# changelog

author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-32
changelog:
  - New SSLOptions directive to enable SSL3 and/or RC4, which are now
    disabled by default (bug #1161218).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-31
changelog:
  - Applied patch to fix CVE-2012-5519 (privilege escalation for users
    in SystemGroup or with equivalent polkit permission).  This prevents
    HTTP PUT requests with paths under /admin/conf/ other than that for
    cupsd.conf, and also prevents such requests altering certain
    configuration directives such as PageLog and FileDevice (bug #875898).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.3.7-29
changelog:
  - The imageto* filters could crash with bad GIF files
    (CVE-2011-2896, STR #3867, STR #3914, bug #752118).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.3.7-28
changelog:
  - Web interface didn't show completed jobs for printer (STR #3436, bug #625900)
  - Serial backend didn't allow a raw job to be canceled (STR #3649, bug #625955)
  - Fixed condition in textonly filter to create temporary file
    regardless of the number of copies specified. (bug #660518)


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-25
changelog:
  - Applied patch to fix cupsd memory corruption vulnerability
    (CVE-2010-2941, STR #3648, bug #624438).
  - Fix latent privilege escalation vulnerability (CVE-2010-2431,
    STR #3510, bug #605397).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-24
changelog:
  - Try to avoid overwriting text with page labels (STR #3415,
    bug #527187).
  - Reverted patch for bug #572338 as that and related bugs need a
    solution that can guarantee no regressions.


author: Jiri Popelka <jpopelka@redhat.com>
changelog:
  - Applied patch to avoid endless loop in
    socket backend process (bug #605584, STR #3001).
  - Applied patch to avoid infinite loop in
    mailto notifier (bug #608392, STR #3609).
  - Fixed typo in undo-str2537 patch (bug #608016).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-22
changelog:
  - Applied patch for CVE-2010-1748 (web interface memory disclosure,
    STR #3577, bug #591983).
  - Applied patch for CVE-2010-0542 (texttops unchecked memory
    allocation failure leading to NULL pointer dereference, STR #3516,
    bug #587746).
  - Applied patch for CVE-2010-0540 (CUPS administrator web interface
    CSRF, STR #3498, bug #588805).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-21
changelog:
  - Adjust texttops output to be in natural orientation (STR #3563).
    This fixes page-label orientation when texttops is used in the
    filter chain (bug #572338).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-16
changelog:
  - Applied patch to prevent memory leak when adding/modifying printers
    (bug #540646, STR #2836).
  - Applied patch to fix CVE-2009-3553 (bug #530111, STR #3200).
  - Applied patch to fix CVE-2009-2820 (bug #529833, STR #3367, STR #3401).


author: Jiri Popelka <jpopelka@redhat.com>
changelog:
  - Fixed lspp.patch to avoid memory leak (bug #496008).
  - Applied patches to enable changing of quotas
    with lpadmin (bug #496082, STR #3077, STR #3078).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Use poppler pdftops wrapper filter from upstream (bug #527429).  No
    longer need ext, includeifexists, strict-aliasing,
    CVE-2009-0146,0147,0166, cert-batch3892,4781,5486,19856,19869, or
    CVE-2009-3608,3609 patches.
  - Also fixes rotation of landscape documents when printed from OS X
    (bug #447987).


author: Jiri Popelka <jpopelka@redhat.com>
changelog:
  - Applied patch to prevent removing of multiple file job when
    the printer is disabled and enabled again (bug #506257, STR #3226).
  - Applied patch to fix issues with CGI handling (bug #497632, STR #2781, STR #2816).
  - Applied patch to fix incorrect CGI handling (bug #460898, STR #3194)
    and use php-cgi instead of php when running PHP scripts (bug #460898, STR #2923).


author: Jiri Popelka <jpopelka@redhat.com>
changelog:
  - Requires tmpwatch for the cron.daily script (bug #487495).
  - Applied patch to fix POSTing to custom cgi (bug #506316, STR #3221).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-13
changelog:
  - Include NULL pointer check in ObjectStream::getObject.  Part of the
    fix for CVE-2009-3608 (bug #526637).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-10
changelog:
  - Reverted php-cgi change due to incorrectly handling of CGI output
    that is not line-based (STR #3194, bug #460898).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-9
changelog:
  - Include printer-uri IPP attribute in IPP-Get-Jobs requests in order
    to be able to operate correctly with newer versions of CUPS
    (bug #497529, STR #2996, STR #3107, STR #3117).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Applied additional patches for batch3892.pdf, batch4781.pdf,
    batch5486.pdf, batch19856.pdf, batch19869.pdf testing files from
    CERT (bug #491864).
  - Applied patches to fix CVE-2009-0163 (bug #490596),
    CVE-2009-0146 (bug #490612), CVE-2009-0147 (bug #490614),
    and CVE-2009-0166 (bug #490625).
  - Fixed SendFF option in textonly filter (bug #491190).
  - Requires krb5 library that contains correct krb5_cc_new_unique()
    function (bug #489714).
  - MIME type detection fixes (bug #479635): always set document-name in
    client library (STR #3055) and fixed handle of "or" rules (STR #3059).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Don't verify MD5 sum, file size, or mtime for several config files:
    cupsd.conf, client.conf, classes.conf, printers.conf, pdftops.conf,
    snmp.conf (bug #487161).
  - Fixed cupsGetNamedDest() behaviour when lpoptions file specifies a
    non-existent default printer (bug #481481, STR #3082).
  - Fixed admin URLs in CUPS web interface (bug #479809, STR #3022).
  - Fixed mailto notifier (bug #474920, STR #3011).
  - Fixed option encoding for "compression" (bug #474814, STR #2997).
  - Marked templates and translated templates as configuration files
    (bug #474769).
  - Fixed a busy-loop in the scheduler that could occur when a
    connection is closed (bug #474323).
  - Use php-cgi instead of php when running PHP scripts (bug #460898).
  - Applied patch from upstream to fix handling of "Satisfy Any" in
    cupsd.conf (bug #481303).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-8
changelog:
  - Applied patch to fix STR #2974 (bug #473905, CVE-2008-5286,
    CVE-2008-1722).
  - Applied patch to fix STR #2774 (bug #473915, CVE-2008-5184).
  - Applied patch to fix RSS subscription limiting (bug #473901,
    CVE-2008-5183).
  - Run the serial backend as root (bug #216658).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-6
changelog:
  - Applied patch to fix CVE-2008-3639 (STR #2918, bug #464722).
  - Applied patch to fix CVE-2008-3640 (STR #2919, bug #464722).
  - Applied patch to fix CVE-2008-3641 (STR #2911, bug #464722).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-2
changelog:
  - Preserve default BrowseAllow value as @LOCAL so as to avoid
    unexpected configuration file changes.


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-1
changelog:
  - Preserve _cupsAdminGetServerSettings and _cupsAdminSetServerSettings
    function declarations in adminutil.h, and ship i18n.h as in 1.2.x.
  - Preserve 'do not use' comment in http_t struct definition.
  - Applied upstream patch to fix https stalls when using Firefox 3
    (bug #453610, STR #2892).
  - Compile pdftops/GlobalParams.cxx with -fno-strict-aliasing (bug #447868).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Require exactly matching libs package (bug #447867).
  - Fixed cancel man page (bug #434967).
  - Fixed permissions of classes.conf in file manifest to match those
    set in cupsd (bug #245748).
  - Fixed log file permissions (bug #218761).
  - Backported cupsGetNamedDest() support for faster look-ups when the
    destination is known, such as in 'lp -d ...' (bug #428086).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Re-based to 1.3.7.  Fixes bug #241406 (STR #2400),
    bug #249570 (STR #2228), bug #250383 (STR #2084, STR #2198),
    bug #409121, bug #430067 (STR #1969, STR #2386), bug #430076
    (STR #1985), bug #430648 (STR #2319), bug #432001,
    bug #433087 (STR #2319), bug #441439 (STR #2699), bug #441811,
    bug #446023 (STR #1261), bug #447548 (STR #2179), bug #451101,
    bug #453396.
  - No longer need initscript, locale, relro, directed-broadcast,
    str2061, str2056, str2055, get_jobs, af_unix-auth, str2264,
    if-modified-since, str2266, str2023, str2117, str2351,
    CVE-2007-0720, CVE-2007-3387, CVE-2007-4351,
    CVE-2007-4352,5492,5393, CVE-2007-4045, docinfo-crash, str2656,
    CVE-2008-0047, CVE-2008-0053, CVE-2008-1373 or CVE-2008-1722
    patches.
  - Build now requires krb5-devel and avahi-compat-libdns_sd-devel.
  - The devel sub-package now requires krb5-devel.
  - Don't run autoconf; only lspp patch required it, and
    autoconf-generated changes have now been folded into that patch.
  - Don't aclocal even when we modify m4 files -- CUPS does not use
    automake (bug #250251).
  - Don't overwrite upstream snmp.conf file.
  - Move _http_s structure into public header file to prevent build
    failures in other packages.  Ship md5.h for this as well.
  - Revert STR #2537 so that non-UTF-8 clients continue to be accepted.
  - Don't strip foomatic recommended strings from make/model names.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.18
changelog:
  - Applied patch to fix CVE-2008-0053 (HP-GL/2 input processing, bug #438117).
  - Applied patch to fix CVE-2008-1373 (GIF overflow, bug #438303).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.17
changelog:
  - Applied patch to prevent heap-based buffer overflow in CUPS helper
    program (bug #436153, CVE-2008-0047, STR #2729).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.16
changelog:
  - Prevent double-free when a browsed class has the same name as a printer
    or vice versa (bug #433767, STR #2656).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.15
changelog:
  - Fixed LSPP patch so that strings allocated with cupsdSetString() are always
    clear correctly (bug #258221).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Applied patch to fix CVE-2007-4045 (bug #356581).
  - Applied patch to fix CVE-2007-4352, CVE-2007-5392 and
    CVE-2007-5393 (bug #356581).
  - Applied patch to fix CVE-2007-4351 (STR #2561, bug #353991).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.9
changelog:
  - Fixed IPv6 address parsing (bug #241400, STR #2117).
  - Fixed a bug that caused cups-lpd not to set the correct value for
    job-originating-host-name (bug #240223, STR #2023).
  - Cleaned up initscript error handling (bug #237953).
  - Fixed cups-lpd -odocument-format=... option (bug #230073, STR #2266).
  - Fixed If-Modified-Since: handling in libcups (bug #218764, STR #2133).
  - Make the initscript use start priority 56 (bug #213828).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.8
changelog:
  - Applied fix for STR #2264 (bug #230118).
  - Added patch for UNIX domain sockets authentication (bug #230613).
  - LSPP: Updated patch for line-wrapped labels (bug #228107).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.7
changelog:
  - Don't reload CUPS after rotating the logs with logrotate, but make sure
    to use the new file in that case (bug #215024).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.6
changelog:
  - LSPP: added check_context() function for get_jobs(), get_job_attrs() and
    validate_user() (bug #229673).
  - Fixed a potential scheduler crash (bug #231522).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.2
changelog:
  - Run the serial backend as root (bug #216658).
  - Fixed LSPP SELinux check (bug #216856).
  - LSPP fix: process URI before logging it (bug #216673).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.1
changelog:
  - Reload, don't restart, when logrotating (bug #215024).
  - Fixed pdftops.conf (bug #214612).
  - LSPP patch fix (bug #213501).
  - Added filter and PPD for text-only printer (bug #213034).
  - Fixed parallel backend (bug #213023, STR #2056).
  - Added support for /dev/ttyUSB devices (bug #212580, STR #2061).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-9
changelog:
  - adminutil.c: when writing 'BrowseAllow @LOCAL', add a comment about what
    to change it to when using directed broadcasts from another subnet
    (bug #204373).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-8
changelog:
  - LSPP patch didn't get updated properly in 1:1.2.4-6.  Use the right
    patch this time (bug #208676).  LSPP re-enabled.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.2-10
changelog:
  - Remove 'Provides: LPRng = 3.8.15-3' (bug #148757).
  - Applied patch to fix STR #1893 (bug #201800).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.2-6
changelog:
  - Use replacement snmp.c from STR #1737 (bug #193093).
  - Re-enable LSPP; doesn't harm browsing after all.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.1-2
changelog:
  - 1.2.1.
  - Another STR #1705 fix (bug #192034).
  - Fixed devel package multilib conflict (bug #192664).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.0-7
changelog:
  - Sync to svn5568.  No longer need rpath patch.
  - Added a 'conflicts:' for kdelibs to prevent bug #192548.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.0-4
changelog:
  - Disable back-channel data in the usb backend (STR #1705, bug #192034).
  - Fix for 'browsing stops on reload', STR #1670 (bug #191217).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Sync to svn5538.
  - Added 'restartlog' to initscript, for clearing out error_log.  Useful
    for problem diagnosis.
  - Initscript no longer needs to check for printconf-backend.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Sync to svn5470.
  - No longer need link, CAN-2005-0064, or no-propagate-ipp-port patches.
  - Switch to upstream PIE implementation (every single binary is PIE).
  - Extend relro to all binaries.
  - Better rpath patch.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - No longer need backend, rcp, or ppdsdat patches.
  - Use configure switch for LogFilePerm default instead of patch.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.5.rc3.2
changelog:
  - Patch pdftops to understand 'includeifexists', and use that in the
    pdftops.conf file (bug #189809).


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.8
changelog:
  - No longer need openssl-devel.
  - Build with LDAP_DEPRECATED=1, to pick up declarations of ldap_init() etc.
  - Only warn about ACLs once (STR #1532).
  - Fix imagetops filter (STR #1533).
  - Sync pstops.c with svn 5382.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.1
changelog:
  - Ship a printers.conf file, and a client.conf file.  That way, they get
    their SELinux file contexts set correctly.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.1.b2.6
changelog:
  - Add KDE compatibility symbols _ipp_add_attr/_ipp_free_attr to ipp.h, with
    a comment saying why they shouldn't be used.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.0.svn5102.0
changelog:
  - New svn snapshot.
  - No longer need enabledisable patch.
  - Fixed double-free in scheduler/policy.c (STR #1428).


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.0.svn4964.0
changelog:
  - Use -fPIE not -fpie in PIE patch.
  - Fix link patch.
  - Patch in PIE instead of using --enable-pie, since that doesn't work.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - 1.2 svn snapshot.
  - No longer need doclink, str1023, pdftops, sanity, lpstat, str1068,
    sigchld, gcc34, gcc4, slow, CAN-2004-0888, CAN-2005-2097, finddest,
    str1249, str1284, str1290, str1301, CVE-2005-3625,6,7 patches.
  - Removed autodetect-tag patch.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.23-18
changelog:
  - Raise IPP_MAX_VALUES to 100 (bug #164232).  STR #1284.
  - Made FindDest better behaved in some instances (bug #164232).  STR #1283.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-2
changelog:
  - Fixed cups-lpd file mode (bug #137325).
  - Convert all man pages to UTF-8 (bug #107118).  Patch from Miloslav Trmac.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc2.1
changelog:
  - Make cancel-cups(1) man page point to lp-cups(1) not lp(1) (bug #136973).
  - Use upstream patch for STR #953.
  - 1.1.22rc2.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.7
changelog:
  - Prevent filters generating incorrect PS in locales where "," is the
    decimal separator (bug #136102).  Patch from STR #970.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.21-1.rc2.1
changelog:
  - 1.1.21rc2.
  - No longer need state, reload-timeout or str743 patches.
  - httpnBase64 patch no longer applies; alternate method implemented
    upstream.
  - Fix single byte overread in usersys.c (spotted by Colin Walters).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-9
changelog:
  - Apply patches from CVS (authtype) to fix STR #434, STR #611, and as a
    result STR #719.  This fixes several problems including those noted in
    bug #114999.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-8
changelog:
  - If cupsd fails to start, make it exit with an appropriate code so that
    initlog notifies the user (bug #110135).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fix cups/util.c:get_num_sdests() to use encryption when it is necessary
    or requested (bug #118982).
  - Use upstream patch for the HTTP/1.1 Continue bug (from STR716).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-7
changelog:
  - Fix non-conformance with HTTP/1.1, which caused failures when printing
    to a Xerox Phaser 8200 via IPP (bug #122352).
  - Make lppasswd(1) PIE.
  - Rotate logs within cupsd (instead of relying on logrotate) if we start
    to approach the filesystem file size limit (bug #123003).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-4
changelog:
  - Tracked D-BUS API changes.
  - Updated D-BUS configuration file.
  - Symlinks to avoid conflicting with bash builtins (bug #102490).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-2
changelog:
  - Try harder to find a translated page for the web interface (bug #107619).
  - Added build_as_pie conditional to spec file to facilitate debugging.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-1
changelog:
  - 1.1.20.
  - No longer need idefense, str226 patches.
  - Updated sanity patch.
  - The devel sub-package requires openssl-devel (bug #110772).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Don't ignore the file descriptor when ShutdownClient is called: it
    might get closed before we next try to read it (bug #107787).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-10
changelog:
  - Pass correct attributes-natural-language through even in the absence
    of translations for that language (bug #100984).
  - Show compilation command lines.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-7
changelog:
  - Add some %if %use_dbus / %endif's to make it compile without dbus
    (bug #97397).  Patch from Jos Vos.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-0.rc4.1
changelog:
  - 1.1.19rc4.  Ported initscript, idefense, ppdsdat, dbus patches.
  - No longer need error, sigchld patches.
  - Ship cupstestppd.


author: Havoc Pennington <hp@redhat.com> 1:1.1.18-4
changelog:
  - adjust dbus patch - dbus_bus_get() sends the hello for you, 
    and there were a couple of memleaks
  - buildprereq dbus 0.9
  - rebuild for new dbus
  - hope it works, I'm ssh'd in with no way to test. ;-)


author: Tim Waugh <twaugh@redhat.com> 1.1.18-1
changelog:
  - 1.1.18.
  - No longer need uninit patch.
  - Some parts of the iDefense and pdftops patches seem to have been
    picked up, but not others.


author: Tim Waugh <twaugh@redhat.com> 1.1.17-6
changelog:
  - Add epoch to internal requirements.
  - Make 'condrestart' return success exit code when daemon isn't running.


author: Nalin Dahyabhai <nalin@redhat.com> 1.1.15-14
changelog:
  - Buildrequire pam-devel.
  - Patch default PAM config file to remove directory names from module paths,
    allowing the configuration files to work equally well on multilib systems.
  - Patch default PAM config file to use system-auth, require the file at build-
    time because that's what data/Makefile checks for.


author: Tim Waugh <twaugh@redhat.com> 1.1.15-13
changelog:
  - Use logrotate for log rotation (bug #76791).
  - No longer need cups.desktop, since redhat-config-printer handles it.


author: Tim Waugh <twaugh@redhat.com> 1.1.15-11
changelog:
  - Use %configure for multilib correctness.
  - Use libexec instead of lib for CUPS_SERVERBIN.
  - Ship translated man pages.
  - Remove unshipped files.
  - Fix file list permissions (bug #59021, bug #74738).
  - Fix messy initscript output (bug #65857).
  - Add 'reload' to initscript (bug #76114).


author: Tim Waugh <twaugh@redhat.com> 1.1.15-7
changelog:
  - Really add cups-lpd xinetd file (bug #63919).
  - Ship pstoraster (bug #69573).
  - Prevent fread from trying to read from beyond EOF (fixes a segfault
    with new glibc).


