (now kernel patch is in and we
    - both RH and Intel - think this should be ok to go now).
  - Resolves: #214807, #209455.


author: Jarod Wilson <jwilson@redhat.com>
changelog:
  - Spec cleanup and macro standardization.
  - Update microcode data file to 20080131 revision.
  - Resolves: #431566.


author: Anton Arapov <anton@redhat.com>
changelog:
  - Fix memory leak (Kamil Dudka )
  - Update microcode data file to 20110428 revision.
  - Resolves: #690414, #713653


author: Anton Arapov <anton@redhat.com>
changelog:
  - Fix the paths to microcode (Petr Holasek )
  - Update microcode data file to 20111110 revision.
  - Resolves: #760323


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-27
changelog:
  - Fix initialization of "withusb" on s390/s390x
    Resolves: rhbz#432776
  - Fix application of patch 15
    Resolves: rhbz#428723
  - Fix netdev naming with drivers specified on the command line
    Resolves: rhbz#436509


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-28
changelog:
  - Fix bad regexp in devicemapper dependency resolution code
    Resolves: rhbz#439371
  - Re-do workaround for gfs2/lock_nolock dep brokenness
    Resolves: rhbz#438743


author: Hans de Goede <hdegoede@redhat.com> - 5.1.19.6-54
changelog:
  - Handle cciss controllers correctly in fips mode
    Resolves: rhbz#505108
  - IA64 has /boot/efi instead of /boot, handle this correctly in fips mode
    Resolves: rhbz#505111
  - Don't require prelink in fips mode
    Resolves: rhbz#505113


author: Brian C. Lane <bcl@redhat.com> 5.1.19.6-78
changelog:
  - Use multipath -B to prevent it from writing to bindings file in the initrd (bcl)
    Resolves: rhbz#782615


author: Brian C. Lane <bcl@redhat.com> 5.1.19.6-82
changelog:
  - Use ! instead of / when searching sysfs for ccis device
    Resolves: rhbz#988020
  - Always include ahci module (except on s390) (bcl)
    Resolves: rhbz#978245
  - Prompt to recreate default initrd (karsten)
    Resolves: rhbz#472764


author: Miloslav Trmač <mitr@redhat.com> - 0.15-1.el5.1
changelog:
  - Don't stat() paths to all excluded filesystems when encountering a mount point
    Resolves: #237120


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-1
changelog:
  - Rebase to upstream mod_nss 1.0.8 (#588858)
  - Use remote hostname set by mod_proxy to compare to CN in peer cert (#591901)
  - Patch to add configuration options for new NSS negotiation API (#574187)
  - Set minimum version of nss to 3.12.6 to pick up renegotiation fix
  - Add (pre) for Requires on httpd so we can be sure the user and group are
    already available
  - Use _sysconfdir macro instead of /etc
  - Remove unused variable and perl substitution for gencert. gencert used to
    have separate variables for NSS & NSPR libraries, that is gone now so this
    variable and substitution aren't needed.
  - Added comments to patch to identify what they do
  - The location of libnssckbi.so moved from /lib[64] to /usr/lib[64] (#558545)
  - Don't generate output when the default NSS database is generated (#538859)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-2
changelog:
  - Don't call PK11_ListCerts for every server (#635324)
  - Fix hang when handling large POST under some conditions (#634685)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-4.1
changelog:
  - Execute the postinstall script on upgrades so database ownership is
    correct (#679748)
  - Z-Stream patch for 'mod_nss' (RHEL 5.6)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-4.2
changelog:
  - Bugzilla Bug #849044 - https (with mod_nss) fails with reverse proxy when
    using with mod_proxy
  - Z-Stream patch for 'mod_nss' (RHEL 5.8)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-5
changelog:
  - Bugzilla Bug #692868 - https (with mod_nss) fails with reverse proxy when
    using with mod_proxy
  - Bugzilla Bug #677698 - Lack of interlock between nss processes to pcache
    causes httpd failure
  - Bugzilla Bug #714255 - overrunning array when executing nss_pcache


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-6
changelog:
  - Bugzilla Bug #749401 - https://server.testrelm/ipa/xml: Bad Request
    intermittent errors
  - Bugzilla Bug #749402 - may be possible to spoof mod_nss FakeBasicAuth
  - Bugzilla Bug #749405 - mod_nss fails debug assertion
  - Bugzilla Bug #749406 - Add 'libnssckbi.so' runtime dependency . .


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-7
changelog:
  - Fix 'Bugzilla Bug #749405 - mod_nss fails debug assertion' by removing
    'mod_nss-no_shutdown_if_not_init.patch' and applying
    'mod_nss-no_shutdown_if_not_init_2.patch' instead
  - The 'mod_nss-no_shutdown_if_not_init_2.patch' patch also fixes
    Bugzilla Bug #784548 - File descriptor leak after "service httpd reload"
    or httpd doesn't reload


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-8
changelog:
  - Resolves: CVE-2013-4566
  - Bugzilla Bug #989724 - mod_nss does not respect `NSSVerifyClient` in
    Directory [rhel-5.10.z]


author: Rob Crittenden <rcritten@redhat.com> - 1.0.3-4
changelog:
  - Updated mod_revocator-kill patch. The ownership of the semaphore used to
    control access to crlhelper was not always changed to the Apache user
    (#648546)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.3-5
changelog:
  - Fix shutting down Apache if CRLUpdateCritical is on and a CRL
    is not available at startup (#654378)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-7
changelog:
  - Bugzilla Bug #716355 - mod_revocator does not shut down httpd server if
    expired CRL is fetched
  - Bugzilla Bug #716361 - mod_revocator does not bring down httpd server if
    CRLUpdate fails


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-9
changelog:
  - Bugzilla Bug #716874 - httpd (32 bit) failed to start if mod_revocator
    (32 bit) is installed on ppc64


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.32
changelog:
  - Update fix to pipe issue and use same logic in other place we call "head -n 1"
  - just in case it would ever also cause similarly noisy output.
  - Resolves: #249537.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.34
changelog:
  - Update to fix inter-module symbol references on 64-bit platforms.
  - (fix wasn't properly in the build yesterday).
  - Resolves: #247986.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.37
changelog:
  - Sort modules alphabetically.
  - Resolves: #249449.
  - Check override of modules.
  - Resolves: #253512.
  - Fix "--dry-run" option.
  - Resolves: #254141.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.39
changelog:
  - Make modprobe operate in nonblocking mode by default
  - Resolves: #280411.
  - Add a --delete-modules to weak-modules to avoid linking compat
  - Resolves: #432959.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.60
changelog:
  - Add SYSV locking in the case of a read-only filesystem.
  - Resolves: #430942
  - Do not create Xen grub boot entries for a running domU.
  - Resolves: #509568
  - Do not re-link compatible module when also removing it.
  - Resolves: #477089


author: Rich Megginson <rmeggins@redhat.com> - 6.0.4-1
changelog:
  - bump version to 6.0.4 - this version has some memory leak
  - fixes for SASL related code, fixes for control handling with
  - referral chasing, and packaging improvements
  - use -p when installing include files to preserve timestamps


author: Rich Megginson <rmeggins@redhat.com> - 6.0.5-2
changelog:
  - Resolves: Bug 753014 - el5 el4 mozldap-tools - anonymous bind ldapsearch segfault on smart referrals


author: Doug Ledford <dledford@redhat.com> - 2.0-2
changelog:
  - Recreate lost spec file and patches from memory
  - Add dist tag to release
  - Turn off FORTIFY_SOURCE when building


author: Doug Ledford <dledford@redhat.com> - 3.0-1
changelog:
  - Update to latest upstream version
  - Compile three times against the three mpi stacks and make three packages
  - Resolves: bz451474


author: Dan Horák <dhorak@redhat.com> - 1.2.18-9
changelog:
  - fixed segfault when scsitape is run with an unknown command-line option (#513984)
  - Resolves: #513984


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.4.2.2-3.el5
changelog:
  - fix POP authentication with latest cyrus-sasl (#213271)
  - fix insecure temp file creation on NFS (#213274, CVE-2006-5297)


author: Honza Horak <hhorak@redhat.com> 5:1.4.2.2-6.el5
changelog:
  - fix overflow in gecos field handling (#241652, CVE-2007-2683)
    patch mutt-gecos.patch hasn't been committed into RHEL-5 branch 
    while fixing in RHEL-5.0.z, adding now


author: Doug Ledford <dledford@redhat.com> - 1.1.0-0.2931.1
changelog:
  - Rearrange the position of the svn tag in the n-v-r so z stream updates
    won't be so ugly should they ever be needed


author: Doug Ledford <dledford@redhat.com> - 1.1.0-0.2931.2
changelog:
  - Incorporate fixups to Requires(post) and Requires(preun) from openmpi
  - Fix up post/preun scripts to work like the scripts from openmpi11
  - Resolves: bz465448


author: Doug Ledford <dledford@redhat.com> - 1.1.0-0.3355.1.el5
changelog:
  - Update to final ofed 1.4.1 bits
  - Compile against non-XRC libibverbs
  - Related: bz506258, bz506097


author: Doug Ledford <dledford@redhat.com> - 1.0.3-2
changelog:
  - Make scriptlets match mvapich
  - Include a Requires(post) and Requires(preun) so installs work properly
  - Resolves: bz465448


author: Tom Lane <tgl@redhat.com> 5.0.22-2
changelog:
  - Work around brew's tendency not to clean up failed builds completely,
    by adding code in mysql-testing.patch to kill leftover mysql daemons.


author: Tom Lane <tgl@redhat.com> 5.0.45-1
changelog:
  - Update to MySQL 5.0.45
  Resolves: #256501, #240813, #246309, #254012
  Resolves: #280811, #316451, #349121, #367131
  - Synchronize with current Fedora package, which is pretty well tested by now;
    see past bzs 245770, 241912, 233771, 221085, 223713, 203910, 193559, 199368


author: Tom Lane <tgl@redhat.com> 5.0.45-7
changelog:
  - Adjust thread stack requests to allow for platform-specific guard page size;
    necessary to prevent stack overrun on PPC with RHEL5's 64K page size.
  Resolves: #435391
  - Remove calendar-dependent queries from "view" test; necessary to get
    regression tests to pass after 2007.


author: Tom Lane <tgl@redhat.com> 5.0.77-1
changelog:
  - Update to MySQL 5.0.77, for numerous fixes described at
    http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-77.html
    including low-priority security issues CVE-2008-2079, CVE-2008-3963
  Resolves: #448487, #448534, #452824, #453156, #455619, #456875
  Resolves: #457218, #462534, #470036, #476896, #479615
  - Improve mysql.init to pass configured datadir to mysql_install_db,
    and to force user=mysql for both mysql_install_db and mysqld_safe.
  Resolves: #450178
  - Fix mysql.init to wait correctly when socket is not in default place
  Resolves: #435494


author: Tom Lane <tgl@redhat.com> 5.0.77-3
changelog:
  - Add fix for CVE-2009-2446 (format string vulnerability in COM_CREATE_DB and
    COM_DROP_DB processing)
  Resolves: #512200


author: Tom Lane <tgl@redhat.com> 5.0.77-4.2
changelog:
  - Add fixes for CVE-2009-4019, CVE-2009-4028, CVE-2009-4030
  Resolves: #556505
  - Use non-expired certificates for SSL testing (upstream bug 50702)
  - Emit explicit error message if user tries to build RPM as root
  - Add comment suggesting disabling symbolic links in /etc/my.cnf


author: Tom Lane <tgl@redhat.com> 5.0.77-4.4
changelog:
  - Add fixes for CVE-2010-3677, CVE-2010-3680, CVE-2010-3681, CVE-2010-3682,
    CVE-2010-3833, CVE-2010-3835, CVE-2010-3836, CVE-2010-3837, CVE-2010-3838,
    CVE-2010-3839, CVE-2010-3840
  Resolves: #645642
  - Backpatch strmov fix so that code can be tested on more recent platforms


author: Tom Lane <tgl@redhat.com> 5.0.77-4.5
changelog:
  - Add fix for crash during SHOW CREATE TABLE
  Resolves: #659609
  - Add fix for corruption of large BLOB values during dump/reload
  Resolves: #658863


author: Tom Lane <tgl@redhat.com> 5.0.77-4.el5_6.6
changelog:
  - Add fix for regression with input lines over 1MB (caused by fix for 658863)
  Resolves: #700497
  - Add fix for memory leak with DISTINCT, ORDER BY in subquery
  Resolves: #692953


author: Tom Lane <tgl@redhat.com> 5.0.95-1.el5_7.1
changelog:
  - Update to 5.0.95, to get the last upstream bugfixes in this release series
    including numerous CVEs announced in January 2012
  Resolves: #787140


author: Tom Lane <tgl@redhat.com> 5.0.95-1
changelog:
  - Update to 5.0.95, to get the last upstream bugfixes in this release series
    including numerous CVEs announced in January 2012
  Resolves: #787141


author: Tom Lane <tgl@redhat.com> 5.0.95-2
changelog:
  - Support rotation of mysqld log (though this is not enabled by default)
  Resolves: #647223
  - Fix crash with EXPLAIN and prepared statements
  Resolves: #654000
  - Adopt init script updates from the last Fedora init script (F-15)
  Resolves: #703476
  - Re-enable profiling feature, unintentionally disabled in 5.0.95-1
  Resolves: #806365


author: Honza Horak <hhorak@redhat.com> 5.1.69-6
changelog:
  - Restore SELinux context after installing -server package
  - Sub-package -test should require -libs
  - Added BuildRequire: scl-utils-build for any case


author: Honza Horak <hhorak@redhat.com> 5.1.70-1
changelog:
  - Update to MySQL 5.1.70, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-70.html
    Resolves: #986138


author: Honza Horak <hhorak@redhat.com> 5.5.32-1
changelog:
  - Update to MySQL 5.5.32, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-32.html
    Resolves: #975113
  - Use man pages from 5.5.30 due to license change
    Resolves: #975785
  - Fix issues found by Coverity
    Resolves: #975904


author: Honza Horak <hhorak@redhat.com> 5.5.32-2
changelog:
  - Fix text in mysql-readme-devel for RHEL-5
    Resolves: #975119
  - Fix misleading error message when uninstalling built-in plugins
    Resolves: #985402
  - Do not use pie linker flags, they don't work in RHEL-5
    Resolves: #985418


author: Honza Horak <hhorak@redhat.com> 5.5.36-1
changelog:
  - Update to MySQL 5.5.36, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-36.html
    Including fixes for CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
    CVE-2013-5807, CVE-2014-0420, CVE-2014-0393, CVE-2013-5891,
    CVE-2014-0386, CVE-2013-3839, CVE-2014-0401, CVE-2014-0402,
    Resolves: #1055875


author: Honza Horak <hhorak@redhat.com> - 5.5.37-1
changelog:
  - Update to MySQL 5.5.37, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-37.html
    Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
    CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
    Resolves: #1089202


author: Honza Horak <hhorak@redhat.com> - 5.5.37-1
changelog:
  - Update to MySQL 5.5.37, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-37.html
    Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
    CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
    Resolves: #1089203


author: Matej Muzila <mmuzila@redhat.com> - 5.5.40-1
changelog:
  - Rebase to 5.5.40
    Also fixes: CVE-2014-4274 CVE-2014-4287 CVE-2014-6463 CVE-2014-6464
    CVE-2014-6469 CVE-2014-6484 CVE-2014-6505 CVE-2014-6507 CVE-2014-6520
    CVE-2014-6530 CVE-2014-6551 CVE-2014-6555 CVE-2014-6559 CVE-2014-6564
    Resolves: #1160514


author: Matej Muzila <mmuzila@redhat.com> - 5.5.45-1
changelog:
  - Rebase to 5.5.45
    Includes fixes for: CVE-2014-6568 CVE-2015-0374
    CVE-2015-0381 CVE-2015-0382 CVE-2015-0391 CVE-2015-0411 CVE-2015-0432
    CVE-2015-0501 CVE-2015-2568 CVE-2015-0499 CVE-2015-2571 CVE-2015-0433
    CVE-2015-0441 CVE-2015-0505 CVE-2015-2573 CVE-2015-2582 CVE-2015-2620
    CVE-2015-2643 CVE-2015-2648 CVE-2015-4737 CVE-2015-4752 CVE-2015-4757
    Resolves: #1247020


author: Bastien Nocera <bnocera@redhat.com> 1.0.1-5
changelog:
  - Require libgnome in the glade file, so that the GNOME
    stock icons can be used
  Related: rhbz#250403


author: Bastien Nocera <bnocera@redhat.com> 1.0.1-6
changelog:
  - Using the libgnomeui stock icons requires to link against
    libgnomeui and init our app as a GNOME app, which we don't
    want to do. Use the evolution icon instead
  Related: rhbz#250403


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-20
changelog:
  - fix snmpwalk / bulkwalk on TCP scalars (#248342)
  - fix bulkwalk security flaw (#366631)
  - interface names can be longer than 8 characters (#357121)
  - aliased interfaces have correct netmask and broadcast addresses
    (#357121)
  - fix icmpStatsTable (#256041)
  - fix race condition when reading /proc/*/cmdline (#311261)
  - fix hostname logging of snmptrapd (#270941)
  - fix race condition when reading process status (#252216)
  - fix TCP support (#251332)
  - fix reading of agentsecname and iquerysecname from config file
    (#338981, #311761)
  - fix disk statistics of mount points with spaces (#348681)
  - store temporary files to /var/run/snmpd to prevent
    users to modify them and to make selinux happy (#401211)
  - print more meaningful message when interface changes its ifIndex
    (#396141)
  - fix hrDeviceStatus and hrDeviceErrors missing during walk
    (#419511)
  - correctly cut values to 32bits in UCD-DISKIO-MIB, preventing
    "truncating integer value > 32 bits" to appear (#386821)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-23
changelog:
  - add ipIfStatsTable to build
  - make ipv6ScopeZoneIndexTable loading quiet (#433446)
  - make ipAddressPrefixTable loading quiet (#253399 related)
  - fix inetToMediaTable to recover from error when ipv6 kernel module is 
    not present (#431977)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-24.1
changelog:
  - fix buffer overflow in perl module (CVE-2008-2292) (#449897)
  - fix SNMPv3 authentication checks (unknown CVE) (#449897)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-12
changelog:
  - fixed UCD-SNMP::memory showing zero memory statistics, caused by reworked
    memory indexing in hrFSTable patch (#702626)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-13
changelog:
  - fixed xfs filesystem support in hrStorageTable broken by fix
    for bug #654384
  - fixed BER parsing of incoming packets - silently discard the invalid ones
    according to RFC (#704443)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-14
changelog:
  - fixed hrSWRunPath of kernel threads (regression caused by bugfix for
    - fixed bind filesystem support in hrStorageTable broken by fix
    for bug #654384


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-15
changelog:
  - removed 'error finding row index in _ifXTable_container_row_restore'
    error message (#736264)
  - fixed a crash when DisMan Event MIB was used simultaneously with AgentX
    extensions (#725966)
  - fixed references to OBJECT-GROUP between MIB files (#716470)
  - disabled 'rpm -V' checking content of /usr/share/snmp/mibs/.index file,
    it is generated dynamically (#714976)
  - fixed crash when getting out-of-memory in inetNetToMediaTable (#706916)
  - fixed slow (re-)loads of TCP-MIB::tcpConnectionTable (#698562)
  - fixed HOST-RESOURCES-MIB::hrStorageUsed with realStorageUnits disabled
    (#741789)
  - fixed vxfs filesystem support in hrStorageTable (#744112)
  - fixed snmpd sigsegv when embedded perl script registers one handler
    twice (#743167)
  - fixed AgentX subagent sigsegv when reconnecting to AgentX master
    (#748390)
  - fixed reporting of UCD-SNMP-MIB::dskPercentNode missing in previous
    release (#725339)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-16
changelog:
  - fixed snmpd showing wrong UCD-SNMP-MIB::ssCpuIdle after 30 days of uptime
    on 32-bit platforms (#663789)
  - fixed parsing of OID argument of 'smuxpeer' configuration option (#751235)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-18
changelog:
  - added support of ocfs2, tmpfs and reiserfs in hrStorageTable
    (#754652, #755958, #822061)
  - updated documentation of '-c' option of snmptrapd (#760001)
  - fixed endless loop after truncating 64bit int (#783892)
  - fixed snmpd exiting shortly after startup due to incoming signal (#799699)
  - fixed decoding of COUNTER64 values from AgentX (#803585)
  - fixed engineID of outgoing traps if 'trapsess -e <engineID>' is used in
    snmpd.conf (#805689)
  - fixed CVE-2012-2141, an array index error in the extension table (#815813)
  - fixed snmpd showing "failed to run mteTrigger query" when 'monitor'
    config option is used (#830042)
  - added support for port numbers in 'clientaddr' configuration option
    (#828691)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-19
changelog:
  - fixed support for port numbers in 'clientaddr' configuration option
    (#840861, #845974)
  - added support of cvfs filesystem hrStorageTable (#846391)
  - removed various error log messages when IPv6 is disabled (#845155)
  - removed various error log messages related to counte64 expansions
    (#846905)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-20
changelog:
  - fixed error message when the address specified by clientaddr option
    is wrong or cannot be bound (#840861)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-20.1
changelog:
  - Fixed CVE-2012-6151: snmpd crashing when AgentX subagent disconnects in
    the middle of request processing (#1073224)
  - Fixed CVE-2014-2285: snmptrapd crash when using a trap with empty community
    string (#1073224)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-6
changelog:
  - fix command line options related to logging (#477768)
  - don't spam log with 'diskio.c: don't know how to handle X request'
    (#474093)
  - add ipAddressSpinLock OID (#479609)
  - fix reloading of trapsink and trap2sink entries on SIGHUP (#468147)
  - fix reporting of IF-MIB::ifSpeed of 10GB/s interfaces (#464061)
  - backport skipNFSInHostResources option (#461631)
  - implement ipNetToPhysicalLastUpdated OID (#477092)
  - implement RMON-MIB::etherStatsJabbers (#468832)
  - fix memory leak in SCTP-MIB (#497280)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-7.1
changelog:
  - fix possible crash when 64-bit counters in ipSystemStatsTable get
    bigger than 2^32 (#516183)
  - fix memory leak in ipNetToPhysicalTable (#517041)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-8
changelog:
  - fix possible crash when 64-bit counters in ipSystemStatsTable get
    bigger than 2^32 (#514703)
  - fix memory leak in ipNetToPhysicalTable (#515650)
  - fix periodical memory leaks in various MIBs (#518633)
  - create MIB indexes in /var/lib/net-snmp to fix SELinux alerts in applications
    (#523249)
  - fix multilib issues in net-snmp and net-snmp-devel packages (#521820)
  - allow snmpusm to create views with OIDs larger than 255 (#527364)
  - plug memory leak in processing of GETNEXT request on last item in
    mteEventSetTable (#515650)
  - suppress showing of "truncating unsigned value to 32 bits" message in Net-SNMP
    utilities (#528164)
  - fix endless loop in ipDefaultRouterTable when there are more default routes
    with the same destination (#504742)
  - suppress logging of "truncating integer value > 32 bits" in IP-MIB and TCP-MIB
    when the counters overflow 32 bits (#507528)
  - fix responding to broadcast requests (#521175)
  - fix ipNetToPhysicalTable and ipNetToMediaTable with network interfaces with
    long HW address (like InfiniBand) (#543499)
  - fix IP address size in ipCidrRouteTable on 64 bit platforms (#547698)


author: Radek Vokál <rvokal@redhat.com> - 1.60-76
changelog:
  - make sctp quiet on systems without sctp and also add description to netstat.8
  - fixed arp unaligned access error
  - netplugd init script fixed
  - Resolves: #242916, #220438, #229232


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-79
changelog:
  - fixed warning: Interface eth0 still in ALLMULTI mode (#477876)
  - fixed german man page for arp (#322901)
  - fixed tcp timers info in netstat (#466845)
  - fixed ifconfig's man page (#453918)
  - fixed buffers lengths in statistics.c (#493314)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-82
changelog:
  - hostname -s returns short host name even if the host name doesn't resolve (#319981)
  - mii-tool now checks only generic MII registers defined in <linux/mii.h> (#531980)
  - fixed statistics.c to use unsigned long long (instead of int)
    to handle 64 bit integers (#622734)
  - prevent 'netstat -nr -A inet6' from smashing stack
    when /proc/net/ipv6_route is broken (#668047)
  - Improve route(8) man page saying that 'route mss' actually sets MTU (#699698)
  - patch netstat to separate basename of -p only if it is absolute path in order
    to make argv[0]="sshd pty/0" display as sshd, and not as /0 (#707427)
  - plipconfig man page and usage output fixes (#707460)
  - improved netstat_stop_trim.patch to not truncate IPV6 UDP sockets (#732983)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-83
changelog:
  - make net-tools actually build after dist-git conversion
  - correct 'netstat --sctp -n' output (#982179)
  - 'netstat --sctp -n' was crashing on bad input (#982638)


author: Jindrich Novy <jnovy@redhat.com> 10.35.58-9.el5
changelog:
  - fix pnmtofiasco failures on ppc and s390x (#509366)
  - fix typos in pamperspective man pages (#510501)
  - fix pgmtopbm (#510759)
  - fix buffer overlow in xpmtoppm (#567597)
  - fix endianess issue with xwdtopnm (#574362)


author: Jindrich Novy <jnovy@redhat.com> 10.35.58-7.el5
changelog:
  - rebase to 10.35.58 (#479017)
  - fix ppmfade, ppmrainbow
  - fix doublefree corruption and couple of memleaks in pnmtofiasco
  - fix cmuwmtopbm and other utilities by making endianess
    functions work correctly on 64bit systems (#476863)
  - fix ppmdfont and ppmddumpfont and svgtopam (thanks to Jiri Moskovcak)
  - add BR: ghostscript
  - use correct macro arguments (#246707)
  - fix segfault in ximtoppm (#482867)
  - fix options in pamperspective, pbmtoepson, ppmpat, pamaddnoise,
    cameratopam, fiascotopnm so that they match their man pages
    (#483011, #483070, #483243, #483245, #482829, #482839)
  Resolves: #246707, #479017, #476864, #476867, #483011, #483070
  Resolves: #483243, #483245, #482867, #482829, #482839


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.2-9
changelog:
  - fix screen corruption when half of double width character is overwritten
    (#137957) 
  - fix double width character handling in checkboxtree and listbox


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.2-15.el5
changelog:
  - fix typos in whiptail usage message (#456307)
  - include whiptail man page (#456307)
  - improve --noitem description (#456305)
  - bind \E[Z to back-tab in built-in keymap (#468046)
  - include tutorial in txt format


author: Steve Dickson <steved@redhat.com> 1.0.10-22
changelog:
  - Reworked returns values of the init scripts (bz 243703)
  - Reworked rpc init scripts so they are not dependent
    loading modules. (bz 241015).


author: Steve Dickson <steved@redhat.com> 1.0.10-23
changelog:
  - Changed rpcidmapd and rpcgssd stop priority levels so
    those daemons would be stoppped after autofs (bz 245376)
  - Updated some out-of-date man pages (bz 233903)
  - Stoppped mount.nfs from wasting reserve ports (bz 246254)


author: Steve Dickson <steved@redhat.com> 1.0.9-30
changelog:
  - Added in a number of bug fixes (esp in crossmnt code) that were 
    exposed during the secinfo testing. (bz 315401)


author: Steve Dickson <steved@redhat.com> 1.0.9-33
changelog:
  - In both rpcgssd and rpcsvcgssd initscrips move the 
    SECURE_NFS check back to be a global check. This
    stops false failures from happen when the services
    are stopped when they are not configured to start (bz 435267)


author: Steve Dickson <steved@redhat.com> 1.0.9-35z
changelog:
  - Added the warning.patch to fix some warning which were
    flaged by rpmdiff during the errata phasea (Errata 2008:0486)


author: Steve Dickson <steved@redhat.com> 1.0.9-38
changelog:
  - The fix to bz 438418 introduced a regression that caused
    mount.nfs to exit with zero on failed mounts. (bz 465966)


author: Steve Dickson <steved@redhat.com> 1.0.9-39
changelog:
  - Fixed typo in nfs initscript that caused rpc.rquotad daemons
    to be started but not stoppped (bz 470483)


author: Steve Dickson <steved@redhat.com> 1.0.9-40
changelog:
  - Fixed arguments to the hosts_ctl() call in the good_client() 
    routine used in the tcpwrapper support. (bz 440120)


author: Steve Dickson <steved@redhat.com> 1.0.9-42
changelog:
  - mountd: Check host alias with netgroups (bz 478952)
  - exportfs: fixed typo in man page (bz 474848)
  - nfs.init: NFS server reboot results in "Stale NFS file handle" (bz 474449) 
  - nfslock.init: options not correctly parsed (bz 459591)
  - mount.nfs: mounts fail with read-only /etc (bz 450646)
  - nfslock.init: lockd not using settings in sysconfig/nfs (bz 434795)
  - tcpwrappers: updated code to correctly use api  (bz 494878)
  - nhfsstone: added v3 and v4 support (bz 465933)
  - mount.nfs: add support for lookupcache= option (bz 489335).


author: Steve Dickson <steved@redhat.com> 1.0.9-50
changelog:
  - Reverted the removal of idmapd.conf and its manpage
    since bz 502707 was not make the RHEL5.6 release


author: Steve Dickson <steved@redhat.com> 1.0.9-52
changelog:
  - Fixed retry= to handle lack of reserved port situation (bz 240790)
  - Stopped rpc.statd is running as root (bz 495066)
  - Fixed rpc.gssd ccachedir option (bz 498134)
  - Make sure the uid/gid of nfsnobody is the
    correct value for all archs (bz 511876)
  - Fixed nfsstat's mislabled output (bz 617669)
  - Add support for lookupcache= option in nfsv4 (bz 511312)
  - Fixed UDP only mounts (bz 513466)
  - Fixed mounts when mount v1 is not supported (bz 595675)
  - Added sane timeout to svcgssd (bz 507341)


author: Steve Dickson <steved@redhat.com> 1.0.9-58
changelog:
  - gss: turned off more excessive syslogs (bz 593097)
  - initfiles: more initscripts improvements (bz 710020)
  - specfile: correct typo when nfsnobodys gid already exists (bz 729603)


author: Steve Dickson <steved@redhat.com> 1.0.9-59
changelog:
  - gss: turned of even more excessive syslogs (bz 593097)
  - mount.nfs: Ignored the SIGXFSZ when handling RLIMIT_FSIZE changes (bz 697979)


author: Steve Dickson <steved@redhat.com> 1.0.9-60
changelog:
  - Updated idmapd.conf and idmapd.conf.man to reflect the 
    static user name mapping (502707)
  - Fixed an umount regression introduced by bz 513094 (bz 781931)


author: Steve Dickson <steved@redhat.com> 1.0.9-64
changelog:
  - Fixed umounts when MOUNTD_NFS_V2=no (bz 804681)
  - Fixed typo in nfs init script (bz 819373)
  - Fixed rpc.idmapd warning with v4 mounts (bz 708253)
  - Fixed rpc.gssd warning with v4 mounts (bz 769744)
  - Make sure statd's backup dir has correct permissions (bz 782455)


author: Harshula Jayasuriya <harshula@redhat.com> 1.0.9.68
changelog:
  - Need to use /var/lock/subsys/nfs not /var/lock/subsys/nfsd.
    Use "status -l nfs nfsd" for status check. The "-l" option
    was introduced in initscripts >= 8.45.43. (bz 873307)


author: Steve Dickson <steved@redhat.com> 1.0.9-70
changelog:
  - Have showmount try the highest mount version first (bz 947552)
  - Switch the mount version umount tries first (bz 947552)


author: Steve Dickson <steved@redhat.com> - 0.3.0-1
changelog:
  - Updated to latest upstream version 0.3.0
  - Fixed minor issues in spec file from the package review


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.3.0-1.1
changelog:
  - lose the BR for autotools
  - Patch in support for destdir
  - use %configure macro, make DESTDIR= install
  - add sparc to -fPIE (trivial, but correct)
  - destdir revealed missing/poorly created symlink, patch fixes it, add nfs4_editfacl to files
  - LDFLAGS passed to configure/exported were being blindly overwritten, patch fixes


author: Steve Dickson <steved@redhat.com> - 0.3.1-1.1
changelog:
  - Updated to latest upstream version 0.3.1 which eliminated the 
    need for the patches introduced in the previous commit.


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-2
changelog:
  - Retagging to fix an inconsitency in the release tags
  - Resolves: rhbz#1002641 - Rebase RHEL 5 to NSPR 4.10 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.2-1
changelog:
  - Update to nspr-4.10.2
  - Remove an unused patch
  - Resolves: rhbz#1032466 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.10]


author: Elio Maldonado <emaldona@redhat.com> - 4.10.2-2
changelog:
  - Fix changelog comments
  - Resolves: rhbz#1032466 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.10]


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-1
changelog:
  - Rebase to nspr-4.10.8
  - Resolves: Bug 1200921 - Rebase nspr to 4.10.8 for Firefox 38 ESR [RHEL-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-2
changelog:
  - Resolves: Bug 1269359 - CVE-2015-7183
  - nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption [rhel-5.11.z]


author: Elio Maldonado <emaldona@redhat.com> - 4.11.0-0.1
changelog:
  - Rebase to NSPR 4.11
  - Resolves: Bug 1297943 - Rebase RHEL 5.11.z to NSPR 4.11 in preparation for Firefox 45


author: Elio Maldonado Batiz <emaldona@redhat.com> - 4.8.9-1
changelog:
  - Resolves: rhbz#788672 - [RFE] Async update nspr to make firefox 10 LTS rebase possible
  - Update to 4.8.9


author: Elio Maldonado <emaldona@redhat.com> - 4.9.1-2
changelog:
  - Resolves: rhbz#834219 - restore top section of nspr-config-pc.patch
  - Needed to prevent multilib regressions


author: Elio Maldonado <emaldona@redhat.com> - 4.9.1-4
changelog:
  - Resolves: rhbz#834219 - Fix postinstall scriptlet failures
  - Fix %post and %postun lines per packaging guidelines
  - Updated License: to MPLv2.0 per upstream


author: Elio Maldonado <emaldona@redhat.com> - 4.9.1-4
changelog:
  - Resolves: rhbz#831654 - Pick up fixes from the rhel-5.8 branch
  - Regenerated nspr-config-pc.patch passes the the rpmdiff tests


author: Kai Engert <kengert@redhat.com> - 3.11.7-1.1
changelog:
  - Fix rhbz#212077, use a workaround to avoid Mozilla.org bug 51429
  - Remove link time dependency on libsoftokn3
  - Update to 3.11.7, but freebl/softokn remain at 3.11.5


author: Kai Engert <kengert@redhat.com> - 3.12.0.3-1
changelog:
  - Update to NSS_3_12_RC4
  - Enable loading of external ECC modules
  - Include upstream fix for a deadlock in the certutil tool, bug 447431


author: Kai Engert <kengert@redhat.com> - 3.12.2.0-3
changelog:
  - Update to NSS_3_12_2_WITH_CKBI_1_73_RTM
  - Add dependency to pkgconfig to devel package (bug456849)


author: Kai Engert <kengert@redhat.com> - 3.12.3.99.3-1.el5_2
changelog:
  - create 5.2.z-stream version
  - updated to NSS_3_12_4_FIPS1_WITH_CKBI_1_75
  - adjust ssl cipher count constant (bug 505650)
  - add a patch to seckey
  - remove references to SEED
  - exclude binary db files from change detection
  - Add dependency to pkgconfig to devel package (bug456849)
  - Use system zlib
  - Enable loading of external ECC modules


author: Elio Maldonado Batiz <emaldona@redhat.com> - 3.12.10-9
changelog:
  - Resolves: Bug 713373 - File descriptor leak after service httpd reload
  - Don't initialize nss if already initialized or if there are no dbs


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-2
changelog:
  - Resolves: rhbz#834219 - Fix multilib and scriptlet problems
  - Fix %post and %postun lines per packaging guildelines
  - Add %{?_isa} to tools Requires: per packaging guidelines
  - Fix explicit-lib-dependency zlib error reported by rpmlint


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-3
changelog:
  - Resolves: rhbz#834219 - Fix the changes to the %post line
  - Having multiple commands requires that /sbin/lconfig be the beginning of the scriptlet


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-4
changelog:
  - Related: rhbz#834219 - Fix ia64 / i386 multilib nss install failure
  - Remove no longer needed %pre and %preun scriplets meant for nss updates from RHEL-5.0


author: Robert Relyea <rrelyea@redhat.com> - 3.13.5-7
changelog:
  - Resolves: rhbz#820684
  - Enable certutil handle user supplied flags for PKCS #11 attributes.
  - This will enable certutil to generate keys in fussy hardware tokens.


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-8
changelog:
  - Resolves: rhbz#820684
  - Fix last entry in attrFlagsArray to be {NAME_SIZE(unextractable), PK11_ATTR_UNEXTRACTABLE}


author: Elio Maldonado <emaldona@redhat.com> - 3.13.6-3
changelog:
  - Fix changelog inconsistencies with commit and bug resolved
  - Resolves: rhbz#891149 [CVE-2013-0743]


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-16
changelog:
  - Add disable_hw_gcm.patch and in the spec file export NSS_DISABLE_HW_GCM=1
  - Disable HW GCM on RHEL-5 as the older kernel lacks support for it
  - Related: rhbz#987131


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-16
changelog:
  - Adjust the patches to complete the syncup with upstrean nss
  - Use NSS_DISABLE_HW_GCM on the patch as we do on the spec file
  - Ensure softoken/freebl code is the same on nss side as on the softoken side
  - Related: rhbz#987131


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Fix rpmdiff test reported failures and remove other unwanted changes
  - Resolves: rhbz#949845 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-5
changelog:
  - Define -DNO_FORK_CHECK when compiling softoken for ABI compatibility
  - Remove the unused and obsolete nss-nochktest.patch
  - Resolves: rhbz#949845 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-1
changelog:
  - Update to nss-3.15.3
  - Remove unused patch
  - Resolves: rhbz#1032466 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.10]


author: Kai Engert <kaie@redhat.com> - 3.15.3-3
changelog:
  - remove unnecessary and problematic template-removal patch
    which was added as part of the 3.15.1 rebase
  - bump release number


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - Revoke trust in one mis-issued anssi certificate
  - Resolves: Bug 1042683 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-5
changelog:
  - Remove two unused patches
  - Resolves: Bug 1042683 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117)


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-1
changelog:
  - Rebase to nss-3.16.1 for FF31
  - Resolves: Bug 1110860 - Rebase nss in RHEL 5.11 to NSS 3.16.1, required for FF 31


author: Kai Engert <kaie@redhat.com> - 3.16.1-4
changelog:
  - Adjust softokn patch to be compatible with legacy softokn API.
  - Resolves: Bug 1145430 - CVE-2014-1568


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-4
changelog:
  - Update and reeneable nss-646045.patch on account of the rebase
  - Enable additional ssl test cycles and document why some aren't enabled
  - Resolves: Bug 1200905 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-5
changelog:
  - Copy PayPalICA.cert and PayPalRootCA.cert to nss/tests/libpkix/certs
  - Resolves: Bug 1200905 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-5.11]


author: Kai Engert <kaie@redhat.com> - 3.18.0-6
changelog:
  - On RHEL 6.x keep the TLS version defaults unchanged.
  - Update to CKBI 2.4 from NSS 3.18.1 (the only change in NSS 3.18.1)


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-7
changelog:
  - Pick up upstream patch from nss-3.19.1
  - Resolves: Bug 1236954 - CVE-2015-2730 NSS: ECDSA signature validation fails to handle some signatures correctly (MFSA 2015-64)
  - Resolves: Bug 1236967 - CVE-2015-2721 NSS: incorrectly permited skipping of ServerKeyExchange (MFSA 2015-71)


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-1
changelog:
  - Rebase nss to 3.19.1
  - Pick up upstream fix for client auth. regression caused by 3.19.1
  - Revert upstream change to minimum key sizes
  - Remove patches that rendered obsolote by the rebase
  - Update existing patches on account of the rebase


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2-35.2
changelog:
  - when setting file contexts for creation of new files, only fail outright
    if we were in enforcing mode and the file needed to be given a specific
    label (#368281)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2-35.4
changelog:
  - import Kees Cook's patch to fix accidental leakage of part of ./DB_CONFIG
    (#580542, CVE-2010-0826)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2-36
changelog:
  - import Kees Cook's patch to fix accidental leakage of part of ./DB_CONFIG
    (#580543, CVE-2010-0826)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-11
changelog:
  - backport changes to group parsing from version 254 to fix heap corruption
    when parsing nested groups (#444031)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-13.el5_2.1
changelog:
  - block SIGPIPE in the atfork handler, so that it doesn't trip up when
    attempting to drop a connection to the server (#455271)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-15
changelog:
  - build nss_ldap with --enable-paged-results (#444185)
  - add patch to make netgroup enumeration fail due to lack of entries in
    setnetgrent(), rather than in getnetgrent(), to match how other mechanisms
    work (Jose Plans, #445972)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-19
changelog:
  - don't close a oneshot connection while we're in the middle of answering a
    specific query (#488857)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-22
changelog:
  - add patch to not assume we got a result for our start_tls request within the
    bind timelimit (Jatin Nansi, #529376)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-23
changelog:
  - unblock SIGPIPE while closing the connection in the child's part of
    atfork(), so that it can get delivered before we reset the signal
    handler (#454315)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-24
changelog:
  - update build dependency on openldap to 2.3.43-7 to get fixes for referral
    chasing (#510522) which affected nss_ldap (#472920)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-25
changelog:
  - avoid deadlock when one of our lookups recurses into our own host resolution
    routine, which would otherwise cause a deadlock or a crash (#448883)
  - provisionally add an "nss_check_case" option which, when enabled, will
    ignore entries for which the result didn't case-exact match the query,
    regardless of the comparison performed by the directory (#508621,#518911)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-25.1
changelog:
  - link nss_ldap and pam_ldap with -z nodelete so that memory allocated by
    library dependencies which is lost at unload doesn't leak, for the sake
    of applications which call PAM for authentication many times over (Mark
    Goodwin, #660236)
  - fix some memory leaks in pam_ldap (upstream #326,#333, part of #660236)
  - fix an uninitialized variable error (Mark Goodwin, part of #660236)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-25.2
changelog:
  - don't unconditionaly set up a new LDAP structure every time we try to read
    someone's supplemental groups list, regardless of whether or not we did so
    previously, and clean the connection up completely if we fail to get a
    response or parse it (#660456, from upstream #418 and #392 via Olivier
    Fourdan)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-25.3
changelog:
  - add proposed patch for upstream #421: sometimes errno gets reset before we
    return control to libc (#662939)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-35
changelog:
  - don't unconditionaly set up a new LDAP structure every time we try to read
    someone's supplemental groups list, regardless of whether or not we did so
    previously, and clean the connection up completely if we fail to get a
    response or parse it (#654650, from upstream #418 and #392 via Olivier
    Fourdan)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-36
changelog:
  - tweak patch for postponing the connection drop in a newly-forked child until
    we're first called so that it doesn't try to close sockets which we just
    assumed were our own (more of #474181)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-37
changelog:
  - add proposed patch for upstream #421: sometimes errno gets reset before we
    return control to libc (#661630)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-37.1
changelog:
  - backport fixes for upstream #350 (parsing results when the connection is
    gone) and #351 (double-free of message chain) (#703831)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-40
changelog:
  - return any non-success errors in setnetgrent(), not just netgroup-not-found
    errors (#664609, more of #445972)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-41
changelog:
  - backport fixes for upstream #350 (parsing results when the connection is
    gone) and #351 (double-free of message chain) (#684889)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-42
changelog:
  - add Ross Tyler's patch to always require authentication during password
    change requests for expired passwords, so that modules which check password
    quality (pam_cracklib) will always have the old password on-hand to examine
    as well (#667758)


author: Jakub Hrozek <jhrozek@redhat.com> - 253-42.2
changelog:
  - fix a regression caused by patch #39 - SRV records processing
    would crash if there was no basedn set (#743193)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - resize the supplemental GID array when it gets too large and an array size
    limit isn't set (Gavin Romig-Koch, #246541)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-4
changelog:
  - add dbus,radvd,tomcat,radiusd,news,mailman to the default list of
    nss_initgroups_ignoreusers (#243753)


author: Jakub Hrozek <jhrozek@redhat.com> - 253-50
changelog:
  - Free ldap_result when search does not return anything (#835555)
  - Use contents of ldap.secret even if it does not contain a newline (#797410)


author: Jakub Hrozek <jhrozek@redhat.com> - 253-51.1
changelog:
  - Add a patch by Gino LV. Ledesma to catch leaking sockets
  - Resolves: rhbz#905908 - (slow) socket leak in nss_ldap


author: Jakub Hrozek <jhrozek@redhat.com> - 253-52
changelog:
  - Add a patch by Gino LV. Ledesma to catch leaking sockets
  - Resolves: rhbz#772273 - (slow) socket leak in nss_ldap


author: Jakub Hrozek <jhrozek@redhat.com> - 253-52.1
changelog:
  - Use TLS_X_CALLBACK to terminate idle SSL connections after ldc_timeout
    seconds
  - Resolves: rhbz#1035945: nss_ldap does not reconnect to alternate ldap
                            server when using SSL


author: Jakub Hrozek <jhrozek@redhat.com> - 253-52.2
changelog:
  - Only set the TLS_X_CALLBACK if timeout is > 0
  - Related: rhbz#1035945: nss_ldap does not reconnect to alternate ldap
                            server when using SSL


author: Tom Callaway <spot@fedoraproject.org> - 2:2011.4.12-4
changelog:
  - fix issue preventing some volume types from not working properly (bz735862)
  - create fsck.ntfs symlink to ntfsck (bz735612).
  - apply cleanups from git trunk for ntfsck (bz 706638)
  - apply cleanups from git trunk for ntfsfix (bz 711662, 723562)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-13.el5
changelog:
  - don't crash with more than 512 local addresses (#661934)
  - add -I option (#528799)
  - fix -L option to not require argument (#460434)
  - move ntpd and ntpdate to /sbin and start earlier on boot (#470945, #689636)
  - increase memlock limit (#575874)
  - ignore tentative addresses (#489835)
  - print synchronization distance instead of dispersion in ntpstat (#679034)
  - fix typos in ntpq and ntp-keygen man pages (#664524, #664525)
  - clarify ntpd -q description (#591838)
  - don't verify ntp.conf (#481151)
  - replace Prereq tag


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-15.el5
changelog:
  - revert init script priority (#470945, #689636)
  - drop tentative patch (#489835)
  - move restorecon call to %posttrans


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-18.el5
changelog:
  - don't generate weak control key for resolver (CVE-2014-9293)
  - don't generate weak MD5 keys in ntp-keygen (CVE-2014-9294)
  - fix buffer overflows via specially-crafted packets (CVE-2014-9295)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-6.el5
changelog:
  - fix broadcast client to accept broadcasts on 255.255.255.255 (#226958)
  - compile with crypto support on 64bit architectures (#239580)
  - add ncurses-devel to buildrequires (#239580)
  - exit with nonzero code if ntpd -q did not set clock (#240134)
  - fix return codes in init script (#240118)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-8.el5
changelog:
  - avoid use of uninitialized floating-point values in clock_select (#250838)
  - generate man pages from html source, include config man pages (#307271)
  - add note about paths and exit codes to ntpd man page (#242925, #246568)
  - add section about exit codes to ntpd man page (#319591)
  - always return 0 in scriptlets


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-9.el5
changelog:
  - fix selecting multicast interface (#444106)
  - disable kernel discipline when -x option is used (#431729)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-9.el5_3.2
changelog:
  - fix buffer overflow when parsing Autokey association message 
    (#500783, CVE-2009-1252)
  - fix buffer overflow in ntpq (#500783, CVE-2009-0159)


author: Nalin Dahyabhai <nalin@redhat.com> 0.27-10
changelog:
  - backport changes to prevent the configuration files from conflicting on
    multilib systems (#476255)


author: Nalin Dahyabhai <nalin@redhat.com> 0.27-11
changelog:
  - backport changes to not bother asking about SELinux contexts when we're
    not going to be using that information (#510457)


author: Nalin Dahyabhai <nalin@redhat.com> 0.27-12
changelog:
  - backport patch to stop trying to close a stale connection to the bus,
    which used to generate a warning from libdbus, but which now causes an
    assertion failure (#628683)


author: Nalin Dahyabhai <nalin@redhat.com> 0.27-8
changelog:
  - backport change to block SIGPIPE in oddjobd, so that if a helper exits
    early, we get a write error rather than catastrophe (#246681)
  - oddjob_mkhomedir: spew an error message if the umask can't be parsed into
    a number properly (#246681)
  - pam_oddjob_mkhomedir.8: note that the module doesn't take arguments


author: Phil Knirsch <pknirsch@redhat.com> 2.2.4-17.el5
changelog:
  - Added the CCA STDLL for s390(x) arch (#253059)
  - Fixed a file descriptor leak for spin locks (#371021)


author: Phil Knirsch <pknirsch@redhat.com> 2.2.4-22.el5
changelog:
  - Fixed memcmp problem for pkcsconf validation of PINs (#415931)
  - Fixed double free problem in key store (#435462)


author: Dan Horák <dhorak@redhat.com> 2.2.4-22.el5_4.1
changelog:
  - fixed CKR_TEMPLATE_INCOMPLETE exception on an unwrap of an AES key (#540471)
  - fixed MAC computing during offload of MAC-hashing to CPACF using PKCS11 (#540474)
  - Resolves: #540471, #540474


author: Dan Horák <dhorak@redhat.com> 2.2.4-23.el5
changelog:
  - fixed CKR_TEMPLATE_INCOMPLETE exception on an unwrap of an AES key (#538879)
  - fixed MAC computing during offload of MAC-hashing to CPACF using PKCS11 (#539168)
  - Resolves: #538879, #539168


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Ran Regex: (Release: .*) => \1.slf5
  -->  Modify release string to note changes for SLF5
  - Added Source: openafs.SLx.ini
  -->  Config file for automated patch script
  - Added Patch: 0001-aklog-1.4-make-krb5_524-non-fatal-for-native-K5-toke.patch
  -->  This patchset modifies the behavior such that krb5_524_conv_principal() errors are non-fatal.


author: Steven Dake <sdake@redhat.com> - 0.80.3-8
changelog:
  - Resolves: rhbz#249287
  - Add non-merged IPC changes for fixing operation with cluster mirror
  - Resolves: rhbz#403901
  - Add upstream revision 1498 - enhance openais_exit_error to report string instead of error code
  - Resolves: rhbz#309621
  - Add upstream revision 1497 - Follow LSB guidelines for initscript
  - Add upstream revision 1496 - Revert patch 1480 since it causes problems with cman
  - Add upstream revision 1493 - Backport of patch 1379 to remove this_ip and replace with accessor functoins for use by ipc system
  - Add upstream revision 1486 - Unlock mutex on error condition of no memory when creating handle
  - Add upstream revision 1480 - Endian fixes for the totempg code
  - Add upstream revision 1479 - Remove & when regular reference works properly.
  - Add upstream revision 1478 - Patch to set system_from properly in retransmitted messages
  - Add upstream revision 1473 - Fix pthread_equal for timer_delete operation
  - Add upstream revision 1471 - Endian convert cpg downlist messages properly
  - Add upstream revision 1469 - change initialDataSize paramter from saUint32gt to SaSizeT to match specifications


author: Steven Dake <sdake@redhat.com> - 0.80.3-13
changelog:
  - Resolves: rhbz#432531
  - Add upstream revision 1504 - Fixes checkpoint synchronization issue when a new node is started.
  - Add upstream revision 1503 - backport -f foreground option.
  - Add upstream revision 1502 - Revert revision 1477 which exhibits problems with cman.
  - Add revision 1477 - This was reverted in a previous version but cherrypicked.  Now the patch has been applied and reverted in the rpm build process to match upstream.


author: Steven Dake <sdake@redhat.com> - 0.80.3-14
changelog:
  - Resolves: rhbz#432531
  - Add upstream revision 1506 - Resolves incomplete checkpoing synchronization when totem queue is full.


author: Steven Dake <sdake@redhat.com> - 0.80.3-15
changelog:
  - Resolves: rhbz#432531
  - Add upstream revision 1514 - Remove extra log_printf.
  - Add upstream revision 1513 - Remove comparison with zero and replace with comparison with NULL in handle database code.
  - Add upstream revision 1512 - Remove early commit of synchronization data when a synchronization in progress is followed by a node leaving or joining the cluster.
  - Add upstream revision 1511 - Remove double pthread_mutex_destroy from evt service.
  - Add upstream revision 1510 - Remove double pthread_mutex_destroy from evs service.
  - Add upstream revision 1509 - Remove double pthread_mutex_destroy from cpg service.
  - Add upstream revision 1508 - Remove double pthread_mutex_destroy from clm service.
  - Add upstream revision 1507 - Remove double pthread_mutex_destroy from checkpoint service.


author: Steven Dake <sdake@redhat.com> - 0.80.3-15.1
changelog:
  - Resolves: rhbz#509890
  - Resolves: rhbz#509887
  - Resolves: rhbz#509888
  - Resolves: rhbz#509889
  - Resolves: rhbz#509885
  - Add upstream revision 1665 - Compare local address with bindnetaddr properly.
  - Add upstream revision 1664 - Use node's full ipv4 address when generating nodeids.
  - Add upstream revision 1662 - Fix segfault when user with inappropriate access permissions accessed aisexec.
  - Add upstream revision 1661 - Fix a message lost during delivery which resulted in checkpoing service segfaulting.
  - Add upstream revision 1660 - Fix commit token received_flg being incorrect in some rare circumstances.
  - Add upstream revision 1659 - Fix rare problem where checkpoint synchronizatoin database could be thrown away.
  - Add upstream revision 1655 - Allow 31 bit nodeid's which default to off.
  - Add upstream revision 1653 - Schedule ipc dispatch thread at same priority as aisexec.
  - Add upstream revision 1652 - Remove more signal flooding problems in ipc dispatch thread.
  - Add upstream revision 1651 - Remove signal flooding of the ipc dispatch thread.
  - Add upstream revision 1647 - Change log level output of a logging message.
  - Add upstream revision 1646 - Add test case.
  - Add upstream revision 1645 - Remove ipc deadlock in overload conditions.
  - Add upstream revision 1644 - Make lib_exit_fn work properly.
  - Add upstream revision 1643 - Remove checkpoint expiration assertions.
  - Add upstream revision 1642 - Remove checkpoint close assertion.
  - Add upstream revision 1521 - Compile on latest glibc.
  - Add upstream revision 1524 - Fix syscall usage in keygen application.
  - Add upstream revision 1546 - Fix build for authentication on bsd platforms.
  - Add upstream revision 1548 - Fix synchronization of checkpoint global id.


author: Steven Dake <sdake@redhat.com> - 0.80.3-15.2
changelog:
  - Resolves: rhbz#509894
  - Resolves: rhbz#509893
  - Add upstream revision 1742 cherrypicked - Support on-wire compatibility for ckpt service.
  - Add upstream revision 1677 cherrypicked - Remove problem where some messages are ignored.


author: Steven Dake <sdake@redhat.com> 0.80.3-19
changelog:
  - Resolves: rhbz#442102
  - Add upstream revision 1653 - Schedule ipc dispatch thread at same priority as aisexec.
  - Add upstream revision 1652 - Remove more signal flooding problems in ipc dispatch thread.
  - Add upstream revision 1651 - Remove signal flooding of the ipc dispatch thread.


author: Steven dake <sdake@redhat.com> 0.80.3-20
changelog:
  - Resolves: rhbz#441413
  - Add upstream revision 1661 - Fix a message lost during delivery which resulted in checkpoing service segfaulting.
  - Add upstream revision 1660 - Fix commit token received_flg being incorrect in some rare circumstances.
  - Add upstream revision 1659 - Fix rare problem where checkpoint synchronizatoin database could be thrown away.
  - Add upstream revision 1655 - Allow 31 bit nodeid's which default to off.


author: Steven Dake <sdake@redhat.com> 0.80.3-22
changelog:
  - Resolves: rhbz#471896
  - Add upstream revision 1665 - Compare local address with bindnetaddr properly.
  - Add upstream revision 1664 - Use node's full ipv4 address when generating nodeids.
  - Add upstream revision 1662 - Fix segfault when user with inappropriate access permissions accessed aisexec.


author: Steven Dake <sdake@redhat.com> 0.80.3-22.2
changelog:
  - Resolves: rhbz#486382
  - Resolves: rhbz#486388
  - Resolves: rhbz#486389
  - Resolves: rhbz#486108
  - Fix backport error in 1737-1738 patch.


author: Steven Dake <sdake@redhat.com> 0.80.3-22.3
changelog:
  - Resolves: rhbz#486382
  - Resolves: rhbz#486388
  - Resolves: rhbz#486389
  - Resolves: rhbz#486108
  - Add upstream revision 1740 - removes segfault in cpg service when ipc connection disconnects and no groups are joined to the cpg group (ipc regression).
  - Add upstream revision 1739 - removes assert in multicast operations under overload.


author: Steven Dake <sdake@redhat.com> 0.80.3-2.4
changelog:
  - Resolves: rhbz#490307
  - Resolves: rhbz#491391
  - Resolves: rhbz#491395
  - Add upstream revision 1761 - More serialization work.
  - Add upstream revision 1755 - Fix segfault with cpg_leave followed by cpg_finalize.
  - Add upstream revision 1754 - reenable commented out code in previous comment.
  - Add upstream revision 1753 - Serialize service engine access.
  - Add upstream revision 1749 - Remove extra debug output from 1747 commit.
  - Add upstream revision 1747 - Fix reference counting from leaving node.
  - Add upstream revision 1743 - autogenerated node ids cause CPG not to issue synchronization of the process group information.
  - Add upstream revision 1742 - 5.2->5.3 rolling upgrades.
  - Revision 1739 from 0.80.3-22.3 fixes #488095.


author: Steven Dake <sdake@redhat.com> 0.80.3-22.7
changelog:
  - Resolves: rhbz#502940
  - Add upstream revision 1928 - fix race condition in cpg_join and cpg_leave
    resulting in serious regressions in cpg use cases.


author: Steven Dake <sdake@redhat.com> 0.80.3-22.8
changelog:
  - Resolves: rhbz#504867
  - Add upstream revision 1947 - fix regression in CPG related to ordering of
    configuration changes.


author: Steven Dake <sdake@redhat.com> 0.80.3-22.8
changelog:
  - Resolves: rhbz#504867
  - Add upstream revision 1947 - fix regression in CPG related to ordering of
    configuration changes.
  - Had to duplicate entry to work around bugzilla checking entry and invalid
    spec file commit.


author: Steven Dake <sdake@redhat.com> 0.80.3-22.9
changelog:
  - Resolves: rhbz#508303
  - Add upstream revision 1998 - fix regression in totempg handling of new
    buffers.


author: Steven Dake <sdake@redhat.com> - 0.80.3-4
changelog:
  - Resolves: rhbz#251082
  - Add upstream revision 1423 - Fix synchronization defect resulting in segfault.
  - This is the fc6 build.


author: Steven Dake <sdake@redhat.com> - 0.80.3-5
changelog:
  - Resolves: rhbz#302341
  - Add upstream revision 1455 - Fix loss of node joins in commit state resulting in looping of membership protocol.
  - Add upstream revision 1453 - Fix assertion if component registration occurs during certain phases of instantation.
  - Add upstream revision 1450 - Fix reference counting in lcr code so that lcr_ifact_release works properly.
  - Add upstream revision 1449 - Allow missing services in synchronization to not cause a segfault.k
  - Add upstream revision 1446 - Remove inadvertant commit of changes to totemsrp which happened when security changes were patched in revision 1426.
  - Add upstream revision 1426 - Patch to log security warnings when invalid identifier is used in message header for a totem header.


author: Steven Dake <sdake@redhat.com> - 0.80.3-6
changelog:
  - Resolved: rhbz#314641
  - Add upstream revision 1464 - Fix schedule of timer within the same thread to prevent deadlock


author: Steven Dake <sdake@redhat.com> 0.80.6-14
changelog:
  - Resolves: rhbz#515590
  - Add upstream revision 2097 - Ensure IPC memory is 1mb instead of 477k.
  - actually apply patch in spec file.


author: Steven Dake <sdake@redhat.com> 0.80.6-15
changelog:
  - Resolves: rhbz#560313
  - Add upstream revision 2117 - fix problem where ipc doesn't differentiate
    between full buffer and empty buffer properly resulting in cpg message
    corruption


author: Steven Dake <sdake@redhat.com> 0.80.6-16
changelog:
  - Resolves: rhbz#566467
  - Add upstream revision 2121 - Fix lockup in atexit handler registered by
    print.c that occurs less then 1% of the time.  This is resolved by calling
    a special version of log_flush before calling exit, and not relying on the
    atexit handler to call pthread_cond_wait.


author: Steven Dake <sdake@redhat.com> 0.80.6-16.1
changelog:
  - Resolves: rhbz#577887
  - Add upstream revision 2122 - Fix problem that can result in failed to receive state.


author: Angus Salkeld <asalkeld@redhat.com> 0.80.6-16.8
changelog:
  - Resolves: rhbz#621264
  - Add upstream revision 2153 - make openais more resilient to
    delayed multicast packets.


author: Steven Dake <sdake@redhat.com> 0.80.6-18.19
changelog:
  - Resolves: rhbz#60107
  - Add upstream revision 2144 - don't reset last_aru when token is retransmitted
  - Add upstream revision 2152 - fix merge error with 2144


author: Steven Dake <sdake@redhat.com> 0.80.6-18.10
changelog:
  - Resolves: rhbz#638609
  - Add upstream revision 2159 - fix segfault that can happen without null
    terminated checkpoint names.


author: Steven Dake <sdake@redhat.com> 0.80.6-16.2
changelog:
  - Resolves: rhbz#588897
  - Resolves: rhbz#588895
  - Resolves: rhbz#588628
  - Resolves: rhbz#588627
  - Add upstream revision 2130 - Resolve problem where ring id is not saved
    and restored when recovery is interrupted.
  - Add upstream revision 2129 - Resolve problem where highly lossy networks
    will sigabort (assert) if 512 or more entries are originated in recovery.
  - Add upstream revision 2128 - Use proper typing for retransmit token storage
    area.
  - Add upstream revision 2127 - Fix stack corruption that happens because of
    invalid length in memmove operation on highly lossy networks.


author: Steven Dake <sdake@redhat.com> 0.80.6-16.6
changelog:
  - Resolves: rhbz#618766
  - Add upstream revision 2147 - Fix problem where CPG_REASON_LEAVE is sent instead of CPG_REASON_PROCDOWN.


author: Steven Dake <sdake@redhat.com> 0.80.6-16.7
changelog:
  - Reverts: rhbz#601077
  - Remove upstream revision 2144 - don't reset last_aru when token is
    retransmitted - patch was incomplete


author: Steven Dake <sdake@redhat.com> 0.80.6-25
changelog:
  - Resolves: rhbz#619570
  - Add upstream revision 2151 - resolve problem where out of order messages
    can result in token loss in very rare circumstances.


author: Angus Salkeld <asalkeld@redhat.com> 0.80.6-27
changelog:
  - Resolves: rhbz#619536
  - Add upstream revision 2153 - make openais more resilient to
    delayed multicast packets.


author: Steven Dake <sdake@redhat.com> 0.80.6-28
changelog:
  - Resolves: rhbz#568650
  - Resolves: rhbz#625947
  - Add upstream revision 2160 - first part of remove stale pid members from confchg.
  - Add upstream revision 2161 - second part of remove stale pid members from confchg.
  - Add upstream revision 2159 - prevent non-null terminated strings in checkpoint names or section from triggering stack protector


author: Jan Friesse <jfriesse@redhat.com> 0.80.6-28.1
changelog:
  - Resolves: rhbz#694180
  - Resolves: rhbz#694183
  - Resolves: rhbz#694182
  - Resolves: rhbz#694181
  - Add upstream revision 2165 - fix abort when token is lost in RECOVERY state.
  - Add upstream revision 2166 - resolve abort during simulatenous stopping of atleast 4 nodes.
  - Add upstream revision 2167 - totemsrp: Remove recv_flush code.
  - Add upstream revision 2168 - totemsrp: Only restore old ring id information one time.
  - Add upstream revision 2169 - totemsrp: free messages originated in recovery rather then rely on messages_free.
  - Add upstream revision 2170 - return error if there is no space for semaphore.
  - Add upstream revision 2171 - IPC: handle maximum use of file descriptors gracefully.
  - Add upstream revision 2172 - don't assert when ring id file is less then 8 bytes.


author: Jan Friesse <jfriesse@redhat.com> 0.80.6-29
changelog:
  - Resolves: rhbz#561546
  - Resolves: rhbz#611434
  - Resolves: rhbz#623176
  - Resolves: rhbz#645299
  - Add upstream revision 2162 - speed up the case where a lot of nodes leave at the same time.
  - Add upstream revision 2165 - fix abort when token is lost in RECOVERY state.
  - Add upstream revision 2166 - resolve abort during simulatenous stopping of atleast 4 nodes.
  - Add upstream revision 2167 - totemsrp: Remove recv_flush code.
  - Add upstream revision 2168 - totemsrp: Only restore old ring id information one time.
  - Add upstream revision 2169 - totemsrp: free messages originated in recovery rather then rely on messages_free.
  - Add upstream revision 2170 - return error if there is no space for semaphore.
  - Add upstream revision 2171 - IPC: handle maximum use of file descriptors gracefully.


author: Jan Friesse <jfriesse@redhat.com> 0.80.6-30
changelog:
  - Resolves: rhbz#675206
  - Add upstream revision 2172 - don't assert when ring id file is less then 8 bytes.


author: Jan Friesse <jfriesse@redhat.com> 0.80.6-30.2
changelog:
  - Resolves: rhbz#731460
  - Resolves: rhbz#739083
  - Resolves: rhbz#739086

  - Add upstream revision 2178 - Fix problem where openais will segfault if there are gaps in recovery queue
  - Add upstream revision 2179 - whitetank ipc: handle EINTR in msg_send
  - Add upstream revision 2180 - whitetank ipc: Don't deadlock in ipc_disconnect
  - Add upstream revision 2181 - Ignore memb_join messages during flush operations
  - Add upstream revision 2183 - Deliver all messages from my_high_seq_recieved to the last gap


author: Jan Friesse <jfriesse@redhat.com> 0.80.6-30.4
changelog:
  - Resolves: rhbz#754717

  - Add upstream revision 2182 - Solve problems with aisexec and big time changes, by using clock_gettime


author: Jan Friesse <jfriesse@redhat.com> 0.80.6-34
changelog:
  - Resolves: rhbz#729081
  - Resolves: rhbz#737100

  - Add upstream revision 2183 - Deliver all messages from my_high_seq_recieved to the last gap
  - Add upstream revision 2184 - evt: Put correct handle in lib_evt_event_subscribe


author: Jan Friesse <jfriesse@redhat.com> 0.80.6-36
changelog:
  - Resolves: rhbz#752952

  - Add upstream revision 2186 - Call freeaddrinfo in totemip to remove memleak


author: Jan Friesse <jfriesse@redhat.com> 0.80.6-37
changelog:
  - Resolves: rhbz#671575
  - Resolves: rhbz#794837
  - Resolves: rhbz#806901

  - Add upstream revision 2187 - Handle syslog stack overflow
  - Add upstream revision 2188 - totemconfig: Change default FAIL_TO_RECV_CONST
  - Add upstream revision 2189 - Don't check range value in update_aru


author: Steven Dake <sdake@redhat.com> 0.80.6-7
changelog:
  - Resolves: rhbz#506778
  - Add upstream revision 1959 - fix leaking of shared memory objects during
    shutdown of cman.


author: Steven Dake <sdake@redhat.com> 0.80.6-8
changelog:
  - Resolves: rhbz#506119
  - Add upstream revision 1998 - Ensure that leaving processors in totempg have
    their assembly state reset.


author: Steven Dake <sdake@redhat.com> 0.80.6-9
changelog:
  - Resolves: rhbz#521098
  - Add upstream revision 2053 - Remove sigabort from networks running with
    netmtu parameter set to 9000 under heavy load.


author: Steven Dake <sdake@redhat.com> 0.80.6-8.1
changelog:
  - Resolves: rhbz#521098
  - Add upstream revision 2053 - Remove sigabort from networks running with
    netmtu parameter set to 9000 under heavy load.
  - Follow proper nvr policy.


author: Dan Horak <dhorak@redhat.com> - 2.14.0-4
changelog:
  - add Requires for scriptlets
  - update the subagent's initscript to RHEL/Fedora standards
  - Related: #474176


author: Doug Ledford <dledford@redhat.com> - 1.2-5
changelog:
  - Further tweaking of init scripts to make them LSB compliant
  - Bump number to keep this package up to date with the rhel5 openib package


author: Doug Ledford <dledford@redhat.com> - 1.3-1
changelog:
  - Remove the obsolete of the mstflint package to resolve a circular obsolete
    issue
  - Related: bz451638


author: Jan Safranek <jsafranek@redhat.com> 2.3.27-6
changelog:
  - Include sals patch to close #230395
  - Include manual bind timeout patch to close #230388
  - Include patch to allow write access to ldap socket to close #237417
  - Fix the upgrade logic so database is not deleted on upgrade (#240834)
  - Fix the memory leak on ACL rules (#241636)
  - Fix initscript return codes (#242665)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-12.1
changelog:
  - fixed segfault issues in modrdn (#606375)
  - added patch handling null char in TLS to compat package
    (#606375, patch backported by Jan Vcelak <jvcelak@redhat.com>)


author: Jan Vcelak <jvcelak@redhat.com> 2.3.43-12.8
changelog:
  - new feature: honor priority/weight with ldap_domain2hostlist (#734143)
  - fix: strict aliasing warnings during package build (#734145)
  - fix: OpenLDAP packages lack debug data (#734144)


author: Jan Vcelak <jvcelak@redhat.com> 2.3.43-23
changelog:
  - new feature update: honor priority/weight with ldap_domain2hostlist (#733435)
  - fix: initscript marked as %config incorrectly (#738768)


author: Jan Safranek <jsafranek@redhat.com> 2.3.43-1
changelog:
  - rebase to openldap-2.3.43 (#454994)
  - apply latest db-4 patches (#454857)
  - package openldap overlays, including smbk5pwd (#329441 #248549 #370411
    - check for TLS_CACERT file permissions in /etc/init.d/ldap (#356401)
  - rework the database upgrade logic, it should dump/restore the BDB
    database only when really needed (#436046)
  - introduce NETWORK_TIMEOUT in ldap.conf file to configure timeout of
    connect() operation (#459132)
  - allow to set SLURPD_KRB5CCNAME in /etc/sysconfig/ldap to set KRB5CCNAME
    of the slurpd process (#428638)