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.15-3
changelog:
  - Add a symlink /usr/share/cups/doc -> /usr/share/doc/cups-devel-1.1.15
    because some applications expect to find the cups docs in
    /usr/share/cups/doc


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.15-1
changelog:
  - 1.1.15-1
  - Fix up smb printing trigger (samba-client, not samba-clients)
  - Start cupsd earlier, apparently it needs to be running before samba
    starts up for smb printing to work.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.14-12
changelog:
  - Support SMB printing (#62407)
  - Add HTML redirections to doc files to work around users mistaking
    /usr/share/doc/cups-1.1.14 for the web frontend (#62405)


author: Bill Nottingham <notting@redhat.com> 1.1.14-7
changelog:
  - lpc man page is alternative too
  - run ldconfig in -libs %post/%postun, not main
  - remove alternatives in %preun


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.13-5
changelog:
  - Move cups-config to cups-devel subpackage
  - Make alternatives usage a %define to simplify builds for earlier
    releases
  - Explicitly provide things we're supplying through alternatives
    to shut up kdeutils dependencies


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.13-1
changelog:
  - 1.1.13
  - Add patch for koi8-{r,u} and iso8859-8 encodings (#59018)
  - Rename init scripts so we can safely "killall cupsd" from there


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 1.1.1 (this has some major bugfixes)
  - Fix a typo in initscript (it's $?, not ?$)
  - Fix /usr/etc vs. /etc trouble, don't insist on /usr/var (YUCK!)
  - Create the spool dir


author: Than Ngo <than@redhat.de>
changelog:
  - update to 1.1 release
  - move back to /etc/rc.d/init.d
  - fix cupsd.init to work with /etc/init.d and /etc/rc.d/init.d
  - split cups


author: Tim Powers <timp@redhat.com>
changelog:
  - started changelog 
  - fixed init.d script location
  - changed script in init.d quite a bit and made more like the rest of our
    startup scripts


author: Matej Muzila <mmuzila@redhat.com> - 5.5.40-1
changelog:
  - Rebase to 5.5.40
    Also fixes: CVE-2014-4274 CVE-2014-4287 CVE-2014-6463 CVE-2014-6464
    CVE-2014-6469 CVE-2014-6484 CVE-2014-6505 CVE-2014-6507 CVE-2014-6520
    CVE-2014-6530 CVE-2014-6551 CVE-2014-6555 CVE-2014-6559 CVE-2014-6564
    Resolves: #1160514


author: Honza Horak <hhorak@redhat.com> - 5.5.37-1
changelog:
  - Update to MySQL 5.5.37, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-37.html
    Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
    CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
    Resolves: #1089203


author: Honza Horak <hhorak@redhat.com> 5.5.36-1
changelog:
  - Update to MySQL 5.5.36, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-36.html
    Including fixes for CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
    CVE-2013-5807, CVE-2014-0420, CVE-2014-0393, CVE-2013-5891,
    CVE-2014-0386, CVE-2013-3839, CVE-2014-0401, CVE-2014-0402,
    CVE-2014-0001
    Resolves: #1055876


author: Honza Horak <hhorak@redhat.com> 5.5.32-2
changelog:
  - Fix text in mysql-readme-devel for RHEL-5
    Resolves: #975119
  - Fix misleading error message when uninstalling built-in plugins
    Resolves: #985402
  - Do not use pie linker flags, they don't work in RHEL-5
    Resolves: #985418


author: Honza Horak <hhorak@redhat.com> 5.5.32-1
changelog:
  - Update to MySQL 5.5.32, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-32.html
    Resolves: #975113
  - Use man pages from 5.5.30 due to license change
    Resolves: #975785
  - Fix issues found by Coverity
    Resolves: #975904


author: Honza Horak <hhorak@redhat.com> 5.5.31-10
changelog:
  - Fix service status for unprivileged user
    Resolves: #975117
  - Add README.mysql-devel to document how -devel package should be used
    Resolves: #975119


author: Honza Horak <hhorak@redhat.com> 5.5.31-4
changelog:
  - Fix reporting of service starting
    Resolves: #958098
  - Include mysqlhotcopy utility and -devel sub-package for building
    daemon plugins


author: Honza Horak <hhorak@redhat.com> 5.5.31-2
changelog:
  - Fix building with relro and PIE
  - Don't use SSL_OP_NO_COMPRESSION since it doesn't exist in openssl-0.9.8


author: Honza Horak <hhorak@redhat.com> 5.5.31-1
changelog:
  - Update to MySQL 5.5.31, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-31.html
  - Turn on hardened build


author: Honza Horak <hhorak@redhat.com> 5.5.30-6
changelog:
  - Spec file fixes found in Package Review #950053
  - Use log file prefixed by scl name and located in /var/log


author: Honza Horak <hhorak@redhat.com> 5.5.30-1
changelog:
  - Update to MySQL 5.5.30, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-30.html


author: Honza Horak <hhorak@redhat.com> 5.5.29-1
changelog:
  - Update to MySQL 5.5.29, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-29.html
  - Fix inaccurate default for socket location in mysqld-wait-ready
  Resolves: #890535


author: Honza Horak <hhorak@redhat.com> 5.5.28-5
changelog:
  - Add patch for CVE-2012-5611
  Resolves: #883642
  - Widen DH key length from 512 to 1024 bits to meet minimum requirements
    of FIPS 140-2
  Related: #877124
  - Use --no-backup-if-mismatch to prevent including backup files


author: Honza Horak <hhorak@redhat.com> 5.5.28-3
changelog:
  - Use a config file for specifying SCLS enabled when starting service
  - Changed way how patches are enhanced with SCL values
  - Fixed scl scripts path replacement
  - Create /var/lib/mysql for socket file
  - Use scl-service wrapper to fix systemd start issues


author: Honza Horak <hhorak@redhat.com> 5.5.28-2
changelog:
  - Re-enable SCLs after /sbin/service clears environment variables
  - Have socket file the same path as core mysql
  - Do not use systemd macros


author: Tom Lane <tgl@redhat.com> 5.5.28-1
changelog:
  - Update to MySQL 5.5.28, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-28.html
  - Clean up partially-created database files when mysql_install_db fails
  Related: #835131
  - Honor user and group settings from service file in mysqld-prepare-db-dir
  Resolves: #840431
  - Export THR_KEY_mysys as a workaround for inadequate threading support
  Resolves: #846602
  - Adopt new systemd macros for server package install/uninstall triggers
  Resolves: #850222
  - Use --no-defaults when invoking mysqladmin to wait for the server to start
  Related: #855704


author: Tom Lane <tgl@redhat.com> 5.5.27-1
changelog:
  - Update to MySQL 5.5.27, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-27.html


author: Tom Lane <tgl@redhat.com> 5.5.25a-1
changelog:
  - Update to MySQL 5.5.25a, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-25a.html
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-25.html
  - Don't use systemd's Restart feature; rely on mysqld_safe instead
  Resolves: #832029


author: Tom Lane <tgl@redhat.com> 5.5.24-1
changelog:
  - Update to MySQL 5.5.24, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-24.html
    including the fix for CVE-2012-2122
  Resolves: #830680
  - Tweak logrotate script to put the right permissions on mysqld.log
  - Minor specfile fixes for recent packaging guidelines changes


author: Tom Lane <tgl@redhat.com> 5.5.23-1
changelog:
  - Update to MySQL 5.5.23, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-23.html


author: Tom Lane <tgl@redhat.com> 5.5.22-1
changelog:
  - Update to MySQL 5.5.22, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-22.html
  - Turn on PrivateTmp in service file
  Resolves: #782513
  - Comment out the contents of /etc/logrotate.d/mysqld, so that manual
    action is needed to enable log rotation.  Given the multiple ways in
    which the rotation script can fail, it seems imprudent to try to make
    it run by default.
  Resolves: #799735


author: Honza Horak <hhorak@redhat.com> 5.5.21-3
changelog:
  - Revise mysql_plugin test patch so it moves plugin files to
    a temporary directory (better solution to #789530)


author: Honza Horak <hhorak@redhat.com> 5.5.21-2
changelog:
  - Fix ssl-related tests to specify expected cipher explicitly
  Related: #789600
  - Fix several strcpy calls to check destination size


author: Tom Lane <tgl@redhat.com> 5.5.21-1
changelog:
  - Update to MySQL 5.5.21, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-21.html
  - Hack openssl regression test to still work with rawhide's openssl
  - Fix assorted failures in post-install regression tests (mysql-test RPM)
  Resolves: #789530


author: Tom Lane <tgl@redhat.com> 5.5.20-2
changelog:
  - Revise our test-disabling method to make it possible to disable tests on a
    platform-specific basis, and also to get rid of mysql-disable-test.patch,
    which broke in just about every upstream update (Honza Horak)
  - Disable cycle-counter-dependent regression tests on ARM, since there is
    not currently any support for that in Fedora ARM kernels
  Resolves: #773116
  - Add some comments to mysqld.service documenting how to customize it
  Resolves: #785243


author: Tom Lane <tgl@redhat.com> 5.5.20-1
changelog:
  - Update to MySQL 5.5.20, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-20.html
    as well as security fixes described at
    http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
  Resolves: #783828
  - Re-include the mysqld logrotate script, now that it's not so bogus
  Resolves: #547007


author: Tom Lane <tgl@redhat.com> 5.5.19-1
changelog:
  - Update to MySQL 5.5.19, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-19.html


author: Tom Lane <tgl@redhat.com> 5.5.18-1
changelog:
  - Update to MySQL 5.5.18, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-18.html


author: Tom Lane <tgl@redhat.com> 5.5.17-1
changelog:
  - Update to MySQL 5.5.17, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-17.html
  - Get rid of version-number assumption in sysv-to-systemd conversion trigger


author: Honza Horak <hhorak@redhat.com> 5.5.16-4
changelog:
  - Don't assume all ethernet devices are named ethX
  Resolves: #682365
  - Exclude user definition from my.cnf, user is defined in mysqld.service now
  Resolves: #661265


author: Tom Lane <tgl@redhat.com> 5.5.16-2
changelog:
  - Update to MySQL 5.5.16, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-16.html


author: Tom Lane <tgl@redhat.com> 5.5.15-2
changelog:
  - Update to MySQL 5.5.15, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-15.html


author: Tom Lane <tgl@redhat.com> 5.5.14-2
changelog:
  - Remove make_scrambled_password and make_scrambled_password_323 from mysql.h,
    since we're not allowing clients to call those functions anyway
  Related: #690346


author: Tom Lane <tgl@redhat.com> 5.5.14-1
changelog:
  - Update to MySQL 5.5.14, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-14.html


author: Tom Lane <tgl@redhat.com> 5.5.13-1
changelog:
  - Update to MySQL 5.5.13, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-13.html


author: Tom Lane <tgl@redhat.com> 5.5.12-1
changelog:
  - Update to MySQL 5.5.12, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-12.html


author: Tom Lane <tgl@redhat.com> 5.5.10-3
changelog:
  - Add LSB init block to initscript, to ensure sane ordering at system boot
  Resolves: #703214
  - Improve initscript start action to notice when mysqladmin is failing
    because of configuration problems
  Related: #703476
  - Remove exclusion of "gis" regression test, since upstream bug 59908
    is fixed (for some value of "fixed") as of 5.5.10.


author: Tom Lane <tgl@redhat.com> 5.5.10-2
changelog:
  - Add my_make_scrambled_password to the list of symbols exported by
    libmysqlclient.so.  Needed at least by pure-ftpd.


author: Tom Lane <tgl@redhat.com> 5.5.10-1
changelog:
  - Update to MySQL 5.5.10, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-10.html
    Note that this includes a rather belated soname version bump for
    libmysqlclient.so, from .16 to .18
  - Add tmpfiles.d config file so that /var/run/mysqld is recreated at boot
    (only needed in Fedora 15 and later)
  Resolves: #658938


author: Tom Lane <tgl@redhat.com> 5.5.9-1
changelog:
  - Update to MySQL 5.5.9, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-9.html
  - Add %{?_isa} to cross-subpackage Requires, per latest packaging guidelines


author: Tom Lane <tgl@redhat.com> 5.5.8-9
changelog:
  - Support s390/s390x in performance schema's cycle-counting functions
    (needed to make regression tests pass on these platforms)


author: Tom Lane <tgl@redhat.com> 5.5.8-8
changelog:
  - PPC64 floating-point differences are not masked by -ffloat-store after all,
    so let's just disable gis regression test till upstream makes it less picky
  Resolves: #674253
  - Add __perllib_requires setting to make rpm 4.9 do what we need


author: Tom Lane <tgl@redhat.com> 5.5.8-6
changelog:
  - Remove no-longer-needed special switches in CXXFLAGS, per yesterday's
    discussion in fedora-devel about -fexceptions.
  - Rebuild needed anyway to check compatibility with latest systemtap.


author: Tom Lane <tgl@redhat.com> 5.5.8-3
changelog:
  - my_print_help, load_defaults, free_defaults, and handle_options all turn
    out to be documented/recommended in Paul DuBois' MySQL book, so we'd better
    consider them part of the de-facto API.
  Resolves: #666728


author: Tom Lane <tgl@redhat.com> 5.5.8-1
changelog:
  - Update to MySQL 5.5.8 (major version bump).  Note this includes removal
    of libmysqlclient_r.so.
  - Add a linker version script to hide libmysqlclient functions that aren't
    part of the documented API.


author: Tom Lane <tgl@redhat.com> 5.1.52-1
changelog:
  - Update to MySQL 5.1.52, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html
  Resolves: #646569


author: Tom Lane <tgl@redhat.com> 5.1.51-1
changelog:
  - Update to MySQL 5.1.51, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html


author: Tom Lane <tgl@redhat.com> 5.1.50-2
changelog:
  - Include my_compiler.h in distribution, per upstream bug #55846.
    Otherwise PHP, for example, won't build.


author: Tom Lane <tgl@redhat.com> 5.1.50-1
changelog:
  - Update to MySQL 5.1.50, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-50.html
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.html


author: Tom Lane <tgl@redhat.com> 5.1.48-2
changelog:
  - Duplicate COPYING and EXCEPTIONS-CLIENT in -libs and -embedded subpackages,
    to ensure they are available when any subset of mysql RPMs are installed,
    per revised packaging guidelines
  - Allow init script's STARTTIMEOUT/STOPTIMEOUT to be overridden from sysconfig
  Related: #609734


author: Tom Lane <tgl@redhat.com> 5.1.48-1
changelog:
  - Update to MySQL 5.1.48, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-48.html
    including a fix for CVE-2010-2008
  Related: #614214


author: Tom Lane <tgl@redhat.com> 5.1.47-2
changelog:
  - Add back "partition" storage engine
  Resolves: #597390
  - Fix broken "federated" storage engine plugin
  Related: #587170
  - Read all certificates in SSL certificate files, to support chained certs
  Related: #598656


author: Tom Lane <tgl@redhat.com> 5.1.47-1
changelog:
  - Update to MySQL 5.1.47, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html
    including fixes for CVE-2010-1848, CVE-2010-1849, CVE-2010-1850
  Resolves: #592862
  Resolves: #583717
  - Create mysql group explicitly in pre-server script, to ensure correct GID
  Related: #594155


author: Tom Lane <tgl@redhat.com> 5.1.46-1
changelog:
  - Update to MySQL 5.1.46, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-46.html


author: Tom Lane <tgl@redhat.com> 5.1.45-2
changelog:
  - Fix multiple problems described in upstream bug 52019, because regression
    tests fail on PPC if we don't.


author: Tom Lane <tgl@redhat.com> 5.1.45-1
changelog:
  - Update to MySQL 5.1.45, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-45.html


author: Tom Lane <tgl@redhat.com> 5.1.44-2
changelog:
  - Add "Obsoletes: mysql-cluster" to fix upgrade-in-place from F-12
  - Bring init script into some modicum of compliance with Fedora/LSB standards
  Related: #557711
  Related: #562749


author: Tom Lane <tgl@redhat.com> 5.1.44-1
changelog:
  - Update to MySQL 5.1.44, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-44.html
  - Remove mysql.info, which is not freely redistributable
  Resolves: #560181
  - Revert broken upstream fix for their bug 45058
  Resolves: #566547


author: Tom Lane <tgl@redhat.com> 5.1.43-2
changelog:
  - Remove mysql-cluster, which is no longer supported by upstream in this
    source distribution.  If we want it we'll need a separate SRPM for it.


author: Tom Lane <tgl@redhat.com> 5.1.43-1
changelog:
  - Update to MySQL 5.1.43, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-43.html


author: Tom Lane <tgl@redhat.com> 5.1.42-7
changelog:
  - Add backported patch for CVE-2008-7247 (upstream bug 39277)
  Related: #543619
  - Use non-expired certificates for SSL testing (upstream bug 50702)


author: Tom Lane <tgl@redhat.com> 5.1.42-3
changelog:
  - Remove static libraries (.a files) from package, per packaging guidelines
  - Change %define to %global, per packaging guidelines


author: Tom Lane <tgl@redhat.com> 5.1.42-2
changelog:
  - Disable building the innodb plugin; it tickles assorted gcc bugs and
    doesn't seem entirely ready for prime time anyway.


author: Tom Lane <tgl@redhat.com> 5.1.42-1
changelog:
  - Update to MySQL 5.1.42, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-42.html
  - Start mysqld_safe with --basedir=/usr, to avoid unwanted SELinux messages
  Resolves: #547485


author: Tom Lane <tgl@redhat.com> 5.1.41-1
changelog:
  - Update to MySQL 5.1.41, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html
    including fixes for CVE-2009-4019
  Related: #540906
  - Don't set old_passwords=1; we aren't being bug-compatible with 3.23 anymore
  Resolves: #540735


author: Tom Lane <tgl@redhat.com> 5.1.40-1
changelog:
  - Update to MySQL 5.1.40, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-40.html
  - Do not force the --log-error setting in mysqld init script
  Resolves: #533736


author: Tom Lane <tgl@redhat.com> 5.1.39-3
changelog:
  - Work around two different compiler bugs on sparc, one by backing off
    optimization from -O2 to -O1, and the other with a klugy patch
  Related: #529298, #529299
  - Clean up bogosity in multilib stub header support: ia64 should not be
    listed (it's not multilib), sparc and sparc64 should be


author: Tom Lane <tgl@redhat.com> 5.1.39-1
changelog:
  - Update to MySQL 5.1.39, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-39.html


author: Tom Lane <tgl@redhat.com> 5.1.37-5
changelog:
  - Work around unportable assumptions about stpcpy(); re-enable main.mysql test
  - Clean up some obsolete parameters to the configure script


author: Tom Lane <tgl@redhat.com> 5.1.37-4
changelog:
  - Remove one misguided patch; turns out I was chasing a glibc bug
  - Temporarily disable "main.mysql" test; there's something broken there too,
    but we need to get mysql built in rawhide for dependency reasons


author: Tom Lane <tgl@redhat.com> 5.1.37-2
changelog:
  - Add a couple of patches to improve the probability of the regression tests
    completing in koji builds


author: Tom Lane <tgl@redhat.com> 5.1.37-1
changelog:
  - Update to MySQL 5.1.37, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-37.html


author: Tom Lane <tgl@redhat.com> 5.1.36-1
changelog:
  - Update to MySQL 5.1.36, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-36.html


author: Tom Lane <tgl@redhat.com> 5.1.35-1
changelog:
  - Update to MySQL 5.1.35, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-35.html
  - Ensure that /var/lib/mysql is created with the right SELinux context
  Resolves: #502966


author: Tom Lane <tgl@redhat.com> 5.1.34-1
changelog:
  - Update to MySQL 5.1.34, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-34.html
  - Increase startup timeout per bug #472222


author: Tom Lane <tgl@redhat.com> 5.1.33-1
changelog:
  - Update to MySQL 5.1.33.
  - Disable use of pthread_setschedparam; doesn't work the way code expects.
  Related: #477624


author: Tom Lane <tgl@redhat.com> 5.1.30-2
changelog:
  - hm, apparently --with-innodb and --with-ndbcluster are still needed
    even though no longer documented ...


author: Tom Lane <tgl@redhat.com> 5.1.30-1
changelog:
  - Update to MySQL 5.1.30.  Note that this includes an ABI break for
    libmysqlclient (it's now got .so major version 16).
  - This also updates mysql for new openssl build


author: Tom Lane <tgl@redhat.com> 5.0.67-2
changelog:
  - Build the "embedded server" library, and package it in a new sub-RPM
    mysql-embedded, along with mysql-embedded-devel for devel support files.
  Resolves: #149829


author: Tom Lane <tgl@redhat.com> 5.0.67-1
changelog:
  - Update to mysql version 5.0.67
  - Move mysql_config's man page to base package, again (apparently I synced
    that change the wrong way while importing specfile changes for ndbcluster)


author: Tom Lane <tgl@redhat.com> 5.0.51a-2
changelog:
  - Enable ndbcluster support
  Resolves: #163758
  - Suppress odd crash messages during package build, caused by trying to
    build dbug manual (which we don't install anyway) with dbug disabled
  Resolves: #437053
  - Improve mysql.init to pass configured datadir to mysql_install_db,
    and to force user=mysql for both mysql_install_db and mysqld_safe.
  Related: #450178


author: Tom Lane <tgl@redhat.com> 5.0.45-11
changelog:
  - Fix mysql-stack-guard patch to work correctly on IA64
  - Fix mysql.init to wait correctly when socket is not in default place
  Related: #435494


author: Dennis Gilmore <dennis@ausil.us> 5.0.45-10
changelog:
  - add sparc64 to 64 bit arches for test suite checking
  - add sparc, sparcv9 and sparc64 to multilib handling


author: Tom Lane <tgl@redhat.com> 5.0.45-9
changelog:
  - Fix the stack overflow problem encountered in January.  It seems the real
  issue is that the buildfarm machines were moved to RHEL5, which uses 64K not
  4K pages on PPC, and because RHEL5 takes the guard area out of the requested
  thread stack size we no longer had enough headroom.
  Related: #435337


author: Tom Lane <tgl@redhat.com> 5.0.45-7
changelog:
  - Unbelievable ... upstream still thinks that it's a good idea to have a
    regression test that is guaranteed to begin failing come January 1.
  - ... and it seems we need to raise STACK_MIN_SIZE again too.


author: Tom Lane <tgl@redhat.com> 5.0.45-4
changelog:
  - Seems we need explicit BuildRequires on gawk and procps now
  - Rebuild to fix Fedora toolchain issues


author: Tom Lane <tgl@redhat.com> 5.0.45-2
changelog:
  - Update License tag to match code.
  - Work around recent Fedora change that makes "open" a macro name.


author: Tom Lane <tgl@redhat.com> 5.0.45-1
changelog:
  - Update to MySQL 5.0.45
  Resolves: #246535
  - Move mysql_config's man page to base package
  Resolves: #245770
  - move my_print_defaults to base RPM, for consistency with Stacks packaging
  - mysql user is no longer deleted at RPM uninstall
  Resolves: #241912


author: Tom Lane <tgl@redhat.com> 5.0.37-2
changelog:
  - Use a less hacky method of getting default values in initscript
  Related: #233771, #194596
  - Improve packaging of mysql-libs per suggestions from Remi Collet
  Resolves: #233731
  - Update default /etc/my.cnf ([mysql.server] has been bogus for a long time)


author: Tom Lane <tgl@redhat.com> 5.0.37-1
changelog:
  - Update to MySQL 5.0.37
  Resolves: #231838
  - Put client library into a separate mysql-libs RPM to reduce dependencies
  Resolves: #205630


author: Tom Lane <tgl@redhat.com> 5.0.33-1
changelog:
  - Update to MySQL 5.0.33
  - Install band-aid fix for "view" regression test designed to fail after 2006
  - Don't chmod -R the entire database directory tree on every startup
  Related: #221085
  - Fix unsafe use of install-info
  Resolves: #223713
  - Cope with new automake in F7
  Resolves: #224171


author: Tom Lane <tgl@redhat.com> 5.0.27-1
changelog:
  - Update to MySQL 5.0.27 (see CVE-2006-4031, CVE-2006-4226, CVE-2006-4227)
  Resolves: #202247, #202675, #203427, #203428, #203432, #203434, #208641
  - Fix init script to return status 1 on server start timeout
  Resolves: #203910
  - Move mysqldumpslow from base package to mysql-server
  Resolves: #193559
  - Adjust link options for BDB module
  Resolves: #199368


author: Tom Lane <tgl@redhat.com> 5.0.22-2
changelog:
  - Work around brew's tendency not to clean up failed builds completely,
    by adding code in mysql-testing.patch to kill leftover mysql daemons.


author: Tom Lane <tgl@redhat.com> 5.0.22-1
changelog:
  - Update to MySQL 5.0.22 (fixes CVE-2006-2753)
  - Install temporary workaround for gcc bug on s390x (bz #193912)


author: Tom Lane <tgl@redhat.com> 5.0.18-4
changelog:
  - Modify multilib header hack to not break non-RH arches, per bug #181335
  - Remove logrotate script, per bug #180639.
  - Add a new mysql-test RPM to carry the regression test files;
    hack up test scripts as needed to make them run in /usr/share/mysql-test.


author: Tom Lane <tgl@redhat.com> 5.0.16-1
changelog:
  - Update to MySQL 5.0.16
  - Add EXCEPTIONS-CLIENT license info to the shipped documentation
  - Make my_config.h architecture-independent for multilib installs;
    put the original my_config.h into my_config_$ARCH.h
  - Add -fwrapv to CFLAGS so that gcc 4.1 doesn't break it


author: Tom Lane <tgl@redhat.com> 4.1.12-2
changelog:
  - Fix buffer overflow newly exposed in isam code; it's the same issue
    previously found in myisam, and not very exciting, but I'm tired of
    seeing build warnings.


author: Tom Lane <tgl@redhat.com> 4.1.12-1
changelog:
  - Update to MySQL 4.1.12 (includes a fix for bz#158688, bz#158689)
  - Extend mysql-test-ssl.patch to solve rpl_openssl test failure (bz#155850)
  - Update mysql-lock-ssl.patch to match the upstream committed version
  - Add --with-isam to re-enable the old ISAM table type, per bz#159262
  - Add dependency on openssl-devel per bz#159569
  - Remove manual.txt, as upstream decided not to ship it anymore;
    it was redundant with the mysql.info file anyway.


author: Tom Lane <tgl@redhat.com> 4.1.11-3
changelog:
  - Enable openssl tests during build, per bz#155850
  - Might as well turn on --disable-dependency-tracking


author: Tom Lane <tgl@redhat.com> 4.1.11-2
changelog:
  - Avoid dependency on <asm/atomic.h>, cause it won't build anymore on ia64.
    This is probably a cleaner solution for bz#143537, too.


author: Tom Lane <tgl@redhat.com> 4.1.11-1
changelog:
  - Update to MySQL 4.1.11 to fix bz#152911 as well as other issues
  - Move perl-DBI, perl-DBD-MySQL dependencies to server package (bz#154123)
  - Override configure thread library test to suppress HAVE_LINUXTHREADS check
  - Fix BDB failure on s390x (bz#143537)
  - At last we can enable "make test" on all arches


author: Tom Lane <tgl@redhat.com> 4.1.10a-1
changelog:
  - Update to MySQL 4.1.10a to fix security vulnerabilities (bz#150868,
    for CAN-2005-0711, and bz#150871 for CAN-2005-0709, CAN-2005-0710).


author: Tom Lane <tgl@redhat.com> 4.1.10-2
changelog:
  - Need -fno-strict-aliasing in at least one place, probably more.
  - Work around some C spec violations in mysql.


author: Tom Lane <tgl@redhat.com> 4.1.7-6
changelog:
  - Fix init script to not need a valid username for startup check (bz#142328)
  - Fix init script to honor settings appearing in /etc/my.cnf (bz#76051)
  - Enable SSL (bz#142032)


author: Tom Lane <tgl@redhat.com> 4.1.7-4
changelog:
  - Turn off old_passwords in default /etc/my.cnf file, for better compatibility
    with mysql 3.x clients (per suggestion from Joe Orton).


author: Tom Lane <tgl@redhat.com> 3.23.58-13
changelog:
  - fix security issues CAN-2004-0835, CAN-2004-0836, CAN-2004-0837
    (bugs #135372, 135375, 135387)
  - fix privilege escalation on GRANT ALL ON `Foo\_Bar` (CAN-2004-0957)


author: Tom Lane <tgl@redhat.com> 3.23.58-12
changelog:
  - fix multilib problem with mysqlbug and mysql_config
  - adjust chkconfig priority per bug #128852
  - remove bogus quoting per bug #129409 (MySQL 4.0 has done likewise)
  - add sleep to mysql.init restart(); may or may not fix bug #133993


author: Tom Lane <tgl@redhat.com> 3.23.58-11
changelog:
  - fix low-priority security issues CAN-2004-0388, CAN-2004-0381, CAN-2004-0457
    (bugs #119442, 125991, 130347, 130348)
  - fix bug with dropping databases under recent kernels (bug #124352)


author: Tom Lane <tgl@redhat.com> 3.23.58-8
changelog:
  - repair logfile attributes in %files, per bug #102190
  - repair quoting problem in mysqlhotcopy, per bug #112693
  - repair missing flush in mysql_setpermission, per bug #113960
  - repair broken error message printf, per bug #115165
  - delete mysql user during uninstall, per bug #117017
  - rebuilt


author: Patrick Macdonald <patrickm@redhat.com> 3.23.57-1
changelog:
  - revert to prior version of MySQL due to license incompatibilities
    with packages that link against the client.  The MySQL folks are
    looking into the issue.


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.52-2
changelog:
  - Add --enable-local-infile to configure - a new option
    which doesn't default to the old behaviour (#72885)


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.49-3
changelog:
  - Add the various .cnf examples as doc files to mysql-server (#60349)
  - Don't include manual.ps, it's just 200 bytes with a URL inside (#60349)
  - Don't include random files in /usr/share/mysql (#60349)
  - langify (#60349)


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.47-4
changelog:
  - Use kill, not mysqladmin, to flush logs and shut down. Thus,
    an admin password can be set with no problems.
  - Remove reload from init script


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.46-1
changelog:
  - 3.23.46
  - use -fno-rtti and -fno-exceptions, and set CXX to increase stability.
    Recommended by mysql developers.


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.41-1
changelog:
  - 3.23.41 bugfix release
  - disable innodb, to avoid the broken updates
  - Use "mysqladmin flush_logs" instead of kill -HUP in logrotate
    script (#51711)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - Reenable test, but don't run them for s390, s390x or ia64
  - Make /etc/my.cnf config(noplace). Same for /etc/logrotate.d/mysqld


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - Make it obsolete our 6.2 PowerTools packages
  - 3.23.36 bugfix release - fixes some security issues
    which didn't apply to our standard configuration
  - Make "make test" part of the build process, except on IA64
    (it fails there)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - gettextize
  - move the items in Requires(post): to Requires: in preparation
    for an errata for 7.0 when 3.23.31 is released
  - 3.23.31


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - add the log file to the rpm database, and make it 0640
    (#24116)
  - as above in logrotate script
  - changes to the init sequence - put most of the data
    in /etc/my.cnf instead of hardcoding in the init script
  - use /var/run/mysqld/mysqld.pid instead of
    /var/run/mysqld/pid
  - use standard safe_mysqld
  - shut down cleaner


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - 3.23.30
  - do an explicit chmod on /var/lib/mysql in post, to avoid
    any problems with broken permissons. There is a report
    of rm not changing this on its own (#22989)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - bzipped source
  - changed from 85 to 78 in startup, so it starts before
    apache (which can use modules requiring mysql)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - check for negative niceness values, and negate it
    if present (#17899)
  - redefine optflags on IA32 FTTB


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - 3.23.26, which among other fixes now uses mkstemp()
    instead of tempnam().
  - revert changes made yesterday, the problem is now
    isolated


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - rename config file to /etc/my.cnf, which is what
    mysqld wants... doh. (#17432)
  - include a changed safe_mysqld, so the pid file option
    works.
  - make mysql dir world readable to they can access the
    mysql socket. (#17432)
  - 3.23.24


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - don't run ldconfig -n, it doesn't update ld.so.cache
    (#16034)
  - include some missing binaries
  - use safe_mysqld to start the server (request from
    mysql developers)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - don't build the SQL daemon statically (glibc problems)
  - fix the logrotate script - only flush log if mysql
    is running
  - change the reloading procedure
  - remove icon - glint is obsolete a long time ago


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - try the new compiler again
  - build the SQL daemon statically
  - add compile time support for complex charsets
  - enable assembler
  - more cleanups in initscript


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - 3.23.21
  - remove file from /etc/sysconfig
  - Fix initscript a bit - initialization of databases doesn't
    work yet
  - specify the correct licenses
  - include a /etc/my.conf (empty, FTTB)
  - add conditional restart to spec file


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - update to 3.23.20
  - use %configure, %makeinstall, %{_tmppath}, %{_mandir},
    %{_infodir}, /etc/init.d
  - remove the bench package
  - change some of the descriptions a little bit
  - fix the init script
  - some compile fixes
  - specify mysql user
  - use mysql uid 27 (postgresql is 26)
  - don't build on ia64


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.32 release XOS.1 for LinuX/OS 1.8.0
  - Upgrade from version 3.22.27 to 3.22.32.
  - Do "make install" instead of "make install-strip", because "install -s"
    now appears to fail on various scripts.  Afterwards, strip manually.
  - Reorganize subpackages, according to common Red Hat packages: the client
    program and shared library become the base package and the server and
    some accompanying files are now in a separate server package.  The
    server package implicitly requires the base package (shared library),
    but we have added a manual require tag anyway (because of the shared
    config file, and more).
  - Rename the mysql-benchmark subpackage to mysql-bench.


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.27 release XOS.2 for LinuX/OS 1.7.1
  - Add post(un)install scripts for updating ld.so.conf (client subpackage).


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.27 release XOS.1 for LinuX/OS 1.7.0
  - Initial version.
  - Some ideas borrowed from Red Hat Powertools 6.1, although this spec
    file is a full rewrite from scratch.


author: Peter Hatina <phatina@redhat.com> 1.0.15-7
changelog:
  - security patches
  - Resolves: CVE-2014-6421
              CVE-2014-6423
              CVE-2014-6425
              CVE-2014-6428
              CVE-2014-6429


author: Peter Hatina <phatina@redhat.com> 1.0.15-6
changelog:
  - security patches
  - Resolves: CVE-2012-6056
              CVE-2012-6060
              CVE-2012-6061
              CVE-2012-6062
              CVE-2013-3557
              CVE-2013-3559
              CVE-2013-4081
              CVE-2013-4083
              CVE-2013-4927
              CVE-2013-4931
              CVE-2013-4932
              CVE-2013-4933
              CVE-2013-4934
              CVE-2013-4935
              CVE-2013-5721
              CVE-2013-7112
              CVE-2014-2281
              CVE-2014-2299


author: Jan Safranek <jsafrane@redhat.com> 1.0.15-3
changelog:
  - fixed various flaws: CVE-2011-1959 CVE-2011-2175 CVE-2011-1958 
    CVE-2011-2698 CVE-2011-4102 CVE-2012-0041 CVE-2012-0042 CVE-2012-0066
    CVE-2012-0067


author: Jan Safranek <jsafrane@redhat.com> 1.0.15-2
changelog:
  - fixed tshark -s option (#580513)
  - fixed tshark exit code when dumpcap fails (#580510)
  - fixed editing of columns in Wireshark preferences (#493693)
  - added netdump protocol dissector (#484999)
  - fixed tshark / Wireshark automatic filter when started in ssh connection
    over IPv6 (#438473)


author: Jan Safranek <jsafrane@redhat.com> 1.0.15-1.4
changelog:
  - fix few security issues
  - Resolves: CVE -2011-0024 CVE-2011-0538 CVE-2011-1139 CVE-2011-1140
    CVE-2011-1141 CVE-2011-1143 #612240


author: Jan Safranek <jsafrane@redhat.com> 1.0.15-1
changelog:
  - upgrade to 1.0.15
  - http://www.wireshark.org/docs/relnotes/wireshark-1.0.15.html
  - fixes CVE-2010-2287 CVE-2010-2284
  - Related: #612239


author: Jan Safranek <jsafrane@redhat.com> 1.0.14-1
changelog:
  - upgrade to 1.0.14
  - http://www.wireshark.org/docs/relnotes/wireshark-1.0.14.html
  - fixes CVE-2010-1455 CVE-2010-2283 CVE-2010-2284 CVE-2010-2286 CVE-2010-2287
  - Resolves: #612239


author: Radek Vokál <rvokal@redhat.com> 0.99.7-1
changelog:
  - upgrade to 0.99.7
  - switch to libsmi from net-snmp
  - disable ADNS due to its lack of Ipv6 support
  - Resolves: #397411


author: Radek Vokál <rvokal@redhat.com> 0.99.6-1
changelog:
  - upgrade to 0.99.6
  - Wireshark could crash when dissecting an HTTP chunked response
  - Wireshark could crash while reading iSeries capture files
  - Wireshark could exhaust system memory while reading a
    malformed DCP ETSI packet
  - Wireshark could loop excessively while reading a malformed SSL packet
  - Resolves: #247623


author: Radek Vokál <rvokal@redhat.com> 0.99.5-1
changelog:
  - multiple security issues fixed (#225781)
  - CVE-2007-0459 - The TCP dissector could hang or crash while reassembling HTTP packets
  - CVE-2007-0459 - The HTTP dissector could crash.
  - CVE-2007-0457 - On some systems, the IEEE 802.11 dissector could crash.
  - CVE-2007-0456 - On some systems, the LLT dissector could crash.