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.5
changelog:
  - fixed SEGV error moving mouse over window related to XmToolTipGetLabel
    (MotifZone bug fix #1388)
    Resolves: rhbz#277381


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-0
changelog:
  - rebase to 2.3.1 (CVS dist release)
    Resolves: rhbz#455736
  - fixes OpenMotif XmList problem
    Resolves: rhbz#405801
  - fixes List.c/ReplaceItem() segfaults when item selected
    Resolves: rhbz#431460
  - fixes [motifzone 1400 ] openmotif/ BadFont on multiple display application
    Resolves: rhbz#438910
  - fixes applications dump core in non-UTF8 environment
    Resolves: rhbz#453722
  - fixes lots of additional bugs: see release notes


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-2
changelog:
  - more fixes for unreliable pasting into XmTextField (MotifZone bug #1321)
    Resolves: rhbz#405941
  - the fix for MotifZone bug #1400 is not working for remote displays


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-2.1
changelog:
  - fixed BadDrawable error (rhbz#569907)
  - fixed MultiList not displayed properly (mzbz#1453) (rhbz#569906)
  - fixed invisible insensitive labels, buttons, icons and list entries
    (mzbz#1381) (rhbz#569906)
  - fixed XmNaccelerator do not work with CapsLock/ScrollLock/NumLock
    modifiers (mzbz#345) (rhbz#569908)


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-3
changelog:
  - fixed BadDrawable error (rhbz#557453)
  - fixed MultiList not displayed properly (mzbz#1453) (rhbz#568730)
  - fixed invisible insensitive labels, buttons, icons and list entries
    (mzbz#1381) (rhbz#568730)
  - fixed XmNaccelerator do not work with CapsLock/ScrollLock/NumLock
    modifiers (mzbz#345) (rhbz#492529)


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-6
changelog:
  - fixed Label size computed wrong within a Form (rhbz#583977)
  - fixed LabelGadget draws background over border of its parent (rhbz#584287)
    and LabelGadget draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1517 and #1521)
  - fixed memory leaks from OpenMotif 2.3.3 (rhbz#644824)
    (MotifZone bug #1388 refixed and #1502)
  - fixed invisible XFT text for insensitive labels (rhbz#684210)
    (missing parts of MotifZone bug #1381)
  - fixed im_widget double-free issue (rhbz#695650)
    (MotifZone bug #1534)


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-7
changelog:
  - fixed strings in LabelGadget are not displayed (rhbz#867792)
  - fixed Performance issue: XmListSetPos() is very very slow (rhbz#864409)
    (MotifZone bug #1536)
  - fixed frame size too large (rhbz#880914) (related to MotifZone bug #1299)
  - fixed handling of of keys in numpad section if numlock is disabled
    using the upstream fix (rhbz#818655) (MotifZone bug #1300)
  - added NumLockMask to esm_mask Modifiers to fix keypad key lookup after 
    enabling or disabling NumLock (1300_additional)


author: Doug Ledford <dledford@redhat.com> - 1.2.5-3
changelog:
  - Openmpi had the same bug as lam in regards to alternatives link management.
    Fix the bug by protecting the uninstall scriptlets from running unless we
    are doing an actual erase of the package.


author: Doug Ledford <dledford@redhat.com> - 1.2.5-4
changelog:
  - Update to use mpi-selector for mpi package runtime priority selection
  - Use mpi-selector change to fix bz433841 for real this time
  - Related: bz428199


author: Doug Ledford <dledford@redhat.com> - 1.2.7-6
changelog:
  - Minor fix ups to the Requires(preun) and Requires(post)
  - Add a Provides mpi to base package
  - Resolves: bz465447


author: Doug Ledford <dledford@redhat.com> - 1.3.1-1
changelog:
  - Update to ofed 1.4.1-rc3 version
  - Improve the multi compiler support in the spec file
  - Related: bz459652


author: Doug Ledford <dledford@redhat.com> - 1.3.2-1.el5
changelog:
  - Update to 1.3.2...this should be the last binary incompatible update
  - Build against non-XRC libibverbs
  - Enable valgrind annotations
  - Related: bz506258, bz504284


author: Doug Ledford <dledford@redhat.com> - 1.4-3
changelog:
  - Don't build against dapl as the udapl btl transport causes copious warnings
    that we don't care about (bz479941) and if no hardware is ever found,
    instead of gracefully moving on to the next available btl method it very
    ungracefully bails out of the program entirely (bz543453).
  - Related: bz479941, bz543453


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-5.4.17.1
changelog:
  - Resolves: CVE-2007-0239 rhbz#228002 shell escape
  - Resolves: CVE-2007-0238 rhbz#226967 starcalc overflow


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-5.4.22
changelog:
  - Resolves: rhbz#228629 or_IN print dialog translation incorrect
  - Resolves: rhbz#237649 crash on undo in impress


author: David Tardon <dtardon@redhat.com> - 1:2.3.0-6.8
changelog:
  - CVE-2008-3282 numeric truncation error in OOo memory allocator
  - Resolves: rhbz#458065 Handle memory allocation exceptions in bitmap handling code
  - Resolves: rhbz#439050 Calc--Differing behavior in opening some
    hyperlink protocols


author: David Tardon <dtardon@redhat.com> - 1:2.3.0-6.9
changelog:
  - CVE-2008-2237 OpenOffice.org WMF integer overflow
  - Resolves: rhbz#462645 integer overflow in WMF parser


author: Caolán McNamara <caolanm@redhat.com> - 1:2.3.0-6.11
changelog:
  - Resolves: rhbz#461984 Cannot use -headless with wrapper scripts
  - Resolves: rhbz#469302 add openoffice.org-3.0.0.ooo88446.ucb.rename.patch
  - Resolves: rhbz#469330 Euro Converter type detection
  - Resolves: rhbz#470210 Failed to save refresh property of native format
  - Resolves: rhbz#469990 Crash in numbering during html import
  - Resolves: rhbz#456845 Fix GdkPixbuf warning on launch of math
  - Resolves: rhbz#462055 Better rtf export encodings for CJK text
  - Resolves: rhbz#469321 Import newer format .odbs
  - Resolves: rhbz#469615 Allow .met files to be opened from command-line
  - Resolves: rhbz#480829 Writer layout crash in certain tables
  - Resolves: rhbz#476959 Better .doc TOC export
  - Resolves: rhbz#476221 Retain use mods to psprint.conf
  - Resolves: rhbz#480369 Don't keep print dialog around after closed
  - Resolves: rhbz#469630 Don't have a non-functional next button in formula wizard
  - Resolves: rhbz#469145 The whole paragraph words cut are displayed at "Undo" line


author: David Tardon <dtardon@redhat.com> - 1:2.3.0-6.11.2
changelog:
  - Resolves: rhbz#529750 openoffice.org various flaws
  - CVE-2009-2950 GIF file parsing heap overflow
  - CVE-2009-2949 integer overflow in XPM processing


author: David Tardon <dtardon@redhat.com> - 1:2.3.0-6.11.4
changelog:
  - Resolves: rhbz#529750 openoffice.org various flaws
  - CVE-2009-3301 OpenOffice.org Word sprmTDefTable Memory Corruption
  - CVE-2009-3302 OpenOffice.org Word sprmTSetBrc Memory Corruption


author: Caolan McNamara <caolanm@redhat.com> - 1:2.3.0-6.5.2
changelog:
  - CVE-2008-3282 numeric truncation error in OOo memory allocator
  - Resolves: rhbz#458064 Handle memory allocation exceptions in bitmap handling code


author: David Tardon <dtardon@redhat.com> - 1:2.3.0-6.5.3
changelog:
  - CVE-2008-2237 OpenOffice.org WMF integer overflow
  - Resolves: rhbz#462644 integer overflow in WMF parser


author: David Tardon <dtardon@redhat.com> - 1:3.1.1-19.9
changelog:
  - Resolves: rhbz#642185 openoffice.org various flaws
  - CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
    descriptions and OXT extension files
  - CVE-2010-3451 Array index error by insecure parsing of broken rtf
    tables
  - CVE-2010-3452 Integer signedness error (crash) by processing certain
    RTF tags
  - CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
    with WW8 list styles with specially-crafted count of list levels
  - CVE-2010-3454 Array index error by scanning document typography
    information of certain *.doc files
  - CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.10
changelog:
  - Resolves: rhbz#642185 openoffice.org various flaws
  - CVE-2010-4253 heap based buffer overflow in PPT import
  - CVE-2010-4643 heap based buffer overflow when parsing TGA files


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.10.2
changelog:
  - Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
    overflows in JPEG, PNG and BMP reader implementations


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.10.3
changelog:
  - Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
    processing invalid Escher graphics records length in the Powerpoint
    documents


author: David Tardon <dtardon@redhat.com> - 1:3.1.1-19.5.4
changelog:
  - Resolves: rhbz#642184 openoffice.org various flaws
  - CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
    descriptions and OXT extension files
  - CVE-2010-3451 Array index error by insecure parsing of broken rtf
    tables
  - CVE-2010-3452 Integer signedness error (crash) by processing certain
    RTF tags
  - CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
    with WW8 list styles with specially-crafted count of list levels
  - CVE-2010-3454 Array index error by scanning document typography
    information of certain *.doc files
  - CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.5.5
changelog:
  - Resolves: rhbz#642184 openoffice.org various flaws
  - CVE-2010-4253 heap based buffer overflow in PPT import


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.5.6
changelog:
  - Resolves: rhbz#642184 openoffice.org various flaws
  - CVE-2010-4643 heap based buffer overflow when parsing TGA files


author: Doug Ledford <dledford@redhat.com> - 3.2.2-3
changelog:
  - Fix a botched port of the Fedora opensmd init script that failed to replace
    all instances of /etc/rdma with /etc/ofed
  - Resolves: bz465150


author: Doug Ledford <dledford@redhat.com> - 3.2.6-1.el5
changelog:
  - Update to ofed 1.4.1-rc3 version
  - Remove dead patch
  - Update conf file format to version 3 format
  - Update init script for conf file usage change
  - Update logrotat file for log file name change
  - Related: bz459652


author: Doug Ledford <dledford@redhat.com> - 3.2.6-2.el5
changelog:
  - Fix an incorrect use of #elif that makes later gcc versions give an error
  - Fix compile flags to include -fno-strict-aliasing that is also needed on
    later gcc versions


author: Doug Ledford <dledford@redhat.com> - 3.3.3-1.el5
changelog:
  - Update to latest upstream version
  - Own the var/cache/opensm directory
  - don't include the bare .so file in the libs package, put it in devel
  - Related: bz518218


author: Dennis Gregorovic <dgregor@redhat.com> - 4.3p2-26.el5_2.1
changelog:
  - CVE-2007-4752 - Prevent ssh(1) from using a trusted X11 cookie if creation of an
    untrusted cookie fails (#280361)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-28
changelog:
  - use OpenSSL RNG directly (needed for FIPS-140-2 compliance)
  - when in FIPS mode do not try to use algorithms which are not allowed (#447936)
  - improve transfer speed on high latency connections (#227722)
  - more correct 'service sshd status' reporting (#430877)
  - add logging support to the sftp server (#452619)
  - small scp manual page improvement (#433381)


author: Petr Lautrbach <plautrba@redhat.com> 4.3p2-81
changelog:
  - make ssh(1)'s ConnectTimeout option apply to both the TCP connection and
    SSH banner exchange (#750725)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-9
changelog:
  - fix CVE-2007-3108 - side channel attack on private keys (#250581)
  - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309881)
  - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321221)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-10
changelog:
  - compile with -march=z900 on s390 for performance improvements (#250818)
  - make ssl session ID matching strict (#233599)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-8.3.1
changelog:
  - fix CVE-2007-3108 - side channel attack on private keys (#322891)
  - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309871)
  - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321211)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12
changelog:
  - abort if selftests failed and random number generator is polled
  - mention EVP_aes and EVP_sha2xx routines in the manpages
  - add README.FIPS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12.1
changelog:
  - fix CVE-2009-2409 - drop MD2 algorithm from EVP tables (#510197)
  - fix CVE-2009-4355 - do not leak memory when CRYPTO_cleanup_all_ex_data()
    is called prematurely by application (#546707)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12.4
changelog:
  - do not disable SSLv2 in the renegotiation patch - SSLv2 does
    not support renegotiation
  - allow unsafe renegotiation on clients with SSL_OP_LEGACY_SERVER_CONNECT


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12.5
changelog:
  - fix CVE-2010-0433 - do not pass NULL princ to krb5_kt_get_entry which
    in the RHEL-5 and newer versions will crash in such case (#569774)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12.7
changelog:
  - fix CVE-2010-4180 - completely disable code for
    SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG (#659462)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-19
changelog:
  - presort list of ciphers available in SSL (#688901)
  - accept connection in s_server even if getaddrinfo() fails (#561260)
  - point to openssl dgst for list of supported digests (#608639)
  - fix handling of future TLS versions (#599112)
  - added VeriSign Class 3 Public Primary Certification Authority - G5
    and StartCom Certification Authority certs to ca-bundle (#675671, #617856)
  - upstream fixes for the CHIL engine (#622003, #671484)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-20.1
changelog:
  - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery
    vulnerability and additional DTLS fixes (#771770)
  - fix for CVE-2011-4109 - double free in policy checks (#771771)
  - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
  - fix for CVE-2011-4619 - SGC restart DoS attack (#771780)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-21
changelog:
  - add known answer test for SHA2 algorithms (#740866)
  - make default private key length in certificate Makefile 2048 bits
    (can be changed with PRIVATE_KEY_BITS setting) (#745410)
  - fix incorrect return value in parse_yesno() (#726593)
  - added DigiCert CA certificates to ca-bundle (#735819)
  - added a new section about error states to README.FIPS (#628976)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-22.1
changelog:
  - fix problem with the SGC restart patch that might terminate handshake
    incorrectly
  - fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
  - fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-26.1
changelog:
  - fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
  - fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
  - enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
    environment variable is set (fixes CVE-2012-4929 #857051)
  - use __secure_getenv() everywhere instead of getenv() (#839735)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-27.4
changelog:
  - fix CVE-2014-0221 - recursion in DTLS code leading to DoS
  - fix CVE-2014-3505 - doublefree in DTLS packet processing
  - fix CVE-2014-3506 - avoid memory exhaustion in DTLS
  - fix CVE-2014-3508 - fix OID handling to avoid information leak
  - fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-33
changelog:
  - fix CVE-2014-8275 (without introduction of CVE-2015-0286) - various
    certificate fingerprint issues
  - fix CVE-2015-0204 - remove support for RSA ephemeral keys for non-export
    ciphersuites and on server
  - fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption
  - fix CVE-2015-0288 - X509_to_X509_REQ NULL pointer dereference
  - fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data
  - fix CVE-2015-0292 - integer underflow in base64 decoder
  - fix CVE-2015-0293 - triggerable assert in SSLv2 server


author: Kai Engert <kaie@redhat.com> 0.9.8e-34
changelog:
  - Rebase ca-bundle.crt to the upstream version 2.4 with legacy
    modifications. For compatibility reasons, several CA certificates with
    RSA sizes of 1024 bits are still included.
  - Add a patch to the source RPM that documents the changes from the
    upstream version.


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-35
changelog:
  - fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time
  - fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent
  - fix CVE-2015-4000 - prevent the logjam attack on client - restrict
    the DH key size to at least 768 bits (limit will be increased in future)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-38
changelog:
  - fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
  - disable SSLv2 in the generic TLS method (can be reenabled
    by setting environment variable OPENSSL_ENABLE_SSL2)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-5
changelog:
  - implement the integrity checking inside libcrypto so OpenSSL
    can be used in FIPS mode by the fipscheck library


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-9
changelog:
  - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276)
  - fix CVE-2006-2940 - parasitic public keys DoS (#207274)
  - fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
  - fix CVE-2006-4343 - sslv2 client DoS (#206940)


author: Steve Conklin <sconklin@redhat.com> - 2.6.05-1
changelog:
  - Latest upstream
  - remove selinux test and message from verify script
  - forgot the following bz earlier
  Resolves: rhbz#253052 Request for IPSec IKEv2


author: Steve Grubb <sgrubb@redhat.com> - 2.6.11-1
changelog:
  - new upstream release
  Resolves: #438826 openswan IKEv2 hangs between intel and ppc64 machines
  Resolves: #439985 opeswan IKEv2 responder fails when encr=aes and dh=modp1024


author: Steve Grubb <sgrubb@redhat.com> - 2.6.12-1
changelog:
  - new upstream release
  Resolves: #432821 left/rightsourceip tags not working
  Resolves: #439985 opeswan IKEv2 responder fails when encr=aes and dh=modp1024
  Resolves: #441588 openswan IKEv2 crashes when interoperating with racoon2
  Resolves: #442333 AVC denials on start of openswan host-to-host tunnel


author: Steve Grubb <sgrubb@redhat.com> - 2.6.14-1
changelog:
  - new upstream release
  Resolves: #450125 openswan and strongswan fail to interoperate with IKEv2
  Resolves: #450126 openswan should negotiate CCM algorithm
  Resolves: #450127 openswan doesn't accept null esp auth alg
  Resolves: #450128 openswan logging segfault when phase2alg=null
  Resolves: #450129 openswan IKEv2 crashes when interoperating with racoon2
  Resolves: #450334 openswan doesn't delete expired SA's


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.21-3
changelog:
  - Revised patch to support fips integrity check functionality
  Resolves: #469763 FIPS-140: Add integrity checking


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.21-4
changelog:
  - Added support for using PSK with NSS (rhbz 507844)
  - Fixed several warnings and undid unnecessary comments
  - Updated README.nss with an example configuration
  - Fixed Openswan ASN.1 parser vulnerability (CVE-2009-2185)
  Resolves: CVE-2009-2185
  Resolves: #507844


author: Will Cohen <wcohen@redhat.com> - 0.9.4-12
changelog:
  - Resolves: rhbz518480 Correct daemonization of oprofiled on ia64.
  - Resolves: rhbz450642 Handle possible null sym table.


author: Will Cohen <wcohen@redhat.com> - 0.9.4-14
changelog:
  - Resolves: rhbz498619 Oprofile: Add support for Nehalem-EP processors.
  - Resolves: rhbz527679 Rebuild with fixed version of binutils.


author: Will Cohen <wcohen@redhat.com> - 0.9.4-19
changelog:
  - Resolves: rhbz643476 Oprofile: Add support for Intel Westmere.
  - Resolves: rhbz713667 Oprofile: Add support for Intel Sandy Bridge.


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-10
changelog:
  - optimize pam_listfile to use pam_modutil_user_in_group_nam_nam() (#551312)
  - export environment variables in pam_exec (#554518)
  - fix user name matching in pam_unix remember feature (#768087)
  - added pam_cracklib options maxclassrepeat and gecos_check
  - pam_pwhistory now always saves the old password even for root


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-12
changelog:
  - better keep also the regular environment variables for backwards
    compatibility with old pam_exec scripts


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.14
changelog:
  - properly include /var/log/faillog and tallylog as ghosts
    and create them in post script (#209646)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.23
changelog:
  - pam_unix: truncated MD5 passwords in shadow shouldn't match (#219258)
  - pam_limits: add limits.d support (#232700)
  - pam_limits, pam_time, pam_access: add auditing of failed logins (#232993)
  - pam_namespace: expand $HOME even when appended with text (#237163)
    original patch by Ted X. Toth
  - add some default limits for users in realtime group (#240123)
  - CVE-2007-3102 - prevent audit log injection through user name (#243204)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.25
changelog:
  - added and improved translations (#219124)
  - adjusted the default limits for realtime users (#240123)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.26
changelog:
  - removed realtime default limits (#240123) from the package as
    it caused regression on machines with nonexistent realtime group


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.27
changelog:
  - support sha256 and sha512 password hashes (#427389)
  - fixed in operator of pam_succeed_if module (#295151)
  - fixed audit option of pam_tally and pam_tally2 (#328281)
  - do not free putenved pointer in pam_xauth (#402391)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-4
changelog:
  - add pam_tty_audit module (#244352)
  - pam_cracklib: additional optional checks for password quality (#438994)
  - pam_lastlog: display failed login attempts if requested (#438990)
  - pam_unix: do not check new passwords through cracklib (#448860)
  - pam_unix: clear PAM_AUTHTOK item if new password is bad (#443872)
  - comment in the limits.conf manpage that rss limit is ignored (#459624)
  - allow larger entries in pammodutil_get functions (#445355)
  - pam_tally: do not leak fds in tally_check (#457024)
  - pam_loginuid: use correct format when printing uid type (#460263)
  - pam_rhosts_auth: correct test for IP address (#461917)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-5
changelog:
  - add group audio to sound devices when no console user owns them (#244688)
  - resolve pam access origin entry only when it makes sense (#459057)
  - silence the strict-aliasing warnings (#462647)
  - pam_keyinit: save old uid so we can revert to it (#466411)
  - pam_filter: make it use pty subsystem (#473970)
  - add pam_faildelay module to be able to set the failure delay (#476217)
  - pam_tty_audit: fix double free when open_only option is used (#476833)
  - allow root to change users passwords when helper is needed (#476904)
  - make package's requires more correct (#497570)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-6.2
changelog:
  - fix insecure dropping of priviledges in pam_xauth
    and pam_mail - CVE-2010-3316 (#637898), CVE-2010-3435 (#641335)
  - fix insecure executing of scripts with user supplied environment
    variables in pam_namespace - CVE-2010-3853 (#643043)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.14-1.el5_2.1
changelog:
  - add backported fix for ccache permissions bypass when the "existing_ticket"
    option is used (CVE-2008-3825, #462112)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.14-8
changelog:
  - fix a packaging error: we were including the unpatched version of README
    after it had been patched


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.14-9
changelog:
  - add backported fix for ccache permissions bypass when the "existing_ticket"
    option is used (CVE-2008-3825, #462113)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.14-10
changelog:
  - add workaround for libpam returning success from pam_get_user() when it
    returns a NULL user name (#467208)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.14-13
changelog:
  - add patch to add the "chpw_prompt" option, to allow the older behavior
    of attempting a password-change during authentication if libkrb5 detects
    an expired password, based on patch from Olivier Fourdan (#509092)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.14-14
changelog:
  - backport the "multiple_ccaches" option from HEAD, requiring that it
    be enabled to not immediately remove an old ccache when asked to create
    a new one (#463417)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.14-15
changelog:
  - update backport for selecting which key to use for validation so that it
    prefers services with the local host name as the instance, from HEAD (more
    of #450776)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.14-16
changelog:
  - backport fixes to make the libdefaults verify_ap_req_nofail setting
    control what happens when we can't read keytabs, and enable TGT validation
    by default (#541177)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.14-17
changelog:
  - recognize "novalidate" as an option which takes a list of services for
    which TGT validation shouldn't be attempted (more of #541177)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.14-18
changelog:
  - backport infrastructure for handling translations (part of #526067)
  - patch in current translations (the rest of #526067)
  - add build-time dependency on gettext-devel (more of #526067)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.14-19
changelog:
  - link pam_krb5 with -z nodelete so that memory allocated by library
    dependencies which is lost at unload doesn't leak, for the sake of
    applications which call PAM for authentication many times over (#643962)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.14-21
changelog:
  - backport: during password change, only set PAM_AUTHTOK when we have
    answered both a new password prompt and a new password confirmation
    prompt with the same value (#713967)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.14-22
changelog:
  - refuse to supply non-password information via prompter callback when
    obtaining password-changing credentials (#715073)


author: Robert Relyea <rrelyea@redhat.com> 0.5.3-26
changelog:
  - only ignore first argument (argv[0]) when parsing the argument list 
    from our tools, not our pam_module.


author: Behdad Esfahbod <besfahbo@redhat.com> - 1.14.9-1
changelog:
  - Update to 1.14.9
  - Resolves: #216424, #216850, #211964, #213632
  - Add Thai language engine. (disabled, since there's no libthai)


author: Akira TAGOH <tagoh@redhat.com>
changelog:
  - Backport a patch to fix PostScript breakage following the non-monetary
    numeric format from current locale. (#231971)


author: David Cantrell <dcantrell@redhat.com> - 1.8.1-11
changelog:
  - Do not crash when trying to detect a disk label on /dev/md* devices on s390x
    Related: rhbz#227324


author: David Cantrell <dcantrell@redhat.com> - 1.8.1-13
changelog:
  - Modify parted man page to indicate which flags are valid for which
    disk labels
    Resolves: rhbz#242771
  - Add KNOWN ISSUES section to parted(8) man page explaining that we cannot
    currently do ext3 resizing inside parted
    Resolves: rhbz#367101


author: David Cantrell <dcantrell@redhat.com> - 1.8.1-14
changelog:
  - Fix parted print command crashing with Xen xvd disks
    Resolves: rhbz#366971
  - Disable disk loss warnings in script mode (-s)
    Resolves: rhbz#244668
  - Decrement exception counter correctly in the mkpart command
    Related: rhbz#244668
  - Fix block number used when checking state on ext2 filesystems
    Related: rhbz#244668
  - Enable experimental ext2 resize support with warning
    Related: rhbz#244668


author: Joel Granados <jgranado@redhat.com> - 1.8.1-23
changelog:
  - Prevent the user from creating msdos partitions on devices that have
    more than 2^32 sectors.
    Resolves: rhbz:447768


author: Brian C. Lane <bcl@redhat.com> - 1.8.1-29
changelog:
  - libparted: don't allow values less than 1 (#623268) (bcl)
    Resolves: #623268
  - libparted: fix snap radius so that it is using half (#623268) (bcl)
    Resolves: #623268
  - Add additional SCSI device major 128 thru 135 (#675650) (bcl)
    Resolves: #675650
  - Fix mkpartfs to handle fs > 2TB (#584057) (bcl)
    Resolves: #584057
  - Handle return value of dm_task_run correctly (#582907) (bcl)
    Resolves: #582907


author: Tomas Mraz <tmraz@redhat.com> 0.72-1
changelog:
  - merged audit patch to upstream cvs
  - improved passwd -S output (#170344)
  - make passwd -d work with stripped down proc (#196851)
  - corrected link to pam docs (#193084)
  - spec file cleanups


author: Tomas Mraz <tmraz@redhat.com> 0.73-2
changelog:
  - generate a correct debuginfo package on build (#500615)
  - correct errors in the manual page (#545668)
  - display correct status and return correct exit code on
    status display (#578534)


author: Tim Waugh <twaugh@redhat.com> 2.5.4-30
changelog:
  - Preserve SELinux file contexts (bug #229329).
  - Applied patch from 2.5.9 to allow spaces in filenames (bug #431887).
  - Fixed argument type for --get (bug #553624).


author: Ondrej Vasik <ovasik@redhat.com> - 3.4-2
changelog:
  - pax no longer fails to create ustar format archive if
    an absolute name is exactly 100 characters long (#239001)


author: Harald Hoyer <harald@redhat.com> 2.2.3-5
changelog:
  - added modified patch from Michael E. Brown @ Dell, to also 
    read all /usr/share/hwdata/pci.ids.d/*.ids files (rhbz#195327)
  - Resolves: rhbz#195327


author: Stepan Kasal <skasal@redhat.com> - 6.6-2.5
changelog:
  - Improve the fix for CVE-2006-7224 by updating
    pcre-6.6-CVE-2006-7224.patch and adding pcre-6.4-fix1.patch
    and pcre-6.4-posix.diff
  - Related: #373441


author: Stepan Kasal <skasal@redhat.com> - 6.6-2.7
changelog:
  - Fix the names of the pacthes added in 6.6-2.5:
    mv pcre-6.4-posix.diff pcre-6.6-CVE-2006-7225.patch
    mv pcre-6.4-fix1.patch pcre-6.6-CVE-2006-7226.patch
  - Update pcre-6.6-CVE-2007-1659.patch
  - Update pcre-6.6-CVE-2007-1660.patch
  - Add pcre-6.6-CVE-2006-7230.patch
  - Resolves: #380531


author: Stepan Kasal <skasal@redhat.com> - 6.6-5
changelog:
  - Fix the names of the pacthes added in pcre-6.6-3:
    mv pcre-6.4-posix.diff pcre-6.6-CVE-2006-7225.patch
    mv pcre-6.4-fix1.patch pcre-6.6-CVE-2006-7226.patch
  - Update pcre-6.6-CVE-2007-1659.patch
  - Update pcre-6.6-CVE-2007-1660.patch
  - Add pcre-6.6-CVE-2006-7230.patch
  - Resolves: #380541


author: Bob Relyea <rrelyea@redhat.com> - 1.4.4-0.1
changelog:
  - Silence libpcsc-lite even when the daemon isn't running.
  - fix typo in init file which prevents the config file from being read.
  - Pick up 1.4.4


author: Doug Ledford <dledford@redhat.com> - 1.2-11
changelog:
  - Upstream has updated the tarball without updating the version, so we
    grabbed the one from the OFED-1.3.2-20080728.0355 tarball
  - Resolves: bz451481


author: Doug Ledford <dledford@redhat.com> - 1.2-13.el5
changelog:
  - Update to ofed 1.4.1 final bits
  - Rebuild against non-XRC libibverbs
  - Related: bz506097, bz506258


author: Robin Norwood <rnorwood@redhat.com> 0.59-2
changelog:
  - Resolves: rhbz#245620
  - Backport patch to fix dn_expand looping issue
  - Backport patch to randomize ID field


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.0-5.el5
changelog:
  - Add missing storage volume lookup APIs (rhbz #519647)
  - Document the many optional $flags parameters (rhbz #519712)
  - Fix error message in Sys::Virt::Error class (rhbz #525091)
  - Remove bogus docs about REBOOT flags (rhbz #543878)


author: Robin Norwood <rnorwood@redhat.com> - 2.30-3
changelog:
  - fix various issues from package review:
  - remove extra || : from %check
  - add dist tag to release
  - remove BR: perl
  - fix tabs and spacing


author: Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
changelog:
  - 804.028-1
  - version upgrade
  - fix #210718 SIGSEGV on exit from texdoctk
  - fix #234404 Cannot manage big listboxes
  - fix #235666 Segfault occurs when using Perl-Tk on FC6


author: Marcela Maslanova <mmaslano@redhat.com> - 4:5.8.8-15.el5.1
changelog:
  - add upstream fix for bless/overload problem (changes 31996,32018,32019,
  	32025) and perl-5.8.8-bug24254.patch. Without this patch had bless
  	poor performance.
  - Resolves: rhbz#460308


author: Marcela Maslanova <mmaslano@redhat.com> - 4:5.8.8-17.el5
changelog:
  - some patches were forgotten, clean and actual patches move on the end
   of list
  - Resolves: rhbz#375621


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-25.el5
changelog:
  - 458851 remove update of module - the cleanup function was already in
    the previous version
  - 507378 update Scalar-List-Utils to latest CPAN version, 1.21, to prevent
    bug #375621
  - Resolves: rhbz#507378, rhbz#507378
  - patch lib/Net/t/hostname.t, so that it does not fail in mock


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-32.el5.2
changelog:
  - 537777 'Attempt to free unreferenced scalar' when running a perl 
   program with threads
  - Resolves: rhbz#629935


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-32.el5.3
changelog:
  - 701631 - CGI.pm popup_menu if optgroup, $selected is not properly escaped
  - 701632 - Perl threads leak memory when detached
  - Resolves: rhbz#701631, rhbz#701632


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-32.el5.5
changelog:
  - CVE-2010-2761 CVE-2010-4410 perl: CGI module multiple issues fixed by update
    of CGI module to 3.54
  - Resolves: rhbz#743626


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-32.el5.6
changelog:
  - CVE-2010-2761 CVE-2010-4410 perl: CGI module multiple issues fixed by security
    patch based on commit from version 3.50
  - Related: rhbz#743626


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-37.el5
changelog:
  - 527275 remove h2ph patch, which didn't work
  - 702389 change rebase of CGI into upstream patch
  - 593752 NDBM_File needs change in Configure to be able find ndbm.h
  - Related: rhbz#702389, rhbz#593752


author: Petr Pisar <ppisar@redhat.com> - 4:5.8.8-40
changelog:
  - Fix CVE-2012-5195 heap buffer overrun at repeatcpy (Resolves: rhbz#915690)
  - Fix CVE-2012-5526 newline injection due to improper CRLF escaping in
    Set-Cookie and P3P headers (Resolves: rhbz#915690)
  - Fix CVE-2012-6329 possible arbitrary code execution via Locale::Maketext
    (Resolves: rhbz#915690)
  - Fix CVE-2013-1667 DoS in rehashing code (Resolves: rhbz#915690)


author: Petr Pisar <ppisar@redhat.com> - 4:5.8.8-40
changelog:
  - Fix CVE-2012-5195 heap buffer overrun at repeatcpy (Resolves: rhbz#915691)
  - Fix CVE-2012-5526 newline injection due to improper CRLF escaping in
    Set-Cookie and P3P headers (Resolves: rhbz#915691)
  - Fix CVE-2012-6329 possible arbitrary code execution via Locale::Maketext
    (Resolves: rhbz#915691)
  - Fix CVE-2013-1667 DoS in rehashing code (Resolves: rhbz#915691)


author: Petr Pisar <ppisar@redhat.com> - 4:5.8.8-42
changelog:
  - Fix perl segfaults with custom signal handle (Resolves: rhbz#991854)
  - Reorder AnyDBM_File back-end preference (Resolves: rhbz#1018721)
  - Fix backslash interpolation in Locale::Maketext (Resolves: rhbz#1029016)
  - Enable year 2038 for Time::Local on 64-bit platforms (Resolves: rhbz#1057047)


author: Petr Pisar <ppisar@redhat.com> - 4:5.8.8-43
changelog:
  - Do not extend allowable epoch values in Time::Local::timelocal to remove
    useless warning on 64-bit platforms (Resolves: rhbz#1149375)


author: Joe Orton <jorton@redhat.com> 5.1.6-9.el5
changelog:
  - add security fix for CVE-2007-1583 (#235016)
  - add security fixes for CVE-2007-0455, CVE-2007-1001 (#235036)


author: Joe Orton <jorton@redhat.com> 5.1.6-12.el5
changelog:
  - add security fix for CVE-2007-1864, SOAP redirect handling issue,
    FTP CRLF injection issue (#235016)


author: Joe Orton <jorton@redhat.com> 5.1.6-13.el5
changelog:
  - add security fixes for CVE-2007-2756, CVE-2007-2872, 
    CVE-2007-3799, CVE-2007-3996, CVE-2007-3998, CVE-2007-4658,
    CVE-2007-4670 (#278411)


author: Joe Orton <jorton@redhat.com> 5.1.6-20.el5_2.1
changelog:
  - add security fixes for CVE-2007-5898, CVE-2007-4782, CVE-2007-5899,
    CVE-2008-2051, CVE-2008-2107, CVE-2008-2108 (#445923)


author: Joe Orton <jorton@redhat.com> 5.1.6-23.1.el5
changelog:
  - add security fixes for CVE-2008-3658, CVE-2008-3660,
    CVE-2008-5498, CVE-2008-5557, CVE-2008-5814, and mbstring
    func_overload issue (#487369)


author: Joe Orton <jorton@redhat.com> 5.1.6-22.el5
changelog:
  - fix possible crash in metaphone() (#446183)
  - imap: link in AUTH=PLAIN authenticator (#447983)
  - Zend: fix class name case in error messages (#446180)
  - move gd_README from -common to -gd (#443812)
  - pdo: fix possible crash in error path (#429693)
  - add security fixes for CVE-2007-5898, CVE-2007-4782, CVE-2007-5899,
    CVE-2008-2051, CVE-2008-2107, CVE-2008-2108 (#445924)
  - date: fix handling of relative days in strtotime (#444419)
  - date: fix test suite failure with current tzdata (#454863)
  - Zend: fix behaviour of constructors during destructors (#456313)
  - pdo_mysql: detect stale db connections (#450880)


author: Joe Orton <jorton@redhat.com> - 5.1.6-24.3
changelog:
  - add security fixes for CVE-2009-2687, CVE-2009-3291, CVE-2009-3292,
    CVE-2009-3546 CVE-2009-4017 (#541597)
  - add build fix for mysqli on some biarch systems (#543469)


author: Joe Orton <jorton@redhat.com> - 5.1.6-25.1.el5
changelog:
  - increase default memory_limit to 128M; mark php.ini noreplace (#517604)
  - php_stream_filter_api.h: fix trailing comma in enum (#530824)
  - soap: fix empty tag for NULL variables (#511175)
  - soap: fix refcounting bug in SoapClient::__setSoapHeaders (#505355)
  - soap: fix partial request with minOccurs=0 in XSD (#500383)
  - don't link odbc.so directly against -lodbcsql (#483690)
  - fix possible integer overflow in substr_compare (#469807)
  - fix possible integer overflow in substr_count (#470971)
  - fix move_uploaded_file to respect the umask (#498031)
  - mbstring: fix possible crash in mb_detect_encoding() (#486651)
  - add experimental ZTS build (#484058)


author: Joe Orton <jorton@redhat.com> - 5.1.6-27.1
changelog:
  - add security fixes for CVE-2010-1917, CVE-2010-3065, CVE-2010-2531,
    CVE-2010-1128, CVE-2010-0397 (#626735)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 5.1.6-27.4
changelog:
  - add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
    CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)


author: Joe Orton <jorton@redhat.com> - 5.1.6-30
changelog:
  - add security fixes for CVE-2011-0708, CVE-2011-1148, CVE-2011-1466, 
    CVE-2011-1469, CVE-2011-2202 (#768025)


author: Remi Collet <rcollet@redhat.com> - 5.1.6-45
changelog:
  - core: fix integer overflow in unserialize() CVE-2014-3669
  - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670
  - xmlrpc: fix buffer overflow in date parser #1155607


author: Joe Orton <jorton@redhat.com> - 5.3.2-6
changelog:
  - add security fixes for CVE-2010-3870 CVE-2010-3709 (#650877)
  - provide php-devel from -devel (#642701)


author: Joe Orton <jorton@redhat.com> - 5.3.3-1.2
changelog:
  - add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
    CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
    CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740733)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-23
changelog:
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
  - core: fix heap-based buffer overflow in DNS TXT record parsing.
    CVE-2014-4049
  - core: unserialize() SPL ArrayObject / SPLObjectStorage type
    confusion flaw. CVE-2014-3515
  - fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
  - fileinfo: unrestricted recursion in handling of indirect type
    rules. CVE-2014-1943
  - fileinfo: out of bounds read in CDF parser. CVE-2012-1571
  - fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238


author: Remi Collet <rcollet@redhat.com> - 5.3.3-24
changelog:
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm.
    CVE-2014-2497
  - fileinfo: fix incomplete fix for CVE-2012-1571 in
    cdf_read_property_info. CVE-2014-3587
  - core: fix incomplete fix for CVE-2014-4049 DNS TXT
    record parsing. CVE-2014-3597


author: Remi Collet <rcollet@redhat.com> - 5.3.3-25
changelog:
  - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
  - core: fix integer overflow in unserialize() CVE-2014-3669
  - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670


author: Warren Togami <wtogami@redhat.com> 2.3.1-1.el4.3
changelog:
  - Fixes to make it work on RHEL4
    Build:
        - make it build with old SILC
        - silence gconftool-2 during upgrade from pidgin-1.5.1
        - gtk-update-icon-cache didn't exist in RHEL4 
        - defattr all sub-packages
    Runtime:
        - reap sound child processes if they did not exit within 15 seconds
        - migrate RHEL4 users to command "aplay %s" so sound continues to work
        - default RHEL4 users to command "aplay %s"
  - finch fix for x86_64 (one liner patch)
  - Require RHEL4 libxml2 >= 2.6.16-12
    This fixes Google Talk protocol. (#445758)


author: Warren Togami <wtogami@redhat.com> 2.3.1-2
changelog:
  - CVE-2008-2927 MSN integer overflow
  - Fix ICQ login
  - pidgin-2.3.1-reap-sound-children.patch
    pidgin-2.3.1-finch-x86_64.patch
    No change, but just noting that these went into upstream.


author: Warren Togami <wtogami@redhat.com> 2.5.2-2
changelog:
  - Upstream backports:
    100: sametime-redirect-null crash
    101: NetworkManager-improvement
    102: no-password-in-dialog-if-not-remembering
    103: temporarily-remember-password-during-auto-reconnect
    104: smilie-theme-change-crash
    105: url_fetch_connect_cb-double-free crash
    106: GtkIMHtmlSmileys-remove-crash
    107: remove-dialog-from-open-dialog-list


author: Warren Togami <wtogami@redhat.com> 2.5.2-6
changelog:
  - Automatically detect booleans to enable build features from dist tag
  - Unify RHEL4 and RHEL5 spec with Fedora to make both easier to maintain


author: Warren Togami <wtogami@redhat.com> 2.5.5-2
changelog:
  - Security/DoS fixes from 2.5.6
    CVE-2009-1373-8331e31a
    CVE-2009-1374-ad057b75
    2c9a1153
    CVE-2009-1375-7829ec76
    CVE-2009-1376-9dd1c4c3


author: Warren Togami <wtogami@redhat.com> 2.6.2-2
changelog:
  - Upstream backports:
      97e003ed2bc2bafbb993693c9ae9c6d667731cc1 aim-buddy-status-grab
      37aa00d044431100d37466517568640cb082680c yahoo-buddy-idle-time
      40005b889ee276fbcd0a4e886a68d8a8cce45698 yahoo-status-change-away
      cb46b045aa6e927a3814d9053c2b1c0f08d6fa62 crash-validate-jid


author: Warren Togami <wtogami@redhat.com> - 2.6.6-1
changelog:
  - 2.6.6 with security and numerous minor bug fixes
    CVE-2010-0277 CVE-2010-0420 CVE-2010-0423
  - Bug #528796: Get rid of #!/usr/bin/env python


author: Warren Togami <wtogami@redhat.com> - 2.6.6-2
changelog:
  - Upstream backports:
      0e3079d15adeb12c1e57ceaf5bf037f9b71c8abd Fix AIM SSL clientLogin
      b14ee507e932a395a0e1f29298af162c8614ca0f Fix AIM clientLogin with proxy


author: Dag Wieers <dag@wieers.com> - 4.64-3 - 4567+/dag
changelog:
  - Added set of patches from Eduardo Chappa.
  - Remove big unicode patch from SuSE.
  - Added pinegp compile patch for FC6. (Satish Balay)


author: Peter Vrabec <pvrabec@redhat.com> - 0.7.3-3
changelog:
  - fix source url
  - move postun to preun, mainly because of install-info
  - add pinentry-gtk-2 entry into gtk files section


author: Marek Grac <mgrac@redhata.com>
changelog:
  - Resolves: #446802 - segfault if syslog message is longer 
                        than 80 characters


author: Lon Hohberger <lhh@redhat.com> 0.8.4-11
changelog:
  - Resolves: #238498  - need fallback service
  - Resolves: #243908  - nanny blocks signals in child processes


author: Marek Grac <mgrac@redhat.com> 0.8.4-15
changelog:
  - Resolves: #522230 - 'service pulse stop' does not kill nanny process
  - Resolves: #533113 - piranha-0.8.4-13.el5 breaks LVS


author: Marek Grac <mgrac@redhat.com> 0.8.4-19
changelog:
  - Resolves: #550126 - fails to parse load average with ruptime
  - Resolves: #453451 - LVS rebooted simultaneously cause problems


author: Ryan O'Hara <rohara@redhat.com> 0.8.4-23
changelog:
  - Resolves: #708035 - too many VIPs can causes HTTP 414 error
  - Resolves: #698505 - add CIDR /23 netmask to drop-down menus


author: Ryan O'Hara <rohara@redhat.com> 0.8.4-25
changelog:
  - Resolves: #739223 - ipvsadm errors should not be fatal
  - Resolves: #786364 - reread config can cause lvsd to segfault


author: Marek Grac <mgrac@redhat.com> 0.8.4-8
changelog:
  - Resolves: #243278 - Fixes wrong init scripts
  - Resolves: #249312 - VIP doesn't go down
  - Resolves: #245788 - send_arp & incorrectly-formed ARP
  - Resolves: #338101 - php errors in piranha-gui


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-1
changelog:
  - add configurable client-side certificate matching
  - add more configurable KDC acceptance criteria
  - fix wire-incompatibilities with some newer implementations (#242109)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.6-1
changelog:
  - correctly initialize NSS after the KDC detaches from the terminal, so that
    we can still read the on-disk database with NSS 3.12
  - fix new wire-incompatibilities with some implementations by making the
    version number of signed-data items configurable (fallout from #242109)


author: Phil Knirsch <pknirsch@redhat.com> - 0.99.3-9.el5
changelog:
  - Fixed a problem with the sysconfig patch (#438877)
  - Corrected the fix for the stale /.suspended file (#270861)
  - Resolves: #438877,#270861


author: Phil Knirsch <pknirsch@redhat.com> - 0.99.3-6.el5.18
changelog:
  - Added missing check if messagebus is running (#248514)
  - Add /etc/sysconfig/pm-action (#248517)
  - Check for valid options and output error message and usage on error (#251838)
  - Fixed usage for radeontool (#252293)


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-14.1
changelog:
  - Allow <<none>> to exist in homedir/genhomedircon handling it properly
  Resolves: #354361
  - Ignore granted messages with audit2allow
  Resolves: #441402
  - Fix semanage fcontext to quote regex
  Resolves: #435140
  - Fix chcat throwing error messages while changing context  
  Resolves: #220813
  - Make semanage understand -S option
  Resolves: #316011
  - genhomedircon matches misc in /home path


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-14.2
changelog:
  - Fix chcat throwing error messages while changing context  
  - stop genhomedircon creating duplicate entries
  Resolves: #433429


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-14.4
changelog:
  - Add semodule -DB support
  Resolves: #493115
  - Add ~/www ~/web to restorecond.conf
  Resolves: #458687
  - Fix sort order for portsPage
  Resolves: #468170
  - Allow <<none>> in homedir 
  Resolves: #354361


author: Miroslav Grepl <mgrepl@redhat.com> 1.33.12-14.7
changelog:
  - Remove semanage translation functionality
  Resolves: #460970
  - Fix semanage port add/delete problems
  Resolves: #505521
  - Fix instances of #!/usr/bin/env python in policycoreutils-gui
  Resolves: #521298
  - Fix semanage command does not support -node option
  Resolves: #527487


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-13
changelog:
  - Add support for selecting a store in semanage
  Resolves: #316011
  - Handle bad options on semodule command line
  - Add newrole support for alternate pam configurations
  Resolves: #336171


author: Marek Kasik <mkasik@redhat.com> - 0.5.4-18
changelog:
  - Add support for decryption of AES encrypted streams
  - Patch backported by Olivier Fourdan
  - Resolves: #637124


author: Kristian Høgsberg <krh@redhat.com> 0.5.4-4
changelog:
  - Add patch from Shawn Huang <phuang@redhat.com> to fix selection
    rendering across different fonts (#212142).


author: Marek Kasik <mkasik@redhat.com> - 0.5.4-4.4.el5_4.10
changelog:
  - Add poppler-0.5.4-JBIG2-segment-reading.patch to
    fix reading of arithmetically encoded JBIG2 images with
    unknown length.
  - Resolves: #528147


author: Marek Kasik <mkasik@redhat.com> - 0.5.4-4.4.el5_4.11
changelog:
  - Fixes various flaws addressed in bugs #526637, #526893 and #526915
    which were tracked in #527403.
  - Resolves: #527403


author: Marek Kasik <mkasik@redhat.com> - 0.5.4-4.4.el5_5.12
changelog:
  - Add poppler-0.5.4-current-stream.patch
  - Use customized getPos() function for JBIG2Stream
  - Resolves: #624702


author: Marek Kasik <mkasik@redhat.com> - 0.5.4-4.4.el5_5.14
changelog:
  - Add poppler-0.5.4-CVE-2010-3702.patch
      (Properly initialize parser)
  - Add poppler-0.5.4-CVE-2010-3704.patch
      (Fix crash in broken pdf (code < 0))
  - Resolves: #639839


author: Thomas Woerner <twoerner@redhat.com> 2:2.3.3-2.1
changelog:
  - fixed postfix privilege problem with symlinks in the mail spool directory
    (CVE-2008-2936)
    Resolves: rhbz#456717


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.3.3-5
changelog:
  - Packaged example scripts
    Resolves: rhbz#251677
  - Fixed recipient duplicate elimination
    Resolves: rhbz#474541
  - Compiled with mysql support
    Resolves: rhbz#502412
  - Clarified documentation about reject_invalid_helo_hostname
    Resolves: rhbz#514948
  - Fixed milter communication if single header is larger than 64k
    Resolves: rhbz#617069
  - Improved init script to check for PID
    Resolves: rhbz#645348
  - Fixed mailq, newaliases, sendmail, aliases man pages display
    Resolves: rhbz#664627


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.3.3-7
changelog:
  - Dropped unnecessary requires
    Resolves: rhbz#915901
  - Backported TLS cache redirection from postfix-2.6
    Resolves: rhbz#977629


author: Tom Lane <tgl@redhat.com> 8.1.11-1.el5_1.1
changelog:
  - Update to PostgreSQL 8.1.11 to fix CVE-2007-4769, CVE-2007-4772,
    CVE-2007-6067, CVE-2007-6600, CVE-2007-6601
  Resolves: #427137
  - Use tzdata package's data files instead of private copy, so that
    postgresql-server need not be turned for routine timezone updates


author: Tom Lane <tgl@redhat.com> 8.1.18-1.el5_4.1
changelog:
  - Update to PostgreSQL 8.1.18 to fix CVE-2009-0922, CVE-2009-3230,
    and assorted other bugs described at
    http://www.postgresql.org/docs/8.1/static/release.html
  Resolves: #525284


author: Tom Lane <tgl@redhat.com> 8.1.21-1.el5_5.1
changelog:
  - Update to PostgreSQL 8.1.21 to fix CVE-2010-1169, CVE-2010-1170,
    CVE-2009-4136, CVE-2010-0733, CVE-2010-0442, and assorted other bugs
    described at
    http://www.postgresql.org/docs/8.1/static/release.html
  Resolves: #586058


author: Tom Lane <tgl@redhat.com> 8.1.22-1.el5_5.1
changelog:
  - Update to PostgreSQL 8.1.22, for various fixes described at
    http://www.postgresql.org/docs/8.1/static/release.html
    including the fix for CVE-2010-3433
  Resolves: #639931


author: Tom Lane <tgl@redhat.com> 8.1.23-1.el5_6.1
changelog:
  - Update to PostgreSQL 8.1.23, for various fixes described at
    http://www.postgresql.org/docs/8.1/static/release.html
    This is the last upstream release in the 8.1.x series.
  - Ensure we don't package any .gitignore files from the source tarball
  - Back-port upstream fix for CVE-2010-4015
  Resolves: #672632


author: Pavel Raiskup <praiskup@redhat.com> - 8.1.23-9
changelog:
  - fix #1065840: CVE-2014-0060, CVE-2014-0061, CVE-2014-0063, CVE-2014-0064,
    CVE-2014-0065
  - better incorporate strlcpy function (upstream git diff c92f7e..062421)


author: Tom Lane <tgl@redhat.com> 8.1.7-1
changelog:
  - Update to PostgreSQL 8.1.7 to fix CVE-2007-0555, CVE-2007-0556
  Resolves: #225496
  - Sync init script and Makefile.regress with current Fedora scripts


author: Tom Lane <tgl@redhat.com> 8.4.7-1
changelog:
  - Update to PostgreSQL 8.4.7, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
    including the fix for CVE-2010-4015
  Resolves: #672637
  - Ensure we don't package any .gitignore files from the source tarball


author: Tom Lane <tgl@redhat.com> 8.4.9-1
changelog:
  - Update to PostgreSQL 8.4.9, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
    including the fix for CVE-2011-2483
  Resolves: #740740


author: Tom Lane <tgl@redhat.com> 8.4.11-1
changelog:
  - Update to PostgreSQL 8.4.11, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
    including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
  Resolves: #812077


author: Tom Lane <tgl@redhat.com> 8.4.12-1
changelog:
  - Update to PostgreSQL 8.4.12, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
    including the fixes for CVE-2012-2143, CVE-2012-2655
  Resolves: #830723


author: Tom Lane <tgl@redhat.com> 8.4.13-1
changelog:
  - Update to PostgreSQL 8.4.13, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
    including the fixes for CVE-2012-3488, CVE-2012-3489
  Resolves: #852018


author: Tom Lane <tgl@redhat.com> 8.4.12-1
changelog:
  - Update to PostgreSQL 8.4.12, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
    including the fixes for CVE-2012-2143, CVE-2012-2655
  Resolves: #830724


author: Tom Lane <tgl@redhat.com> 8.4.13-1
changelog:
  - Update to PostgreSQL 8.4.13, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
    including the fixes for CVE-2012-3488, CVE-2012-3489
  Resolves: #852019


author: Jozef Mlich <jmlich@redhat.com> - 8.4.18-1
changelog:
  - Update to PostgreSQL 8.4.18, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
    including fixes for CVE-2013-0255, CVE-2013-1900 (#1017833)


author: Tom Lane <tgl@redhat.com> 8.4.2-3
changelog:
  - Add % release unintentionally omitted from Provides
  - Adjust BuildRequires back to RHEL-5 environment
  - Don't run autoconf on the main package: we don't currently need to,
    and the RHEL5 version is too old for some of the macros used here
  - Revert patch for bug 228263, since that only works with tcl >= 8.5
  Related: #489479


author: Pavel Raiskup <praiskup@redhat.com> - 8.4.20-1
changelog:
  - Update to PostgreSQL 8.4.20 (#1065839) for fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-19.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-20.html


author: Tom Lane <tgl@redhat.com> 8.4.4-1.el5_5.1
changelog:
  - Update to PostgreSQL 8.4.4, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-4.html
    including fixes for CVE-2010-1169 and CVE-2010-1170
  Resolves: #586060


author: Tom Lane <tgl@redhat.com> 8.4.5-1.el5_5.1
changelog:
  - Update to PostgreSQL 8.4.5, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
    including the fix for CVE-2010-3433
  Resolves: #639933


author: Tom Lane <tgl@redhat.com> 8.4.7-1.el5_6.1
changelog:
  - Update to PostgreSQL 8.4.7, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
    including the fix for CVE-2010-4015
  Resolves: #672636
  - Ensure we don't package any .gitignore files from the source tarball


author: Tom Lane <tgl@redhat.com> 8.4.9-1.el5_7.1
changelog:
  - Update to PostgreSQL 8.4.9, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
    including the fix for CVE-2011-2483
  Resolves: #740739


author: Thomas Woerner <twoerner@redhat.com> 2.4.4-1
changelog:
  - new version 2.4.4 with lots of fixes
  - fixed reesolv.conf docs (#165072)
    Thanks to Matt Domsch for the initial patch 
  - enabled CBCP (#199278)


author: Jiri Skala <jskala@redhat.com> 2.4.4-2.el5
changelog:
  - Resolves: #440613 corrected format of release line in spec file
  - Resolves: #443914 conflict with syslog on pppoe-server
  - Resolves: #241753 undesired files in the package
  - Resolves: #251456 pppoe-server error


author: Jakub Jelinek <jakub@redhat.com> 0.3.9-1
changelog:
  - DT_GNU_HASH support
  - handle N_BNSYM and N_ENSYM stabs (#198203)
  - handle upgrades from prelink with smaller maxpagesize to prelink
    with larger maxpagesize (#196941)


author: Jakub Jelinek <jakub@redhat.com> 0.3.9-2.1
changelog:
  - blacklist libfreebl3.so and libsoftokn3.so, as nss does some
    FIPS mandated braindamaged integrity checking of these two libraries
    (#245775)


author: Jakub Jelinek <jakub@redhat.com> 0.4.0-2.el5
changelog:
  - add support for -c /etc/prelink.conf.d/*.conf in prelink.conf (#249889)
  - remove no longer existent directories from default prelink.conf (#248694)
  - reenabled prelink C++ optimizations which have not triggered any longer
    since _ZT[IV]* moved into .data.rel.ro section from .data
  - fixed performance issues in C++ optimizations, especially on GCJ
    CNI programs (#314051)
  - other performance improvements, prelink -avmR after prelink -ua now
    takes roughly 3m4s real time instead of 20m27s before
  - don't run TEXTREL tests if SELinux is enforcing (#245928)
  - don't leave temporary files behind on prelink --verify failures (#199251)
  - fix adjusting of .debug_ranges if end of range is at the end of some
    section and there is padding before the following one


author: Tomas Smetana <tsmetana@redhat.com> 3.2.7-10
changelog:
  - fix #441656 - procps states a bug is hit when receiving a signal
  - fix #444196 - 'sysctl -A' doesn't display a table
  - fix #450114 - %CPU value in top is reported as an integer
  - fix #451834 - sysctl man page change


author: Daniel Novotny <dnovotny@redhat.com> 3.2.7-11
changelog:
  - fix  #472783 - 'vmstat -p <partition name>',
    the detailed statistics of the partition name is not output.


author: Jan Görig <jgorig@redhat.com> 3.2.7-17
changelog:
  - fix #531439 - vmstat -SM doesn't work but vmstat -S M does
  - fix #564310 - ps man page layout corrupted
  - fix #586078 - vmstat disk device field is not long enough
  - fix #586116 - add descriptions of columns to pmap(1) man page
  - fix #616829 - top calculates %CPU over 100%


author: Jaromir Capik <jcapik@redhat.com> 3.2.7-20
changelog:
  - #839340 - vmstat -S M 1' and 'vmstat -S m 1' erronously output constant 'si' and 'so' value of 0
  - Resolves: rhbz#839340


author: Karel Zak <kzak@redhat.com> 3.2.7-8
changelog:
  - remove zombie patch (needs more investigation)
  - fix #208100 - top command with '-c' option become not to display list of tasks
  - fix #199174 - top returns with exit code 1 even if no error occurs


author: Tomas Smetana <tsmetana@redhat.com> 3.2.7-9
changelog:
  - fix #217142 - "sysctl -a" generates kernel warnings (by documenting the
    behavior), drop previous patch
  - fix #184335 - enhance top to display in MB vs KB
  - fix #233962 - buffer owerflow in sysctl


author: Ivana Varekova <varekova@redhat.com> - 6.3.2-44
changelog:
  - Resolves: #291531
    fix log file permission
  - Resolves: #232163
    service psacct status returns the right value
  - Resolves: #447028
    Logrotate of psacct will restart accounting even if 
    the service was stopped


author: Jaromir Capik <jcapik@redhat.com> 22.2-10
changelog:
  - Fixes hanged fuser when the network is detached
  - Fixes incorrect identification of ipv6 sockets by fuser
  - Resolves: rhbz#436954, rhbz#693476


author: Matthew Barnes <mbarnes@redhat.com> - 2.10.1-10.el5
changelog:
  - Require not just pygtk2 = (version) but (version)-(release) in the
    subpackages (RH bug #311571).


author: Matthew Barnes <mbarnes@redhat.com> - 2.10.1-12.el5
changelog:
  - Revise patch for RH bug #237077 to correct a reference counting error.
    Reported separately as RH bug #430347.


author: James Antill <james.antill@redhat.com> - 2.4.3-23
changelog:
  - Fix gettext problem
  - Resolves: rhbz#444088
  - Add socketmodule constants (bug #436560)
  - Fix xmlrpclib marchal problem (python bug #1739842)
  - Fix fd leak in urllib2
  - Resolves: rhbz#460694


author: James Antill <james.antill@redhat.com> - 2.4.3-24
changelog:
  - Remove unapproved socket constants and xmlrpclib fixes.
  - Resolves: rhbz#444088
  - Resolves: rhbz#460694


author: Jan iankko Lieskovsky <jlieskov@redhat.com> - 2.4.3-24.el5_3.6
changelog:
  - Fix all of the low priority security bugs:
  - Resolves: rhbz#486351
  - Multiple integer overflows in python core (CVE-2008-2315)
  - Resolves: 455008
  - PyString_FromStringAndSize does not check for negative size values (CVE-2008-1887)
  - Resolves: 443810
  - Multiple integer overflows discovered by Google (CVE-2008-3143)
  - Resolves: 455013
  - Multiple buffer overflows in unicode processing (CVE-2008-3142)
  - Resolves: 454990
  - Potential integer underflow and overflow in the PyOS_vsnprintf C API function (CVE-2008-3144)
  - Resolves: 455018
  - imageop module multiple integer overflows (CVE-2008-4864)
  - Resolves: 469656
  - stringobject, unicodeobject integer overflows (CVE-2008-5031) 
  - Resolves: 470915
  - integer signedness error in the zlib extension module (CVE-2008-1721)
  - Resolves: 442005
  - off-by-one locale.strxfrm() (possible memory disclosure) (CVE-2007-2052)
  - Resolves: 235093
  - imageop module heap corruption (CVE-2007-4965)
  - Resolves: 295971


author: James Antill <james.antill@redhat.com> - 2.4.3-24.el5_3.4
changelog:
  - Fix all of the low priority security bugs:
  - Resolves: 486351
  - Multiple integer overflows in python core
  - Resolves: 455008
  - PyString_FromStringAndSize does not check for negative size values
  - Resolves: 443810
  - Multiple integer overflows discovered by Google
  - Resolves: 455013
  - Multiple buffer overflows in unicode processing
  - Resolves: 454990
  - Potential integer underflow and overflow in the PyOS_vsnprintf C API function
  - Resolves: 455018
  - imageop module multiple integer overflows
  - Resolves: 469656
  - stringobject, unicodeobject integer overflows
  - Resolves: 470915
  - integer signedness error in the zlib extension module
  - Resolves: 442005
  - off-by-one locale.strxfrm() (possible memory disclosure)
  - Resolves: 235093
  - imageop module heap corruption
  - Resolves: 295971


author: James Antill <james.antill@redhat.com> - 2.4.3-27.el5
changelog:
  - Add workaround for subprocess import with threads
  - Resolves: 499095
  - Resolves: rhbz#499097
  - Resolves: rhbz#498979


author: David Malcolm <dmalcolm@redhat.com> - 2.4.3-27.el5_5.1
changelog:
  - Backport fix for leaking filedescriptors in subprocess error-handling path
  from Python 2.6
  - Resolves: rhbz#609017
  - Backport usage of "poll" within the subprocess module to 2.4.3
  - Resolves: rhbz#609020


author: David Malcolm <dmalcolm@redhat.com> - 2.4.3-41
changelog:
  - backport support for the "no_proxy" environment variable to the urllib and
  urllib2 modules (patches 204 and 205, respectively)
  Resolves: rhbz#549372


author: David Malcolm <dmalcolm@redhat.com> - 2.4.3-42
changelog:
  - fix test_pyclbr to match the urllib change in patch 204 (patch 206)
  - allow the "no_proxy" environment variable to override "ftp_proxy" in
  urllib2 (patch 207)
  - fix typos in names of patches 204 and 205
  Related: rhbz#549372


author: David Malcolm <dmalcolm@redhat.com> - 2.4.3-44
changelog:
  - add patch adapted from upstream (patch 208) to add support for building
  against system expat; add --with-system-expat to "configure" invocation; remove
  embedded copy of expat-1.95.8 from the source tree during "prep"
  - ensure pyexpat.so gets built by explicitly listing all C modules in the
  payload in %files, rather than using dynfiles
  Resolves: CVE-2009-3720
  - backport three security fixes to 2.4 (patches 209, 210, 211):
  Resolves: CVE-2011-1521
  Resolves: CVE-2011-1015
  Resolves: CVE-2010-3493


author: David Malcolm <dmalcolm@redhat.com> - 2.4.3-46.el5_8.1
changelog:
  - distutils.commands.register: create ~/.pypirc securely
  Resolves: CVE-2011-4944
  - send encoding in SimpleHTTPServer.list_directory to protect IE7 against
  potential XSS attacks
  Resolves: CVE-2011-4940
  - oCERT-2011-003: add -R command-line option and PYTHONHASHSEED environment
  variable, to provide an opt-in way to protect against denial of service
  attacks due to hash collisions within the dict and set types
  Resolves: CVE-2012-1150


author: Nima Talebi <nima@it.net.au> - 3.10.8-1
changelog:
  - New Upstream release.
  - Big-endian and little-endian approved.
  - Packaged unit-test to tarball.
  - Rewritten unit-test to be able to run as non-root user, where it will not
    try to read /dev/mem.
  - Added two dmidump data files to the unit-test.


author: David Malcolm <dmalcolm@redhat.com> - 0.6-3
changelog:
  - update to latest in EPEL5
  - cherrypick fixes for Py_None reference leak, and for some error-handling bugs
  Related: rhbz#675232


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.0.11-1
changelog:
  - 2.0.11 (2008-12-12)
  - Bugs fixed
  - 
  -    * Crash when using an XPath evaluator in multiple threads.


author: Nigel Jones <nigjones@redhat.com> - 2.0.11-2
changelog:
  - Implementation of several changes from RHEL inclusion review:
  - * Changes to License field due to licensing of _elementpath.py (MIT)
  - * Removal of potentially overreaching wildcard in files stanza
  - Resolves: bz920884


author: Peter Jones <pjones@redhat.com> - 0.24-1
changelog:
  - add block.load() to load specific bdevid probes instead of always
    doing loadAll() (#208423)
  - make block.getMPaths() return a sorted list (#208337, #208431)


author: Peter Jones <pjones@redhat.com> - 0.25-1
changelog:
  - fix refcounting of map names and partition building for new maps (#210412)
  - fix naming so device names on a single controller are in LUN order


author: Joel Granados <jgranado@redhat.com> - 0.26-4
changelog:
  - Correct the way that raidsets are discivered (hansg).
    Related: rhbz:#475386
  - Fix raid10 (jgranado).
    Related: rhbz:#475386


author: Alex Wood <awood@redhat.com> 1.0.9-1
changelog:
  - 859652: Subscribe with service level being ignored (wpoteat@redhat.com)
  - Read certv3 detached format (jbowes@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.10-1
changelog:
  - 857426: Do not pass None when body is empty collection (mstead@redhat.com)
  - 863961: set a default version for id certs (alikins@redhat.com)
  - 863961: add test case for id cert default version (alikins@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.8.17-1
changelog:
  - 997194: fix interpolation of default values (ckozak@redhat.com)
  - keep rhel-5.9, 5.10, 6.3, 6.4 releasers (jesusr@redhat.com)


author: Monty <cmontgom@redhat.com> - 0.4.9-0.13.20080908
changelog:
  - Correct versioning typo in spec
  - Remove unused codecs from build (allowing a stright configure to succeed)


author: Doug Ledford <dledford@redhat.com> - 0.0.1-9
changelog:
  - Upstream has updated the tarball with updating the version.  Grab the
    0.0.1 tarball from the ofed 1.4-beta1 release.
  - Resolves: bz451482


author: Doug Ledford <dledford@redhat.com> - 0.4.6-3.el5
changelog:
  - Fix a mismatch between what qperf things AF_RDS is and what the kernel
    thinks it is
  - Resolves: bz845820


author: Uri Lublin <uril@redhat.com> - 0.3.0-37.el5
changelog:
  - spice: server: fix is_same_geometry() #508133
  Resolves: #508133 - Wrong path geometry comparison result with bad rendering


author: Uri Lublin <uril@redhat.com> - 0.3.0-38.el5
changelog:
  - adjust package description and summary to fit the drop of client
    subpackages in release -34 #507718
  Resolves: #507718 - Remove qspice-mozilla subpackage and spicec cli


author: Uri Lublin <uril@redhat.com> - 0.3.0-39.el5
changelog:
  - spice: server: improve channel connect/disconnect robustness
  Resolves: #508544 - Crash of a VM due to SPICE: ring_remove: ASSERT


author: Uri Lublin <uril@redhat.com> - 0.3.0-54.el5_5.2
changelog:
  - Fix unsafe accesses
    + spice: drop libpng from windows components (537849)
    + libspice: fix unsafe guest data accessing
  Resolves: #568719
    + fix unsafe free() call.
  Resolves: #568723
    + spice server: fix unsafe cursor items handling.
  Resolves: #568719


author: Uri Lublin <uril@redhat.com> - 0.3.0-56.el5
changelog:
  - Fix unsafe accesses
    + spice: drop libpng from windows components (537849)
    + libspice: fix unsafe guest data accessing
  Resolves: #568720
    + fix unsafe free() call.
  Resolves: #568724
    + spice server: fix unsafe cursor items handling.
  Resolves: #568720


author: Than Ngo <than@redhat.com> 3.3.6-23
changelog:
  - Resolves: #277011, Qt UTF8 improper character expansion, CVE-2007-0242
  - Resolves: #269141, Qt off by one buffer overflow, CVE-2007-4137


author: Than Ngo <than@redhat.com> - 1:3.3.6-24.el5
changelog:
  - Resolves: #277021, Qt UTF8 improper character expansion, CVE-2007-0242
  - Resolves: #269161, Qt off by one buffer overflow, CVE-2007-4137


author: Jaroslav Reznik <jreznik@redhat.com> - 4.2.1-1.1
changelog:
  - Resolves: #737815, qt/harfbuzz buffer overflow, CVE-2011-3193
  - Resolves: #234633, UTF-8 overlong sequence decoding vulnerability, CVE-2007-0242


author: Adam Tkac <atkac redhat com> - 0.98.6-9
changelog:
  - build with -fno-strict-aliasing
  - use QCONFDIR variable in initscripts correctly (#716324)
  - locate pid files correctly (#508800)


author: Adam Tkac <atkac redhat com> - 0.98.6-10
changelog:
  - fix CVE-2011-3323
  - fix CVE-2011-3324
  - fix CVE-2011-3325
  - fix CVE-2011-3326
  - fix CVE-2011-3327
  - fix CVE-2012-0249


author: Jay Fenlason <fenlason@redhat.com> 0:0.98.6-2
changelog:
  - Upgrade to new upstream version, closing security problems:
    bz#191081 CVE-2006-2223 Quagga RIPd information disclosure
    bz#191085 CVE-2006-2224 Quagga RIPd route injection


author: Martin Bacovsky <mbacovsk@redhat.com> - 0.98.6-4
changelog:
  - resolves: #240482: CVE-2007-1995 Quagga bgpd DoS
  - resolves: #228100: LTC31032-FEAT: 200579: Source routing updates through quagga
  - resolves: #243143: Wrong init script


author: Adam Tkac <atkac redhat com> - 0.98.6-7.1
changelog:
  - fix CVE-2011-3323
  - fix CVE-2011-3324
  - fix CVE-2011-3325
  - fix CVE-2011-3326
  - fix CVE-2011-3327
  - fix CVE-2012-0249
  - fix CVE-2010-1674


author: Ondrej Vasik <ovasik@redhat.com> 1:3.13-1.2.4
changelog:
  - comment out examples in sample quotatab(bz #435995)
  - Used #include <sys/quota.h> instead of <linux/quota.h> in
    quotactl manpage(bz #431978)
  - always resolve numeric usernames(bz #234558)


author: Petr Pisar <ppisar@redhat.com> - 1:3.13-2
changelog:
  - Enable LDAP support (Resolves: #447780, #459494)
  - Enable remote quota support (Resolves: #469753)
  - Fix rpc manual chapter inconsistency in rquotad(8) page (Resolves: #474836)
  - Add ext4 file system support (Resolves: #500231)
  - Add quotaoff(8) symlink to quotaon(8) manual (Resolves: #574804)
  - Show grace period even if hard limit has been reached (Resolves: #589472)
  - warnquota(8) manual should constrain only to local FS (Resolves: #589523)
  - Remove xqmstats(8) manual as we do not provide the executable
    (Resolves: #589578)
  - Add rpc.rquotad(8) symlink to rquotad(8) manual (Resolves: #595729)


author: Petr Pisar <ppisar@redhat.com> - 1:3.13-4
changelog:
  - Fix quotactl(2) manual to refer struct dqblk and dqinfo instead of if_dqblk
    and if_dqblk (Resolves: #656827)


author: Petr Pisar <ppisar@redhat.com> - 1:3.13-6
changelog:
  - Do not use real domains in warnquota example (Resolves: #680429)
  - Use /proc/mounts for mountpoint scanning (Resolves: #689822)
  - Use rq_bsize to convert quotas transferred by RPC (bug #667360)
  - Make RPC block factor dynamic (bug #667360)


author: Doug Ledford <dledford@redhat.com> - 2.0.4-2
changelog:
  - Add a modprobe conf file to automatically load rds_tcp and rds_rdma when
    we load the base rds module
  - Resolves: bz643113


author: Jindrich Novy <jnovy@redhat.com> 5.1-1
changelog:
  - update to readline-5.1
  - apply new proposed upstream patches for 5.1 (001-004)
  - drop "read -e" patch, applied upstream


author: Troy Dawson <dawson@fnal.gov> 5.0.9-1.SL.1
changelog:
  - Change post-install-sources.tar.gz and post-install-fixup.sh to use EaseOfBlue
  - Changed RHEL-kdm-theme to EaseOfBlue-kdm-theme
  - Changed icon sheets, removed the red hat from them.