author: Radek Vokál <rvokal@redhat.com> 0.99.4-1
changelog:
  - upgrade to 0.99.4, fixes multiple security issues (#211993)
  - use dist tag
  - CVE-2006-5468 - The HTTP dissector could dereference a null pointer.
  - CVE-2006-5469 - The WBXML dissector could crash.
  - CVE-2006-5470 - The LDAP dissector (and possibly others) could crash.
  - CVE-2006-4805 - Basic DoS, The XOT dissector could attempt to allocate a large amount of memory and crash.
  - CVE-2006-4574 - Single byte \0 overflow written onto the heap


author: Radek Vokál <rvokal@redhat.com> 0.99.3-1
changelog:
  - upgrade to 0.99.3
  - Wireshark 0.99.3 fixes the following vulnerabilities:
  - the SCSI dissector could crash. Versions affected: CVE-2006-4330
  - the IPsec ESP preference parser was susceptible to off-by-one errors. CVE-2006-4331
  - a malformed packet could make the Q.2931 dissector use up available memory. CVE-2006-4333


author: Remi Collet <rcollet@redhat.com> - 5.3.3-25
changelog:
  - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
  - core: fix integer overflow in unserialize() CVE-2014-3669
  - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670


author: Remi Collet <rcollet@redhat.com> - 5.3.3-24
changelog:
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm.
    CVE-2014-2497
  - fileinfo: fix incomplete fix for CVE-2012-1571 in
    cdf_read_property_info. CVE-2014-3587
  - core: fix incomplete fix for CVE-2014-4049 DNS TXT
    record parsing. CVE-2014-3597


author: Remi Collet <rcollet@redhat.com> - 5.3.3-23
changelog:
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
  - core: fix heap-based buffer overflow in DNS TXT record parsing.
    CVE-2014-4049
  - core: unserialize() SPL ArrayObject / SPLObjectStorage type
    confusion flaw. CVE-2014-3515
  - fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
  - fileinfo: unrestricted recursion in handling of indirect type
    rules. CVE-2014-1943
  - fileinfo: out of bounds read in CDF parser. CVE-2012-1571
  - fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238


author: Remi Collet <rcollet@redhat.com> - 5.3.3-17
changelog:
  - reorder security patches
  - add security fixes for CVE-2012-2688, CVE-2012-0831,
    CVE-2011-1398, CVE-2013-1643


author: Remi Collet <rcollet@redhat.com> - 5.3.3-15
changelog:
  - fix segfault in error_handler with
    allow_call_time_pass_reference = Off (#951075)
  - fix double free when destroy_zend_class fails (#951076)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-14
changelog:
  - fix possible buffer overflow in pdo_odbc (#869694)
  - rename php-5.3.3-extrglob.patch and reorder
  - php script hangs when it exceeds max_execution_time
    when inside an ODBC call (#864954)
  - fix zend garbage collector (#892695)
  - fix transposed memset arguments in libzip (#953818)
  - fix possible segfault in pdo_mysql (#869693)
  - fix imap_open DISABLE_AUTHENTICATOR param ignores array (#859369)
  - fix stream support in fileinfo (#869697)
  - fix setDate when DateTime created from timestamp (#869691)
  - fix permission on source files (#869688)
  - add php(language) and missing provides (#837044)
  - fix copy doesn't report failure on partial copy (#951413)


author: Joe Orton <jorton@redhat.com> - 5.3.3-9
changelog:
  - add security fixes for CVE-2011-4153, CVE-2012-0057, CVE-2012-0789,
    CVE-2012-1172, CVE-2012-2143, CVE-2012-2386


author: Joe Orton <jorton@redhat.com> - 5.3.3-2
changelog:
  - add php-$subpkg = V-R provides (#717158)
  - add security fixes for CVE-2010-3710, CVE-2010-4156, CVE-2010-4645 (#670464)
  - add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
    CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1471,
    CVE-2011-1938, CVE-2011-2202 (#740734)
  - fix negative keys with var_export (#700724)


author: Joe Orton <jorton@redhat.com> - 5.3.2-6
changelog:
  - add security fixes for CVE-2010-3870 CVE-2010-3709 (#650877)
  - provide php-devel from -devel (#642701)


author: Joe Orton <jorton@redhat.com> - 5.3.2-2
changelog:
  - add LGPLv2{,+} to License; ship text in -bcmath, -mbstring
  - apply phar patch correctly
  - fix permissions on sources, README.namespaces
  - drop EXTENSIONS from %doc
  - fix Provides for php-cli
  - drop inappropriate/obsolete Obsoletes


author: Joe Orton <jorton@redhat.com> - 5.3.2-6
changelog:
  - add security fixes for CVE-2010-1866, CVE-2010-2094, CVE-2010-1917,
    CVE-2010-2531, MOPS-2010-060 (#624469)


author: Remi Collet <Fedora@famillecollet.com>
changelog:
  - PHP 5.3.2 Released!
  - remove mime_magic option (now provided by fileinfo, by emu)
  - add patch for http://bugs.php.net/50578
  - remove patch for libedit (upstream)


author: Remi Collet <Fedora@famillecollet.com> 5.3.1-1
changelog:
  - update to 5.3.1
  - remove openssl patch (merged upstream)
  - add provides for php-pecl-json
  - add prod/devel php.ini in doc


author: Joe Orton <jorton@redhat.com> 5.3.0-2
changelog:
  - update to v5 of systzdata patch; parses zone.tab and extracts
    timezone->{country-code,long/lat,comment} mapping table


author: Remi Collet <Fedora@famillecollet.com> 5.3.0-1
changelog:
  - update to 5.3.0
  - remove ncurses, dbase, mhash extensions
  - add enchant, sqlite3, intl, phar, fileinfo extensions
  - raise sqlite version to 3.6.0 (for sqlite3, build with --enable-load-extension)
  - sync with upstream "production" php.ini


author: Joe Orton <jorton@redhat.com> 5.2.8-9
changelog:
  - add recode support, -recode subpackage (#106755)
  - add -zts subpackage with ZTS-enabled build of httpd SAPI
  - adjust php.conf to use -zts SAPI build for worker MPM


author: Joe Orton <jorton@redhat.com> 5.2.8-4
changelog:
  - move wddx to php-xml, build curl shared in -common
  - remove BR for expat-devel, bogus configure option


author: Joe Orton <jorton@redhat.com> 5.2.6-6
changelog:
  - move gd_README to php-gd
  - update to r4 of systzdata patch; introduces a default timezone
    name of "System/Localtime", which uses /etc/localtime (#469532)


author: Joe Orton <jorton@redhat.com> 5.2.6-3
changelog:
  - update to 5.2.6
  - sync default php.ini with upstream
  - drop extension_dir from default php.ini, rely on hard-coded
    default, to make php-common multilib-safe (#455091)
  - update to r3 of systzdata patch


author: Joe Orton <jorton@redhat.com> 5.2.3-3
changelog:
  - add mcrypt, mhash, tidy, mssql subpackages (Dmitry Butskoy)
  - enable dbase extension and package in -common


author: Joe Orton <jorton@redhat.com> 5.2.0-10
changelog:
  - bump default memory_limit to 32M (#220821)
  - mark config files noreplace again (#174251)
  - drop trailing dots from Summary fields
  - use standard BuildRoot
  - drop libtool15 patch (#226294)


author: Joe Orton <jorton@redhat.com> 5.2.0-9
changelog:
  - add php(api), php(zend-abi) provides (#221302)
  - package /usr/share/php and append to default include_path (#225434)


author: Joe Orton <jorton@redhat.com> 5.2.0-5
changelog:
  - build json and zip shared, in -common (Remi Collet, #215966)
  - obsolete php-json and php-pecl-zip
  - build readline extension into /usr/bin/php* (#210585)
  - change module subpackages to require php-common not php (#177821)


author: Joe Orton <jorton@redhat.com> 5.2.0-4
changelog:
  - provide php-zend-abi (#212804)
  - add /etc/rpm/macros.php exporting interface versions
  - synch with upstream recommended php.ini


author: Joe Orton <jorton@redhat.com> 5.2.0-3
changelog:
  - update to 5.2.0 (#213837)
  - php-xml provides php-domxml (#215656)
  - fix php-pdo-abi provide (#214281)


author: Joe Orton <jorton@redhat.com> 5.1.4-8
changelog:
  - Provide php-posix (#194583)
  - only provide php-pcntl from -cli subpackage
  - add missing defattr's (thanks to Matthias Saou)


author: Joe Orton <jorton@redhat.com> 5.1.4-5
changelog:
  - provide mod_php (#187891)
  - provide php-cli (#192196)
  - use correct LDAP fix (#181518)
  - define _GNU_SOURCE in php_config.h and leave it defined
  - drop (circular) dependency on php-pear


author: Joe Orton <jorton@redhat.com> 5.1.2-5
changelog:
  - provide php-api (#183227)
  - add provides for all builtin modules (Tim Jackson, #173804)
  - own %{_libdir}/php/pear for PEAR packages (per #176733)
  - add obsoletes to allow upgrade from FE4 PDO packages (#181863)


author: Joe Orton <jorton@redhat.com> 5.1.1-2
changelog:
  - update to 5.1.1
  - remove pear subpackage
  - enable pdo extensions (php-pdo subpackage)
  - remove non-standard conditional module builds
  - enable xmlreader extension


author: Joe Orton <jorton@redhat.com> 5.0.5-3
changelog:
  - update to 5.0.5
  - add fix for upstream #34435
  - devel: require autoconf, automake (#159283)
  - pear: update to HTTP-1.3.6, Mail-1.1.8, Net_SMTP-1.2.7, XML_RPC-1.4.1
  - fix imagettftext et al (upstream, #161001)


author: Joe Orton <jorton@redhat.com> 5.0.4-9
changelog:
  - build simplexml_import_dom even with shared dom (#156434)
  - prevent truncation of copied files to ~2Mb (#155916)
  - install /usr/bin/php from CLI build alongside CGI
  - enable sysvmsg extension (#142988)


author: Joe Orton <jorton@redhat.com> 5.0.4-7
changelog:
  - split out dba and bcmath extensions into subpackages
  - BuildRequire gcc-c++ to avoid AC_PROG_CXX{,CPP} failure (#155221)
  - pear: update to DB-1.7.6
  - enable FastCGI support in /usr/bin/php-cgi (#149596)


author: Joe Orton <jorton@redhat.com> 5.0.4-6
changelog:
  - build /usr/bin/php with the CLI SAPI, and add /usr/bin/php-cgi,
    built with the CGI SAPI (thanks to Edward Rudd, #137704)
  - add php(1) man page for CLI
  - fix more test cases to use -n when invoking php


author: Joe Orton <jorton@redhat.com> 5.0.4-4
changelog:
  - bundle from PEAR: HTTP, Mail, XML_Parser, Net_Socket, Net_SMTP
  - snmp: disable MSHUTDOWN function to prevent error_log noise (#153988)
  - mysqli: add fix for crash on x86_64 (Georg Richter, upstream #32282)


author: Joe Orton <jorton@redhat.com> 5.0.4-1
changelog:
  - update to 5.0.4 (#153068)
  - add .phps AddType to php.conf (#152973)
  - better gcc4 fix for libxmlrpc


author: Joe Orton <jorton@redhat.com> 5.0.3-5
changelog:
  - BuildRequire mysql-devel >= 4.1
  - don't mark php.ini as noreplace to make upgrades work (#152171)
  - fix subpackage descriptions (#152628)
  - fix memset(,,0) in Zend (thanks to Dave Jones)
  - fix various compiler warnings in Zend


author: Joe Orton <jorton@redhat.com> 5.0.3-4
changelog:
  - package mysqli extension in php-mysql
  - really enable pcntl (#142903)
  - don't build with --enable-safe-mode (#148969)
  - use "Instant Client" libraries for oci8 module (Kai Bolay, #149873)


author: Joe Orton <jorton@redhat.com> 5.0.3-2
changelog:
  - install the ext/gd headers (#145891)
  - enable pcntl extension in /usr/bin/php (#142903)
  - add libmbfl array arithmetic fix (dcb314@hotmail.com, #143795)
  - add BuildRequire for recent pcre-devel (#147448)


author: Joe Orton <jorton@redhat.com> 5.0.3-1
changelog:
  - update to 5.0.3 (thanks to Robert Scheck et al, #143101)
  - enable xsl extension (#142174)
  - package both the xsl and dom extensions in php-xml
  - enable soap extension, shared (php-soap package) (#142901)
  - add patches from upstream 5.0 branch:
   * Zend_strtod.c compile fixes
   * correct php_sprintf return value usage


author: Joe Orton <jorton@redhat.com> 5.0.2-7
changelog:
  - truncate changelog at 4.3.1-1
  - merge from 4.3.x package:
   - enable mime_magic extension and Require: file (#130276)


author: Joe Orton <jorton@redhat.com> 5.0.2-5
changelog:
  - fix phpize installation for lib64 platforms
  - add fix for segfault in variable parsing introduced in 5.0.2


author: Joe Orton <jorton@redhat.com> 5.0.2-4
changelog:
  - update to 5.0.2 (#127980)
  - build against mysqlclient10-devel
  - use new RTLD_DEEPBIND to load extension modules
  - drop explicit requirement for elfutils-devel
  - use AddHandler in default conf.d/php.conf (#135664)
  - "fix" round() fudging for recent gcc on x86
  - disable sqlite pending audit of warnings and subpackage split


author: Joe Orton <jorton@redhat.com> 5.0.1-1
changelog:
  - update to 5.0.1
  - only build shared modules once
  - put dom extension in php-dom subpackage again
  - move extension modules into %{_libdir}/php/modules
  - don't use --with-regex=system, it's ignored for the apache* SAPIs


author: Tom Callaway <tcallawa@redhat.com>
changelog:
  - bump to 5.0.0
  - add patch to prevent clobbering struct re_registers from regex.h
  - remove domxml references, replaced with dom now built-in
  - fix php.ini to refer to php5 not php4


author: Peter Vrabec <pvrabec@redhat.com> 5.8.12-2
changelog:
  - prepare package for dual component situation in RHEL5
  - rename to rsyslog5
  - conflicts with rsyslog
    Resolves: #820396


author: Tomas Heinrich <theinric@redhat.com> 5.8.12-1
changelog:
  - rebase from rsyslog-3.22.1-7 to rsyslog-5.8.12
    fixing: #769599, #820396, #823778, #831539
  - add several directories for storing auxiliary data
  - drop unneeded patches


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.107
changelog:
  - CVE-2014-8091 denial of service due to unchecked malloc in client
    authentication (#1168680)
  - CVE-2014-8092 integer overflow in X11 core protocol requests when
    calculating memory needs for requests (#1168684)
  - CVE-2014-8097 out of bounds access due to not validating length or offset
    values in DBE extension (#1168705)
  - CVE-2014-8095 out of bounds access due to not validating length or offset
    values in XInput extension (#1168694)
  - CVE-2014-8096 out of bounds access due to not validating length or offset
    values in XC-MISC extension(#1168700)
  - CVE-2014-8099 out of bounds access due to not validating length or offset
    values in XVideo extension (#1168710)
  - CVE-2014-8100 out of bounds access due to not validating length or offset
    values in Render extension (#1168711)
  - CVE-2014-8102 out of bounds access due to not validating length or offset
    values in XFixes extension (#1168714)
  - CVE-2014-8101 out of bounds access due to not validating length or offset
    values in RandR extension (#1168713)
  - CVE-2014-8093 xorg-x11-server: integer overflow in GLX extension requests
    when calculating memory needs for requests (#1168688)
  - CVE-2014-8098 xorg-x11-server: out of bounds access due to not validating
    length or offset values in GLX extension (#1168707)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.104
changelog:
  - xserver-1.1.1-randr-config-timestamps.patch: Backport timestamp comparison
    fix from upstream RANDR code (#1006076)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.100
changelog:
  - xserver-1.1.1-more-regen-leaks.patch: Cope with root cursor refcounting
    being differently broken in different DDXes. (#498357)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.97
changelog:
  - xserver-1.1.1-x86emu-1.13.patch: Sync x86emu bugfixes with upstream
    xserver. (#858014)
  - xserver-1.1.1-xkb-width-fix.patch: Fix a crash in XKB keymap resize
    across different RHELs. (#822438)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.95
changelog:
  - xserver-1.1.1-more-regen-leaks.patch: Fix memory leaks at regeneration in
    XKB, root cursor, and GLX. (#498357)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.88
changelog:
  - cve-2011-4818.patch: Multiple input sanitization flaws in Render and GLX
  - xorg-x11-server-1.1.0-mesa-copy-sub-buffer.patch: Likewise.


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.87
changelog:
  - xserver-1.1.1-fbdev-iterate-modes.patch: fix fbdev driver not iterating
    across all modes of a certain dimension (#740497)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.86
changelog:
  - xserver-1.1.1-midc-double-free.patch: Don't double-free the picture for
    the root window when using the mi (software) cursor path. (#674741)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.84
changelog:
  - xserver-1.1.1-xinerama-crash.patch: Fix a crash in XineramaQueryScreens
    when client is swapped (#588346)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.78
changelog:
  - cve-2010-1166.patch: Fix broken modulo math in Render and arc code.
    Identical to xserver-1.1.1-mod-macro-parens.patch in 5.5.z. (#582651)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.77
changelog:
  - xserver-1.1.1-dbe-validate-gc.patch: Validate the GC against both front
    and back buffers (#596899)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.73
changelog:
  - randr-disabled-fb.patch: Drop. (#496108)
  - xserver-1.1.1-no-randr-while-off-vt.patch: Just refuse RANDR changes while
    VT switched away, rather than try to fake them (#496108)


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.71
changelog:
  - fix randr upsizing not resizing pixmap (#515609)
  - fix bug in overlapping bugfix (#530309,#516204,#554571)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.70
changelog:
  - xserver-1.1.1-improve-mode-selection.patch: Improve mode selection when
    validation filters away all modes that exactly match aspect ratio (#507536)


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-48.63
changelog:
  - Pull in fixes for x86emu from upstream as x86emu-update.patch.  This
    adds support for RDTSC, CPUID and fixes BSF and BSR and a 64 bit
    bug.  Drop xserver-1.1.1-int10-bsf.patch (#503182).


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.60
changelog:
  - xserver-1.1.1-randr-panning-fix.patch: Install a null PointerMoved hook
    so we don't pan the second head on randrful drivers. (#477177)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.58
changelog:
  - xserver-1.1.1-hw-xfree86-modes-16.patch: Update RANDR code to 1.6ish.
  - xserver-1.1.1-randr-abi.patch: Export the RANDR symbols that the drivers
    use, and compensate for i2c/ddc/ramdac still being loadables in 1.1.


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.57
changelog:
  - xserver-1.1.1-ddc-update.patch: Update DDC code to xserver 1.6.
  - xserver-1.1.1-hw-xfree86-modes: Add RANDR setup code, equivalent to the
    old randr-source subpackage (Fedora's 1.5.3 ish)
  - drop the randr-* patches, merged into the above.


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.56
changelog:
  - Drop the -randr-source subpackage
  - Delete with_developer_utils macro and some boring/misleading comments


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.54
changelog:
  - randr-xinerama.patch - add xinerama support to the randr source code
    tree (#481067)
  - drop the randr source updates for now as the patch fails
  - fix spec file so if patches to randr source fail, build fails


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.53
changelog:
  - xserver-1.1.1-autoreconf-pedantry.patch: Fix autoreconf with new autotools
  - xserver-1.1.1-saturate-trap-walks.patch: Saturate span walks in Render,
    so we don't wrap around. (#448586)
  - xorg-x11-server-1.1.1-aiglx-happy-vt-switch.patch,
    xorg-redhat-die-ugly-pattern-die-die-die.patch: Rediff for patch fuzz.


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.52
changelog:
  - randr-source-compat.patch - backport fixes from upstream (#466987)
  - xserver-1.1.1-fb24-32-fix.patch + xserver-1.1.1-ia64-memops.patch:
  - Altix fixes to make nautilus + s-c-d work. (#468015)


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.45
changelog:
  - rebase the source code for drivers to build against and add compat patches
  - xserver-1.1.1-randr-fix.patch - set the -1 to 0 like upstream this fixes some randr1.2 compat output problems


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.44
changelog:
  - xserver-1.1.1-automouse-crash-fix.patch: Fix a rare crash when starting
    under anaconda. (#249567)


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.42
changelog:
  - cve-2008-1377.patch: Record and Security Extension Input validation
  - cve-2008-1379.patch: MIT-SHM extension Input Validation flaw
  - cve-2008-2360.patch: Render AllocateGlyph extension Integer overflows
  - cve-2008-2361.patch: Render CreateCursor extension Integer overflows
  - cve-2008-2362.patch: Render Gradient extension Integer overflows


author: Dave Airlie <airlied@redhat.com> - 1.1.1-48.37
changelog:
  - xserver-1.1.1-ia64-old-kernel-warning.patch - warn about older MCA causing
    kernels on IA64 (#432796)


author: Dave Airlie <airlied@redhat.com> - 1.1.1-48.36
changelog:
  - cve-2007-3920.patch: gnome-screensaver loses keyboard grab when running under compiz (#357111)
  - cve-2007-6429.patch: Update patch to final upstream solution (#431191)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.30
changelog:
  - Sync with zstream 1.1.1-48.26.el5_1.4:
  - cve-2007-5760.patch: XFree86-Misc Extension Invalid Array Index Vulnerability
  - cve-2007-5958.patch: Xorg / XFree86 file existence disclosure vulnerability
  - cve-2007-6427.patch: XInput Extension Memory Corruption Vulnerability
  - cve-2007-6428.patch: TOG-CUP Extension Memory Corruption Vulnerability
  - cve-2007-6429.patch: EVI and MIT-SHM Extension Integer Overflow Vulnerability


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.29
changelog:
  - Add -randr-source subpackage for source compatibility with newer drivers.
  - xserver-1.1.1-mode-bandwidth.patch: Match enums with 1.5 server.
  - randr-source-compat.patch: Fix miscellaneous drift since 1.1.


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.26
changelog:
  - xserver-1.1.1-mmap-{expansion,failure}: Revert, required kernel changes
    not included in 5.1. (#233981)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.25
changelog:
  - xserver-1.1.1-acpi-tokenising-fix.patch: Also expose the builderstring
    as an exported server symbol so external drivers can notice the bugfix.
    (#246175)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.23
changelog:
  - xserver-1.3.0-xkb-and-loathing.patch: Ignore (not just block) SIGALRM
    around calls to Popen()/Pclose().  Fixes a hang in openoffice when
    opening menus. (#210750)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.22
changelog:
  - xserver-1.1.1-vbe-panelid.patch: Add VBE core call for panel information,
    so we can better handle panels with no EDID. (#237121)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.21
changelog:
  - xserver-1.3.0-pci-bus-count.patch: Fix cases where the VGA adaptor is
    not in the first 128 devices. (#236202)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.17
changelog:
  - xserver-1.1.1-silence-warnings.patch: Reduce several harmless warning
    messages to X_DEFAULT or X_INFO. (#227386)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.15
changelog:
  - xserver-1.3.0-pci-bus-count.patch: Allocate pci_devp dynamically, to handle
    machines with more than 128 PCI devices. (#219390 and others)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.12.el5
changelog:
  - xorg-x11-server-1.1.1-vt-activate-is-a-terrible-api.patch: During server
    shutdown, be sure to wait for the VT switch to finish before actually
    terminating.  Works around a race seen in rhgb. (#219184)


author: Soren Sandmann <sandmann@redhat.com> 1.1.1-48.11.el5
changelog:
  - define-xfree86-server.patch: Define XFree86Server even on arches where
    we don't compile the Xorg DDX (ie. s390). Resolves: 219253


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.10.el5
changelog:
  - xorg-x11-server-1.1.1-glcore-visual-matching.patch: When matching GLX to
    X visuals, scan both lists. (#218395)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.7.el5
changelog:
  - xorg-x11-server-1.1.1-xkb-vidmode-switch.patch: Fix string matching on XKB
    actions to be case-insensitive again. (#218336)
  - xorg-x11-server-1.1.1-vt-activate-is-a-terrible-api.patch: Change behaviour
    to simply exit if we lose the VT switch race. (#218396)
  - Fix OS name from FC5 to RHEL5.


author: Soren Sandmann <sandmann@redhat.coM> 1.1.1-48.6.el5
changelog:
  - Disable composite when xinerama is enabled. 
  - Resolves: #213102
  - Make sure no-pseudocolor-composite.patch is applied
  - Related: #215576


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.5.el5
changelog:
  - xorg-x11-server-1.1.1-maxpixclock-option.patch: Allow the maximum pixel
    clock of a monitor to be specified in the config file. (#214869)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.4.el5
changelog:
  - xorg-x11-server-1.1.1-no-pseudocolor-composite.patch: Don't attempt to
    initialize Composite when the default visual is < 16bpp. (#215576)


author: Soren Sandmann <sandmann@redhat.com> 1.1.1-48.3.el5
changelog:
  - randr-disabled-fb.patch
    Add patch to prevent RandR from disabling (and then enabling) access to
    the framebuffer. Bug 214739.


author: Adam Jackson <ajackson@redhat.com> 1.1.1-48.2.el5
changelog:
  - Build both x86emu and vm86 backends on x86.  Prefer x86emu when running
    in Xen dom0.  Add "Int10Backend" option to the ServerLayout section to
    allow runtime configuration.  (#213151)


author: Adam Jackson <ajackson@redhat.com> 1.1.1-48.1.el5
changelog:
  - Deliver SecurityPolicy in the Xvfb subpackage on arches without hardware
    servers (s390{,x} atm).  (#213026)


author: Soren Sandmann <sandmann@redhat.com> - 1.1.1-48.el
changelog:
  - Add xorg-x11-server-1.1.1-ia64-int10.patch to not define -DPC_ on
    ia64. Bugs 210149 and 210153.
  - Add xorg-x11-server-1.1.1-ia64-pci-chipsets.patch to probe
    ia64 specific chipsets. Bug 210150


author: Soren Sandmann <sandmann@redhat.com> - 1.1.1-45.fc6
changelog:
  - xorg-x11-server-1.1.1-graphics-expose.patch: call
    miHandleExposures() in CopyArea/CopyPlane explicitly in cw to
    generate GraphicsExposes correctly. (#209336).


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-44.fc6
changelog:
  - xorg-x11-server-1.1.1-offscreen-pixmaps.patch: Take the server lock
    before calling back into XAA to evict pixmaps (#204810).


author: Adam Jackson <ajackson@redhat.com> 1.1.1-43.fc6
changelog:
  - xorg-x11-server-1.1.1-vt-activate-is-a-terrible-api.patch: Since the
    VT_ACTIVATE/VT_WAITACTIVE pair are never guaranteed to successfully
    complete, set a 5 second timeout on the WAITACTIVE, and retry the pair
    until we win.  (#207746)
  - xorg-x11-server-1.1.0-pci-scan-fixes.patch: Partial revert to unbreak some
    (but not all) domainful machines, including Pegasos. (#207659)


author: Adam Jackson <ajackson@redhat.com> 1.1.1-41.fc6
changelog:
  - xorg-x11-server-1.1.1-vbe-filter-less.patch: Be gentler about rejecting
    VESA modes early, since xf86ValidateModes should handle them just fine.


author: Adam Jackson <ajackson@redhat.com> 1.1.1-40.fc6
changelog:
  - xorg-x11-server-1.1.1-pclose-confusion.patch: Be sure to call Pclose()
    on pipes created with Popen(), since the additional magic done by Popen()
    relative to popen() is not undone by plain pclose().  (Third base!)
  - xorg-x11-server-1.1.1-edid-hex-dump.patch: Backport EDID hex dump code
    from git.


author: Kristian Høgsberg <krh@redhat.com> 1.1.1-39.fc6
changelog:
  - Bump xorg-x11-proto-devel BuildRequires version and add Conflict
    line for older mesa releases, so GLX_EXT_texture_from_pixmap opcodes
    match.


author: Adam Jackson <ajackson@redhat.coM> - 1.1.1-38.fc6
changelog:
  - xorg-x11-server-1.1.1-believe-monitor-rb-modes.patch: Always believe the
    monitor when it reports a reduced-blanking mode, even over VGA.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-35.fc6
changelog:
  - xorg-x11-server-1.1.1-always-mouse-thyself.patch: Fix the check to look
    for mouse/void drivers in the running layout, as opposed to the config file,
    so as not to synthesize two mouse devices.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-34.fc6
changelog:
  - xorg-x11-server-1.1.1-infer-virtual.patch: Be slightly more paranoid about
    setting line pitch, and rescan the mode list after pruning to re-validate
    the estimated virtual size.


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-33.fc6
changelog:
  - Update xorg-x11-server-1.1.1-offscreen-pixmaps.patch to evict pixmap
    when GLX_EXT_texture_from_pixmap is first used.


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-32.fc6
changelog:
  - Drop xorg-x11-server-1.1.0-gl-include-inferiors.patch now that
    compiz can uses the composite overlay window.


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-31.fc6
changelog:
  - Update xorg-x11-server-1.1.1-offscreen-pixmaps.patch to log transitions.
  - Update xorg-x11-server-1.1.0-tfp-damage.patch to always bind to
    GL_TEXTURE_RECTANGLE_ARB target.


author: Adam Jackson <ajackson@redhat.com> 1.1.1-30.fc6
changelog:
  - xorg-x11-server-1.1.1-pci-paranoia.patch: In xf86MatchPciInstances, fail
    gracefully if xf86PciVideoInfo is NULL (like, on Xen).


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-29.fc6
changelog:
  - Add xorg-x11-server-1.1.1-aiglx-happy-vt-switch.patch to fix VT
    switching (and suspend/resume) when using AIGLX. (#199692, fdo #7916).
  - Bump mesa source and libGL BuildRequires.
  - Update mesa-6.5.1 patch to work with 6.5.1 rc1 (slang_version_syn.h
    renamed to slang_pp_version_syn.h).


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-28.fc6
changelog:
  - xorg-x11-server-1.1.1-infer-virtual.patch: Only flag modes as preferred
    if the EDID block says to.
  - xorg-x11-server-1.1.1-mode-sort-kung-fu.patch: Enforce a sort order on
    modes during lookup: builtin before driver before userdef before other,
    and preferred modes within a class before others in that class.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-27.fc6
changelog:
  - xorg-x11-server-1.1.1-edid-quirks-list.patch: Don't set an arbitrary
    pixclock limit if the monitor didn't claim to have one.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-25.fc6
changelog:
  - xorg-x11-server-1.1.1-xvfb-composite-crash.patch: Fix Xvfb's -render flag
    to also disable the Composite extension.
  - xorg-x11-server-1.1.1-mesa-6.5.1.patch: Update build system to account for
    Mesa 6.5.1 snapshots.
  - xorg-x11-server-1.1.0-edid-mode-injection-2.patch: Add all available
    standard timings from EDID rather than just the first five.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-22.fc6
changelog:
  - xorg-x11-server-1.1.1-infer-virtual.patch: When no modes or virtual size
    are given in the config file, attempt to pick a sensible one by examining
    the EDID modes and physical geometry.  Also generally make the server
    aware of driver-provided modes.
  - xorg-x11-server-1.1.1-edid-quirks-list.patch: Redo, since the property I was
    checking for is both fairly common and fairly predictable.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-20.fc6
changelog:
  - xorg-x11-server-1.1.1-always-mouse-thyself.patch: If we lack a mouse
    device in the config, and the user hasn't asked for any void devices,
    synthesize a mouse section.  (#200347)
  - xorg-x11-server-1.1.1-edid-quirks-list.patch: Better formatting.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-19.fc6
changelog:
  - xorg-x11-server-1.1.1-builderstring.patch: Enable the builder info
    string at configure time;
  - ... and use it to print the package name and version.
  - xorg-x11-server-1.1.1-defaultdepth-24.patch: Set default depth to 24.
  - xorg-x11-server-1.1.1-edid-quirks-list.patch: Add EDID quirks list as
    an experiment; needs a better solution though.


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-17.fc6
changelog:
  - Add xorg-x11-server-1.1.1-offscreen-pixmaps.patch to default
    XaaNoOffscreenPixmaps to false, for now.


author: Adam Jackson <ajackson@redhat.com> 1.1.1-15.fc6
changelog:
  - xorg-x11-server-1.1.0-edid-mode-injection-2.patch: Allow HorizSync and
    VertRefresh to be overridden independently.


author: Kevin E Martin <kem@redhat.com> - 1.1.1-14.fc6
changelog:
  - xorg-x11-server-1.1.1-revert-xkb-change.patch: Revert change to xkb that
    broke XkbGetKeyboard().


author: Adam Jackson <ajackson@redhat.com> 1.1.1-13.fc6
changelog:
  - Comment out the 848x480 modes from the extramodes patch.  Any panel that
    wants it should be doing EDID injection by now, and it screws up
    autoconfig by _just_ fitting in the ranges for 800x600.


author: Mike A. Harris <mharris@redhat.com> 1.1.1-12.fc6
changelog:
  - Added "1920x1080" CVT modes to Red-Hat-extramodes patch for (#195272)
  - Sorted the extramodes file by X res, then Y res for ease of maintenance.


author: Adam Jackson <ajackson@redhat.com> 1.1.1-10.fc6
changelog:
  - xorg-x11-server-1.1.1-selinux-awareness.patch: Added for new Mesa
    selinux code.
  - xorg-x11-server-1.1.1-Xdmx-render-fix-fdo7482.patch: Backport a Render
    fix for Xdmx.
  - xorg-x11-server-1.1.1-no-composite-in-xnest.patch: Disable Composite in
    Xnest, as it's known not to work.
  - Fix default font path to match the config file we used to generate.
  - Fix default module set to match the config file we used to generate.
  - Disable use of TLS GLX dispatch to match Mesa selinux nonsense.


author: Mike A. Harris <mharris@redhat.com> 1.1.1-7.fc6
changelog:
  - Only ship pcitweak manpage if we are building it (#199653)
  - Fix dist tag usage (Was {dist}, should be {?dist})
  - Added xorg-x11-server-libxf86config-dont-write-empty-sections.patch to
    prevent config file parser/writer from writing out empty sections (#198653)
  - Add dependency on xorg-x11-fonts-base to all X server subpackages (#186091)


author: Kristian Høgsberg <krh@redhat.com> 1.1.1-5.fc5.aiglx
changelog:
  - Enable composite by default.
  - Split spiffiffity patch into one patch per change:
    xorg-x11-server-1.1.0-no-move-damage.patch and
    xorg-x11-server-1.1.0-dont-backfill-bg-none.patch.


author: Kristian Høgsberg <krh@redhat.com> 1.1.0-26
changelog:
  - Add xorg-x11-server-1.1.0-mesa-copy-sub-buffer.patch to hook up the
    GLX_MESA_copy_sub_buffer extension.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-25.fc6
changelog:
  - Start using the new %{dist} tag <http://fedoraproject.org/wiki/DistTag>
    experimentally in the package Release field to help prevent problems like
    (#197266) from occuring in the future.


author: Adam Jackson <ajackson@redhat.com> 1.1.0-24
changelog:
  - Don't (uselessly) link the server against zlib.
  - Fix the 1680x1050 modes to be the CVT timings instead of GTF.


author: Adam Jackson <ajackson@redhat.com> 1.1.0-23
changelog:
  - Fix an open-coded check for reduced-blanking modes to only apply to analog
    connectors.
  - Reorder the EDID patches slightly.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-22
changelog:
  - Added xorg-xserver-1.1.0-setuid.diff to fix potential security issue (#196094)
  - Disable DRI on ppc64 builds.
  - Conditionalize inclusion of DRI related X server modules to with_dri builds.


author: Kristian Høgsberg <krh@redhat.com> 1.1.0-21
changelog:
  - Update xorg-x11-server-1.1.0-tfp-damage.patch to use glTexSubImage2D
    to only update the part of the texture that changed, based on damage
    regions.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-20
changelog:
  - Remove with_xnest_server conditional, and fix more BuildRequires to pull
    in libX11-devel, libXext-devel, zlib-devel, etc. for Xnest and Xephyr.
  - Remove unwanted files leftover in buildroot for s390/s390x builds.
  - Add Xserver.1x manpage to multiple subpackages, as it applies equally to
    Xorg, Xnest, Xvfb, Xephyr.


author: Kristian Høgsberg <krh@redhat.com> 1.1.0-19
changelog:
  - Add with_xnest_server conditional and disable on s390, since Xnest
    fails to build on there (Xlib doesn't get added to the link line).
  - Add -f to removal of xorgconfig and others which may or may not be built.


author: Kristian Høgsberg <krh@redhat.com> 1.1.0-18
changelog:
  - Add xorg-x11-server-1.1.0-convolution-filter-fix.patch and
    xorg-x11-server-1.1.0-tfp-damage.patch backported to make compiz go
    faster and make compiz shadows work.


author: Adam Jackson <ajackson@redhat.com> 1.1.0-17
changelog:
  - Disable filling in monitor gamma info from EDID momentarily, since drivers
    will use that field to set the card's gamma ramp.
  - Backport some stuff from git: cw crash fix, faster pci scanning, some
    log message cleanup.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-16
changelog:
  - Enable spec support for s390, s390x, alpha, sparc, and sparc64 architectures.
  - Add with_hw_servers conditional to disable hardware servers on s390/s390x.
  - Add with_dmx_server to disable DMX on s390/s390x.
  - Added "release" number to "BuildRequires: freetype-devel >= 2.1.9-1" for
    dependency futureproofing.
  - Force "--disable-dri" on s390/s390x, to attempt to work around ./configure
    failure to find libdrm, which should not be needed on s390 builds anyway.


author: Adam Jackson <ajackson@redhat.com> 1.1.0-15
changelog:
  - Add loader infrastructure for publishing PCI ID lists in the drivers, and
    autodetecting drivers based on that.  Currently unused since no drivers
    publish such a list yet.
  - Fix mouse autoconfig to use /dev/input/mice instead of /dev/mouse.


author: Kristian Høgsberg <krh@redhat.com> 1.1.0-14
changelog:
  - Change selection atom to _COMPIZ_GL_INCLUDE_INFERIORS in
    xorg-x11-server-1.1.0-gl-include-inferiors.patch.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-7
changelog:
  - Change "BuildRequires: freetype-devel >= 2.1.10" to 2.1.9, as Xorg 7.0
    contains 2.1.9 in "extras" and 7.1 does not appear to have a requirement on
    a newer freetype.
  - Janitorial cleanups for spec file changelog consistency.
  - Call aclocal before automake, otherwise automake >= 1.9.6 is required in
    order to rebuild the package.
  - Build 1.1.0-4, 1.1.0-5, and 1.1.0-6 appear to have failed in brew but nobody
    fixed them.  It appears automake 1.9 breaks the build.


author: Adam Jackson <ajackson@redhat.com> 1.1.0-4
changelog:
  - Hack the kdrive makefile to only attempt to build Xephyr, avoids linking
    sixteen extra servers just to delete them.
  - Move cvt to the default install set, same as gtf.


author: Adam Jackson <ajackson@redhat.com> 1.1.0-3
changelog:
  - Drop the libxf86config -fPIC patch, just build the whole thing with
    --with-pic instead.  Add void and evdev to the required driver list for
    upcoming autoconfig magic.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-2
changelog:
  - Add "Requires: xorg-x11-proto-devel >= 7.1-1" to sdk for numerous (52) bug
    reports of drivers failing to build with mock.


author: Mike A. Harris <mharris@redhat.com> 1.0.99.903-2
changelog:
  - Disable dependency on xorg-x11-drivers package, for OLPC.  (#191781)
  - Add "BuildRequires: freetype-devel >= 2.1.10" for bug (#192021)


author: Adam Jackson <ajackson@redhat.com> 1.0.99.902-1
changelog:
  - Update to 7.1RC2 plus fix for CVE 2006-1526.  Disable the fastpathing
    patch for fdo bug #4320 since that should be covered in the generic
    Render code now.


author: Kristian Høgsberg <krh@redhat.com> 1.0.99.2-1
changelog:
  - Update to 1.0.99.2 snapshot and go back to using mesa-source package.
  - Drop xorg-server-1.0.99-composite-visibility.patch.
  - Drop xorg-server-1.0.1-backtrace.patch.
  - Drop xorg-server-0.99.3-rgb.txt-dix-config-fix.patch.
  - Add xorg-server-1.0.99.2-spiffiffity.patch.


author: Soren Sandmann <sandmann@redhat.com> 1.0.99.1-2
changelog:
  - Add xorg-server-1.0.99-composite-visibility.patch to get rid of flashing
    titlebars in compositing metacity.