author: Troy Dawson <dawson@fnal.gov> 5.0.9-1.SL.2
changelog:
  - Actually put in the changed icons
  - commented out change in spec file that changed kmenu and gnome start icons


author: Troy Dawson <dawson@fnal.gov> 5.0.9-2.SL.2
changelog:
  - Only updated the release number, nothing else. Update 5 updated the 
    kdm theme which we already take out.  Updated the number to show
    we are newer than the upstream vendors.


author: Lawrence Lim <llim@redhat.com> - 3.1-12.3.EL
changelog:
  - Resolves: #217566 - rewrite /lib/lsb/init-functions file needs to define the commands as true shell functions rather than aliases.
  - Resolves: #233530 - LSB pidofproc misspelled as pidofprof.
  - Resolves: #240916 - "log_warning_message" replaced with "log_warning_msg" per the LSB 3.1 spec


author: Chris Feist <cfeist@redhat.com> - 2.0.29-1
changelog:
  - Virtual machines are no longer restarted when adding as a managed service
  - Made rgmanager compatible with new libdlm
  - Fixed an error which would cause a node to shutdown if you shutdown while
    processing a relocation request
  - A deadlock was fixed when doing lots of service relocations
  - Resolves: rhbz#248727 rhbz#249758 rhbz#247291 rhbz#249314


author: Chris Feist <cfeist@redhat.com> - 2.0.31-1
changelog:
  - Failed resources and their dependencies are restarted instead of the whole
    service
  - Resolves: rhbz#229650


author: Chris Feist <cfeist@redhat.com> - 2.0.31-1.el5_1.1
changelog:
  - migrate-to-self with vm's is not not allowed
  - clusvcadm no longer ignores the -F and -m options
  - Resolves: rhbz#431520 rhbz#431521


author: Chris Feist <cfeist@redhat.com> - 2.0.34-1
changelog:
  - Extraneous errors in during HA lvm operations have been fixed
  - Oracle 10g Release 2 resource agent is now included
  - Resolves: rhbz#428346 rhbz#349571


author: Chris Feist <cfeist@redhat.com> - 2.0.37-1
changelog:
  - A bug was fixed which caused incorrect return codes during service stop
    operations.
  - Resolves: rhbz#432998


author: Chris Feist <cfeist@redhat.com> - 2.0.38-1
changelog:
  - Leaving out the VG name paramater to 'vgchange --deltag' no longer
    causes the tag to be removed from all VGs.
  - Resolves: rhbz#438816


author: Chris Feist <cfeist@redhat.com> - 2.0.46-1
changelog:
  - postgres-8.sh now uses 'su' instead of 'sudo' allowing the resource agent to
    run in the background.
  - Resolves: rhbz#462910


author: Chris Feist <cfeist@redhat.com> - 2.0.46-1.el5_3.3
changelog:
  - Issues resolved with virtual machines restarting after a cluster.conf update.
  - Resolves: rhbz#491654


author: Chris Feist <cfeist@redhat.com> - 2.0.46-1.el5_3.4
changelog:
  - In some cases virtual machines will be restarted after a successful migration
    when the cluster configuration is updated.
  - Resolves: rhbz#505479


author: Chris Feist <cfeist@redhat.com> - 2.0.50-1
changelog:
  - Extra checks from the oracle agents have been removed.
  - Several fixes to prevent DOS attacks through insecure use of /tmp/ files have
    been implemented.
  - vm.sh now uses libvirt
  - Users can now define an explicit service processing order when
    central_processing is enabled
  - Resolves: rhbz#470917 rhbz#412911 rhbz#468691 rhbz#492828


author: Chris Feist <cfeist@redhat.com> - 2.0.51-1
changelog:
  - In some cases virtual machines will be restarted after a successful migration
    when the cluster configuration is updated.
  - Resolves: rhbz#505340


author: Chris Feist <cfeist@redhat.com> - 2.0.52-1
changelog:
  - When vm.sh does a status check and gets 'no state' it is now treated as a
    running state.
  - Resolves: rhb#514044


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-1.el5_4.2
changelog:
  - Fix path checking during force unmount
  - Resolves: rhbz#528130 (518037)
  - Fix bonded link checking for xen-bridged interfaces
  - Resolves: rhbz#529310 (514040)


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-1.el5_4.3
changelog:
  - Fix problem causing service to get stuck in 'recovering' state
    when using central_processing
  - Fix problem causing service to get stuck in 'recovering' state
  - Resolves: rhbz#531799


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-19
changelog:
  - Fix changelog format
  - rgmanager: Fix reference count handling
    (fix_reference_count_handling.patch)
    Resolves: rhbz#692771


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-20
changelog:
  - resource-agents: Improve LD_LIBRARY_PATH handling by SAP*
    (resource_agents_improve_ld_library_path_handling_by_sap*.patch)
    Resolves: rhbz#710637


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-21
changelog:
  - rgmanager: Fix bad passing of SFL_FAILURE up
    (fix_bad_passing_of_sfl_failure_up.patch)
    Resolves: rhbz#711521


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-26
changelog:
  - rgmanager: Add extra service status call
    rgmanager: Avoid duplicate restart of service
    rgmanager: Fix call to service_status()
    rgmanager: Fix tiny memory leak in sl_service_status
    rgmanager: Fix dependency issue related to ordering
    Resolves: rhbz#743214


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-28
changelog:
  - Fix for rhbz769731 - HA LVM failure to remove tag thwarts service relocation
    Resolves: rhbz#769731


author: Ryan McCabe <rmccabe@redhat.com> - 2.0.52-37.4
changelog:
  - lvm: vgreduce --removemissing unnecessarily removes PVs/LVs when some PVs in the VG fail
    Resolves: rhbz#1004482


author: Ryan McCabe <rmccabe@redhat.com> - 2.0.52-46
changelog:
  - rgmanager: Fix improper use of xmlCleanupParser()
    rgmanager: Fix potential unlocked memory access
    rgmanager: Fix for double pthread_mutex_unlock() calls
    rgmanager: Don't destroy locked mutexes
    rgmanager: Fix unlikely NULL ptr deref
    Resolves: rhbz#968322


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-5
changelog:
  - Make relocate-to-offline host consistent with other relocation
    behaviors
  - Add isAlive error reporting for file system agents
  - Resolves: rhbz#562237 rhbz#536157


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-6.el5_5.8
changelog:
  - Fix start timeout if status_program takes a long time
  - Use sysrq-b to reboot to work around a failed reboot() syscall
  - Resolves: rhbz#594476 rhbz#609182


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-7
changelog:
  - rgmanager: Add multi-instance Oracle database agents
    (add_multi_instance_oracle_database_agents.patch)
    Resolves: rhbz#629208


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-8
changelog:
  - rgmanager: Do hard shut down if CMAN dies
    (do_hard_shut_down_if_cman_dies.patch)
    rgmanager: Work around lockspace release hang
    (work_around_lockspace_release_hang.patch)
    Resolves: rhbz#639961
  - rgmanager: Fix CIFS mount handling in netfs.sh
    (fix_cifs_mount_handling_in_netfs_sh.patch)
    Resolves: rhbz#640676


author: Lon Hohberger <lhh@redhat.com> - Version: 2.0.52-9
changelog:
  - resource-agents: Fix migrateuriopt setting
    (resource_agents_fix_migrateuriopt_setting.patch)
    Resolves: rhbz#659477


author: Lon Hohberger <lhh@redhat.com> 2.0.52-9.el5_6.1
changelog:
  - rgmanager: Fix quotaoff handling
    (fix_quotaoff_handling.patch)
    Resolves: rhbz#694731
  - rgmanager: Fix reference count handling
    (fix_reference_count_handling.patch)
    Resolves: rhbz#701233


author: Tomas Lestach <tlestach@redhat.com> 4.7.0-6
changelog:
  - Resolves: #502234 - rhnsd reload doesn't work on RHEL5
  - Resolves: #524886 - Remove hard coded paths in /etc/init.d/rhnsd


author: Tomas Lestach <tlestach@redhat.com> 4.7.0-10
changelog:
  - Related: #502234 - rhnsd reload doesn't work on RHEL5
  - Related: #524886 - Remove hard coded paths in /etc/init.d/rhnsd


author: Chris Lumens <clumens@redhat.com> 0.41-1
changelog:
  - Trust kudzu to give us the right video driver instead of using
    readDrivers to trim the list of what's available (#211977).


author: Chris Lumens <clumens@redhat.com> 0.41.1-1
changelog:
  - Add support for writing out a config file section for the IBM Advanced
    System Management PCI adapter card (#227407).


author: Adam Jackson <ajax@redhat.com> 0.41.1-10
changelog:
  - rhpxl-monitor.patch: Create a Monitor section if needed (--set-?sync
    passed but no existing Monitor section) (#429949)


author: Adam Jackson <ajax@redhat.com> 0.41.1-3
changelog:
  - rhpxl-0.41.1-dont-filter-by-randr.patch: Don't filter the mode list by
    the current set of RANDR modes; if you do, you can't use s-c-d to
    resize larger than the current resolution. (#219255 and others)


author: - Bastien Nocera <bnocera@redhat.com> - 0.11.6-1.6
changelog:
  - Really fix the missing icons problem, some contexts used by
    rhythmbox aren't setup by the hicolor theme in RHEL-5, thanks
    to Matthias Clasen for spotting it
  - Remove the mozilla plugin if it was built
  Related: rhbz #455766


author: - Bastien Nocera <bnocera@redhat.com> - 0.11.6-3
changelog:
  - Enable missing plugins hooks in gstreamer
  - Remove gstreamer-python dependency
  Related: rhbz #459790
  - Fix icons
  Related: rhbz #458837
  - Remove Mozilla plugin from the build, if it so happens to have been
    built
  - Fix totem-pl-parser backport, update rhythmbox backport
  Related: rhbz #458832
  - Fix SELinux errors
  Related: rhbz #458834 #458836


author: - Bastien Nocera <bnocera@redhat.com> - 0.11.6-4
changelog:
  - Remove chcon calls, problem worked around in the SELinux policy, thanks Dan
  Related: rhbz #460630
  - Forcibly enable tag writing support
  Related: rhbz #460643


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2-48
changelog:
  - Don't show errors twice on non-existent files (#215712)
  - Update scriptlet names to match what's available (#248128)


author: Jindrich Novy <jnovy@redhat.com> - 4.4.2.3-19
changelog:
  - fix CVE-2010-2059, fails to drop SUID/SGID bits on package upgrade (#626707)
  - fix SELinux memory leak (#627630), patch from Florian Festi


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-25
changelog:
  - Honor --noscripts for pre- and posttrans scriptlets too (#740345)
  - Avoid bogus error on printing empty ds from python (#628883)
  - File conflicts correctness & consistency fixes (#740291)
  - Create the directory used for transaction lock if necessary (#510469)
  - Only enforce default umask during transaction (#673821)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-26
changelog:
  - Add support for XZ-compressed sources and patches to rpmbuild (#620674)
  - Avoid unnecessary assert-death when closing NULL fd (#573043)
  - Add scriptlet error notification callbacks (#533831)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-28
changelog:
  - Proper region tag validation on package/header read (CVE-2012-0060)
  - Double-check region size against header size (CVE-2012-0061)
  - Validate negated offsets too in headerVerifyInfo() (CVE-2012-0815)


author: Florian Festi <ffesti@redhat.com> - 4.4.2.3-29
changelog:
  - Add DWARF 3 and 4 support to debugedit (#808547)
  - No longer add \n to group tag in Python bindings (#783451)
  - Fix typos in Japanese rpm man page (#760552)
  - Bump Geode compatibility up to i686 (#620570)


author: Florian Festi <ffesti@redhat.com> - 4.4.2.3-30
changelog:
  - Document -D and -E options in man page (#814602)
  - Require matching arch for freshen on colored transactions (#813282)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-33
changelog:
  - Account for excludes and hardlinks wrt payload max size (#716853)
  - Fix payload size tag generation on big-endian systems (#648516)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-34
changelog:
  - Fix segfault on rpmdb addition when header unload fails (#706935)
  - Fix segfault on invalid OpenPGP packet (#743203)


author: Florian Festi <ffesti@redhat.com> - 4.8.0-35
changelog:
  - Fix race condidition where unchecked data is exposed in the file system
    (CVE-2013-6435)(#1163057)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-7
changelog:
  - Fix exit code on file not found errors (#463944, #446202)
  - Always honor epoch (no)promote behavior in dependency sets (#466503)


author: Adam Tkac <atkac redhat com> 0.17-38
changelog:
  - obsoleted netkit-rsh-0.17-nohostcheck.patch
  - r{logind,shd} works when DNS isn't avaliable and -a option isn't
    specified (#222624)
  - removed wrong sentence from rsh-server description


author: Adam Tkac <atkac redhat com> 0.17-39
changelog:
  - initialize environment variables configured in pam_env.conf (#434938)
  - handle long user names in rexecd well (#436748)
  - check return value from close to catch errors on NFS filesystems (#461903)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.0.6-2
changelog:
  - Remove BuildRequires dependency on popt-devel, until the package
    is being shipped with RHEL-5 (resolve build issues)


author: Vojtech Vitek <vvitek@redhat.com> - 3.0.6-3
changelog:
  - Add upstream patch to fix CVE-2011-1097 - Incremental file-list
    corruption due to temporary file_extra_cnt increments
    Resolves: #688923


author: Tomas Heinrich <theinric@redhat.com> 3.22.1-1
changelog:
  - rebase to rsyslog-3.22.1 
  - backport 'MaxOpenFiles' configuration directive
  - add support for arbitrary number of open file descriptors
    Resolves: #473419, #475217, #488068, #499186, #519192
    Resolves: #519201, #519203


author: Tomas Heinrich <theinric@redhat.com> 3.22.1-3.el5_6.1
changelog:
  - modify rsyslog-3.22.1-unlimitedselect.patch so that
    running autoconf is not needed
    Resolves: #692954
  - remove autoconf, automake, libtool from BuildRequires


author: Tomas Heinrich <theinric@redhat.com> 3.22.1-5
changelog:
  - modify rsyslog-3.22.1-unlimitedselect.patch so that
    running autoconf is not needed
    Resolves: #674450
  - remove autoconf, automake, libtool from BuildRequires


author: Tomas Heinrich <theinric@redhat.com> 3.22.1-6
changelog:
  - change prefix for rsyslog modules from /usr to /
    Resolves: #546645
  - update package description
    Resolves: #574620
  - provide omsnmp module
    Resolves: #601711
  - add patch to prevent TLS module from exhausting system resources
    Resolves: #637959
  - use correct name for the lock file
    Resolves: #650509
  - add patch to properly close stdout and stderr
    Resolves: #654379
  - enable building of 32-bit packages in a 64-bit environment
    Resolves: #694413
  - add patch to fix issue with action retrial
    Resolves: #726525
  - add patch to resolve configuration parser bug
    Resolves: #746179
  - add a directory for auxiliary data
  - add ChangeLog to documentation


author: Peter Vrabec <pvrabec@redhat.com> 5.8.12-2
changelog:
  - prepare package for dual component situation in RHEL5
  - rename to rsyslog5
  - conflicts with rsyslog
    Resolves: #820396


author: Tomas Heinrich <theinric@redhat.com> 5.8.12-6.el5_11
changelog:
  - add patch 5 to prevent crashes when using multiple rulesets
    Resolves: rhbz#1194440
  - refresh Source0 URL


author: Tomas Heinrich <theinric@redhat.com> 5.8.12-7.el5_11
changelog:
  - adjust the init script to allow modification of the service
    shutdown timeout via /etc/sysconfig/rsyslog
    resolves: rhbz#1194440


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-5.el5_3.7
changelog:
  - security fixes. (#505087)
  - CVE-2007-1558: APOP password disclosure vulnerability.
  - CVE-2009-0642: Incorrect checks for validity of X.509 certificates.
  - CVE-2009-1904: DoS vulnerability in BigDecimal.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-5.el5_4.8
changelog:
  - Fix a regression of the fix in BigDecimal that suppress the zero after
    the decimal point in Float. (#546245)


author: Vít Ondruch <vondruch@redhat.com> - 1.8.5-19.el5_6.1
changelog:
  - Address CVE-2011-1004 "Symlink race condition by removing directory trees in
    fileutils module"
    * ruby-1.8.7-CVE-2011-1004.patch
  - Address CVE-2011-1005 "Untrusted codes able to modify arbitrary strings"
    * ruby-1.8.7-CVE-2011-1005.patch
  - Address CVE-2011-0188 "memory corruption in BigDecimal on 64bit platforms"
    * ruby-1.8.7-CVE-2011-0188.patch
  - Address CVE-CVE-2010-0541 "Ruby WEBrick javascript injection flaw"
    * ruby-1.8.7-CVE-2010-0541.patch
  - Address CVE-CVE-2009-4492 "ruby WEBrick log escape sequence"
    * ruby-1.8.6-CVE-2009-4492.patch
  - Resolves: rhbz#709957


author: Vít Ondruch <vondruch@redhat.com> - 1.8.5-20.1
changelog:
  - Address CVE-2011-4815 "DoS (excessive CPU use) via hash meet-in-the-middle
    attacks (oCERT-2011-003)"
    * ruby-1.8.7-CVE-2011-4815.patch
    - Resolves: rhbz#768829


author: Vít Ondruch <vondruch@redhat.com> - 1.8.5-22.1
changelog:
  - Properly initialize the random number generator when forking new process
    * ruby-1.8.7-CVE-2011-3009.patch
    - Related: rhbz#768829


author: Vít Ondruch <vondruch@redhat.com> - 1.8.5-22
changelog:
  - Address CVE-2011-4815 "DoS (excessive CPU use) via hash meet-in-the-middle
    attacks (oCERT-2011-003)"
    * ruby-1.8.7-CVE-2011-4815.patch
    - Resolves: rhbz#768830
  - Patch cleanup.


author: Vít Ondruch <vondruch@redhat.com> - 1.8.5-24
changelog:
  - Properly initialize the random number generator when forking new process
    * ruby-1.8.7-CVE-2011-3009.patch
    - Related: rhbz#768830


author: Vít Ondruch <vondruch@redhat.com> - 1.8.5-25
changelog:
  - Resolve buffer overflow causing gem installation issues.
    * ruby-1.8.7-syck-avoid-buffer-overflow.patch
    - Resolves: rhbz#834381


author: Vít Ondruch <vondruch@redhat.com> - 1.8.5-26
changelog:
  - $SAFE escaping vulnerability about Exception#to_s / NameError#to_s
    * ruby-1.8.7-p371-CVE-2012-4481.patch
    - Resolves: rhbz#867750
  - unintentional file creation caused by inserting an illegal NUL character
    * ruby-1.8.6-CVE-2012-4522-io.c-rb_open_file-should-check-NUL-in-path.patch
    - Resolves: rhbz#867750


author: Vít Ondruch <vondruch@redhat.com> - 1.8.5-27
changelog:
  - unintentional file creation caused by inserting an illegal NUL character
    * ruby-1.8.6-CVE-2012-4522-io.c-pipe_open-command-name-should-not-contain-null-.patch
    - Related: rhbz#867750


author: Vít Ondruch <vondruch@redhat.com> - 1.8.5-28
changelog:
  - Addresses entity expansion DoS vulnerability in REXML.
    * ruby-2.0.0-entity-expansion-DoS-vulnerability-in-REXML.patch
  - Resolves: rhbz#915377


author: Vít Ondruch <vondruch@redhat.com> - 1.8.5-29
changelog:
  - Fix regression introduced by fix for entity expansion DOS vulnerability
    in REXML (https://bugs.ruby-lang.org/issues/7961)
    * ruby-2.0.0-add-missing-rexml-require.patch
  - Related: rhbz#915377


author: Vít Ondruch <vondruch@redhat.com> - 1.8.5-30
changelog:
  - hostname check bypassing vulnerability in SSL client.
    * ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch
    - Resolves: rhbz#979297


author: Vít Ondruch <vondruch@redhat.com> - 1.8.5-31
changelog:
  - Fix regression introduced by CVE-2013-4073
    https://bugs.ruby-lang.org/issues/8575
    * ruby-2.0.0-p255-Fix-SSL-client-connection-crash-for-SAN-marked-critical.patch
    - Related: rhbz#979297


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-4
changelog:
  - security fix release.
  - ruby-1.8.5-cgi-CVE-2006-5467.patch: fix a CGI multipart parsing bug that
    causes the denial of service. (#212396)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-5
changelog:
  - security fix release.
  - ruby-1.8.5-cgi-CVE-2006-6303.patch: fix a infinite loop with certain HTTP
    request. (#218290)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-5.el5_1.1
changelog:
  - security fix for CVE-2007-5162 and CVE-2007-5770
  - ruby-1.8.5-CVE-2007-5162.patch: fix issues that is insufficient verification
    of SSL certificate. (#320331)
  - Fix the multilib regression issue.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-5.el5_2.1
changelog:
  - security fixes. (#451928)
  - CVE-2008-2662: Integer overflow in rb_str_buf_append().
  - CVE-2008-2663: Integer overflow in rb_ary_store().
  - CVE-2008-2664: Unsafe use of alloca in rb_str_format().
  - CVE-2008-2725: Integer overflow in rb_ary_splice().
  - CVE-2008-2726: Integer overflow in rb_ary_splice().


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-5.el5_2.4
changelog:
  - security fixes. (#461590)
  - CVE-2008-3655: multiple insufficient safe mode restrictions.
  - CVE-2008-3656: WEBrick DoS vulnerability (CPU consumption).
  - CVE-2008-3657: missing "taintness" checks in dl module.
  - CVE-2008-3905: use of predictable source port and transaction id in DNS
                   requests done by resolv.rb module.
  - CVE-2008-3443: Memory allocation failure in Ruby regex engine
                   (remotely exploitable DoS).
  - CVE-2008-3790: DoS vulnerability in the REXML module.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-5.el5_2.4
changelog:
  - security fixes. (#461590)
  - CVE-2008-3655: multiple insufficient safe mode restrictions.
  - CVE-2008-1145: WEBrick DoS vulnerability (CPU consumption).
  - CVE-2008-3657: missing "taintness" checks in dl module.
  - CVE-2008-3905: use of predictable source port and transaction id in DNS
                   requests done by resolv.rb module.
  - CVE-2008-3443: Memory allocation failure in Ruby regex engine
                   (remotely exploitable DoS).
  - CVE-2008-3790: DoS vulnerability in the REXML module.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-5.el5_2.6
changelog:
  - security fix (#470262)
  - CVE-2008-4310: real fix for CVE-2008-3656. original patch named as fix for
                   CVE-2008-3656 actually fixed different issue (CVE-2008-1145),
                   hence we are providing correct patch and renaming original
                   patch to refer to proper CVE.


author: Alexander Larsson <alexl@redhat.com> - 2.12.4-4.el5
changelog:
  - Backport fixes and translations from 2.18.1
  - Fix gamin-python and python-ldap requirements (#233305)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.12.4-8.el5
changelog:
  - Fix profile saving if file/folder names contain an apostrophe (#654569)
  - Don't ignore ~/.config and ~/.local folders (#660620)


author: Simo Sorce <ssorce@redhat.com> 3.0.25b-0.el5_1.1
changelog:
  - Security fix for CVE-2007-4138
  - Security fix for CVE-2007-4572
  - Security fix for CVE-2007-5398
  - Multilib Fix
  - resolves: #351501
  - resolves: #350761
  - resolves: #359151
  - resolves: #356851


author: Simo Sorce <ssorce@redhat.com> 3.0.25b-1.el5_1.4
changelog:
  - Security fix for CVE-2007-6015
  - Fix for regression introduced with CVE-2007-4572
  - resolves: #407361
  - resolves: #407081


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5.3
changelog:
  - Add 2 more patches to fix a Samba DC talking to trusted
    domains.
  - resolves: #429024
  - related: #291501


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5.4
changelog:
  - Add another set of fixes for 429024, turned out this was not
    completely fixed as expected
  - Add some other patches from Guenther to join Windows 2008 (Rc1)
    domain controllers
  - Make sure bad port numbers are reported and smbd exits if it
    can't bind to any port (completes fix for #429003)
  - Fix a regression in ACLs code that was causing samba to set the
    wrong inherited permissions
  - resolves: #429024
  - related: #291501
  - resolves: #429003
  - resolves: #431243


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5.6
changelog:
  - Back out moiunt cifs patches for prepath, as the corresponding
    kernel changes can't be put in at this time
  - Add a minor SPNEGO fix
  - related: #370501
  - related: #291501


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5.7
changelog:
  - Add another 2 patches to solve 429024 completely, as some cases were not
    covered:
    - Fix domain trusts while running as a DC
    - Fix credential chain with windows 2008
  - Make some configure flag explicit even if they are on by default so that we
    can catch build errors if something is wrong instead of silently missing
    features supposed to be compiled in
  - related: #429024


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5.8
changelog:
  - Yet another 2 patches for regressions related to operations on a DC with
    trusted domains. Fiux idmap with legacy configuration options, and fix the
    pam module, pam logins were broken for trusted domains
  - related: #429024


author: Simo Sorce <ssorce@redhat.com> 3.0.28-1.el5_2.1
changelog:
  - Security fix for CVE-2008-1105
  - Fix join verification
  - Fix smb signing
  - resolves: CVE-2008-1105
  - resolves: #447380
  - resolves: #444637


author: Guenther Deschner <gdeschner@redhat.com> 3.0.28-1.el5_2.2
changelog:
  - Fix joining and authentication with NT4 and Windows 2000 domains.
  - resolves: #455417
  - resolves: #455418


author: Guenther Deschner <gdeschner@redhat.com> 3.0.33-3.15.el5
changelog:
  - Security Release, fixes CVE-2009-1888, CVE-2009-2813, CVE-2009-2948 and CVE-2009-2906
  - resolves: #526660


author: Simo Sorce <ssorce@redhat.com> 3.0.33-3.29.el5.3
changelog:
  - Security Release, fixes CVE-2010-0547, CVE-2010-0787, CVE-2011-2694,
    CVE-2011-2522, CVE-2011-1678
  - resolves: #722552


author: Guenther Deschner <gdeschner@redhat.com> - 3.6.23-10
changelog:
  - resolves: #1322685 - Fix CVE-2015-5370
  - resolves: #1322685 - Fix CVE-2016-2110
  - resolves: #1322685 - Fix CVE-2016-2111
  - resolves: #1322685 - Fix CVE-2016-2112
  - resolves: #1322685 - Fix CVE-2016-2115
  - resolves: #1322685 - Fix CVE-2016-2118 (Known as Badlock)


author: - Guenther Deschner <gdeschner@redhat.com> - 3.6.23-5
changelog:
  - resolves: #1112151 - CVE-2014-0244: DoS in nmbd.
  - resolves: #1112151 - CVE-2014-3493: DoS in smbd with unicode path names.


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.128
changelog:
  - Fix loading the imap hash module.
  - resolves: #863192
  - Fix raw printing support.
  - related: #855312


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.134
changelog:
  - Check for system libtevent and require version 0.9.18.
  - Use tevent epoll backend in winbind.
  - resolves: #869295


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.135
changelog:
  - Fix PIDL parsing with newer versions of gcc.
  - Fix dereferencing a unique pointer in the WKSSVC server.
  - resolves: #982484


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.136
changelog:
  - resolves: #984807 - CVE-2013-4124: DoS via integer overflow when reading
                        an EA list


author: - Guenther Deschner <gdeschner@redhat.com> - 3.6.6-0.140
changelog:
  - resolves: #1112150 - CVE-2014-0244: DoS in nmbd.
  - resolves: #1112150 - CVE-2014-3493: DoS in smbd with unicode path names.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - sblim-1-28.EL5
changelog:
  - remove file conflicts
  - build against pegasus cmpi headers
  - fix tools-libra, cmpi-samba, cmpi-dns dependencies (Wolfgang Taphorn)
  - fix cmpi-samba, cmpi-dns (Wolfgang Taphorn)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.31.el5_2.1
changelog:
  - Remove RPATH from shared libraries in sblim-cmpi-{dns,fsvol,network,
    nfsv3,nfsv4,samba,syslog}
    and create appropriate record in /etc/ld.so.conf.d (CVE-2008-1951)
    Resolves: #446859


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.33
changelog:
  - Fix sblim-cmpi-network result depends on locale settings
    Resolves: #458118
  - Add sblim-cmpi-dhcp
    Resolves: #442777
  - Fix the src.rpm can't be rebuilt
    Resolves: #496999


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.34
changelog:
  - Fix wrong macro definition/call
  - Add many explicit package version requirements
  - Remove needless sblim-cmpi-dhcp BuildRequire


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.35
changelog:
  - Remove registration/unregistration of provider modules which
    modify "root/PG_InterOp" namespace in the repository
    Resolves: #512123


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.38
changelog:
  - Use existing libhbaapi(-devel) packages in sblim-smis-hba
  - Change sblim-smis-hba install scripts to work without cim-server running


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.39
changelog:
  - Add sblim-cmpi-base to the sblim-smis-hba requires
  - Remove sfcbd binary from sblim-gather
  - Remove wbemcat binary and wbemcat manpage from sblim-wbemcli
  - Fix sblim-gather-* files and dependecies
    Resolves: #550842


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.45
changelog:
  - Add -fno-strict-aliasing to the compiler flags for sblim-smis-hba
    and sblim-sfcb subpackages
  - Fix buffer overruns in dataValueToString() in sblim-sfcb subpackage


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.46
changelog:
  - move libvirt stuff to sblim-gather-provider-plugins-virt and
    sblim-gather-plugins-virt subpackages(#659279


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.47
changelog:
  - Do mofs registration in sblim-gather-provider-plugins-virt,
    change %files section correspondingly
    Related: #659279


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.48
changelog:
  - Update sblim-cmpi-fsvol to 1.5.1
    Resolves: #713985
  - Update sblim-cmpi-nfsv3 to 1.1.1
    Resolves: #713986
  - Update sblim-cmpi-base to 1.6.1
    Resolves: #713989
  - Update sblim-sfcc to 2.2.2
    Resolves: #716027
  - Update sblim-gather to 2.2.3
    Resolves: #713974
  - Register Linux_MetricRegisteredProfile class under the root/interop namespace
    Resolves: #711423
  - Remove old libsysfs work around to make System z metric plugin work
    Resolves: #711193
  - Update sblim-sfcb to 1.3.11
    Resolves: #713973


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1-50
changelog:
  - Fix incorrect max cpu frequency
    Resolves: #971056
  - Fix wrong UserModeTime and KernelModeTime
    Resolves: #974075
  - Fix wbemcli doesn't accept dot (.) as password character on command line
    Resolves: #959892
  - Fix mounted filesystem is shown as disabled when fstab entry uses link,
    UUID or LABEL
    Resolves: #921485


author: Akira TAGOH <tagoh@redhat.com> - 1.2.0-5
changelog:
  - scim-anthy-fix-kana-conversion.patch: fix direct kana conversion feature
    to get that work correctly. (#215692)


author: Peng Wu <pwu@redhat.com> - 0.4.5-10.el5
changelog:
  - Resolves: rhbz#723204: scim-bridge segfaults when closing a dialog
    Add patch scim-bridge-0.4.5-fixes-null-imengine.patch


author: Peng Wu <pwu@redhat.com> - 0.4.5-11.el5
changelog:
  - Resolves: rhbz#805753: "The lockfile is destroied" in syslog
    when gnome-terminal exits
    Add patch scim-bridge-0.4.5-fixes-perrorln.patch


author: Jens Petersen <petersen@redhat.com> - 0.4.5-6.el5
changelog:
  - backport scim-bridge-0.4.6-compiz-focus-214149.patch to fix problem with
    preedit getting committed immediately (#214149)


author: Jens Petersen <petersen@redhat.com> - 0.4.5-7.el5
changelog:
  - add scim-bridge-0.4.5-shutdown-with-X-211260.patch backported from cvs
    to fix agent lingering after desktop sessions (#211260)


author: Caius Chance <cchance@redhat.com> -0.3.1-11.el5
changelog:
  - Resolves: rhbz#220287 (Last candidate on lookup table is not a valid 
              candidate.)
    <<< Add logic to refit last look-up page.