author: Mike A. Harris <mharris@redhat.com>
changelog:
  - Added xorg-server-1.0.1-backtrace.patch which enables the Xorg server's
    built in backtrace support by default, as it was inadvertently disabled in
    7.0.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-6
changelog:
  - Added xorg-x11-server-1.0.1-Red-Hat-extramodes.patch which is a merger of
    XFree86-4.2.99.2-redhat-custom-modelines.patch and
    xorg-x11-6.8.2-laptop-modes.patch from FC4 for (#180301)
  - Install a copy of the vesamodes and extramodes files which contain the list
    of video modes that are built into the X server, so that the "rhpxl" package
    does not have to carry around an out of sync copy for itself. (#180301)


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Added xorg-x11-server-1.0.1-composite-fastpath-fdo4320.patch with changes
    suggested by ajax to fix (fdo#4320).
  - Cosmetic cleanups to satiate the banshees.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added xorg-x11-server-1.0.1-fbpict-fix-rounding.patch from CVS HEAD.
  - Added xorg-x11-server-1.0.1-SEGV-on-null-interface.patch which prevents a
    SEGV on null interfaces (#174279,178986)


author: Mike A. Harris <mharris@redhat.com> 1.0.0-2
changelog:
  - Added xserver-1.0.0-parser-add-missing-headers-to-sdk.patch to provide the
    necessary libxf86config.a headers to be able to use the library. (#173084)


author: Mike A. Harris <mharris@redhat.com> 1.0.0-1
changelog:
  - Updated to xserver 1.0.0 from X11R7 RC4
  - Removed the following patches, which are now integrated upstream:
    - xorg-server-0.99.3-rgb.txt-dix-config-fix.patch,
    - xorg-server-0.99.3-fbmmx-fix-for-non-SSE-cpu.patch
  - Changed manNx directories to manN to match upstream defaults.
  - Added libxf86config.a to sdk subpackage.
  - Updated build dependency of "mesa-libGL-devel >= 6.4.1-1"
  - Added "BuildRequires: xorg-x11-font-utils >= 1.0.0-1" to be able to query
    the fontdir from fontutil.pc which is implemented currently by a custom
    patch.
  - Enable xtrap, xcsecurity, xevie, and lbx on all builds, not just DRI builds.
  - Fix sdk installation path, so that drivers can find the files again.
  - Update file manifest, to deal with X server modules that have moved to
    a subdir, etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-9
changelog:
  - Added "Requires: xorg-x11-drivers >= 0.99.2-4" as a dependency of the Xorg
    subpackage, to ensure that anaconda installs all of the drivers during OS
    installs and upgrades, as requested by Jeremy Katz.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-8
changelog:
  - Added xorg-server-0.99.3-rgb.txt-dix-config-fix.patch which fixes the
    --with-rgb-path option to actually *work*.
  - Updated libdrm dep to 1.0.5


author: Mike A. Harris <mharris@redhat.com> 0.99.2-7
changelog:
  - Update xorg-x11-server-utils dep to 0.99.2-5 to ensure rgb.txt is installed
    in correct location - _datadir/X11/rgb
  - Added --with-rgb-path configure option to specify _datadir/X11/rgb so the
    X server finds the rgb.txt database properly, for bugs (#173453, 173435,
    173428, 173483, 173734, 173737, 173594)
  - Added xorg-server-0.99.3-fbmmx-fix-for-non-SSE-cpu.patch to prevent SSE/MMX
    code from being activated on non-capable VIA CPU. (#173384,fdo#5093)


author: Mike A. Harris <mharris@redhat.com> 0.99.2-6
changelog:
  - Add the missing rpm pre script from monolithic xorg-x11 packaging,
    clean it up a bit, reorder it for slight performance gain.
  - Add some perl magic to pre script to remove RgbPath from xorg.conf,
    in order to fix bug (#173036, 173435, 173453, 173428)
  - Add more perl magic to pre script to update ModulePath to the new
    location if it is specified in xorg.conf.
  - Added xorg-x11-server-0.99.3-init-origins-fix.patch ported from monolithic
    xorg-x11 package to fix Xinerama bug.
  - Added xorg-redhat-die-ugly-pattern-die-die-die.patch to kill the ugly grey
    stipple once again for bug (#173423).
  - Added "BuildRequires: libdrm-devel" for DRI enabled builds.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-4
changelog:
  - Added temporary "BuildRequires: libXfont-devel >= 0.99.2-3" and
    "Requires: libXfont-devel >= 0.99.2-3" to ensure early-testers of
    pre-rawhide modular X have installed the work around for (#172997).
  - Added implementation specific "Requires: xkbdata" to Xorg subpackage, as
    we want to ensure the xkb data files are present, but allow us the option
    of easily switching implementations to "xkeyboard-config" at a future
    date, if we decide to go that route.
  - Re-enable _smp_mflags during build.
  - Added "Requires: xorg-x11-drv-vesa" to Xorg subpackage (#173060)


author: Jeremy Katz <katzj@redhat.com> 0.99.3-2
changelog:
  - add some deps to the Xorg subpackage for base fonts, keyboard and mouse 
    drivers, and rgb.txt that the server really wont work without


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Update to xorg-server-0.99.3 from X11R7 RC2.
  - Add xorg-server.m4 to sdk subpackage, and "X" symlink to Xorg subpackage.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-2
changelog:
  - Added versioning to Xorg virtual Provide, to allow config tools and driver
    packages to have version based requires.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Update to xorg-server-0.99.2 from X11R7 RC1.
  - Add "BuildRequires: xorg-x11-util-macros >= 0.99.1".
  - Add "BuildRequires: mesa-source >= 6.4-4" for DRI builds.
  - Added dmx related utilities to Xdmx subpackage.
  - Individually list each X server module in file manifest.
  - Hack man1 manpages to be installed into man1x.
  - Add the following ./configure options --disable-dependency-tracking,
    --enable-composite, --enable-xtrap, --enable-xcsecurity, --enable-xevie,
    --enable-lbx, --enable-dri, --with-mesa-source, --with-module-dir,
    --with-os-name, --with-os-vendor, --with-xkb-output, --disable-xorgcfg
  - Added getconfig, scanpci et al to Xorg subpackage
  - Added inb, inl, inw, ioport, outboutl, outw, pcitweak utils to Xorg package
    conditionally, defaulting to "off".  These utilities are potentially
    dangerous and can physically damage hardware and/or destroy data, so are
    not shipped by default.
  - Added "BuildRequires: libdmx-devel" for dmx utilities
  - Added "BuildRequires: libXres-devel" for Xres examples
  - Added {_libdir}/xserver/SecurityPolicy to Xorg subpackage for XSECURITY


author: Mike A. Harris <mharris@redhat.com> 0.99.1-2.cvs20050830.2
changelog:
  - Fix license tag to be "MIT/X11"
  - Change Xdmx subpackage to Obsolete xorg-x11-Xdmx instead of xorg-x11-Xnest


author: Mike A. Harris <mharris@redhat.com> 0.99.1-2.cvs20050830.1
changelog:
  - Update BuildRequires for new library package naming (libX...)
  - Use Fedora Extras style BuildRoot tag
  - Invoke make with _smp_mflags to take advantage of SMP systems


author: Kristian Hogsberg <krh@redhat.com> 0.99.1-2.cvs20050830
changelog:
  - Go back to %spec -n, use new cvs snapshot that supports overriding
    moduledir during make install, use %makeinstall.
  - Drop %{moduledir}/multimedia globs.


author: Mike A. Harris <mharris@redhat.com> 0.99.1-2.cvs20050825.0
changelog:
  - Added build dependency on xorg-x11-libfontenc-devel, as the build fails
    half way through without it, even though upstream dependencies do not
    specify it as required.


author: Martin Stransky <stransky@redhat.com> - 24.4.0-3
changelog:
  - Added a workaround for Bug 1054242 - RHEVM: Extremely high memory
    usage in Firefox 24 ESR on RHEL 6.5


author: Martin Stransky <stransky@redhat.com> - 17.0.8-4
changelog:
  - Added fix for mozbz#601442 - Support the extensions.getAddons.showPane 
    pref again in the Add-ons Manager UI, a part of rhbz#818636 fix.


author: Martin Stransky <stransky@redhat.com> - 17.0.8-3
changelog:
  - Fixed rhbz#818636 - Firefox allows install of addons,
    disregarding xpinstall.enabled flag set as false.


author: Deepak Bhole <dbhole@redhat.com> - 1:3.0-6jpp_1fc
changelog:
  - Added conditional native compilation.
  - Disable certain ssl related tests that are known to fail with libgcj.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:2.0-3.rc2.1jpp
changelog:
  - Update to 2.0rc2.
  - Manual subpackage.
  - Crosslink with local J2SE javadocs.
  - Own unversioned javadoc dir symlink.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:2.0-3.rc1.1jpp
changelog:
  - Update to 2.0rc1.
  - Include "jakarta-"-less jar symlinks for consistency with other packages.
  - Exclude example and contrib sources from main package, they're in -demo.


author: Ville Skyttä <ville.skytta at iki.fi> 2.0-0.20020909alpha1.1jpp
changelog:
  - 2.0alpha1 snapshot 20020909.
  - Use sed instead of bash extensions when symlinking jars during build.
  - Add distribution tag.
  - Require commons-logging instead of log4j.


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.0-4jpp
changelog:
  - renamed to jakarta-commons-httpclient
  - additional sources in individual archives
  - versioned dir for javadoc
  - no dependencies for javadoc package
  - dropped j2ee package
  - adapted to new jsse package
  - section macro


author: Kai Engert <kaie@redhat.com> - 3.16.1-4
changelog:
  - Adjust softokn patch to be compatible with legacy softokn API.
  - Resolves: Bug 1145430 - CVE-2014-1568


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-1
changelog:
  - Rebase to nss-3.16.1 for FF31
  - Resolves: Bug 1110860 - Rebase nss in RHEL 5.11 to NSS 3.16.1, required for FF 31


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-5
changelog:
  - Improve shell code for error detection on %check section
  - Resolves: Bug 1035281 - Suboptimal shell code in nss.spec


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - Revoke trust in one mis-issued anssi certificate
  - Resolves: Bug 1042684 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-3
changelog:
  - Pick up corrections made in the rhel-10.Z branch, remove an unused patch
  - Resolves: rhbz#1032468 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-2
changelog:
  - Remove unused patch and retag for update to nss-3.15.3
  - Resolves: rhbz#1032468 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-1
changelog:
  - Update to nss-3.15.3
  - Resolves: rhbz#1032468 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-1
changelog:
  - Rebase to nss-3.15.1
  - Resolves: rhbz#1002642 - Rebase RHEL 5 to NSS 3.15.1 (for FF 24.x)
  - Resolves: rhbz#1015864 - [Regression] NSS no longer trusts MD5 certificates
  - Split %check section tests in two: freebl/softoken and rest of nss tests
  - Adjust various patches and spec file steps on account of the rebase
  - Add various patches and remove obsoleted ones on account of the rebase
  - Renumber patches so freeb/softoken ones match the corresponding ones in rhel-6 nss-softokn


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-16
changelog:
  - Adjust the patches to complete the syncup with upstrean nss
  - Use NSS_DISABLE_HW_GCM on the patch as we do on the spec file
  - Ensure softoken/freebl code is the same on nss side as on the softoken side
  - Related: rhbz#987131


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-16
changelog:
  - Add disable_hw_gcm.patch and in the spec file export NSS_DISABLE_HW_GCM=1
  - Disable HW GCM on RHEL-5 as the older kernel lacks support for it
  - Related: rhbz#987131


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-14
changelog:
  - Resolves: rhbz#987131 - Pick up various upstream GCM code fixes applied since nss-3.14.3 was released


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-13
changelog:
  - Roll back to 79c87e69caa7454cbcf5f8161a628c538ff3cab3
  - Peviously added patch hasn't solved the sporadic core dumps
  - Related: rhbz#983766 - nssutil_ReadSecmodDB leaks memory


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-12
changelog:
  - Resolves: rhbz#983766 - nssutil_ReadSecmodDB leaks memory
  - Add patch to get rid of sporadic blapitest core dumps


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-11
changelog:
  - Restore 'export NO_FORK_CHECK=1' required for binary compatibility on RHEL-5
  - Remove an unused patch
  - Resolves: rhbz#918948 - [RFE][RHEL5] Rebase to nss-3.14.3


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-9
changelog:
  - Apply upstream fixes for ecc enabling and aes gcm
  - Rename two macros EC_MIN_KEY_BITS and EC_MAX_KEY_BITS per upstream
  - Apply several upstream AES GCM fixes
  - Resolves: rhbz#960241 - Enable ECC in nss and freebl
  - Resolves: rhbz#918948 - [RFE][RHEL5]


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-8
changelog:
  - Enable ECC support limited to suite b
  - Export NSS_ENABLE_ECC=1 in the %check section to properly test ecc
  - Resolves: rhbz#960241 - Enable ECC in nss and freebl


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-7
changelog:
  - Define -DNO_FORK_CHECK when compiling softoken for ABI compatibility
  - Resolves: rhbz#918948 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Fix rpmdiff test reported failures and remove other unwanted changes
  - Resolves: rhbz#918948 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado - 3.14.3-3
changelog:
  - Update to NSS_3_14_3_RTM
  - Rework the rebase to preserve needed idiosynchracies
  - Ensure we install frebl/softoken from the extra build tree
  - Don't include freebl static library or its private headers
  - Add patch to deal with system sqlite not being recent enough
  - Don't install nss-sysinit nor sharedb
  - Resolves: rhbz#918948 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado - 3.14.3-2
changelog:
  - Restore the freebl-softoken source tar ball updated to 3.14.3
  - Renumbering of some sources for clarity
  - Resolves: rhbz#918948 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#918948 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-8
changelog:
  - Resolves: rhbz#820684
  - Fix last entry in attrFlagsArray to be {NAME_SIZE(unextractable), PK11_ATTR_UNEXTRACTABLE}


author: Robert Relyea <rrelyea@redhat.com> - 3.13.5-7
changelog:
  - Resolves: rhbz#820684
  - Enable certutil handle user supplied flags for PKCS #11 attributes.
  - This will enable certutil to generate keys in fussy hardware tokens.


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-5
changelog:
  - Related: rhbz#830304 - Fix ia64 / i386 multilib nss install failure
  - Remove no longer needed %pre and %preun scriplets meant for nss updates from RHEL-5.0


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-4
changelog:
  - Related: rhbz#830304 - Fix the changes to the %post line
  - Having multiple commands requires that /sbin/lconfig be the beginning of the scriptlet


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-3
changelog:
  - Resolves: rhbz#830304 - Fix multilib and scriptlet problems
  - Fix %post and %postun lines per packaging guildelines
  - Add %{?_isa} to tools Requires: per packaging guidelines
  - Fix explicit-lib-dependency zlib error reported by rpmlint


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-1
changelog:
  - Update to NSS_3_13_5_RTM
  - Resolves: rhbz#830304 - Update RHEL 5.x to NSS 3.13.5 and NSPR 4.9.1 for Mozilla 10.0.6


author: Elio Maldonado Batiz <emaldona@redhat.com> - 3.12.10-9
changelog:
  - Resolves: Bug 713373 - File descriptor leak after service httpd reload
  - Don't initialize nss if already initialized or if there are no dbs


author: Kai Engert <kengert@redhat.com> - 3.12.2.0-3
changelog:
  - Update to NSS_3_12_2_WITH_CKBI_1_73_RTM
  - Add dependency to pkgconfig to devel package (bug456849)


author: Kai Engert <kengert@redhat.com> - 3.12.0.3-1
changelog:
  - Update to NSS_3_12_RC4
  - Enable loading of external ECC modules
  - Include upstream fix for a deadlock in the certutil tool, bug 447431


author: Kai Engert <kengert@redhat.com> - 3.11.7-1.1
changelog:
  - Fix rhbz#212077, use a workaround to avoid Mozilla.org bug 51429
  - Remove link time dependency on libsoftokn3
  - Update to 3.11.7, but freebl/softokn remain at 3.11.5


author: Kai Engert <kengert@redhat.com> - 3.11.5-4
changelog:
  - Apply upstream patch for mozilla.org bug 51429 in order to
    fix an issue with smartcard login (rhbz#212077).


author: Kai Engert <kengert@redhat.com> - 3.11.5-3
changelog:
  - Prevent .chk files from being modified by prelink and rpm building
    by generating chk files at install time and setting immutable
    filesystem attribute (230546, 231367).


author: Bob Relyea <rrelyea@redhat.com> - 3.11.4-5
changelog:
  - handle the case where a smartcard is reset between the time the nss
    prompts for the password and the user enters it.


author: Kai Engert <kengert@redhat.com> - 3.11.3-2
changelog:
  - Revert the attempt to require latest NSPR, as it is not yet available
    in the build infrastructure.


author: Christopher Aillon <caillon@redhat.com> 3.11-0.cvs
changelog:
  - Initial import into Fedora Core, based on a CVS snapshot of
    the NSS_3_11_RTM tag
  - Fix up the pkcs11-devel subpackage to contain the proper headers
  - Build with RPM_OPT_FLAGS
  - No need to have rpath of /usr/lib in the pc file


author: Remi Collet <rcollet@redhat.com> - 5.1.6-45
changelog:
  - core: fix integer overflow in unserialize() CVE-2014-3669
  - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670
  - xmlrpc: fix buffer overflow in date parser #1155607


author: Joe Orton <jorton@redhat.com> - 5.1.6-30
changelog:
  - add security fixes for CVE-2011-0708, CVE-2011-1148, CVE-2011-1466, 
    CVE-2011-1469, CVE-2011-2202 (#768025)


author: Joe Orton <jorton@redhat.com> - 5.1.6-29
changelog:
  - odbc: don't re-enter unixODBC during unclean shutdown (#594813)
  - update description (Lana Brindley, #572359)
  - gd: support additional PNG type (#548142)
  - date: allow 64-bit times on 64-bit platforms (#607453)
  - pdo_pgsql: fix unset of prepared stmt (#611662)
  - fix negative keys with var_export (#695251)
  - imap: support disabling authenticators (#552436)


author: Joe Orton <jorton@redhat.com> - 5.1.6-28
changelog:
  - add security fixes for CVE-2009-5016, CVE-2010-1917, CVE-2010-3065, 
    CVE-2010-2531, CVE-2010-1128, CVE-2010-0397, CVE-2010-3870 (#626736)


author: Joe Orton <jorton@redhat.com> - 5.1.6-25.1.el5
changelog:
  - increase default memory_limit to 128M; mark php.ini noreplace (#517604)
  - php_stream_filter_api.h: fix trailing comma in enum (#530824)
  - soap: fix empty tag for NULL variables (#511175)
  - soap: fix refcounting bug in SoapClient::__setSoapHeaders (#505355)
  - soap: fix partial request with minOccurs=0 in XSD (#500383)
  - don't link odbc.so directly against -lodbcsql (#483690)
  - fix possible integer overflow in substr_compare (#469807)
  - fix possible integer overflow in substr_count (#470971)
  - fix move_uploaded_file to respect the umask (#498031)
  - mbstring: fix possible crash in mb_detect_encoding() (#486651)
  - add experimental ZTS build (#484058)


author: Joe Orton <jorton@redhat.com> - 5.1.6-25.el5
changelog:
  - add build fix for mysqli, pdo_mysql on some biarch systems (#491050)
  - add security fixes for CVE-2009-2687, CVE-2009-3291, CVE-2009-3292,
    CVE-2009-3546 CVE-2009-4017 (#541598)
  - add security fixes for CVE-2008-3658, CVE-2008-5624, CVE-2008-3660,
    CVE-2008-5498, CVE-2008-5557, CVE-2008-5814 (#487370)