author: Jens Petersen <petersen@redhat.com> - 1.4.4-39.el5
changelog:
  - fix scim-1.4.4-gtkimm-key-snooper-off-213796.patch to a more complete working
    backport from cvs (#214128)


author: Huang Peng <phuang@redhat.com> - 1.4.4-41.el5
changelog:
  - updated initial-locale-hotkey-186861.patch to fix null hotkey system 
    config overridden by hardcoded defaults. (#244761)


author: Peng Wu <pwu@redhat.com> - 1.4.4-42.el5
changelog:
  - Refresh scim_panel-observe-workarea-xprop-204442.patch and
    scim_panel_gtk-icon-size-fixes.patch for source rpm build.


author: Peng Wu <pwu@redhat.com> - 1.4.4-43.el5
changelog:
  - Resolves: rhbz#664464: scim leaks a 1x1 window per new xterm.
    Add patch scim-fixes-xwin-leaks.patch.


author: Shawn Huang <phuang@redhat.com> - 0.5.91-14
changelog:
  - add Obsoletes: miniChinput <= 0.3 to remove miniChinput when upgrading 
    from RHEL4 to RHEL5 (#211878).


author: Huang Peng <phuang@redhat.com> - 0.5.91-16
changelog:
  - catch exceptions when load user data from files. (#231180)
  - save user data in temp files at first, and then overwrite old user data files. (#231180)


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-9
changelog:
  - add scl_source script for intercollection dependencies (#1040858)
  - updated macros in macros.scl-filesystem (#1040859, #1040860)
  - add delimiter between collections and command (#1040861)


author: Jesse Keating <jkeating@redhat.com> - 4.0.2-16
changelog:
  - Don't use %makeinstall, instead make install.
  - Change DDESTDIR to DESTDIR to do the right thing.
  - Comment out utf patch as it is no longer necessary.
  - Add dist tag
  - Change PreReq to correct Requires(pre), Requires(post), Requires(preun) 
  - Don't use RPM_SOURCE_DIR, reference the source file directly
  - Do the compiling (make) in %build, not %install
  - Don't replace /etc/screenrc if the user has modified it
  - Ditto /etc/pam.d/screen
  - Change the buildroot to follow guidelines


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.0.3-4
changelog:
  - enable hardcopy binding in default config (#521824)
  - apply some xterm tweaks also to xterm-* and reduce duplicates
    in default config (#474064)


author: Mike Christie <mchristie@redhat.com> - 0.0-5.20080917snap
changelog:
  - Rebase to latest upstream snapshot to include tgt-admin and static config.
  - When doing a "tgtd stop" kill running targets if run level indicates
  system is shutting down or restarting.


author: Mike Christie <mchristie@redhat.com> - 0.0-6.20091205snap.1
changelog:
  - Rebase to latest upstream snapshot from Dec 5th 2009 (git id
  97832d8dcd00202a493290b5d134b581ce20885c)
  - 545785 fix segfault when running tgtadm --mode connection --op delete
  - 545786 fix tgtd crash under load
  - 531041 fix tgt segfault on 31st target creation


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 4.1.5-6
changelog:
  - Fix regression in handling of relative symlinks
    Resolves: #490473
  - Fix multibyte characters syntax error and possible infinite loop
    Resolves: #527427


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 4.1.5-7
changelog:
  - Fix multilib regression (non-equal 32/64bit content) by touching
    the generated sedfaq.txt.gz file with an exact timestamp


author: Miroslav Lichvar <mlichvar@redhat.com> 8.13.8-6.el5
changelog:
  - fix verification of SSL certificate with NUL in name (#553618, CVE-2009-4565)
  - do not accept localhost.localdomain as valid address from smtp (#449391)
  - skip colon separator when parsing service name in ServiceSwitchFile (#512871)
  - exit with non-zero error code when free space is low (#299951)
  - fix -qG description in man page (#250552)
  - fix comments in sendmail.mc to use correct certs path (#244012)
  - add MTA to provides (#494408)
  - fix %dist macro use (#440616)
  - compile with -fno-strict-aliasing
  - skip t-sem test as it doesn't allow parallel testing


author: Dan Horak <dhorak@redhat.com> - 1.25-2
changelog:
  - update URLs
  - fix man pages for sginfo, sg_wr_mode, sg_ses, sg_persist (#433614, #433773, #435100, #435677, #437147)
  - fix usage messages in sg_map26, sg_test_rwbuf (#431190, #431193)
  - fix return value in sg_read_long (#435275)
  - fix options definition in sg_get_config (#433779)
  - fix sg_map26 with more than 32 tapes (#468040)
  - include rescan-scsi-bus script (#467201)
  - Resolves: #431190, #431193, #433614, #433773, #433779, #435100, #435275, #435677, #437147, #468040, #467201


author: Dan Horak <dhorak@redhat.com> - 1.25-4
changelog:
  - fix some issues with rescan-scsi-bus.sh script (#507379)
  - install a symlink to the rescan script with more obvious name
  - Resolves: #507379


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.17-13
changelog:
  - use MD5 encryption by default
  - fix "--append" option
  - useradd create user's mailbox file
  - do not run find_new_uid() twice and use getpwuid() to check
    UID uniqueness
  - fix infinitive loop if there are duplicate entries in /etc/group
  - fix chpasswd buffer overflow
  - add SHA256/512 support
    Resolves: #218629, #222563, #231311, #236871, #241585, #247514, #427449


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.17-14
changelog:
  - fix the problem when useradd or usermod can give users access
    to the root group
    Resolves: #450262


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.17-15
changelog:
  - make /etc/default/useradd noreplace
  - make grpconv multiple entries aware
  - fix manipulation with UIDs in useradd and usermod
  - fix handling of sparse faillog file
  - recognize --base-dir properly
  - improve man pages
  - do not call restorecon in usermod
  - fix newusers, so it doesn't create negative UID/GID
    Resolves: #510102, #507706, #487575, #505033, #473054, #469158
    Resolves: #461455, #449154, #494575, #306241


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.17-16
changelog:
  - faillog does not print entries for all users
  - fix integer underflow in faillog
  - maximum size of groupname and username is 32 characters
  - japanese man page fix
  - support extended ACL's on files and directoris under /etc/skel
    Resolves: #619713, #603692, #586861, #537011, #513055


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.17-18.el5_6.1
changelog:
  - fix sequence of arg. parsing and execution in faillog
  - fix ACL support
  - do not alter UIDs over 2147483647 in pwconv and pwunconv
    Resolves: #690829, #690830, #690831


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.17-19
changelog:
  - fix sequence of arg. parsing and execution in faillog
  - fix ACL support
  - do not alter UIDs over 2147483647 in pwconv and pwunconv
    Resolves: #619150, #673091, #681020


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.17-20
changelog:
  - prevent faillog to grow after setmax operation(-m)
  - man page adjustments
  - make useradd delete lock files on failure
    Resolves: #670364, #688892, #715214, #709605


author: Tomas Mraz <tmraz@redhat.com> 2:4.0.17-23
changelog:
  - document that parent of home directory must exist
  - newgrp: first try the specified group for the user membership
    to avoid exhaustive search of groups (#985475)


author: - Bastien Nocera <bnocera@redhat.com> - 0.19-4.el5
changelog:
  - Remove totem as a handler for RealVideo types, as HelixPlayer is
    a better player for those in RHEL
  - Resolves: #250980


author: - Bastien Nocera <bnocera@redhat.com> - 0.19-5.el5
changelog:
  - Re-add Real Player as the default handler for mime-types it knows
    best, as otherwise the selection is semi-random
  - Resolves: #250980


author: Troy Dawson <dawson@fnal.gov> - 5.0-3
changelog:
  - Changed sources to reflect the new directory structure
  - added trigger to get rid of additional cd's page of firstboot
  - added more rpm GPG keys


author: Troy Dawson <dawson@fnal.gov> - 5.1-1
changelog:
  - Moved everything to 51
  - Added the new redhat rpm key
  - Changed sources to be 5rolling instead of 50


author: Troy Dawson <dawson@fnal.gov> - 5.4-1
changelog:
  - Updated bookmarks to point to http://www.scientificlinux.org/
  - Changed sources to be 54 instead of 5rolling


author: Tomas Mraz <tmraz@redhat.com> - 1:5.36-3.1
changelog:
  - set cloexec on device descriptor so it doesn't leak to sendmail (#214182)
  - fixed minor bug in initscript (#213683)
  - backported SATA disk detection from upstream


author: Tomas Smetana <tsmetana@redhat.com> - 1:5.36-4
changelog:
  - fix #232168 - wrong exit status of the init script
  - fix #326551 - smartctl hangs the system when run on PERC controller


author: Tomas Smetana <tsmetana@redhat.com> - 1:5.38-1
changelog:
  - upgrade to 5.38
  - fix #438556 - upgrade request
  - fix #456471 - SELinux prevents smartd from monitoring 3ware RAID


author: Christophe Fergeau <cfergeau@redhat.com> - 0.8.1-8
changelog:
  - rebuild on both i686 and x86_64 after rel-eng retagged the package
    as an i686 one (instead of i386).
  - Related: #789331


author: Yuval Kashtan <ykashtan@redhat.com> - 2.2-1.el5
changelog:
  - changed plugin location to /usr/lib{,64}/mozilla/plugins
  - still need to remove nspluginwrapper or edit its conf file to ignore libnsISpicec*
  - now using mkstemp to create temporary ca file and delete it afterwards.
  - resolve: #573367, #570165


author: Jiri Skala <jskala@redhat.com> 7:2.6.STABLE21-1
changelog:
  - Resolves: #297521 update to the latest upstream STABLE21
  - Resolves: #245304 changed init script to be LSB compliant
  - Resolves: #250572 using refresh_stale_hit don't cause "clock going backwards"
  - Resolves: #436135 ported init script bug fixign of RHEL-4 to RHEL-5
  - Resolves: #442108 added define -D_FORTIFY_SOURCE=2
  - Resolves: #454255 fixed -g parameter handling of unix_group helper
  - Resolves: #448086 changed security context of /usr/local/squid to squid ownership:w
  - Resolves: #451923 solved repeated SIGABRTs


author: Jiri Skala <jskala@redhat.com> 7:2.6.STABLE21-4
changelog:
  - Resolves: #521926 - squid 'stop after stop' is not LSB compliant
  - Resolves: #496170 - Add arp filter option
  - Resolves: #516245 - negotiate support not enabled in squid
  - Resolves: #538738 - Squid accelerator mode works only if port 80 is opened
  - Resolves: #470843 - Squid 'error_map' does not work when used 'Accep-Encoding: gzip'


author: Michal Luscon <mluscon@redhat.com> 7:2.6.STABLE21-7
changelog:
  - Resolves: #1134976 - CVE-2013-4115 buffer overflow when processing overly long DNS names
  - Resolves: #1134976 - CVE-2014-3609 assertion failure in header processing


author: Doug Ledford <dledford@redhat.com> - 0.0.4-10.el5
changelog:
  - Bump and rebuild (evidently I rebuilt before libibumad hit the build
    root override)
  - Resolves: bz847913


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-35
changelog:
  - Resolves: rhbz#707340 - latest sssd fails if ldap_default_authtok_type is
  -                         not mentioned
  - Resolves: rhbz#707574 - SSSD's async resolver only tries the first
  -                         nameserver in /etc/resolv.conf


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-37
changelog:
  - Reverts:  rhbz#680443 - Dynamic DNS update fails if multiple servers are
  -                         given in ipa_server config option


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-46
changelog:
  - Related:  rhbz#758168 - sssd_nss crashes when passed invalid UTF-8 for the
                            username in getpwnam()


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-49
changelog:
  - Resolves: rhbz#680443 - Detect support for the nsupdate realm directive
  - Resolves: rhbz#773327 - The full dyndns update message should be logged
                            into debug logs


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-49.1
changelog:
  - Add the ability to disable the LDAP simple paging control
  - Resolves: rhbz#806765 - Intermittent LDAP paging errors


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-49.2
changelog:
  - Resolves: rhbz#828902 - Infinite loop checking Kerberos credentials
  - Resolves: rhbz#828528 - sssd fails to use the last AD server if other AD
                            servers are not reachable


author: Jakub Hrozek <jhrozek@redhat.com> - 1.5.1-49.3
changelog:
  - Resolves: rhbz#860788 - After updating to sssd-1.5.1-49.el5_8.1 does not
                            show up nested groups while authenticating to
                            Windows AD 2008


author: Jakub Hrozek <jhrozek@redhat.com> - 1.5.1-57
changelog:
  - Process all groups from a single nesting level
  - Resolves: rhbz#846664
  - Backport the option to disable srchost processing
  - Resolves: rhbz#841677


author: Jakub Hrozek <jhrozek@redhat.com> - 1.5.1-68
changelog:
  - Add a forgotten break in a switch statement
  - Related: rhbz#886165 - sssd will stop functioning correctly if sssd_be
                           hangs for a while


author: Jakub Hrozek <jhrozek@redhat.com> - 1.5.1-69
changelog:
  - Fix startup with a broken configuration
  - Resolves: rhbz#974036 - sssd core process keeps running after backends quit


author: Jakub Hrozek <jhrozek@redhat.com> - 1.5.1-70
changelog:
  - Fix IPA provider performance issue when storing large host groups
  - Resolves: rhbz#979047 - sssd_be goes to 99% CPU and causes significant
                            login delays when client is under load


author: Jakub Hrozek <jhrozek@redhat.com> - 1.5.1-71
changelog:
  - Do not crash when dyndns update times out
  - Resolves: rhbz#1000205 - sssd_be segfaults if IPA dynamic DNS update
                             times out


author: Roland McGrath <roland@redhat.com> - 4.5.16-1
changelog:
  - fix multithread issues (#240962, #240961, #247907)
  - fix spurious SIGSTOP on early interrupt (#240986)
  - fix utime for biarch (#247185)
  - fix -u error message (#247170)
  - better futex syscall printing (##241467)
  - fix argv/envp printing with small -s settings, and for biarch
  - new syscalls: getcpu, eventfd, timerfd, signalfd, epoll_pwait,
    move_pages, utimensat


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 4.5.16-1.el5
changelog:
  - rebuilt for RHEL5 erratum (#250647)
  - note 4.5.16 fix for multithread issues (#222644)
  - note 4.5.16 fix for spurious SIGSTOP on early interrupt (#240842)
  - note 4.5.16 fix for -u error message (#229644)
  - fix ppc64 debuginfo rpm for strace64 (#250797)
  - Resolves: rhbz#250647 rhbz#222644 rhbz#240842 rhbz#229644 rhbz#250797


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 4.5.16-1.el5_2.1
changelog:
  - fix -f tracing of ia64 vfork (#457585)
  - fix -f tracing of ia64 clone2 (for multithread programs) (#457584)
  - Resolves: rhbz#457585 rhbz#457584


author: Jeff Law <law@redhat.com> - 4.5.18.18
changelog:
  - Revert prior changes for 495935.  Instead build strace32 on ppc and s390
    which can be installed alongside strace/strace64 on ppc64 and s390x (#495935)


author: Denys Vlasenko <dvlasenk@redhat.com> - 4.5.18-2
changelog:
  - Fix "strace -s N sets string size to N+1" problem (patch by Jeff Bastian)
  - Resolves: RHBZ #467776


author: Denys Vlasenko <dvlasenk@redhat.com> - 4.5.18-2.el5_3.1
changelog:
  - Fix the case where we did not nicely report that traced process
    disappeared (SIGKILL etc) while we were examining its state.
  - Resolves: RHBZ #478813


author: Roland McGrath <roland@redhat.com> - 4.5.17-1
changelog:
  - handle O_CLOEXEC, MSG_CMSG_CLOEXEC (#365781)
  - fix biarch stat64 decoding (#222275)
  - fix spurious "..." in printing of environment strings (#358241)
  - improve prctl decoding (#364401)
  - fix hang wait on exited child with exited child (#354261)
  - fix biarch fork/vfork (-f) tracing (#447475)
  - fix biarch printing of negative argument kill (#430585)
  - fix biarch decoding of error return values (#447587)
  - fix -f tracing of CLONE_VFORK (#455078)
  - fix ia64 register clobberation in -f tracing (#453438)
  - print SO_NODEFER, SA_RESETHAND instead of SA_NOMASK, SA_ONESHOT (#455821)
  - fix futex argument decoding (#448628, #448629)


author: Roland McGrath <roland@redhat.com> - 4.5.18-1
changelog:
  - build fix for newer kernel headers (#457291)
  - fix CLONE_VFORK handling (#455078)
  - Support new Linux/PPC system call subpage_prot and PROT_SAO flag.
  - In sigaction system call, display sa_flags value along with SIG_DFL/SIG_IGN.
  - Resolves: RHBZ #455874, RHBZ #452501, RHBZ #453438
  - Resolves: RHBZ #454431, RHBZ #455088, RHBZ #445849, RHBZ #435444


author: Denys Vlasenko <dvlasenk@redhat.com> - 4.5.18-2.el5_3.3
changelog:
  - Partial sync up with upsteam #1: whitespace changes
  - Partial sync up with upsteam #2: trivial changes (comments etc)
  - Partial sync up with upsteam #3: flock reporting, fix network ops selection
  - Partial sync up with upsteam #4: support -D option, blackfin cpu support
  - Partial sync up with upsteam #5: update SIGKILL detection machinery
  - Improve fairness - do not allow a few threads to usurp strace's attention
  - Resolves: RHBZ #484074


author: Denys Vlasenko <dvlasenk@redhat.com> - 4.5.18-3
changelog:
  - Partial sync up with upsteam #1: whitespace changes
  - Partial sync up with upsteam #2: trivial changes (comments etc)
  - Partial sync up with upsteam #3: flock reporting, fix network ops selection
  - Resolves: RHBZ #471169
  - Partial sync up with upsteam #4: support -D option, blackfin cpu support
  - Partial sync up with upsteam #5: update SIGKILL detection machinery
  - Resolves: RHBZ #472053
  - Improve fairness - do not allow a few threads to usurp strace's attention
  - Resolves: RHBZ #478419


author: Denys Vlasenko <dvlasenk@redhat.com> - 4.5.18-4
changelog:
  - Restore ^C handling inadvertently disabled in fairness fix
  - Note: previous version (4.5.18-3) includes fixes for these bugs:
  - Resolves: RHBZ #471169 (incorrent formatting of fcntl64() on32/64 system)
  - Resolves: RHBZ #472053 (SIGKILL might be improperly traced)


author: Denys Vlasenko <dvlasenk@redhat.com> - 4.5.18-5
changelog:
  - Remove unneeded changes on QE request
  - Note: still includes fixes for these bugs:
  - Resolves: RHBZ #471169 (incorrent formatting of fcntl64() on32/64 system)
  - Resolves: RHBZ #472053 (SIGKILL might be improperly traced)
  - Resolves: RHBZ #478419 (Improve fairness)


author: Deepak Bhole <dbhole@redhat.com> 1.2.9-4jpp.7
changelog:
  - Resolves: rhbz#1092457
  - CVE-2014-0114: Fixed ClassLoader manipulation vulnerability
  - Added dist tag to release


author: Miloslav Trmač <mitr@redhat.com> - 4.15-2.el5.1
changelog:
  - Fix "protocol = smtp"
    Resolves: #284801
  - Use a clearer error message if an unknown port is specified
    Resolves: #450344


author: Chris Duryee (beav) <cduryee@redhat.com>
changelog:
  - 707041: date picker in subscription-manager-gui does not work
    (cduryee@redhat.com)
  - 706265: Try to detect when removed pkgs make a repo not "active"
    (alikins@redhat.com)
  - 706127: Subscription Assistant too large for firstboot (cduryee@redhat.com)
  - 700058: Displaying previous imported cert in cert browser option
    (cduryee@redhat.com)
  - 704305: fix translated string for "Invalid date format..."
    (alikins@redhat.com)
  - 705445: Fix for calculation of "available" susbcriptions label
    (alikins@redhat.com)
  - add in translations (cduryee@redhat.com)


author: Chris Duryee (beav) <cduryee@redhat.com>
changelog:
  - 706552: check for, log, and clear dmi warnings to prevent them being printed
    to stdout (cduryee@redhat.com)
  - 707292: Better counting of cpu sockets (alikins@redhat.com)
  - 707313: rhel5 product id is being deleted upon first package install after
    subscribing to rhel5 subscription (cduryee@redhat.com)


author: Chris Duryee (beav) <cduryee@redhat.com>
changelog:
  - 708095: workaround for or_IN dates (cduryee@redhat.com)
  - 705236: use correct path for pid lockfiles (cduryee@redhat.com)
  - 709754: Workaround for the way Desktop/Workstation repo's and productids
    work. (alikins@redhat.com)


author: Joe Orton <jorton@redhat.com> - 1.6.11-8
changelog:
  - add security fixes for CVE-2011-1752, CVE-2011-1783 (#709219)
  - add fix for svnadmin hotcopy (#669535)
  - add security fix for CVE-2011-0715 (#681172)
  - add security fixes for CVE-2010-4644, CVE-2010-4539 (#672677)


author: Peter Vrabec <pvrabec@redhat.com> 1.6.8p12-11
changelog:
  - fix segfaults when using ldap on s390,
    Resolves: #305331
  - add audit support,
    Resolves: #320671


author: Peter Vrabec <pvrabec@redhat.com> 1.6.9p17-1
changelog:
  - rebase 1.6.8 -> 1.6.9
  - patches from F10
  - compiled with secure path(80215)
  - patches for sudoers file provided by sudo are removed,
    because we deliver our own sudoers in sources1
  - compiled without selinux support since there was no 
    selinux support in previous release
    Resolves: #447408


author: Daniel Kopecek <dkopecek@redhat.com> 1.6.9p17-3.el5_3.1
changelog:
  - audit patch rediff (one chunk failed to apply due to fuzz=0)
  - Fix for incorrect handling of groups in Runas_User (#481720)
    Resolves: #481820


author: Daniel Kopecek <dkopecek@redhat.com> 1.6.9p17-4
changelog:
  - audit patch rediff (one chunk failed to apply due to fuzz=0)
  - Fix for incorrect handling of groups in Runas_User (#481720)
    Resolves: #481821


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-10
changelog:
  - fixed regression in the sudoers parser (#580438)
  - merged .loopsegv3 and .includedir patches into .580438 patch
  - generated new toke.c from toke.l using flex (needed by #580438)
  - added !visiblepw with comment to sudoers
  - added ChangeLog, WHATSNEW and sudoers.ldap.5*
  - removed *.pod files
  - fixed printing of entries with multiple host entries on a single line (#603819)
  - fixed audit related code in configure.in (#583683)
  - removed unused patches
  - fixed a typo in the sudoers man-page (#602022)
    Resolves: rhbz#580438
    Resolves: rhbz#583911
    Resolves: rhbz#583644
    Resolves: rhbz#603819
    Resolves: rhbz#583683
    Resolves: rhbz#602022


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-11
changelog:
  - backported selinux support from 1.7.4p5 (#477185, #673157)
  - fixed bug in Runas_Spec group matching (#627543)
  - disable `sudo -l' output word wrapping if the output
    is piped (#697111)
  - fixed overwriting of errno after execve failure (#673157)
  - fixed segmentation fault (#673072)
  - add a sudoers entry to the nsswitch.conf file
    on install (and delete it on uninstall) (#617061)
    Resolves: rhbz#697111
    Resolves: rhbz#673157
    Resolves: rhbz#673072
    Resolves: rhbz#627543
    Resolves: rhbz#617061
    Resolves: rhbz#477185


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-14.1
changelog:
  - don't remove the sudoers: line from nsswitch.conf on update
  - use safe temporary file for nsswitch.conf
  - call restorecon after modifying nsswitch.conf
  - fixed command escaping
  - patch: Use SIG_SETMASK when resetting signal mask instead of SIG_UNBLOCK
    Resolves: rhbz#842759
    Resolves: rhbz#844420
    Resolves: rhbz#844419
    Resolves: rhbz#844418
    Resolves: rhbz#844443


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-14.3
changelog:
  - don't use a temporary file when modifying nsswitch.conf
  - fix permissions on nsswitch.conf, if needed
  - sync Requires with y-stream, added policycoreutils to Requires
    Resolves: rhbz#846974


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-14.4
changelog:
  - Implement a new sudoers Defaults option to restore old command exec behavior
    Resolves: rhbz#854513


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-21
changelog:
  - Implement a new sudoers Defaults option to restore old command exec behavior
    Resolves: rhbz#840971


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-22.1
changelog:
  - Fixed caching of user and group names
  - Backported RFC 4515 escaping of LDAP queries
    Resolves: rhbz#916232
    Resolves: rhbz#916220


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-26
changelog:
  - updated sudoers man-page to clarify the behavior of the user
    negation operator and the behavior of wildcard matching in command
    specifications
    Resolves: rhbz#846118
    Resolves: rhbz#856902


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-27
changelog:
  - visudo: fixed incorrect warning and parse error regarding
    undefined aliases which were in fact defined
    Resolves: rhbz#849679
    Resolves: rhbz#905624


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-28
changelog:
  - backported fixes for CVE-2013-1775 CVE-2013-1776 CVE-2013-2776 CVE-2013-2777
    Resolves: rhbz#968221


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-29
changelog:
  - added patch for CVE-2014-0106: certain environment variables not
    sanitized when env_reset is disabled
    Resolves: rhbz#1072210


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-9
changelog:
  - added patch that fixes a 'cache error' occuring when fetching
    user/group names from LDAP etc.
    Resolves: #632235


author: Peter Vrabec <pvrabec@redhat.com> - 1.4.1-45
changelog:
  - include a newline when logging to tty
  - syslogd keeps writing messages to /dev/console after an EINTR in syscall
  - fixing memory leak 
  - man page fixes
    Resolves: #490897, #506683, #481600, #471174, #460232


author: Ivana Varekova <varekova@redhat.com> - 7.0.2-1
changelog:
  - Resolves: #223138 
    update to 7.0.2
  - Resolves: #243307
    problem with empty debuginfo package
  - Resolves: #369951
    too much open files
  - Resolves: #229760
    add hotplug CPU support
  - Resolves: #236934
    sar command exits with "realloc: Success" 
    see 7.0.0-7.0.1 changelog
  - Resolves: #177540
    add option to iostat which emables it to show 
    the registered device names for device mapper devices


author: Ivana Hutarova Varekova <varekova@redhat.com> - 7.0.2-11
changelog:
  - Related: #716959                                                                                                                                                                                             
    fix cve-2007-3852 - sysstat insecure temporary file usage


author: Peter Schiffer <pschiffe@redhat.com> - 7.0.2-12
changelog:
  - resolves: #805635
    sar -b reports double actual values
  - resolves: #725266
    sar -i not in seconds
  - resolves: #706333
    cifsiostat doesn't report number of open files correctly
  - resolves: #801701
    sar can not show pretty name when dev minor > 256


author: Peter Schiffer <pschiffe@redhat.com> - 7.0.2-13
changelog:
  - resolves: #804890, #837238, #885571
    added support for dynamically attributed major device numbers


author: Ivana Varekova <varekova@redhat.com> - 7.0.2-2
changelog:
  - Resolves: #451626
    switch off SMP_RACE option
  - Resolves: #458811
    fix -I problems on ia64 machine
  - Resolves: #369981
    add two extended nfs fields


author: Ivana Hutarova Varekova <varekova@redhat.com> - 7.0.2-3.1
changelog:
  - Resolves: #609994
    Though function write() executed sucessful, sadc end with an error
  - Resolves: #609826
    The output of sar -I ALL/XALL is wrong in ia64 machine of RHEL5
  - Resolves: #609824
    The 'sar -d ' command outputs invalid data
  - Resolves: #609819
    March sar data was appended to February data
  - Resolves: #609821
    The sysstat's programs such as mpstat shows one extra cpu
  - Resolves: #609991
    iostat -n enhancement not report NFS client stats correctly


author: Tim Waugh <twaugh@redhat.com> 0.7.32.9-1
changelog:
  - 0.7.32.9:
    - Fixed Forward button sensitivity when Back pressed (bug #217516).
    - Don't pre-select make and model when not discoverable
      (bug #217522).
    - Fixed typo in show_HTTP_Error (bug #217538).
    - Fixed hex digits list in percentDecode (bug #224140).
    - Driver existence check improvements (part of bug #227662).
    - Fixed traceback in driver existence check (part of bug #227662).
    - Driver existence check: give up if there are HTML entities
      (bug #227662).
    - Prevent username/password loss when applying changes
      (bug #227663).
    - Handle unknown job options (bug #227678).
    - Case-insensitive Device ID matching (part of bug #228506).
    - Preserve case in debug output (part of bug #228506).
    - Fixed logic for matching against Device ID (part of
      bug #228506).
    - Handle applying changes in the correct place (bug #229474).
    - Reconnect to CUPS when needed (bug #229861).
    - Delete button should not be sensitive for remote queues
      (bug #250387).
    - Fixed SMB browsing problem (bug #452853).
    - Fixed expandability of servers in the SMB browser (part of
      bug #452853).
    - Decrease minimum width of window (bug #229473).
    - Moved widgets around to avoid window being too wide (part of
      bug #229473).


author: Tim Waugh <twaugh@redhat.com> 0.7.32.10-1
changelog:
  - 0.7.32.10:
    - Don't call populateList() after saving printer, just update the
      printer we changed.  This prevents a GTK+ crash (bug #229474).


author: Tim Waugh <twaugh@redhat.com> 0.7.32.10-3
changelog:
  - Applied patch to avoid traceback in driver checking code (bug #651854).
  - Applied patch to fix server settings display after changes are
    applied (bug #472398).
  - Applied patch to fix escaping of "@" symbols in URIs (bug #719459).


author: Thomas Woerner <twoerner@redhat.com> 1.6.29.1-2
changelog:
  - fixed gu_IN translation
    Resolves: rhbz#222629
  - fixed ipv6 rules to be more secure
    Resolves: rhbz#232931
  - fixed missing complain on configuration error
    Resolves: rhbz#243743
  - fixed dialog placement failure
    Resolves: rhbz#243744
  - fixed expanding list to be expanding
    Resolves: rhbz#243745
  - fixed port check to properly check the port and range
    Resolves: rhbz#247608


author: Chris Lumens <clumens@redhat.com> 1.6.29-1
changelog:
  - Update translations (#216563).
  - Remove unnecessary SELinux boolean panel.
  - GUI package should require same version of TUI package.
  - Fix IPv6 firewall to allow outbound connections and block incoming
    connections we don't need (tmraz, #217514).
  - Other ports expander should grow as the window grows (#217645).


author: Thomas Woerner <twoerner@redhat.com> 1.6.29.1-3
changelog:
  - fixed port range validation
    Resolves: rhbz#503588
  - fixed requirement for setenforce: libselinux-utils
    Resolves: rhbz#532947
  - added missing path for setenforce calls in lokkit
    Resolves: rhbz#532948


author: Thomas Woerner <twoerner@redhat.com> 1.6.29.1-6
changelog:
  - fixed focus of add port dialog (rhbz#352401)
  - honour protocol of predefined services (rhbz#474100)
  - stop ip6tables properly (rhbz#526477)
    Thanks to Oliver Fourdan for the patch


author: Frank Ch. Eigler <fche@redhat.com> - 0.5.14-1
changelog:
  - Many robustness improvements: 1117, 1134, 1305, 1307, 1570, 1806,
    2033, 2116, 2224, 2339, 2341, 2406, 2426, 2438, 2583, 3037,
    3261, 3282, 3331, 3428 3519, 3545, 3625, 3648, 3880, 3888, 3911,
    3952, 3965, 4066, 4071, 4075, 4078, 4081, 4096, 4119, 4122, 4127,
    4146, 4171, 4179, 4183, 4221, 4224, 4254, 4281, 4319, 4323, 4326,
    4329, 4332, 4337, 4415, 4432, 4444, 4445, 4458, 4467, 4470, 4471,
    4518, 4567, 4570, 4579, 4589, 4609, 4664


author: Frank Ch. Eigler <fche@redhat.com> - 0.6.1-1
changelog:
  - Add crash-devel buildreq to build staplog.so crash(8) module.
  - Many robustness & functionality improvements:


author: Frank Ch. Eigler <fche@redhat.com> - 0.6.1-3
changelog:
  - Add zlib-devel to buildreq; missing from crash-devel
  - Process testsuite .stp files for #!stap->#!/usr/bin/stap


author: Frank Ch. Eigler <fche@redhat.com> - 0.9.7-5.3
changelog:
  - rhbz556564-2: CVE-2009-4273 cont'd aka CVE-2010-0412
  - rhbz559719: CVE-2010-0411
  - pr11286: stap-client --server operation


author: Frank Ch. Eigler <fche@redhat.com> - 1.1-2
changelog:
  - rhbz561889 = CVE-2010-0411: __get_argv overflows
  - rhbz512202: update tcp/mib tapsets
  - rhbz560890: stap -L/-l argument order preservation
  - rhbz563114: syscall.* regression w/ sys_pipe32 disappearanced
  - rhbz559643: fix testsuite bugs in labels.exp causing dejagnu hangs
  - rhbz564445: fix sdt.h probes with prelinked libraries
  - rhbz564443: harden unprivileged mode
  - pr11286: fix stap-client --server=FOO
  - rhbz556565: CVE-2009-4273 + CVE-2010-0412: more stap-server fixes
  - pr11296: fix systemtap-testsuite sdt.h tests


author: Stan Cox <scox@redhat.com> - 1.8-5
changelog:
  - Backported fixes: 
  - rhbz844910: grumble quietly about preexisting gid/uid conflicts in .spec  
  - rhbz843480: systemtap-server should work without systemtap-runtime preinstalled
  - rhbz843392: systemtap-testsuite unresolved deps
  - rhbz843389: sdt.c on systemtap-testsuite cannot be compiled
  - rhbz835027: systemtap-testsuite requires prelink on ia64


author: Frank Ch. Eigler <fche@redhat.com> - 1.8-6
changelog:
  - Backported fixes:
  - rhbz859902: systemtap module build failure (-p4) for xen kernels
  - rhbz860750: stapusr user not able to run modules compiled/signed by server


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.17-31
changelog:
  - Improve message with response directions to reflect new option
    for user names with dot character
    Related: #574451


author: Peter Vrabec <pvrabec@redhat.com> 2:1.15.1-23
changelog:
  - Fix default ACLs on files problem. Header fixes. root => trusted.
  - Fix NIL termination for ACLs.
  - Fix star/POSIX compat. for ACLs
  - Resolves: #221971
  - all fixes made by james.antill@redhat.com


author: Ondrej Vasik <ovasik@redhat.com> 2:1.15.1-23.0.1.2
changelog:
  - CVE-2007-4476 - fix stack crashing in safer_name_suffix
  - CVE-2010-0624 - fix heap-based buffer overflow by expanding
    a specially-crafted archive


author: Ondrej Vasik <ovasik@redhat.com> 2:1.15.1-31
changelog:
  - tar can incorrectly seek when extracting a tarball and reaching
    ENOSPC (#643111)
  - tar no longer dumps core (just shows an error) when updating
    gzipped/bzipped archive(#675693)
  - document --no-overwrite-dir option in manpage(#698618)


author: Ondrej Vasik <ovasik@redhat.com> 2.2.0-4
changelog:
  - don't depend on exact version of docbook-dtds(#233033)
  - remove smp_mflags to prevent build failures(#233028)
  - add disttag


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.4.13-5
changelog:
  - Threaded / nonthreaded versions of tcl are now switchable through alternatives
    Resolves: rhbz#478961