author: Joe Orton <jorton@redhat.com> 5.1.6-22.el5
changelog:
  - fix possible crash in metaphone() (#446183)
  - imap: link in AUTH=PLAIN authenticator (#447983)
  - Zend: fix class name case in error messages (#446180)
  - move gd_README from -common to -gd (#443812)
  - pdo: fix possible crash in error path (#429693)
  - add security fixes for CVE-2007-5898, CVE-2007-4782, CVE-2007-5899,
    CVE-2008-2051, CVE-2008-2107, CVE-2008-2108 (#445924)
  - date: fix handling of relative days in strtotime (#444419)
  - date: fix test suite failure with current tzdata (#454863)
  - Zend: fix behaviour of constructors during destructors (#456313)
  - pdo_mysql: detect stale db connections (#450880)


author: Joe Orton <jorton@redhat.com> 5.1.6-16.el5
changelog:
  - add dbase extension in -common (#161639)
  - add /usr/share/php to builtin include_path (#238455)
  - ext/ldap: enable ldap_sasl_bind (#336221)
  - ext/libxml: reset stream context (#298031)


author: Joe Orton <jorton@redhat.com> 5.1.6-13.el5
changelog:
  - add security fixes for CVE-2007-2756, CVE-2007-2872, 
    CVE-2007-3799, CVE-2007-3996, CVE-2007-3998, CVE-2007-4658,
    CVE-2007-4670 (#278411)


author: Joe Orton <jorton@redhat.com> 5.1.6-12.el5
changelog:
  - add security fix for CVE-2007-1864, SOAP redirect handling issue,
    FTP CRLF injection issue (#235016)


author: Joe Orton <jorton@redhat.com> 5.1.6-9.el5
changelog:
  - add security fix for CVE-2007-1583 (#235016)
  - add security fixes for CVE-2007-0455, CVE-2007-1001 (#235036)


author: Joe Orton <jorton@redhat.com> 5.1.6-6.el5
changelog:
  - add security fixes for: CVE-2007-0906, CVE-2007-0907, 
    CVE-2007-0908, CVE-2007-0909, CVE-2007-0910, CVE-2007-0988 (#229013)


author: Joe Orton <jorton@redhat.com> 5.1.6-4.el5
changelog:
  - php-xml provides php-domxml (#215656)
  - fix php-pdo-abi provide (#214281)
  - provide php-zend-abi (#212804)
  - don't Obsolete mod_php
  - fix PDO sqlite TEXT extraction truncate-by-one (#217033)
  - package php{ize,-config} man pages in -devel (#199382)
  - change module subpackages to require php-common not php (#177821)
  - add security fix for CVE-2006-5465 (#216114)


author: Joe Orton <jorton@redhat.com> 4.3.7-3
changelog:
  - add gmp_powm fix (Oskari Saarenmaa, #124318)
  - split mbstring, ncurses, gd, openssl extns into subpackages
  - fix memory leak in apache2handler; use ap_r{write,flush}
    rather than brigade interfaces


author: Joe Orton <jorton@redhat.com> 4.3.6-6
changelog:
  - buildrequire smtpdaemon (#124430)
  - try switching to system libgd again (prevent symbol conflicts
    when e.g. mod_perl loads the system libgd library.)


author: Joe Orton <jorton@redhat.com> 4.3.4-7
changelog:
  - gd fix for build with recent Freetype2 (from upstream)
  - remove easter egg (Oden Eriksson, Mandrake)


author: Joe Orton <jorton@redhat.com> 4.3.4-6
changelog:
  - php-pear requires php
  - also remove extension=imap from php.ini in upgrade trigger
  - merge from Taroon: allow upgrade from Stronghold 4.0


author: Joe Orton <jorton@redhat.com> 4.3.4-5
changelog:
  - add defattr for php-pear subpackage
  - restore defaults: output_buffering=Off, register_argc_argv=On
  - add trigger to handle php.ini upgrades smoothly (#112470)


author: Joe Orton <jorton@redhat.com> 4.3.4-4
changelog:
  - conditionalize support for imap extension for the time being
  - switch /etc/php.ini to use php.ini-recommended (but leave
    variables_order as EGPCS) (#97765)
  - set session.path to /var/lib/php/session by default (#89975)
  - own /var/lib/php{,/session} and have apache own the latter
  - split off php-pear subpackage (#83771)


author: Joe Orton <jorton@redhat.com> 4.3.4-2
changelog:
  - rebuild for new libxslt (#110658) 
  - use --with-{mssql,oci8} for enabling extensions (#110482)
  - fix rebuild issues (Jan Visser, #110274)
  - remove hard-coded LIBS
  - conditional support for mhash (Aleksander Adamowski, #111251)


author: Joe Orton <jorton@redhat.com> 4.3.3-6
changelog:
  - use bundled libgd (#107407)
  - remove manual: up-to-date manual sources are no longer DFSG-free;
    it's too big; it's on the web anyway; #91292, #105804, #107384


author: Joe Orton <jorton@redhat.com> 4.3.3-3
changelog:
  - split domxml extension into php-domxml subpackage
  - enable xslt and xml support in domxml extension (#106042)
  - fix httpd-devel build requirement (#104341)
  - enable recode extension (#106755)
  - add workaround for #103982


author: Joe Orton <jorton@redhat.com> 4.3.2-2
changelog:
  - update the -tests and -lib64 patches
  - fixes for db4 detection
  - require aspell-devel >= 0.50.0 for pspell compatibility


author: Joe Orton <jorton@redhat.com> 4.3.1-3
changelog:
  - link odbc module correctly
  - patch so that php -n doesn't scan inidir
  - run tests using php -n, avoid loading system modules


author: Adam Tkac <atkac redhat com> 30:9.3.6-20.P1
changelog:
  - zone->curmaster before return in dns_zone_setmasterswithkeys()
  - named could fail to send a uncompressable zone


author: Adam Tkac <atkac redhat com> 30:9.3.6-18.P1
changelog:
  - document `dig` return codes
  - bind-chroot-admin: don't create symlinks with double "//" in the paths
  - nslookup failed to resolve name in certain cases


author: Adam Tkac <atkac redhat com> 30:9.3.6-17.P1
changelog:
  - adjust max-open-files limit correctly (#663112)
  - fix rare race condition in request.c
  - decrease severity of the "the working directory is not writable" msg
    from error to debug(1)
  - liblwres could fail to parse empty options in resolv.conf
  - nsupdate: return nonzero exit code when target zone doesn't exist


author: Adam Tkac <atkac redhat com> 30:9.3.6-11.P1
changelog:
  - /etc/sysconfig/named can be modified, don't verify it's md5/size/mtime (#556770)
  - resolver could have destroyed fetch too early (#555848)
  - replace bind-9.3.1-next_server_on_referral.patch by bind93-rh625240.patch (#625240)


author: Adam Tkac <atkac redhat com> 30:9.3.6-10.P1
changelog:
  - add possibility not to call named-checkzone for every zone during startup (#500896)
  - bind-chroot-admin: don't touch chroot environment when modified by user (#517279)


author: Adam Tkac <atkac redhat com> 30:9.3.6-9.P1
changelog:
  - don't crash due use-after-free in D-Bus related code (#523052)
  - if connection to PG database failed, retry it during every lookup (#533229)
  - initscript: terminate only the correct named process (#500535)


author: Adam Tkac <atkac redhat com> 30:9.3.6-8.P1
changelog:
  - handle broken DNSSEC chains better (#572848)
  - host: handle "debug", "attempts" and "timeout" options in resolv.conf (#570851)
  - host/dig: query servers specified on commandline instead of in resolv.conf (#561299)


author: Adam Tkac <atkac redhat com> 30:9.3.6-7.P1
changelog:
  - add manpages for binaries in -sdb subpkg (#556798)
  - drop useless bind-9.3.1beta2-openssl-suffix.patch (#546477)
  - fix "service named configtest" return value (#530214)


author: Adam Tkac <atkac redhat com> 30:9.3.6-6.P1
changelog:
  - NSEC validation code could cause wrong NXDOMAIN responses (#554851,
    CVE-2010-0097)
  - improve fix for CVE-2009-4022 (#538744)
    - {C,D}NAMEs could be returned to clients without proper DNSSEC validation
    - don't validate + cache out-of-bailiwick data returned with a secure answer.
      Refetch it instead.


author: Adam Tkac <atkac redhat com> 30:9.3.6-1.P1
changelog:
  - backport allow-query-cache option to control access for all non-authoritative
    data (#483708)
  - add support for dynamically loadable database backends (#479273)
  - named-checkconf now checks ACLs validity (#496495)
  - update sample configuration file to address "DNS reflector" attacks (#485393)


author: Adam Tkac <atkac redhat com> 30:9.3.6-0.3.P1
changelog:
  - handle named_write_master_zones SELinux boolean and /var/named perms
    relationship as documented (#494370)
  - handle unknown DLV algorithms well (#491655)
  - remove useless glibc-kernheaders BuildReq
  - print nicer error message when configuration file is directory (#490837)
  - named-checkconf handles "check-names" directive well (#491400)


author: Adam Tkac <atkac redhat com> 30:9.3.6-0.2.P1
changelog:
  - select correct nameservers when dig/host is called with -4 param (#469441)
  - add support for "master-only" notify type (#477651)
  - own chroot/var/log directory (#481803)
  - don't call bind-chroot-admin automatically during installation/update/remove
    of bind-chroot package. It broke too many configurations (#480156)


author: Adam Tkac <atkac redhat com> 30:9.3.6-0.1.P1
changelog:
  - rebased to 9.3.6-P1 (#457036), updated patches
  - patches merged
    - bind-bsdcompat.patch
    - bind-9.2.2-nsl.patch
    - bind-9.3-CVE-2008-1447.patch
    - bind93-rh458932.patch
    - bind-9.3-dbus-race.patch
    - bind-9.3-l_server.patch
    - bind-9.3-CVE-2008-0122.patch
    - bind93-dsa_verify.patch
    - bind-9.3.1-dbus_archdep_libdir.patch
    - bind-9.3.2-prctl_set_dumpable.patch
    - libbind-9.3.1rc1-fix_h_errno.patch


author: Adam Tkac <atkac redhat com> 30:9.3.4-8.9.P1
changelog:
  - don't crash when certain subdomain is used as rndc reload argument (#457533)
  - return nonzero value from initscript when named fails to reload (#457984)
  - accept krb5-self and krb5-subdomain update-policy matches (#457932)


author: Adam Tkac <atkac redhat com> 30:9.3.4-8.2.P1
changelog:
  - bind-sdb scripplet sets /etc/openldap/slapd.conf ownership correcly (#437789)
  - revised permissions of executables and scripts (#441495)
  - set open files limit to unlimited by default as described in documentation
    (#458932)


author: Adam Tkac <atkac redhat com> 30:9.3.4-5.P1
changelog:
  - improved patch to handle D-BUS races (#240876)
  - updated named.root zone to affect root IPv6 migration


author: Adam Tkac <atkac redhat com> 30:9.3.4-0.9.P1
changelog:
  - fixed building of SDB stuff (#240788)
  - fixed race condition during DBUS initialization (#240876)
  - initscript LSD standardization (#242734)
  - improved rndc freeze/thaw <zonename> command (#247148)
  - fixed wrong perms of named's ldap schema (#250118)
  - supressed errors from chroot's specfile scripts (#252334)
  - fixed ${chroot}/dev/random SELinux labelling
  - added configtest to usage report from named initscript (#250744)
  - fixed rndc stop return value handler (#250901)
  - fixed named.log sync in bind-chroot-admin (#247486)
  - rebased to latest 9.3 maintenance release (9.3.4-P1, #353741)
  - updated named.root file (new L.ROOT-SERVERS.NET, #363531)
  - added GSS-TSIG support to named (#251528)
    - dropped patches (upstream)
      - bind-9.3.4.P1-query-id.patch
      - bind-9.3.3rc2-dbus-0.6.patch
      - bind-9.3.4-validator.patch
      - bind-9.3.4-nqueries.patch
    - updated patches
      - bind-9.3.2-tmpfile.patch


author: Adam Tkac <atkac redhat com> - 30:9.3.3-9
changelog:
  - added fix for #224445 - CVE-2007-0493 BIND might crash after 
    attempting to read free()-ed memory (stransky@redhat.com)
  - added fix for #225229 - CVE-2007-0494 BIND dnssec denial of service
    (stransky@redhat.com)
  - initscript now unmounts /proc filesystem correctly
    (#212549, stransky@redhat.com)
  - dnssec-signzone now accepts -d option correctly (#230667)


author: Martin Stransky <stransky@redhat.com> - 30:9.3.3-6
changelog:
  - added fix for #213630: EDNS is globally enabled,
    crashing CheckPoint FW-1
  - Resolves: rhbz##213630


author: Martin Stransky <stransky@redhat.com> - 30:9.3.3-3
changelog:
  - added fix from #209400 - Bind Init Script does not create 
    the PID file always, created by Jeff Means
  - added timeout to stop section of init script. 
    The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT
    shell variable.


author: Martin Stransky <stransky@redhat.com> - 30:9.3.2-37
changelog:
  - fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory
  - fix for #202547 - file_contexts: invalid context


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32
changelog:
  - fix addenda to bug 189789: 
    determination of selinux enabled was still not 100% correct in bind-chroot-admin
  - fix addenda to bug 196398:
    make named.init test for NetworkManager being enabled AFTER testing for -D absence;
    named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable
    auto-enable of named dbus support if NetworkManager enabled.


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30
changelog:
  - fix bug 196398 - Enable -D option automatically in initscript
    if NetworkManager enabled in any runlevel.
  - fix namedGetForwarders for new dbus
  - fix bug 195881 - libbind.so should be owned by bind-libbind-devel


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6
changelog:
  - fix bugs 191093, 189789
  - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version:
    ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): 
    o change 2024 / bug 16027:
      named emitted spurious "zone serial unchanged" messages on reload
    o change 2013 / bug 15941:
      handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully
    o change 2009 / bug 15808: coverity fixes
    o change 1997 / bug 15818: 
      named was failing to replace negative cache entries when a positive one
      for the type was learnt
    o change 1994 / bug 15694: OpenSSL 0.9.8 support
    o change 1991 / bug 15813:
      The configuration data, once read, should be treated as readonly.
    o misc. validator fixes 
    o misc. resolver fixes
    o misc. dns fixes
    o misc. isc fixes
    o misc. libbind fixes
    o misc. isccfg fix
    o misc. lwres fix
    o misc. named fixes
    o misc. dig fixes
    o misc. nsupdate fix
    o misc. tests fixes


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22
changelog:
  - apply upstream patch for ncache_adderesult segfault bug 173961 addenda
  - fix bug 188382: rpm --verify permissions inconsistencies
  - fix bug 189186: use /sbin/service instead of initscript
  - rebuild for new gcc, glibc-kernheaders


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20
changelog:
  - fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 
    (upstream bugs #15642, #15528 ?)
  - allow named ability to generate core dumps after setuid (upstream bug #15753)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16
changelog:
  - fix bug 187286: 
       prevent host(1) printing duplicate 'is an alias for' messages
       for the default AAAA and MX lookups as well as for the A lookup
       (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups).
       This is upstream bug #15702 fixed in the unreleased bind-9.3.3
  - fix bug 187333: fix SOURCE24 and SOURCE25 transposition


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14
changelog:
  - fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup
  - add '%doc' sample configuration files in /usr/share/doc/bind*/sample
  - rebuild with new gcc and glibc


author: Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8
changelog:
  - Do not allow package to be installed if named:25 userid creation fails
  - Give libbind a pkg-config file
  - remove restorecon from bind-chroot-admin (not required).
  - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6
changelog:
  - replace caching-nameserver with bind-config sub-package
  - fix bug 177595: handle case where $ROOTDIR is a link in initscript
  - fix bug 177001: bind-config creates symlinks OK now
  - fix bug 176388: named.conf is now never replaced by any RPM
  - fix bug 176248: remove unecessary creation of rpmsave links
  - fix bug 174925: no replacement of named.conf
  - fix bug 173963: existing named.conf never modified
  - major .spec file cleanup


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4
changelog:
  - regenerate redhat_doc patch for non-DBUS builds
  - allow dbus builds to work with dbus version < 0.6 (bz #179816)


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24
changelog:
  - allow D-BUS support to work in bind-chroot environment:
    workaround latest selinux policy by mounting /var/run/dbus/
    under chroot instead of /var/run/dbus/system-bus-socket


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22
changelog:
  - fix bug 172632 - remove .la files
  - ship namedGetForwarders and namedSetForwarders scripts
  - fix detection of -D option in chroot


author: Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20
changelog:
  - Allow the -D enable D-BUS option to be used within bind-chroot .
  - fix bug 171226: supply some documentation for pgsql SDB .


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18
changelog:
  - fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() -
        task->state != task_ready and will cause Abort in task.c if process
        is waiting for NameOwnerChanged to do a SetForwarders


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12
changelog:
  - fix bug 168302: use gcc for compiling dns-keygen
  - fix bug 167682: bind-chroot directory permissions
  - fix issues with -D dbus option when dbus service not running or disabled


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10
changelog:
  - Build with D-BUS patch by default; D-BUS support enabled with named -D option
  - Enable D-BUS for named_sdb also
  - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create()
  - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server
  - fix named.init script to handle named_sdb properly
  - fix named.init script checkconfig() to handle named '-c' option
    and make configtest, test, check configcheck synonyms


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7
changelog:
  - fix bug 160914: resolver utilities should try next server on empty referral
                    (now that glibc bug 162625 is fixed)
  		  host and nslookup now by default try next server on SERVFAIL
  		  (host now has '-s' option to disable, and nslookup given
                     '[no]fail' option similar to dig's [no]fail option).
  - rebuild and re-test with new glibc & gcc (all tests passed).


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6
changelog:
  - fix bug 157950: dig / host / nslookup should reject invalid resolv.conf
                    files and not use uninitialized garbage nameserver values
                    (ISC bug 14841 raised).


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4
changelog:
  - Fix bug 157601: give named.init a configtest function
  - Fix bug 156797: named.init should check SELinux booleans.local before booleans
  - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc
  - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat
                    BIND quirks and SELinux DDNS / slave zone file configuration
  - D-BUS patches NOT applied until dhcdbd is in FC


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbus
changelog:
  - Enhancement to allow dynamic forwarder table management and
  - DHCP forwarder auto-configuration with D-BUS


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4
changelog:
  - Rebuild for bind-sdb libpq.so.3 dependency
  - fix bug 150981: don't install libbind man-pages if no libbind
  - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...)
    to work and correct number of CPUs to be determined


author: Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5
changelog:
  - fix bug 150288: h_errno not being accessed / set correctly in libbind
  - add libbind man-pages from bind-8.4.6


author: Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1
changelog:
  - Upgrade to 9.3.1rc1
  - Add Simplified Database Backend (SDB) sub-package ( bind-sdb )
  -     add named_sdb - ldap + pgsql + dir database backend support with
  -     'ENABLE_SDB' named.sysconfig option
  - Add BIND resolver library & includes sub-package ( libbind-devel)
  - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init
  - fix bug 146084 : shutup restorecon


author: Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2
changelog:
  - Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named
  -                 based on 'named_write_master_zones' SELinux boolean.
  - Fix bug 143744: dig & nsupdate IPv6 timeout  (dup of 140528)


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4
changelog:
  - Fix bugs 140528 and 141113:
  - 2 second timeouts when IPv6 not configured and root nameserver's
  - AAAA addresses are queried


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2
changelog:
  - Fix bug 136243: bind-chroot %post must run restorecon -R /var/named/chroot
  - Fix bug 135175: named.init must return non-zero if named is not run
  - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named
  - Fix bug 133423: bind-chroot %files entries should have been %dirs


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1
changelog:
  - BIND 9.2.4 (final release) released - source code actually
  - identical to 9.2.4rc8, with only version number change.