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.4.13-6
changelog:
  - Fixed infinite loop in regex NFA optimization code
    Resolves: CVE-2007-4772
  - Fixed O(N^2) compile time (and huge memory requirements) for some regexps
    Resolves: CVE-2007-6067


author: Tomas Janousek <tjanouse@redhat.com> - 7.6-40.3
changelog:
  - resolve hostnames in hosts.{allow,deny}, fixes #220015, #196326
  - unblock and catch SIGCHLD from spawned shell commands,
    fixes #112975 (#241357)
  - don't discard exits from other child processes than the spawned one, fixes


author: Tomas Janousek <tjanouse@redhat.com> - 7.6-40.4
changelog:
  - replaced the hostname resolving patch (#220015):
  - resolve the address given to hosts_ctl to hostname, if hostname not given
    (#220015)
  - compare localhost and localhost.localdomain as the same (#196326, #246216)


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:3.9.4-9.el5
changelog:
  - fix buffer overflow in 802.11 printer (#232347, CVE-2007-1218)
  - fix return codes in arpwatch init script (#237779)


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:3.9.4-12.el5
changelog:
  - use LINUX_SLL or RAW as data link types when qeth device is not
    in layer2 mode (#281241)
  - require /usr/sbin/sendmail (#259301)
  - enable crypto support on 64-bit architectures (#345041)
  - support decoding IKEv2 packets (#290131)


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:3.9.4-15.el5
changelog:
  - don't crash when invalid interface index is specified (#497819) 
  - fix tcpslice on 64-bit architectures (#485670)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.14-13
changelog:
  - Fix UTF-8 Japanese character is garbled in tcsh script in
    a certain situation
    Resolves: #453785


author: Vitezslav Crhonek <vcrhonek@rehat.com> - 6.14-14
changelog:
  - Fix $name[selector] doesn't fail when selector is out of range
    Resolves: #435398
  - Fix description of builtin command 'set' in tcsh manpage
    Resolves: #430459
  - Fix strings which begin with '0' are not recognized as octal numbers
    Resolves: #438109
  - Fix tcsh scripts with multiple case statement with end keywords
    break with error
    Resolves: #436956
  - Fix calculation order of operators description in tcsh manpage
    Resolves: #442536
  - Fix memoryuse description in tcsh manpage
    Resolves: #437095
  - Change config_f.h to use system malloc()
    Resolves: #443643


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.14-17
changelog:
  - Revert "selector out of range" patch
    Resolves: #495642
  - Fix printing of multi-byte character
    Resolves: #502474
  - Fix tcsh %j prompt formatting sequence overrides all other formatting
    Resolves: #461836
  - Fix various globbing problems
    Resolves: #529425, #529703


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.14-17.2
changelog:
  - Fix tcsh obeys printexitvalue for back-ticks
    Resolves: #640252
  - Remove extra fork when tcsh processes backquotes
    Resolves: #640251


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 6.17-3
changelog:
  - Fix status of pipelined/backquoted/list of commands
    Resolves: #638955
  - Don't allow illegal variable names to be set
    Resolves: #436901
  - Minor manpage fixes
    Resolves: #437079, #437080, #436439, #433908


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 6.17-4
changelog:
  - Fix requires not to depend on /usr/lib* libraries
  - Build with libtermcap-devel instead of ncurses-devel


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.17-6
changelog:
  - Revert exit status regression with it's opt-out variable $anyerror,
    added by "Fix status of pipelined/backquoted/list of commands" and
    opt-in the POSIX-like exit status behaviour by $status_posix_value
    variable instead
    Resolves: #784510
  - Handle pending signals before flush so that the the .history file
    does not get truncated. Implement file locking using shared readers,
    exclusive writer to prevent any .history file data corruption
    Resolves: #648592


author: Roman Kollar <rkollar@redhat.com> 6.17-7
changelog:
  - Fix dosource() calls after history file locking patch
    Resolves: #858281
  - Revert srcfile behaviour to return backward-compatible error codes (#658074)
  - Fix several extra warnings breaking the upstream testsuite (#658074)


author: Adam Tkac <atkac redhat com> 1:0.17-40
changelog:
  - use ?dist instead of dist as disttag (#440614)
  - telnetd: use sockaddr_storage instead of sockaddr to hold IPv6 addr (#678336)
  - telnet wasn't interruptable (^C) when started with specious -b argument


author: Jindrich Novy <jnovy@redhat.com> 3.0-33.14
changelog:
  - fix CVE-2010-2642 CVE-2011-0433 CVE-2011-0764 CVE-2011-1552
    CVE-2011-1553 CVE-2011-1554, texlive various flaws (#773180)


author: Christopher Aillon <caillon@redhat.com> 1.5.0.9-6
changelog:
  - Extract the source into a versioned directory to help with
    parallel compiles and -debuginfo packages


author: Martin Stransky <stransky@redhat.com> - 1.5.0.12-4
changelog:
  - added pathes for Mozilla bugs 199088,267833,309322,345305,361745,
    362901,372309,378787,381300,384105,386914,387033,387881,388121,388784
    390078,393537,395942,325761,392149


author: Martin Stransky <stransky@redhat.com> - 2.0.0.12-5
changelog:
  - updated starting script, fixes #217402 - Thunderbird misplaces 
    OO files that are being fowarded from open app


author: Miloslav Trmac <mitr@redhat.com> - 2.9.7-1.1.el5.1
changelog:
  - Fix some format string mismatches (backport from 2.9.8)
  - Automatically exclude aquota.{group,user} files in filesystem root
    directories (backport from 2.9.10)
    Resolves: #213654


author: Miloslav Trmač <mitr@redhat.com> - 2.9.7-1.1.el5.2
changelog:
  - Use the maximum of atime, mtime and ctime when checking whether a file is
    obsolete
    Resolves: #373301


author: Miloslav Trmač <mitr@redhat.com> - 2.9.7-1.1.el5.4
changelog:
  - Add --exclude-pattern, and use it to avoid deleting /tmp/hsperfdata_*
    Resolves: #527425
  - Fix fuser invocation for names starting with '-'
    Resolves: #548932


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.11.0-1
changelog:
  - Update to upstream version 2.11.0
    Resolves: #713972
  - Change build options
    Resolves: #713987
  - Fix incomplete help string in init script
    Resolves: #553123


author: Vitezslav Crhonek <vcrhonek@redhat.com> 2:2.7.0-1
changelog:
  - Upgrade to upstream version 2.7.0
    Resolves: #427498
  - Fix OpenPegasus SRPM fails to build Test RPM
    Resolves: #252462
  - Mark files in /var/lib/Pegasus as noverify in spec file
    Resolves: #250186


author: Vitezslav Crhonek <vcrhonek@redhat.com> 2:2.7.1-1
changelog:
  - Upgrade to upstream version 2.7.1
    Resolves: #453952
  - Fix setElementAt() doesn't copy value of CMPI_char parameter
    Resolves: #454589
  - Support CMPI MI factories that return errors
    Resolves: #454590
  - Fix HTTP 401 responses lack Content-Length headers
    Resolves: #454591
  - Remove debug dirs
    Resolves: #440371
  - Include SNMP Indication Handler
    Resolves: #452930
  - Setup the InterOp namespace correctly
    Resolves: #447673
  - Fix wrong return code from init script
    Resolves: #326281
  - Add cimsub to package
    Resolves: #447823


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.7.1-2
changelog:
  - Check status of both lock files and merge init script patches to one
  - Fix local-or-remote-auth patch and enhance PAM security settings
    Resolves: #471371


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.7.2-1
changelog:
  - Update to upstream version 2.7.2
    Resolves: #474458
  - Enable out-of-process providers
    Resolves: #455109
  - Add README.RedHat.SSL
    Resolves: #479038


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:5.5.23-0jpp.1.0.3.el5
changelog:
  - Rebuild since brp-repack-jars has been fixed to not mangle INDEX.LIST files -
    (bug 238139)
  - Resolves: bug 237089


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:5.5.23-0jpp.1.0.4.el5
changelog:
  - Remove erroneous rebuild-gcj-db for javadoc subpackage
  - Add fixes for CVE-2007-2449 and CVE-2007-2450
  - resolves: bug 244846, bug 244816


author: David Knox <dknox@redhat.com> 0:5.5.23-0jpp.11
changelog:
  - Resolves: rhbz#623813 - NullPointerException on startup
  - Resolves: rhbz#623465 - Crash on startup using Catalina/localhost/context.xml
  - Still has startup issues (http404) on first request. The second request will
  - return http200


author: David Knox <dknox@redhat.com> 0:5.5.23-0jpp.15
changelog:
  - Resolves: rhbz#217630, 217141 naming-factory-dbcp.jar missing causes
  - JNDI errors. Change made to tomcat5.conf, added javax.sql.DataSource.
  - Factory to JAVA_OPTS


author: David Knox <dknox@redhat.com> 0:5.5.23-0jpp.22
changelog:
  - Resolves: CVE-2011-0013 rhbz 675931
  - Resolves: CVE-2010-3718 rhbz 675931
  - Resolves: CVE-2011-1184 rhbz 744983
  - Resolves: CVE-2011-2204 rhbz 719181


author: Fernando Nasser <fnasser@redhat.com> - 0:5.5.23-0jpp.3.0.2
changelog:
  From jean-frederic clere <jclere@redhat.com>:
  - Patch for CVE-2007-3382 and CVE-2007-3385
    Resolves: rhbz#254155


author: David Knox <dknox@redhat.com> 0:5.5.23-0jpp.38
changelog:
  - Resolves: CVE-2012-3439 rhbz#882008 three DIGEST authentication
  - implementation
  - Resolves: CVE-2012-3546, rhbz#913034 Bypass of security constraints.
  - Remove unneeded handling of FORM authentication in RealmBase


author: David Knox <dknox@redhat.com> 0:5.5.23-0jpp.39
changelog:
  - Resolves: CVE-2013-1976 Improper TOMCAT_LOG management in 
  - initscript. Change location of TOMCAT_LOG to /var/log so
  - only root can write to it. Touching TOMCAT_LOG is no longer 
  - required during initscript startup. Permissions and ownership
  - changed to 0755 tomcat:root for logdir


author: David Knox <dknox@redhat.com> 0:5.5.23-0jpp.40
changelog:
  - Related: CVE-2013-1976 It was found during additional testing
  - that the tomcat5 init may fail to start because the user
  - shell is set to sbin/nologin. Fixed in init scrip. SU now
  - uses -s /bin/sh during startup


author: Fernando Nasser <fnasser@redhat.com> - 0:5.5.23-0jpp.5
changelog:
  From jean-frederic clere <jclere@redhat.com>:
  - Patch for CVE-2007-3382 and CVE-2007-3385
    Resolves: rhbz#254156


author: David Walluck <dwalluck@redhat.com> 0:5.5.23-0jpp.7
changelog:
  - add patch for CVE-2008-1232
    Resolves: rhbz#457727
  - add patch for CVE-2008-1947
    Resolves: rhbz#449916
  - add patch for CVE-2008-2370
    Resolves: rhbz#458634
  - add patch for CVE-2008-2938
    Resolves: rhbz#456214


author: Fernando Nasser <fnasser@redhat.com> 0:5.5.23-0jpp.7.2
changelog:
  From  David Knox <dknox@redhat.com>:
  - add patch for CVE-2007-5333
    Resolves: rhbz#427779
  - add patch for CVE-2008-5515
    Resolves: rhbz#504758
  - add patch for CVE-2009-0033
  - add patch for CVE-2009-0580
    Resolves: rhbz#503980
  - add patch for CVE-2009-0783
    Resolves: rhbz#504162


author: Fernando Nasser <fnasser@redhat.com> 0:5.5.23-0jpp.7.2
changelog:
  - Actually add the patch files this time
    Resolves: rhbz#427779
    Resolves: rhbz#504758
    Resolves: rhbz#503980
    Resolves: rhbz#504162


author: David Knox <dknox@redhat.com> 0:5.5.23-0jpp.8
changelog:
  - Patches backported from RHEL-5 tomcat5-5.5.23-0jpp.10.el5
  - Updated init script for LSB compliance, catalina.log permissions
  - Resolves: CVE-2009-2693, CVE-2009-2902, CVE-2010-2227
  - CVE_2010-0781


author: - Bastien Nocera <bnocera@redhat.com> - 2.16.7-2
changelog:
  - Don't register handlers for rtsp or pnm by default, as RealPlayer
    is better suited to handle those
  Related: rhbz #318701


author: Jiri Skala <jskala@redhat.com> - 4:2.0.1-4
changelog:
  - Resolves: #445381: traceroute gets unaligned access warnings on ia64
  - Resolves: #445571: traceroute-debuginfo package is empty


author: Jiri Skala <jskala@redhat.com> - 4:2.0.1-6
changelog:
  - Resolves: #461278 - max TTL value cannot be between 1 and 5
  - Resolves: #644297 - setsockopt IPV6_FLOWLABEL_MGR: Operation not permitted


author: Steve Grubb <sgrubb@redhat.com> - 0.3.1-3
changelog:
  Resolves: #431616 static libs need to require devel package
  Resolves: #431667 switch tss user to root


author: Harald Hoyer <harald@redhat.com> 095-14.12
changelog:
  - fix for looping vol_id, because of a malformed passwd (rhbz#425941)
  - revised fix for tape devices (rhbz#231990)
  - Resolves: rhbz#425941, rhbz#231990


author: Harald Hoyer <harald@redhat.com> 095-14.16
changelog:
  - set selinux context for .udev dirs and symlinks (rhbz#442886)
  - fixed rule for hp iLO2 virtual mouse device (rhbz#429215)
  - Resolves: rhbz#429215, rhbz#442886


author: Harald Hoyer <harald@redhat.com> 095-14.19
changelog:
  - removed zaptel rules (rhbz #294061)
  - fixed segfault for empty lines in passwd (rhbz#413831)
  - added patch for iscsi ids (Daniel Berrange) (rhbz#427640)
  - added /etc/sysconfig/udev-stw, which makes MODULES 
    configurable (Jeff Bastian) (rhbz#437979)
  - added ext4 support to vol_id (rhbz#444528)
  - updated dasd_id from dasdinfo of s390-tools-1.6.2 (rhbz#430532)
  - Resolves: rhbz#294061, rhbz#413831, rhbz#427640
  - Resolves: rhbz#437979, rhbz#444528, rhbz#430532


author: Harald Hoyer <harald@redhat.com> 095-14.21
changelog:
  - remove old udev queue,
    which might be leftover from udev in initrd (rhbz#487858)
  - add cciss support to scsi_id (rhbz#449057)
  - Resolves: rhbz#487858, rhbz#449057


author: Harald Hoyer <harald@redhat.com> 095-14.23
changelog:
  - vol_id: check if device is readable
  Resolves: rhbz#456447
  - fix race condition, to prevent udevd from SIGBUS
  Resolves: rhbz#521318
  - fix rename interface bug 
  Resolves: rhbz#520453
  - kill loop in post and preun, so the new udevd can start
  Resolves: rhbz#567406
  - set umask 022 in start_udev
  Resolves: rhbz#596774
  - let scd* be a symlink to sr*
  Resolves: rhbz#610897
  - add by-path symlinks for tape devices
  Resolves: rhbz#611664
  - add virtio-ports symlinks
  Resolves: rhbz#624928


author: Harald Hoyer <harald@redhat.com> 095-14.29
changelog:
  - set time for wait_for_sys to 10 seconds (was 3)
  Resolves: rhbz#769169
  - fixed sas path_id for hot-remove/add
  Resolves: rhbz#812286
  -


author: Harald Hoyer <harald@redhat.com> 095-14.30
changelog:
  - unignore device mapper devices
  Resolves: rhbz#214639
  - fixed grammar in man page
  Resolves: rhbz#481349
  - report syntax errors in rules
  Resolves: rhbz#573785
  - improved network interface renaming
  Resolves: rhbz#520722


author: Harald Hoyer <harald@redhat.com> - 095-14.7
changelog:
  - added RPM_OPT_FLAGS and pie to static build flags
  - Resolves: rhbz#233956, rhbz#233307, rhbz#226997, rhbz#236242
  - Resolves: rhbz#217917, rhbz#231990


author: Harald Hoyer <harald@redhat.com> - 095-14.8
changelog:
  - removed pie link flag from static build flags
  - Resolves: rhbz#233956, rhbz#233307, rhbz#226997, rhbz#236242
  - Resolves: rhbz#217917, rhbz#231990


author: Tom Lane <tgl@redhat.com> 2.2.11-9
changelog:
  - split out libraries into a -libs subpackage, to allow them to be installed
    concurrently with unixODBC64-libs
  Resolves: #497016


author: Tom Lane <tgl@redhat.com> 2.2.11-10
changelog:
  - Compile with -fno-strict-aliasing, per rpmdiff complaint.
  - Install icons in /usr/share/pixmaps, not /usr/share/icons as this package
    has historically done; the former is considered correct.  Also per rpmdiff.
  Related: #497016


author: Tom Lane <tgl@redhat.com> 2.2.14-1
changelog:
  - Constructed from current Fedora package, removing -kde subpackage because
    2.2.14 seems to need a newer version of Qt than RHEL-5 provides.
  - Split libraries into a -libs subpackage to allow installation concurrent
    with the original unixODBC package (or at least its -libs subpackage).
  Resolves: #742597


author: Tom Lane <tgl@redhat.com> 2.2.14-2
changelog:
  - Treat ia64 as a multilib architecture, because rpmdiff has started to
    whinge about it
  Related: #742597


author: Ivana Varekova <varekova@redhat.com> - 5.52-3
changelog:
  - Resolves: #227225
    unzip fails on an NFS-mounted partition
  - Resolves: #249525
    extract on NFS out of space doesn't return errors


author: Miloslav Trmac <mitr@redhat.com> - 1.88-3.el5.1
changelog:
  - Preserve application exit code
    Resolves: #210893
  - Don't use PAM data after it was freed
    Resolves: #211188


author: Karel Zak <kzak@redhat.com> 2.13-0.45
changelog:
  - fix #237659 - add -r option to losetup to create a read-only loop
  - fix #235495 - mount -f does not work with NFS-mounted file system
  - fix #234303 - src.rpm does't build
  - fix #228731 - sfdisk doesn't support DM-MP device (add default heads and sectors)
  - fix #231192 - ipcs is not printing correct values on pLinux
  - fix #245533 - translation files exist, but are not being used


author: Karel Zak <kzak@redhat.com> 2.13-0.45.el5_1.1
changelog:
  - fix #324461 - CVE-2007-5191 util-linux (u)mount doesn't drop
                  privileges properly when calling helpers


author: Karel Zak <kzak@redhat.com> 2.13-0.43.3
changelog:
  - fix #219569 - smbfs -> cifs (upgrade from -pre6 to -pre7 upstream version)
  - fix #218915 - fdisk -b 4K
  - remove unused patches


author: Karel Zak <kzak@redhat.com> 2.13-0.46
changelog:
  - fix #324471 - CVE-2007-5191 util-linux (u)mount doesn't drop privileges
                 properly when calling helpers


author: Karel Zak <kzak@redhat.com> 2.13-0.48
changelog:
  - fix #203869 - RHEL5: login segfaults on EOF
  - fix #456378 - RHEL5: audit log injection attack via login
  - fix #449777 - /usr/bin/logger cannot be used when /usr non-root partition
  - fix #249438 - man fstab refers to fstab-sync
  - fix #240131 - mkfs:bug in mkfs man page
  - fix #446648 - obsolete info in fdisk(8) man page
  - fix #447265 - VMware fdisk partitions
  - fix #354791 - blockdev command calls the blkpg ioctl with a wrong data structure
  - fix #444650 - mkswap defaults to v0 format on ppc64
  - fix #458437 - "swapon -a" does not complain about missing devices
  - fix #449143 - fdisk fails to warn on large disks
  - fix #446971 - sfdisk issue on large hard drives
  - fix #239721 - script: result of 'COMMAND' cannot be logged in the file typescript
  - fix #427183 - in repair mode, mount gives false information


author: Karel Zak <kzak@redhat.com> 2.13-0.50
changelog:
  - re-fix #240131 - mkfs:bug in mkfs man page (fix typo)
  - re-fix #427183 - in repair mode, mount gives false information
  - re-fix #446648 - obsolete info in fdisk(8) man page (fix typo)


author: Karel Zak <kzak@redhat.com> 2.13-0.54
changelog:
  - fix #448919 - fdisk -l shows wrong partition name on device-mapper-multipath devices
  - fix #465911 - ipcs returns 0 when some errors occured. 
  - fix #470497 - blockdev man page missing information
  - fix #475509 - when executing 'mount -a', a filesystem is mounted duplicative
  - fix #488192 - login: access("/nfs-home/.hushlogin", R_OK) = -1 EACCES
  - fix #490693 - Add utempter support to "script"
  - fix #495192 - login command does not allow for switching users
  - fix #502639 - SR#1919756-remove sleep() from fdisk
  - fix #565946 - sfdisk does not ensure writes make it to disk
  - fix #513369 - flock segfaults when file name is not given
  - fix #515149 - man mount(8) doesn't describe all vfat options for non-UTF8 locale
  - fix #568194 - remount of bind mounts is not properly documented
  - fix #458055 - "cal -3" generates improperly formatted output


author: Karel Zak <kzak@redhat.com> 2.13-0.55
changelog:
  - fix #245578 - "remote" PAM configuration inits the keyring at an inconvenient time
  - fix #612423 - /etc/udev/rules.d/60-raw.rules gets trashed by util-linux on update
  - fix #559302 - spurious mount warning when /bin/mount not setuid root


author: Karel Zak <kzak@redhat.com> 2.13-0.57
changelog:
  - fix #646300 - login doesn't update /var/run/utmp properly
  - fix #726572 - import missing fsfreeze into util-linux 
  - fix #678430 - fdisk should not report error on 1gB LUNs
  - fix #699639 - mount man page is missing support for ext4/xfs
  - fix #650937 - blockdev man page missing information
  - fix #678407 - ipcs and ipcrm in wrong man section


author: Karsten Hopp <karsten@redhat.com> 7.0.109-4.3z
changelog:
  - fixes CVE-2008-3074 (tar plugin)
  - fixes CVE-2008-3075 (zip plugin)
  - fixes CVE-2008-3076 (netrw plugin)
  - fixes CVE-2008-4101 (keyword and tag lookup)


author: Karsten Hopp <karsten@redhat.com> 7.0.109-5.4
changelog:
  - fix vim.csh profile
  - link with libncurses instead of libtermcap
  - provide correct number of parameters to [ builtin when 'id -u' returns
    an empty string
  - group autocmds provided by Red Hat into a redhat augroup so that they 
    can be cleanly removed


author: Karsten Hopp <karsten@redhat.com> 7.0.109-7
changelog:
  - move gvim desktop entry to Accessories (#506442)
  - redo several patches so that they apply with fuzz=0
  - fix syntax error when a script contains \c (#512265)
  - fix end of line error in ex mode comments (#572157)


author: Karsten Hopp <karsten@redhat.com> 7.0.109-7.2
changelog:
  - remove obsolete 'e' in front of filenames (netrw.vim)
    rhbz #591578
  - fix recursive function call when doing completion
    rhbz #681108


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.6-7.el5
changelog:
  - Explicitly drop the libvirt virDomainPtr object when a guest shuts down
    to avoid hanging onto objects in libvirt cache (bz 220036)


author: Hugh O. Brock <hbrock@redhat.com> - 0.4.0-3.el5
changelog:
  - Aggressively free libvirt domain object after it has been deleted. Workaround
    for python's unreliable garbage collection. (rhbz #249094)


author: Cole Robinson <crobinso@redhat.com> - 0.5.3-8.el5
changelog:
  - Fix delete button sensitivity when shutting down a selected guest (bz 427545)
  - Throw error when install location is empty (bz 442697)
  - Another fix for removing a cdrom with a driver tag (bz 437174)


author: Cole Robinson <crobinso@redhat.com> - 0.5.3-9.el5
changelog:
  - Allow using bridges on bonding or vlan devices (bz 447412)
  - Fix memory leak (bz 443680)
  - Don't squash user input disk size if moving back in the wizard (bz 452468)
  - Use 'xen:///' instead of 'xen' for connect dialog URI (bz 441850)
  - Trim URL and KS input text (bz 437514)
  - Hitting enter in file chooser should select active file (bz 298771)
  - Allow setting maxmem lower than current allocation (bz 428868)
  - Allow setting maxmem and current mem simultaneously (bz 428867)


author: Cole Robinson <crobinso@redhat.com> - 0.5.3-10.el5
changelog:
  - Allow specifying a keymap when adding a vnc graphics device (bz 251431)
  - Try to determine block devices sizes, print '-' otherwise (bz 453061)
  - Show 'help' in host dialog, not 'about' (bz 443604)
  - Don't default to selecting invalid bridge device (bz 446498)
  - Desensitive 'Add Network' button if not connected to hypervisor (bz 457878)
  - Fix command line options (bz 441841)
  - Reconnect with open serial console after VM restart (bz 248973)


author: Cole Robinson <crobinso@redhat.com> - 0.5.3-2.el5
changelog:
  - Fix adding blktap disk to PV guest via addhardware wizard (rhbz #430930)
  - Fix adding shared network devices via addhardware wizard (rhbz #430926)


author: Cole Robinson <crobinso@redhat.com> - 0.5.3-7.el5
changelog:
  - Catch empty cdrom patch in create wizard (rhbz #440638)
  - Don't print bogus disk size in create summary for block dev (rhbz #440245)


author: Cole Robinson <crobinso@redhat.com> - 0.6.1-12.el5
changelog:
  - Fix accessing migrate dialog from VM details (bz 510702)
  - Actually fix VNC access over TCP URI with port specified (bz 534005)


author: Cole Robinson <crobinso@redhat.com> - 0.6.1-13
changelog:
  - Advertise boot.iso via URL fetching option (bz 612676)
  - Fix graph view for overcommitted memory (bz 521754)
  - Update translations (bz 513324)


author: Cole Robinson <crobinso@redhat.com> - 0.6.1-14.el5
changelog:
  - Fix changing CDROM media with KVM (bz 641858)
  - Fix changing VCPUs for KVM (bz 644736)
  - Fix changing memory for KVM (bz 645285)


author: Cole Robinson <crobinso@redhat.com> - 0.6.1-15
changelog:
  - Use explicit paths for python binary (bz 708178)
  - Hide SCSI option for RHEL qemu (bz 701873)
  - Fix launching virt-manager over ssh -X from KDE box (bz 589436)


author: Cole Robinson <crobinso@redhat.com> - 0.6.1-6.el5
changelog:
  - Fix screenshot response message (bz 508249)
  - Fix issue where FV url install can be erroneously selected (bz 507207)
  - Fix qemu availability detection on first run (bz 507437)
  - Default to 'no sound device' for new VMs (bz 508751)
  - Fix migration for qemu/kvm (bz 509135)


author: Cole Robinson <crobinso@redhat.com> - 0.6.1-7.el5
changelog:
  - Add supported OS URL when choosing os type/variant (bz 500927)
  - Use ac97 as only sound model for qemu driver (bz 506035)


author: Richard W.M. Jones <rjones@redhat.com> - 1.9-1.3
changelog:
  - Import upstream version from Fedora Rawhide.
  - Fix dependencies for RHEL 5.
  - Ignore test errors caused by Python being broken.


author: Richard W.M. Jones <rjones@redhat.com> - 1.11-2
changelog:
  - New upstream version 1.11 + patch to fix detection of IA64 Xen HVM guests.
    resolves: rhbz#707508


author: Marcela Maslanova <mmaslano@redhat.com> - 4:4.1-70
changelog:
  - removed last patches, added only CVE 235880. Removed 222461, 223532, 223894.
  - Resolves: rhbz#235880


author: Marcela Maslanova <mmaslano@redhat.com> - 4:4.1-71
changelog:
  - added back patches removed for previous errata - 222461, 223532, 223894
  - Resolves: rhbz#222461, rhbz#223532, rhbz#223894


author: Marcela Maslanova <mmaslano@redhat.com> - 4:4.1-76
changelog:
  - 222464 crond failed "Days of week" after a few hours on 1st/Jan
  - 241877 Cron does not handle home directories with group deny permissions
  - 455379 cron jobs for users without home doesn't work
  - Resolves: rhbz#241877, rhbz#222464, rhbz#455379


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:4.1-77
changelog:
  - fix setting of pam configuration in vixie-cron-4.1-loginuid.patch
  - move building environment between opening session and setting
  parameters of session
  - Resolves: rhbz#546568


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:4.1-79
changelog:
  - CVE-2010-0424 vixie-cron, cronie: Race condition by setting timestamp 
    of user's crontab file, when editing the file
  - Resolves: rhbz#741534


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:4.1-80
changelog:
  - 654961 crond process ignores the changes of user's home directory needs
    bigger changes of code. The fix wasn't applied, detail in comment#11.
  - Related: rhbz#249512


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:4.1-81
changelog:
  - 455664 adoptions of crontab orphans, forgot add buffer for list of
    orphans
  - Related: rhbz#455664


author: Adam Tkac <atkac redhat com> 4.1.2-14.el5_5.3
changelog:
  - vncserver script: accept <+optname> option when specified as the first one
    (#494750)
  - libvnc.so: wake up from DPMS sleep state when receive mouse/keyboard event
    (#581478)


author: Martin Nagy <mnagy@redhat.com> - 2.0.5-11
changelog:
  - add new option to log login failures based on user list
  - Resolves: #345791
  - fix user_config_dir option
  - Resolves: #400921
  - allow usernames starting with '_' or '.'
  - Resolves: #386561
  - fix the write/race condition when uploading files simultaneously
  - Resolves: #240553
  - fix the bug that causes every new file stored with STOU to have a prefix '.1'
  - Resolves: #392231
  - make vsftpd wildcard matching more greedy
  - Resolves: #392181


author: Jiri Skala <jskala@redhat.com> - 2.0.5-15
changelog:
  - Resolves: #441485 - "service vsftpd stop" not stopping all vsftpd processes
  - Resolves: #478526 - man page error about some config options
  - Resolves: #460067 - RHEL5 vsftpd.conf lists incorrect default value for xferlog_file
  - Resolves: #431451 - Wrong init script
  - Resolves: #486259 - white space after chown_username value causes failure
  - Resolves: #236707 - vsftpd would crash without any error messages on bind fail


author: Jiri Skala <jskala@redhat.com> - 2.0.5-16
changelog:
  - Resolves: #498548 - Disabling Reverse DNS lookups in VSFTPd
  - Resolves: #236707 - vsftpd would crash without any error messages on bind fail
  - Resolves: #431451 - Wrong init script


author: Jiri Skala <jskala@redhat.com> - 2.0.5-16.el5_5.1
changelog:
  - Resolves: #580055 - vsftpd prematurely closes connection just before processing of post-auth command
  - Resolves: #580396 - vsftpd issues in RHEL5


author: Jiri Skala <jskala@redhat.com> - 2.0.5-20
changelog:
  - Resolves: #556795 - double call SSL_shutdown() makes some clients hang or slower
  - Resolves: #619731 - vsftpd OOPS when using Kerberos auth and no username/password
  - Resolves: #680823 - incorrect logging of virtual guest accounts as anonymous accounts in the xferlog file
  - Resolves: #676254 - vsftpd Timestamp problem


author: Jiri Skala <jskala@redhat.com> - 2.0.5-23
changelog:
  - Resolves: #513828 - vsftpd allows remote probing for valid usernames
  - Resolves: #717409 - Connection fails during upload - PORT is dropped by client
  - Resolves: #644083 - backport ssl_request_cert option vsftpd-2.0.7
  - Resolves: #641239 - [RFE] vsftpd can not handle square brackets in ls


author: Jiri Skala <jskala@redhat.com> - 2.0.5-24
changelog:
  - Resolves: #759364 - vsftpd child terminates when listing files with UID/GID larger than signed int


author: Jiri Skala <jskala@redhat.com> - 2.0.5-26
changelog:
  - Resolves: #795393 - vsftpd local_max_rate option doesn't work as expected
  - Resolves: #804078 - vsftpd server with TLS fails after transferring two files
  - Resolves: #799245 - Wildcard "?" does not work correctly


author: Parag <pnemade AT redhat.com> - 0.5.1-18
changelog:
  - Resolves:rh#615865 - Man w3m is stating incorrect program version
  - Resolves:rh#615859 - w3m spec file - config is missing noreplace


author: Richard W.M. Jones <rjones@redhat.com> - 5.5-1
changelog:
  - New upstream release 5.5 - Resolves: 446123
  - Synchronize the spec file formatting with Fedora.
  - Upstream source URL has changed (_ into -).
  - Convert README file to UTF-8.
  - Fix defattr line.
  - Manpages shouldn't be marked as doc.
  - Added wd_keepalive manpage.


author: Richard W.M. Jones <rjones@redhat.com> - 5.6-1
changelog:
  - Rebase to watchdog 5.6.
  - Drop cleanup patch, since it is now upstream.
  - Drop NFS cleanup patch, since it breaks NFS support for one call.
  - Add patch for general cleanups (sent upstream 2009-03-26).
  - Add patch to quiet write warnings about unused return values.


author: Aristeu S. Rozanski F. <arozansk@redhat.com> 0.10-3
changelog:
  - More problems found by Jarod Wilson fixed:
  - Removing exclusive architectures, it used to be in sync with linuxwacom
    package
  - marking udev rules as non-replaceable config files
  - using install on makefile


author: Aristeu Rozanski <arozansk@redhat.com> 0.14-1
changelog:
  - Updated to version 0.14
  - Fixing initrd messages
  - Fixing initrd to wait for /dev/input/uinput
  - include ABS_Z support


author: Karsten Hopp <karsten@redhat.com> 1.11.4-3.2
changelog:
  - add upstream patch so that sessions can timeout when a https server
    accepts the TCP connection but does not respond to the SSL handshake


author: Radek Vokál <rvokal@redhat.com> 0.99.5-1
changelog:
  - multiple security issues fixed (#225781)
  - CVE-2007-0459 - The TCP dissector could hang or crash while reassembling HTTP packets
  - CVE-2007-0459 - The HTTP dissector could crash.
  - CVE-2007-0457 - On some systems, the IEEE 802.11 dissector could crash.
  - CVE-2007-0456 - On some systems, the LLT dissector could crash.


author: Radek Vokál <rvokal@redhat.com> 0.99.6-1
changelog:
  - upgrade to 0.99.6
  - Wireshark could crash when dissecting an HTTP chunked response
  - Wireshark could crash while reading iSeries capture files
  - Wireshark could exhaust system memory while reading a
    malformed DCP ETSI packet
  - Wireshark could loop excessively while reading a malformed SSL packet
  - Resolves: #247623


author: Radek Vokál <rvokal@redhat.com> 0.99.7-1
changelog:
  - upgrade to 0.99.7
  - switch to libsmi from net-snmp
  - disable ADNS due to its lack of Ipv6 support
  - Resolves: #397411


author: Jan Safranek <jsafrane@redhat.com> 1.0.14-1
changelog:
  - upgrade to 1.0.14
  - http://www.wireshark.org/docs/relnotes/wireshark-1.0.14.html
  - fixes CVE-2010-1455 CVE-2010-2283 CVE-2010-2284 CVE-2010-2286 CVE-2010-2287
  - Resolves: #612239


author: Jan Safranek <jsafrane@redhat.com> 1.0.15-1
changelog:
  - upgrade to 1.0.15
  - http://www.wireshark.org/docs/relnotes/wireshark-1.0.15.html
  - fixes CVE-2010-2287 CVE-2010-2284
  - Related: #612239


author: Jan Safranek <jsafrane@redhat.com> 1.0.15-1.4
changelog:
  - fix few security issues
  - Resolves: CVE -2011-0024 CVE-2011-0538 CVE-2011-1139 CVE-2011-1140
    CVE-2011-1141 CVE-2011-1143 #612240


author: Jan Safranek <jsafrane@redhat.com> 1.0.15-3
changelog:
  - fixed various flaws: CVE-2011-1959 CVE-2011-2175 CVE-2011-1958 
    CVE-2011-2698 CVE-2011-4102 CVE-2012-0041 CVE-2012-0042 CVE-2012-0066
    CVE-2012-0067


author: Peter Hatina <phatina@redhat.com> 1.0.15-6
changelog:
  - security patches
  - Resolves: CVE-2012-6056
              CVE-2012-6060
              CVE-2012-6061
              CVE-2012-6062
              CVE-2013-3557
              CVE-2013-3559
              CVE-2013-4081
              CVE-2013-4083
              CVE-2013-4927
              CVE-2013-4931
              CVE-2013-4932
              CVE-2013-4933
              CVE-2013-4934
              CVE-2013-4935
              CVE-2013-5721
              CVE-2013-7112
              CVE-2014-2281
              CVE-2014-2299


author: Peter Hatina <phatina@redhat.com> 1.0.15-7
changelog:
  - security patches
  - Resolves: CVE-2014-6421
              CVE-2014-6423
              CVE-2014-6425
              CVE-2014-6428
              CVE-2014-6429


author: Dan Williams <dcbw@redhat.com> - 0.4.8-10
changelog:
  - Add fix for madwifi and WEP (wpa_supplicant/hostap bud #140) (#rh190075#)
  - Fix up madwifi-ng private ioctl()s for r1331 and later
  - Update madwifi headers to r1475


author: Dan Williams <dcbw@redhat.com> - 0.4.8-10.2
changelog:
  - Backport the 'fragment_size' config option (Resolves: #427843)
  - Fix the 'condrestart' function of the sysvint script (Resolves: #217281)


author: Dan Williams <dcbw@redhat.com> - 0.5.10-8
changelog:
  - Generalize disconnection-during-association fixes to iwl3945 and iwlagn
  - Force drivers to disassociate when required (see also #468967)
  - Resolves: #468441


author: Dan Williams <dcbw@redhat.com> - 0.5.10-9
changelog:
  - Force-disconnect at init, deinit, deauth, and disassoc
  - Ignore torrents of disconnect events from the iwl drivers
  - Resolves: #506230


author: Karsten Hopp <karsten@redhat.com> 3.3.4p7-3.2
changelog:
  - fix font resize problem (#251173)
  - add man page (#240003)
  - enable app-defaults (#240004)
  - fix build issue with icu-3.6-5.9 (#233013)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-102.el5
changelog:
  - Add more SMBIOS data to hvmloader (rhbz 540161)
  - Customize manufacturer and family for guest SMBIOS (rhbz 499453)
  - Fix bugs in ATAPI driver (rhbz 480317)
  - Add guest placement feature to Xen NUMA (rhbz 543199)
  - Fix up xend to allow external clients to PCI hotplug (rhbz 512315)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-105.el5
changelog:
  * Wed Jan 20 2010 Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-104.el5
  - MSI-X mask bit acceleration (rhbz 542756)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-105.el5_5.1
changelog:
  * Thu Feb 11 2010 Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-105.el5
  - Migration not working sometimes with xen-3.0.3-95.el5 disable paused domain save patch (rhbz 557446)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-105.el5_5.4
changelog:
  - Add HLT instruction emulation to VMXAssist (rhbz 593230)
  - Support the assignment of the VF of Intel 82599 10GbE Controller (rhbz 599018)
  - Use PCIe FLR for VF of Intel 82599 10GbE Controller (rhbz 599018)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-118.el5
changelog:
  - Preserve maxmem value and disallow invalid values (rhbz 627480)
  - Linux vbd hotplug: Avoid "leaked" loopback devices (rhbz 532648)
  - Linux vbd hotplug: Speed up finding a loopback device (rhbz 532648)
  - Fix updating serial port parameters on load (rhbz 501026)
  - Implement rate limit to the qemu-dm serial port implementation (rhbz 501026)
  - xen: correct data-type in pyxc_set_hvm_param (rhbz 639361)
  - Implement push opcodes (rhbz 636244)
  - Fix protected_to_real transition addressing (rhbz 636244)
  - Report error on attaching non-existing cdrom (rhbz 645237)
  - ioemu: do asynchronous flushes for IDE drives (rhbz 651912)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-119.el5
changelog:
  - prevent restarting loops when guest crashes at boot time and dump-core is enabled (rhbz 624959)
  - Provide alternative script to avoid "received packet with own address as source address" (rhbz 509789)
  - Implement check for emulated NIC model when appropriate (rhbz 626277)
  - Unpause domU as soon as memory scrubbing on source machine starts on live migration (rhbz 609589)
  - backport qemu_aio_flush() and wait for outstanding aio requests before unplugging the IDE disk (rhbz 652701)
  - Fix qcow2raw processing (rhbz 544300)
  - Remove DFPRINTF macro in qcow2raw (rhbz 544300)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-120.el5
changelog:
  - Removed patch "ioemu: do asynchronous flushes for IDE drives"(rhbz 651912)
  - Updated patch "Unpause domU as soon as memory scrubbing on source machine starts on live migration" (rhbz 609589)
  - Updated patch "prevent restarting loops when guest crashes at boot time and dump-core is enabled" (rhbz 624959)
  - Updated patch "Report error on attaching non-existing cdrom" (rhbz 645237)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-120.el5_6.1
changelog:
  - Remove overhead when checking duplicate devices (rhbz 666802)
  - Delete device entry on detach (rhbz 666802)
  - Fix xenstore entry accounting (rhbz 666802)
  - Do not check disk sharing with guests in hotplug script (rhbz 680928)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-120.el5_6.2
changelog:
  - Fix logic and integer overflow in xc_try_bzip2_decode() (rhbz 696938)
  - Fix logic and integer overflow in xc_try_lzma_decode() (rhbz 696938)
  - Fix integer and buffer overflows in xc_dom_probe_bzimage_kernel() (rhbz 696938)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-120.el5_6.3
changelog:
  - ioemu: do asynchronous flushes for IDE dma I/O (rhbz 712412)
  - ioemu: do asynchronous flushes on IDE pio (rhbz 712412)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-130.el5
changelog:
  - Fix logic and integer overflow in xc_try_bzip2_decode() (rhbz 696939)
  - Fix logic and integer overflow in _xc_try_lzma_decode() (rhbz 696939)
  - Fix integer and buffer overflows in xc_dom_probe_bzimage_kernel() (rhbz 696939)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-131.el5
changelog:
  - fix smbios for >=32GB guests (rhbz 702248)
  - ACPI: Dynamically indicate presence of COM1/COM2 ports (rhbz 702607)
  - Allow HPET to be configured as a per-domain config option (rhbz 702607)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-132.el5_7.1
changelog:
  - hotplug: set netback/tap MTU to the same value as the bridge MTU (rhbz 738608)
  - copy the MTU of the physical interface to the Xen bridge (rhbz 738610)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-132.el5_7.2
changelog:
  - Release device backends before restarting guest on the destination machine (rhbz 743850)
  - Fix SCSI buffer overflow and disable SCSI CD-ROMs (rhbz 736289)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-133.el5
changelog:
  - Better output on xendomains status when nothing to be done (rhbz 699615)
  - Add "-serial none" handling to qemu-dm (rhbz 713074)
  - Use mem_kb value for memory for long xm list output (rhbz 714855)
  - fix rounding of "xm list" output (rhbz 703693)
  - exit from QEMU if the pv framebuffer xenstore tree is inaccessible (rhbz 717525)
  - Add support for "xm debug-keys" (rhbz 705831)
  - Add file lock to xenconsole (rhbz 706859)
  - Check for amount of free disk space before attempting to suspend (rhbz 497080)
  - update PIIX4 revision (rhbz 661211)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-134.el5
changelog:
  - qemu-dm: send RARP notification after fullvirt live migration (rhbz 719294)
  - hotplug: set netback/tap MTU to the same value as the bridge MTU (rhbz 697310)
  - copy the MTU of the physical interface to the Xen bridge (rhbz 733417)
  - Release device backends before restarting guest on the destination machine (rhbz 733667)
  - Add configuration option to specify memory reserve for guest creation (rhbz 524624)
  - fix SCSI cdrom sigsegv (rhbz 735993)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-135.el5
changelog:
  - Fix valid cdrom image check (rhbz 737851)
  - pygrub: add more grub2 config file names (rhbz 746602)
  - pygrub: read all MSDOS partitions (rhbz 746602)
  - pygrub: read all GPT partitions (rhbz 746602)
  - pygrub: parse more grub2 config file constructs (rhbz 746602)
  - fix SCSI buffer overflow, disable SCSI CD-ROMs (rhbz 736291)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-135.el5_8.1
changelog:
  - qemu-dm/e1000: bounds packet size against buffer size (rhbz 786862)
  - Use correct expansion in xen-network-common.sh (rhbz 797191)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-140.el5
changelog:
  - pygrub: Improve handling of big files (rhbz 821705)
  - customize migration parameters (rhbz 831122)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-142.el5
changelog:
  - Properly close logfile of console daemon on error (rhbz 749776)
  - Fix leaks in block-qcow driver (rhbz 749776)
  - Avoid bogus use of NULL pointer in hvmloader (rhbz 749776)
  - qemu-dm: fix unregister_iomem (rhbz 861349)
  - Backport a single hunk from qemu-xen-unstable commit 13669683 (rhbz 861349)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-142.el5_9.1
changelog:
  - libxc: move error checking next to the function which returned the error (rhbz 876997)
  - libxc: builder: limit maximum size of   kernel/ramdisk (rhbz 876997)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-142.el5_9.2
changelog:
  - e1000: discard packets that are too long if !SBP and !LPE (rhbz 910843)
  - e1000: discard oversized packets based on SBP|LPE (rhbz 910843)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-142.el55_9.3
changelog:
  - xm: Fix vcpu-pin complain for CPU number out of range (rhbz 960013)
  - libxc: Support set affinity for more than 64 CPUS (rhbz 960013)
  - libxc: Fixes for "support affinity for more than 64 CPUS" (rhbz 960013)
  - xend: Fix bug of a cpu affinity vcpu-pin under ia32pa (rhbz 960013)
  - libxc: Fix cpu number overflow for vcpu-pin (rhbz 960013)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-143.el5
changelog:
  - libxc: move error checking next to the function which returned the error (rhbz 870413)
  - libxc: builder: limit maximum size of   kernel/ramdisk (rhbz 870413)
  - e1000: discard packets that are too long if !SBP and !LPE (rhbz 910844)
  - e1000: discard oversized packets based on SBP|LPE (rhbz 910844)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-144.el5
changelog:
  - xm: Fix vcpu-pin complain for CPU number out of range (rhbz 955656)
  - libxc: Support set affinity for more than 64 CPUS (rhbz 955656)
  - libxc: Fixes for "support affinity for more than 64 CPUS" (rhbz 955656)
  - xend: Fix bug of a cpu affinity vcpu-pin under ia32pa (rhbz 955656)
  - libxc: Fix cpu number overflow for vcpu-pin (rhbz 955656)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-146.el5
changelog:
  - xen-fdc-force-the-fifo-access-to-be-in-bounds-of-the-all.patch
  - xen-FDC-Fix-buffer-overflow-Herv-Poussineau.patch
  - Resolves: bz#1219333
   (xen: qemu: floppy disk controller flaw [rhel-5.11.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-147.el5
changelog:
  - net: add checks to validate ring buffer pointers 
  - Resolves: bz#1263273
    (xen: qemu: Heap overflow vulnerability in ne2000_receive() function)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-148.el5_11
changelog:
  - xen-qemu-ioport-array-overflow.patch [bz#1401521]
  - Resolves: bz#1401521
    (CVE-2016-9637 xsa199 xen: qemu ioport array overflow (XSA-199) [rhel-5.11.z])


author: Chris Lalancette <clalance@redhat.com> - 3.0.3-25.0.4.el5
changelog:
  - QEmu cirrus bitblit bounds check - CVE-2007-1320 (rhbz #296271)
  - QEmu NE2000 overflow check - CVE-2007-1321 (rhbz #296271)
  - Pygrub guest escape - CVE-2007-4993 (rhbz #302821)


author: Chris Lalancette <clalance@redhat.com> - 3.0.3-41.el5
changelog:
  - QEmu NE2000 overflow check - CVE-2007-1321 (rhbz #296281)
  - Pygrub guest escape - CVE-2007-4993 (rhbz #302831)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-41.el5_1.3
changelog:
  - Fix QEMU buffer overflow CVE-2007-5730 (rhbz #360381)
  - Fix QEMU block device extents checking CVE-2008-0928 (rhbz #433560)


author: Markus Armbruster <armbru@redhat.com> - 3.0.3-41.el5_1.4
changelog:
  - Fix PVFB to validate frame buffer description (rhbz #443376)
  - Fix PVFB to cope with bogus update requests (rhbz #368931)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-54.el5
changelog:
  - Fix pygrub unaligned access (rhbz #259541)
  - Add timestamp to console and hypervisor log files (rhbz #271181)


author: Markus Armbruster <armbru@redhat.com> - 3.0.3-63.el5
changelog:
  - Fix PVFB to validate frame buffer description (rhbz #443377)
  - Fix PVFB to cope with bogus update requests (rhbz #443392)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-64.el5_2.1
changelog:
  - Remove blktap sharing patch which prevents guests with large
    numbers of disks booting (rhbz #445789)


author: Markus Armbruster <armbru@redhat.com> - 3.0.3-64.el5_2.2
changelog:
  - Correctly limit PVFB size CVE-2008-1952 (rhbz #447760)
  - Disable QEMU USB disk image format auto-detection CVE-2008-1945 (rhbz #445845)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-64.el5_2.9
changelog:
  - More fixes for Xenstore unsafe data access (CVE-2008-4405, rhbz #464817)
  - Fix block-detach regression due to (CVE-2008-4405, rhbz #473882)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-78.el5
changelog:
  - Alternative network-bridge scripts without netloop for using with
    bonding (rhbz #453463, rhbz #429154)
  - Fix xm block-detach operation (rhbz #473882)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-80.el5_3.1
changelog:
  - Fix data corruption with virtual SCSI disks >1TB (rhbz #486919)
  - Fix SCSI problems on fullvirt guests with >4GB RAM (rhbz #484336)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-92.el5
changelog:
  - Fix Python traceback when pygrub tries to log a message (rhbz 490754)
  - Relax PCI device assignment rules for PV guests (rhbz 508310)
  - Don't list assigned PCI devices as assignable (rhbz 510682)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-94.el5_4.1
changelog:
  - Fix race condition on domain reboot (rhbz 525143)
  - Avoid multiple restarts of a domain (rhbz 525141)
  - Add grub.conf password protection support to pygrub (rhbz 525142)
  - Ignore unimplemented PHYSDEVOP_map_pirq (rhbz 525149)


author: Stepan Kasal <skasal@redhat.com> 3.2.4-21.3.el5
changelog:
  - apply xfig-3.2.5-urwfonts.patch
  - Resolves: #426297
  - use %{?dist}, not %{dist}
  - Resolves: #440620


author: Johnny Hughes <johnny@centos.org> 2.2.46-1
changelog:
  - upgraded to upstream version 2.2.46
  - added e2fsprogs-devel and ncurses-devel as build requirements.


author: Vojtech Vitek <vvitek@redhat.com> - 2:2.3.14-11
changelog:
  - Fix return values of xinetd.init script (LSBC Specification 3.2)
    Resolves: #498119
  - Avoid possible hang while logging an unexpected signal
    Resolves: #501604
  - Move documentation of xinetd.log to the right man section
    Resolves: #428811
  - Fix crash when application's logfile hit size limit
    Resolves: #438986
  - Let RPC services bind to a specific port
    Resolves: #624800


author: Vojtech Vitek <vvitek@redhat.com> - 2:2.3.14-13
changelog:
  - Fix rpmlint errors: Prereq tag substituted with Requires tag,
    removed config mark from /etc/rc.d/init.d/xinetd executable


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 2:2.3.14-14
changelog:
  - Add poll.patch - replace select() by poll() (#639447)
  - Change License field to xinetd
  - Change order of patches, rename contextmerge.patch to contextconf.patch
    (and adapt) for fedora/RHEL-6 patches compatibility


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 2:2.3.14-16
changelog:
  - Add additional missing patch to fix log message flooding (#754444)
  - Add additional missing patch to fix no_files limit (#639447)


author: Jan Synáček <jsynacek@redhat.com> -2:2.3.14-18
changelog:
  - Fix leaking file descriptors (#852274)
  - Fix: Service disabled due to bind failure (#811000)
  - CVE-2012-0862 xinetd: enables unintentional services over tcpmux port (#788795)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 1.16-24-1206.1840.2
changelog:
  - backported GSSAPI delegation from upstream version 1.27.04 with strong attention
    to libxmlrpc++ client ABI backward compatibility (#723645)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 1.16.24-1206.1840.4
changelog:
  - Add Requires to subpackages dependent on particular curl version that
    provides the GSSAPI delegation API (#756704, #723645)


author: Rob Crittenden <rcritten@redhat.com> - 1.16.24-1204.1840
changelog:
  - Added version-specific Requires on the subpackages. This should prevent
    mixing and matching between versions. (#582721)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 1.16.24-1206.1840.el5_7.2
changelog:
  - added Requires libcurl to the client/apps packages (.so libraries needed)
  - specified BuildRequires curl-devel version for CURLOPT_GSSAPI_DELEGATION option


author: Daniel Veillard <veillard@redhat.com> - 1.2.9-8.1.2
changelog:
  - disable xslt i/o support in library, tools and examples, CVE-2011-1425
  - Resolves: rhbz#694124
  - limit the paths used for searching the security library loaded dynamically


author: Kristian Høgsberg <krh@redhat.com> - 6.6.3-3.11.el5
changelog:
  - Add radeon-6.6.3-disable-altix-dri.patch to disable DRI on SGI Altix
    systems and disable blank-on-init patch entirely (#211530).


author: Dave Airlie <airlied@redhat.com> 6.6.3-3.12.el5
changelog:
  - Revert radeon-6.6.3-indirect-cursor-regs.patch (#251159)
    it didn't help the customer and we are paranoid.
  - make radeon_tp compile against latest X server header files.


author: Dave Airlie <airlied@redhat.com> 6.6.3-3.20.el5
changelog:
  - r500-lvds-dpms.patch: fix lvds dpms (#469089)
  - r500-hdmi-vga-fix.patch: fix shared DDC lines (#466987)
  - radeon-6.6.3-altix-xaa-no-offscreen-pixmaps.patch (#448139, #468015)


author: Dave Airlie <airlied@redhat.com> 6.6.3-3.21.el5
changelog:
  - r500-hdmi-dac.patch: fix HDMI reporting a DAC (#466987)
  - radeon-6.6.3-disable-firemv-dac-load-detect.patch (#448139)


author: Adam Jackson <ajax@redhat.com> 6.6.3-3.26.el5
changelog:
  - Rebuild for new RANDR source (#481067)
  - r500-disable-rotation.patch: Disable reflection and rotation, not expected
    to work and not enabled in the other RANDR drivers.


author: Adam Jackson <ajax@redhat.com> 1.6.5-9.24
changelog:
  - Rebuild for new X server RANDR source.
  - intel-2.2.1-g40-setup-fixes.patch: Various VT switch fixes. (#470450)
  - intel-2.2.1-lvds-modes.patch: Add default modes to LVDS outputs if there's
    no EDID or if it claims to not be continuous-freq.


author: Adam Jackson <ajax@redhat.com> 1.6.5-9.25
changelog:
  - intel-1.6.5-warn-9xx.patch, intel-2.2.1-warn-8xx.patch: Warn about
    unsupported configurations. (#479067)


author: Adam Jackson <ajax@redhat.com> 1.6.5-9.35
changelog:
  - intel-2.2.1-ironlake-fixes.patch: Fix Ironlake LVDS setup and FDI training,
    disable output scanning, and other small fixes. (#559116)


author: Dave Airlie <airlied@redhat.com> 1.6.5-9.6.0.3
changelog:
  - intel-redetect-on-acpi.patch - add support for ACPI on thinkpad
  - just redetect the outputs (#249290)


author: Adam Jackson <ajax@redhat.com> 1.4.10-4
changelog:
  - mga-1.4.10-g200se-24-not-32.patch: Prefer 24bpp on G200SE-A due to
    scarce memory bandwidth. (#508039)


author: Adam Jackson <ajax@redhat.com> 1.4.10-5
changelog:
  - what-the-revert-meant-to-do.patch: Fix up pitch misestimation when better
    modes are filtered away due to hardware limitations. (#508039)


author: Adam Jackson <ajax@redhat.com> 1.4.13-5
changelog:
  - mga-1.4.13-g200se-12x7-bug.patch: Fix (wrong) selection of 1280x768 on
    G200SE when no monitor connected (#735713)


author: Adam Jackson <ajax@redhat.com> 1.4.2-8
changelog:
  - mga-1.4.2-g200-ev-wb.patch: Add support for G200EV and G200WB, and fix
    DDC on all G200[A-Z][A-Z] parts. (#445497)


author: Adam Jackson <ajax@redhat.com> 1.4.2-10
changelog:
  - mga-1.4.2-g200-ev-wb.patch: Even more PLL tweaking for G200SE, only seems to
    be stable when P is a power of two. (#474168)


author: Adam Jackson <ajax@redhat.com> 1.4.2-4.el5
changelog:
  - mga-1.4.2-g200se-default-mode.patch: Fix defaults for G200SE to fit
    1024x768x16 @ 60Hz. (#215949)


author: Adam Jackson <ajax@redhat.com> 1.4.2-5.el5
changelog:
  - mga-1.4.2-unbreak-dri.patch: Fix a boolean logic error from the G200SE
    merge that broke DRI on, well, everything else. (#217579)


author: Adam Jackson <ajax@redhat.com> 1.4.2-6
changelog:
  - mga-1.4.2-g200se-default-mode.patch: Tweak for G200SE to use the settings
    from the default Display subsection in xorg.conf, so that changes from
    s-c-d will make their way into the driver. (#228705)


author: Kristian Høgsberg <krh@redhat.com> - 1.1.0-3
changelog:
  - Add ptr-feedback-class.patch to add a pointer control callback so
    the driver doesn't crash when the device control callback is
    invoked.  Fix for (#441327).


author: Adam Jackson <ajax@redhat.com> 2.1.12-1
changelog:
  - Update to nv 2.1.12 for new ASIC support and TMDS initialization fixes.
    (#449162)
  - nv.xinf: New PCI IDs for same.


author: Adam Jackson <ajax@redhat.com> 2.1.12-2
changelog:
  - nv-2.1.8-g80-no-doublescan.patch: Don't try doublescan modes on G80, too
    many monitors get confused. (#466347)
  - Update the compat patches to report the driver version correctly.


author: Ben Skeggs <bskeggs@redhat.com> 2.1.12-4
changelog:
  - nv-2.1.12-acpi-rescan.patch: Rescan outputs on receipt of ACPI event, to
    handle hotkey switching (#435285)


author: Ben Skeggs <bskeggs@redhat.com> 2.1.12-5
changelog:
  - nv-2.1.12-hotkey-option.patch: add xorg.conf option to respond to hotkey
    events for GPUs not on the whitelist.


author: Ben Skeggs <bskeggs@redhat.com> 2.1.15-1
changelog:
  - Update to nv 2.1.15 for new chipset support
  - nv.xinf: New PCI IDs for additional chipsets now supported
  - nv-1.1.1-nv34-tweaks.patch: drop, already in upstream release
  - nv-2.1.2-aweful-compat-hack.patch: add more compat fixes


author: Ben Skeggs <bskeggs@redhat.com> 2.1.15-3
changelog:
  - nv.xinf: partially revert previous new chipset support, default to vesa
    on certain configurations that may be problematic due to lack of DP
    support (#514999).


author: Adam Jackson <ajackson@redhat.com> 1.2.0-4.fc6
changelog:
  - nv-1.2.0-panel-range-hack: If we detect a panel, but don't get DDC, adjust
    the monitor's sync ranges to accomodate a 60Hz mode at the panel's
    native resolution.


author: Adam Jackson <ajax@redhat.com> 2.0.2-1
changelog:
  - Update to 2.0.2, plus additional hardware-enable bits from 2.0.96.
    Adds G8x-series support. (#237121)
  - nv-2.0.2-misc-backports.patch: Backport some low-risk fixes from git,
    including new PCI IDs and a fix for colormap corruption on <G80.
  - nv.xinf: New PCI IDs.


author: Hans de Goede <hdegoede@redhat.com> 0.0.12-2
changelog:
  - Fix crash and vga font corruption when switching vc
    Resolves: rhbz#585141
  - Add support for many more resolutions and enable resolutions > 1024x768
    without requiring an xorg.conf
    Resolves: rhbz#581841


author: Soren Sandmann <ssp@redhat.com> 0.0.3-1.3
changelog:
  - Add pci-id.patch to track change of vendor id from Qumranet to Red
    Hat. Bug 507884 and likely 504901.


author: Adam Jackson <ajax@redhat.com> 1.3.0-8.2
changelog:
  - vesa-1.3.0-vbe-dpms.patch: Use VBE's DPMS method, instead of manual VGA
    register writes, so that laptop backlights turn off too. (#494671)


author: Adam Jackson <ajax@redhat.com> 1.3.0-8.3
changelog:
  - vesa-1.3.1-*.patch: Backport various fixes from upstream, and allow mismatch
    between 136[0-8]x768 modes. (#614960)
  - Bump xserver requires to a version that includes VBE PanelID.


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.100
changelog:
  - xserver-1.1.1-more-regen-leaks.patch: Cope with root cursor refcounting
    being differently broken in different DDXes. (#498357)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.101.3
changelog:
  - xserver-1.1.1-randr-config-timestamps.patch: Backport timestamp comparison
    fix from upstream RANDR code (#1006076)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.107
changelog:
  - CVE-2014-8091 denial of service due to unchecked malloc in client
    authentication (#1168680)
  - CVE-2014-8092 integer overflow in X11 core protocol requests when
    calculating memory needs for requests (#1168684)
  - CVE-2014-8097 out of bounds access due to not validating length or offset
    values in DBE extension (#1168705)
  - CVE-2014-8095 out of bounds access due to not validating length or offset
    values in XInput extension (#1168694)
  - CVE-2014-8096 out of bounds access due to not validating length or offset
    values in XC-MISC extension(#1168700)
  - CVE-2014-8099 out of bounds access due to not validating length or offset
    values in XVideo extension (#1168710)
  - CVE-2014-8100 out of bounds access due to not validating length or offset
    values in Render extension (#1168711)
  - CVE-2014-8102 out of bounds access due to not validating length or offset
    values in XFixes extension (#1168714)
  - CVE-2014-8101 out of bounds access due to not validating length or offset
    values in RandR extension (#1168713)
  - CVE-2014-8093 xorg-x11-server: integer overflow in GLX extension requests
    when calculating memory needs for requests (#1168688)
  - CVE-2014-8098 xorg-x11-server: out of bounds access due to not validating
    length or offset values in GLX extension (#1168707)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.25
changelog:
  - xserver-1.1.1-acpi-tokenising-fix.patch: Also expose the builderstring
    as an exported server symbol so external drivers can notice the bugfix.
    (#246175)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.26
changelog:
  - xserver-1.1.1-mmap-{expansion,failure}: Revert, required kernel changes
    not included in 5.1. (#233981)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.26.4
changelog:
  - cve-2007-5760.patch: XFree86-Misc Extension Invalid Array Index Vulnerability
  - cve-2007-5958.patch: Xorg / XFree86 file existence disclosure vulnerability
  - cve-2007-6427.patch: XInput Extension Memory Corruption Vulnerability
  - cve-2007-6428.patch: TOG-CUP Extension Memory Corruption Vulnerability
  - cve-2007-6429.patch: EVI and MIT-SHM Extension Integer Overflow Vulnerability


author: Dave Airlie <airlied@redhat.com> - 1.1.1-48.36
changelog:
  - cve-2007-3920.patch: gnome-screensaver loses keyboard grab when running under compiz (#357111)
  - cve-2007-6429.patch: Update patch to final upstream solution (#431191)


author: Dave Airlie <airlied@redhat.com> - 1.1.1-48.37
changelog:
  - xserver-1.1.1-ia64-old-kernel-warning.patch - warn about older MCA causing
    kernels on IA64 (#432796)


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.41.1
changelog:
  - cve-2008-1377.patch: Record and Security Extension Input validation
  - cve-2008-1379.patch: MIT-SHM extension Input Validation flaw
  - cve-2008-2360.patch: Render AllocateGlyph extension Integer overflows
  - cve-2008-2361.patch: Render CreateCursor extension Integer overflows
  - cve-2008-2362.patch: Render Gradient extension Integer overflows


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.52
changelog:
  - randr-source-compat.patch - backport fixes from upstream (#466987)
  - xserver-1.1.1-fb24-32-fix.patch + xserver-1.1.1-ia64-memops.patch:
  - Altix fixes to make nautilus + s-c-d work. (#468015)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.73
changelog:
  - randr-disabled-fb.patch: Drop. (#496108)
  - xserver-1.1.1-no-randr-while-off-vt.patch: Just refuse RANDR changes while
    VT switched away, rather than try to fake them (#496108)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.76.1
changelog:
  - xserver-1.1.1-mod-macro-parens.patch: Fix insufficient parentheses in
    Render and arc computation code. (#495733)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.76.5
changelog:
  - cve-2011-4818.patch: Multiple input sanitization flaws in Render and GLX
  - xorg-x11-server-1.1.0-mesa-copy-sub-buffer.patch: Likewise.


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.87
changelog:
  - xserver-1.1.1-fbdev-iterate-modes.patch: fix fbdev driver not iterating
    across all modes of a certain dimension (#740497)


author: Mike A. Harris <mharris@redhat.com> 7.1-3.fc6
changelog:
  - Remove app-defaults dir from file manifest, as it is owned by libXt (#174021)
  - Add 'dist' tag to package release string.


author: Mike A. Harris <mharris@redhat.com> 1:1.0.5-5.fc6
changelog:
  - Added xdm-1.0.5-sessreg-utmp-fix-bug177890.patch to restore GiveConsole to
    what we shipped in 6.8.2, and also fix bug (#177890)


author: Mike A. Harris <mharris@redhat.com> 1:1.0.2-3
changelog:
  - Added xfs documentation to doc macro.
  - Use "make install" instead of makeinstall macro.
  - Clean up source file URLs.


author: Kristian Høgsberg <krh@redhat.com> - 1:1.0.2-4
changelog:
  - Fix root priv elevation bug (242903).  Just don't delete the
    directory and make sure when we create the directory, that we set
    the mode using mkdir -m.


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1:5.03-1.10
changelog:
  - Fix the maximum value on demo configuration dialog
  - Change the encoding of XScreenSaver.ad and man files (bug 319101)


author: Mamoru Tasaka <mtasaka@fedoraproject.org> - 1:5.15-3
changelog:
  - Make vidwhacker work correctly when xscreensaver-getimage-file
    returns relative path (bug 746847)


author: Martin Stransky <stransky@redhat.com> 1.9-0.beta2.10
changelog:
  - updated to latest trunk (2008-01-30)
  - removed unnecessary patches
  - fixed broken symlinks in gecko-devel
  - disabled system jpeg library


author: Jindrich Novy <jnovy@redhat.com> 4.999.9-0.2.20091007.beta
changelog:
  - include XZ in RHEL5 (#519122)
  - repack tarball to bz2, RHEL5 doesn't know anything about XZ yet
  Resolves: #519122


author: Honza Horak <hhorak@redhat.com> - 2.9-2
changelog:
  - hash algorithm is chosen according environment variable
  - old password is not checked when passwd.adjunct is used
    Resolves: #682037


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 3:1.19-9
changelog:
  - Fix ypbind init script does not write error message when
    DOMAINNAME cannot be set
    Resolves: #249520


author: Honza Horak <hhorak@redhat.com> - 3:1.19-12.el5_6.1
changelog:
  - Set fastest server check interval back to 15 min - removed chunk from 
    log-binds.patch
    Resolves: #714028


author: Honza Horak <hhorak@redhat.com> - 2.19-9
changelog:
  - used ferror() to indicate a real error
    Resolves: #695754
  - Report error when temporary passwd or shadow files cannot
    be renamed to regular names in rpc.yppasswdd
    Resolves: #747317


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.19-4
changelog:
  - Fix too high ypserv verbosity
    Resolves: #220624
  - Fix stripped binaries in debuginfo
    Resolves: #428003


author: Honza Horak <hhorak@redhat.com> - 2.19-5.el5_6.1
changelog:
  - Fix strcat to uninitialized memory - it led to garbage before 
    login while changing password remotely
    Resolves: #688237


author: Honza Horak <hhorak@redhat.com> - 2.19-7
changelog:
  - Added passwd.adjunct support in yppasswdd to recognize
    password format correctly when changing password using yppasswd
    Resolves: #679848
  - Added patch removing invalid ypdb_close call
    Resolves: #403621
  - Don't replace /var/yp/Makefile
    Resolves: #481780
  - Added COPYING file to the package
    Resolves: #707195
  - Add references for some variables YPSERV_ARGS, YPXFRD_ARGS 
    and YPPASSWDD_ARGS in documentation
    Resolves: #699662
  - Use quotations in rpc.yppasswd error messages
    Resolves: #695754
  - Add reference for how to specify options for yppush
    Resolves: #712239
  - hide passwords in syslog when using external script
    to update user's data using yppasswdd
    Resolves: #743587


author: James Antill <james.antill@redhat.com> - 1.1.2-3
changelog:
  - Turn off updates for XML to .sqlite conversion.
  - Resolves: rhbz#491916
  - Resolves: 490516
  - Resolves: 494006


author: Ivana Hutarova Varekova <varekova@redhat.com> 1.2.3-4
changelog:
  - Resolves: #678352
    /lib/libcrypto needs /usr/lib/libz
  - Resolves: #622779
    zlib has fence-post error in adler32_combine


author: James Antill <jantill@redhat.com> - 4.2.6-3
changelog:
  - Fix reused pids bug
  - Resolves: rhbz#465455
  - Fix comments in $() edge case syntax parsing error
  - Resolves: rhbz#484348


author: James Antill <jantill@redhat.com> - 4.2.6-6
changelog:
  - Queue signals before fork.
  - Resolves: rhbz#733582
  - Fix deadlock for terminated suspended jobs.
  - Resolves: rhbz#706029
  - Allow greater than 3 commands to use a completion service.
  - Resolves: rhbz#700722


author: James Antill <jantill@redhat.com> - 4.2.6-7
changelog:
  - Parser error attempts to execute assignment expressions.
  - Resolves: rhbz#758681
  - Subversion completion broken.
  - Resolves: rhbz#788050