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14
changelog:
  - Upgrade to upstream bind-9.2.4rc8 .
  - Progress: Finally! Hooray! ISC bind now distributes:
  - o named.conf(5) and nslookup(8) manpages
  -    'bind-manpages.bz2' source can now disappear
  -    (could this have something to do with ISC bug I raised about this?)
  - o 'deprecation_msg' global has vanished
  -     bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3
changelog:
  - Fix bug 132303: if ROOTDIR line was replaced after upgrade from
  - bind-chroot-9.2.2-21, restart named


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3
changelog:
  - Fix bug 131803: replace ROOTDIR line removed by broken
  - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chroot


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10
changelog:
  - Fix bug 130121: add '%ghost' entries for files included in previous
  - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* -
  - that RPM removed after upgrade .


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fix bug 130981: add '-t' option to named-checkconf invocation in
  - named.init if chroot installed.


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Remove resolver(5) manpage now in man-pages (bug 130792);
  - Don't create /dev/ entries in bind-chroot if already there (bug 127556);
  - fix bind-devel Requires (bug 130919)
  - Set default location for dumpdb & stats files to /var/named/data


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fixed bug 129289: bind-chroot install / deinstall
  - on install, existing config files 'safe_replace'd
  - with links to chroot copies; on uninstall, moved back.


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fixed named.init generation of error messages on
  - 'service named stop' and 'service named reload'
  - as per bug 127775


author: Daniel Walsh <dwalsh@redhat.com> 9.2.2-13
changelog:
  - Fix config description of named.conf in chroot
  - Change named.init script to check for existence of /etc/sysconfig/network


author: Daniel Walsh <dwalsh@redhat.com> 9.2.1-12
changelog:
  - Fix log rotate to use service named reload
  - Change service named reload to give success/failure message [73770]
  - Fix File checking [75710]
  - Begin change to automatically run in CHROOT environment


author: Karsten Hopp <karsten@redhat.de> 9.2.1-7
changelog:
  - fix name of pidfine in logrotate script (#68842)
  - fix owner of logfile in logrotate script (#41391)
  - fix nslookup and named.conf man pages (output on stderr)
    (#63553, #63560, #63561, #54889, #57457)
  - add rfc1912 (#50005)
  - gzip all rfc's
  - fix typo in keygen.c (#54870)
  - added missing manpages (#64065)
  - shutdown named properly with rndc stop (#62492)
  - /sbin/nologin instead of /bin/false (#68607)
  - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381)
  - don't kill initscript when rndc fails (reload)    (#58750)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2
changelog:
  - Move libisccc, lib isccfg and liblwres from bind-utils to bind,
    they're not required if you aren't running a nameserver.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7
changelog:
  - Don't exit if /etc/named.conf doesn't exist if we're running
    chroot (#60868)
  - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders
    versions or bug #58335 will be back. "It compiles, therefore it works"
    isn't always true.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1
changelog:
  - 9.2.0rc3
  - remove ttl patch, I don't think we need this for 8.0.
  - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page
  - add lwres* man pages to -devel


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4
changelog:
  - Make sure /etc/rndc.conf isn't world-readable even after the
    %post script inserted a random key (#53009)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3
changelog:
  - Add build dependencies (#49368)
  - Make sure running service named start several times doesn't create
    useless processes (#47596)
  - Work around the named parent process returning 0 even if the config
    file is broken (it's parsed later by the child processes) (#45484)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2
changelog:
  - Add named.conf man page from bind 8.x (outdated, but better than nothing,
    - Rename the rndc key (#42895)
  - Add dnssec* man pages


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1
changelog:
  - 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for
    the version number, though.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9
changelog:
  - Work around bind 8 -> bind 9 migration problem when using buggy zone files:
    accept zones without a TTL, but spew out a big fat warning. (#31393)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Don't use the standard rndc key from the documentation, instead, create a random one
    at installation time (#26358)
  - Make /etc/rndc.conf readable by user named only, it contains secret keys


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes
    from 9.1.1rc2
  - bind requires bind-utils (#28317)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us;
    1 was fixed in a Red Hat patch already, 2 others are portability
    improvements)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Make /etc/rndc.conf and /etc/sysconfig/named noreplace
  - Make devel require bind = %{version} rather than just bind


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Move run files to /var/run/named/ - /var/run isn't writable
    by the user we're running as. (Bug #20665)


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fixed logrotate script (wrong path to kill)
  - include header files in -devel package
  - bugzilla #22049, #19147, 21606


author: Bernhard Rosenkränzer <bero@redhat.com>
changelog:
  - Fix up the initscript (Bug #13033)
  - Fix build with current glibc (Bug #12755)
  - /etc/rc.d/init.d -> /etc/init.d
  - use %{_mandir} rather than /usr/share/man


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modify logrotate setup to use PID file
  - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time
  - actually bump the release this time


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - provide /var/named (fix for bugs #9847, #10205)
  - preserve args when restarted via ndc(8) (bug #10227)
  - make resolv.conf(5) a link to resolver(5) (bug #10245)
  - fix SYSTYPE bug in all makefiles
  - move creation of named user from %post into %pre


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix up location of named-bootconf.pl and make it executable
    (Bug #8028)
  - bind-devel requires bind


author: Preston Brown <pbrown@redhat.com>
changelog:
  - use real stop and start in named.init for restart, not ndc restart, it has
    problems when named has changed during a package update... (# 4890)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 8.2.1.
  - add named.logrotate (#3571).
  - hack around egcs-1.1.2 -m486 bug (#3413, #3485).
  - vet file list.


author: Stepan Kasal <kasal@math.cas.cz>
changelog:
  - nslookup patched:
    to count numRecords properly
    to fix subsequent calls to ls -d
    to parse "view" and "finger" commands properly
    the view hack updated for bind-8 (using sed)


author: Manuel J. Galan <manolow@step.es>
changelog:
  - Several essential modifications to build and install correctly.
  - Modified 'ndc' to avoid deprecated use of '-'


author: Scott Lampert <fortunato@heavymetal.org>
changelog:
  - Used buildroot
  - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include
    on Redhat 5.0 instead of <nlist.h>


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.1
changelog:
  - Update to latest 1.13.6 release candidate tarball
  - Fixes a number of issues found with b34:
  - * OJ51, PR2187: Sync patch for 4873188 with 7 version
  - * OJ52, PR2185: Application of 6786276 introduces compatibility issue
  - * OJ53, PR2181: strict-aliasing warnings issued on PPC32
  - * OJ54, PR2182: 6911104 reintroduces test fragment removed in existing 6964018 backport
  - * S6730740, PR2186: Fix for 6729881 has apparently broken several 64 bit tests: "Bad address"
  - * S7031830, PR2183: bad_record_mac failure on TLSv1.2 enabled connection with SSLEngine
  - Also includes PR2180, so patch dropped from RPM.
  - Resolves: rhbz#1180289


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.0
changelog:
  - Update to IcedTea 1.13.6
  - Apply pr2125.patch in generate_rhel_zip.sh to remove unwanted elliptic curves.
  - Add no_pr2125.patch to avoid repeating the procedure during the IcedTea build.
  - Avoid duplicating the OpenJDK build version by making more use of %{openjdkver}.
  - Add US_export_policy.jar and local_policy.jar to packages.
  - Resolves: rhbz#1180289


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.33-1.13.5.0
changelog:
  - Update to IcedTea 1.13.5
  - Change versioning to match java-1.7.0-openjdk so revisions work.
  - No need to explicitly disable system LCMS any more (bug fixed upstream).
  - Add icedteasnapshot to setup lines so they work with pre-release tarballs.
  - Resolves: rhbz#1148898


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-6.1.13.4
changelog:
  - moved to  icedteaver 1.13.4
  - moved to openjdkver b32 and openjdkdate 15_jul_2014
  - Resolves: rhbz#1115866


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-5.1.13.3
changelog:
  - updated to icedtea 1.13.3
  - updated to openjdk-6-src-b31-15_apr_2014
  - renmoved upstreamed patch7, 1.13_fixes.patch
  - renmoved upstreamed patch9, 1051245.patch
  - Resolves: rhbz#1085008


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-3.1.13.0
changelog:
  - updated to icedtea 1.13.1
   - http://blog.fuseyism.com/index.php/2014/01/23/security-icedtea-1-12-8-1-13-1-for-openjdk-6-released/
  - updated to jdk6, b30,  21_jan_2014
   - https://openjdk6.java.net/OpenJDK6-B30-Changes.html
  - adapted patch7 1.13_fixes.patch
  - pre 2011 changelog moved to (till now  wrong) pre-2009-spec-changelog (rh1043611)
  - added --disable-system-lcms to configure options to pass build
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#1050188


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-1.66.1.13.0
changelog:
  - updated to icedtea 1.13
  - updated to openjdk-6-src-b28-04_oct_2013
  - added --disable-lcms2 configure switch to fix tck
  - removed upstreamed patch7,java-1.6.0-openjdk-jstack.patch
  - added patch7 1.13_fixes.patch to fix 1.13 build issues
  - adapted patch0 java-1.6.0-openjdk-optflags.patch
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - removed useless runtests parts
  - included also java.security.old files
  - adapted patch8 java-1.6.0-openjdk-pstack.patch 
  - Resolves: rhbz#1017616


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.41.1.11.11.90
changelog:
  - updated to icedtea6-1.11.11.90.tar.gz
  - removed upstreamed patch9 jaxp-backport-factoryfinder.patch
  - removed upstreamed patch10 fixToFontSecurityFix.patch.
  - modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#973128


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.61.1.11.11
changelog:
  - added and applied (temporally) patch10   fixToFontSecurityFix.patch.
   - fixing regression in fonts introduced by one security patch.
  - Resolves: rhbz#950384


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.39.1.11.11
changelog:
  - added and applied (temporally) one more patch to xalan/xerces privileges
   - patch9 jaxp-backport-factoryfinder.patch
  - will be upstreamed
  - Resolves: rhbz#950384


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.59.1.11.11
changelog:
  - Updated to icedtea6 1.11.11 - fixed xalan/xerxes privledges
  - removed patch 9 -  removingOfAarch64.patch.patch - fixed upstream
  - removed patch10  patchToFixMalformed8007667.patch - upstreamed
  - Resolves: rhbz#950384


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.37.1.11.10
changelog:
  - Updated to icedtea6 1.11.10
  - rewritten java-1.6.0-openjdk-java-access-bridge-security.patch
  - excluded aarch64.patch
    - by patch 8 -  removingOfAarch64.patch.patch
  - due to old patch on rhel5 added patch10  patchToFixMalformed8007667.patch
   - fixing 8007667 patch  to be valid for rhel5 patch
  - Resolves: rhbz#950384


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.34.1.11.8
changelog:
  - Updated to icedtea6 1.11.8
  - Removed patch9   7201064.patch
  - Removed patch10   8005615.patch
  - Removed  not-applied patch 6664509.patch
  - Removed mauve as deadly outdated and run on QA
    -  jtreg kept, useless, but valid
  - Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
  - Resolves: rhbz#911523


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.27.1.10.8
changelog:
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added also to package.definition
  - Resolves: rhbz#828750


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.26.1.10.8
changelog:
  - Updated to IcedTea6 1.10.8
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added to patch
  - Resolves: rhbz#828750


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-20.1
changelog:
  - Fixed CVE-2012-6151: snmpd crashing when AgentX subagent disconnects in
    the middle of request processing (#1073224)
  - Fixed CVE-2014-2285: snmptrapd crash when using a trap with empty community
    string (#1073224)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-20
changelog:
  - fixed error message when the address specified by clientaddr option
    is wrong or cannot be bound (#840861)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-19
changelog:
  - fixed support for port numbers in 'clientaddr' configuration option
    (#840861, #845974)
  - added support of cvfs filesystem hrStorageTable (#846391)
  - removed various error log messages when IPv6 is disabled (#845155)
  - removed various error log messages related to counte64 expansions
    (#846905)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-18
changelog:
  - added support of ocfs2, tmpfs and reiserfs in hrStorageTable
    (#754652, #755958, #822061)
  - updated documentation of '-c' option of snmptrapd (#760001)
  - fixed endless loop after truncating 64bit int (#783892)
  - fixed snmpd exiting shortly after startup due to incoming signal (#799699)
  - fixed decoding of COUNTER64 values from AgentX (#803585)
  - fixed engineID of outgoing traps if 'trapsess -e <engineID>' is used in
    snmpd.conf (#805689)
  - fixed CVE-2012-2141, an array index error in the extension table (#815813)
  - fixed snmpd showing "failed to run mteTrigger query" when 'monitor'
    config option is used (#830042)
  - added support for port numbers in 'clientaddr' configuration option
    (#828691)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-16
changelog:
  - fixed snmpd showing wrong UCD-SNMP-MIB::ssCpuIdle after 30 days of uptime
    on 32-bit platforms (#663789)
  - fixed parsing of OID argument of 'smuxpeer' configuration option (#751235)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-15
changelog:
  - removed 'error finding row index in _ifXTable_container_row_restore'
    error message (#736264)
  - fixed a crash when DisMan Event MIB was used simultaneously with AgentX
    extensions (#725966)
  - fixed references to OBJECT-GROUP between MIB files (#716470)
  - disabled 'rpm -V' checking content of /usr/share/snmp/mibs/.index file,
    it is generated dynamically (#714976)
  - fixed crash when getting out-of-memory in inetNetToMediaTable (#706916)
  - fixed slow (re-)loads of TCP-MIB::tcpConnectionTable (#698562)
  - fixed HOST-RESOURCES-MIB::hrStorageUsed with realStorageUnits disabled
    (#741789)
  - fixed vxfs filesystem support in hrStorageTable (#744112)
  - fixed snmpd sigsegv when embedded perl script registers one handler
    twice (#743167)
  - fixed AgentX subagent sigsegv when reconnecting to AgentX master
    (#748390)
  - fixed reporting of UCD-SNMP-MIB::dskPercentNode missing in previous
    release (#725339)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-14
changelog:
  - fixed hrSWRunPath of kernel threads (regression caused by bugfix for
    - fixed bind filesystem support in hrStorageTable broken by fix
    for bug #654384


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-13
changelog:
  - fixed xfs filesystem support in hrStorageTable broken by fix
    for bug #654384
  - fixed BER parsing of incoming packets - silently discard the invalid ones
    according to RFC (#704443)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-12
changelog:
  - fixed UCD-SNMP::memory showing zero memory statistics, caused by reworked
    memory indexing in hrFSTable patch (#702626)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-10
changelog:
  - fixed SNMP GET returning noCreation error instead of unknown OID
    error in ifTable (#587785)
  - fixed rare race condition when reading RPM database (#557758)
  - fixed output of snmptranslate tool when displaying ranges of UNSIGNED
    type (#645303)
  - fixed value of IP-MIB::ipv6InterfaceForwarding (#645317)
  - fixed exit code of SNMP utilities when parsing of command line arguments
    fails (#574035)
  - reworked hrFSTable and hrStorageTable, now the devices keep stable indexes
    across device remounts (#595322)
  - fixed documentation of '-D[token]' option (#613584)
  - fixed value of IP-MIB::ReasmReqds counter (#584807)
  - the logrotate configuration file does not restart full snmpd service now
    (#584769)
  - UCD-SNMP-MIB::dskTable was enhanced with 64 bit statistics of disk usage,
    available and free space (#664523)
  - fixed man page of 'snmpnetstat' - '-Cp' must be used instead of '-CP'
    (#556842)
  - fixed linkUp/DownTraps to contain ifIndex, ifAdminStatus,
    and ifOperStatus as described in the man page (#583807)
  - fixed IF-MIB::ifSpeed of interfaces, that are down (#561882)
  - fixed responding to requests on a multihost machine (#600319)
  - fixed the automated test suite running with udp6 and tcp6 transports
    (#587617)
  - fixed hrStorageTable on big-endian systems (#659354)
  - fixed errors reported by configure script during package recompilation
    (#591416)
  - fixed UDP-MIB::udpTable indexes on big-endian systems (#556824)
  - fixed rare race condintion when populating UCD-SNMP-MIB::prTable,
    which could result in some entries missing in the table (#630905)
  - fixed snmpd spamming log 'error on subcontainer '' insert (-1)' (#554956)
  - fixed snmpd spamming log 'looks like a 64bit wrap, but prev!=new' (#653780)
  - fixed snmptrapd leaking memory when processing traps in embedded perl
    (#676955)
  - fixed ipv6IfTable - new interfaces were not added there (#680347)
  - fixed rare race condition in hrSWRunTable (#683142)
  - fixed proxying of out-of-tree GETNEXT requests (#663863)
  - added 'realStorageUnits' config file option to support large (>16 TB) storage
    devices in hrStorageTable (#654384)
  - fix file descriptor leak in RMON-MIB (#561875)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-8
changelog:
  - fix possible crash when 64-bit counters in ipSystemStatsTable get
    bigger than 2^32 (#514703)
  - fix memory leak in ipNetToPhysicalTable (#515650)
  - fix periodical memory leaks in various MIBs (#518633)
  - create MIB indexes in /var/lib/net-snmp to fix SELinux alerts in applications
    (#523249)
  - fix multilib issues in net-snmp and net-snmp-devel packages (#521820)
  - allow snmpusm to create views with OIDs larger than 255 (#527364)
  - plug memory leak in processing of GETNEXT request on last item in
    mteEventSetTable (#515650)
  - suppress showing of "truncating unsigned value to 32 bits" message in Net-SNMP
    utilities (#528164)
  - fix endless loop in ipDefaultRouterTable when there are more default routes
    with the same destination (#504742)
  - suppress logging of "truncating integer value > 32 bits" in IP-MIB and TCP-MIB
    when the counters overflow 32 bits (#507528)
  - fix responding to broadcast requests (#521175)
  - fix ipNetToPhysicalTable and ipNetToMediaTable with network interfaces with
    long HW address (like InfiniBand) (#543499)
  - fix IP address size in ipCidrRouteTable on 64 bit platforms (#547698)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-6
changelog:
  - fix command line options related to logging (#477768)
  - don't spam log with 'diskio.c: don't know how to handle X request'
    (#474093)
  - add ipAddressSpinLock OID (#479609)
  - fix reloading of trapsink and trap2sink entries on SIGHUP (#468147)
  - fix reporting of IF-MIB::ifSpeed of 10GB/s interfaces (#464061)
  - backport skipNFSInHostResources option (#461631)
  - implement ipNetToPhysicalLastUpdated OID (#477092)
  - implement RMON-MIB::etherStatsJabbers (#468832)
  - fix memory leak in SCTP-MIB (#497280)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-1
changelog:
  - rebase to net-snmp-5.3.2.2 (#454977)
  - introduce new "dontLogTCPWrappersConnects" config file option
    to reduce logging of incomming connections (#448664)
  - introduce new "v1trapaddress" config file option
    which allows setting agent address inside SNMPv1 traps (#426355)
  - correctly recover when admin starts snmpd or snmptrapd with
    wrong port specifier (#449351)
  - update snmpd.conf man page to emphasize necessity of explicit port
    specification in 'trapsess' option (#436452)
  - net-snmp.rpm requires now the same version and release of net-snmp-libs
    (#434746)
  - 32-bit ifTable counters are now updated (#438151)
  - fix hrProcessorLoad OID (#431439)
  - fix documentation of 'exec' statement - it does not cache results
    (#431519)
  - fix inetNetToMediaTable processing, some entries could be missing
    when ipv6 kernel module is removed (#450076)
  - fix memory leak on UDP transport creation (#454294)
  - add SCTP-MIB implementation (#435110)
  - fix a filedescriptor leak in hrSWRunTable (#458009)
  - allow 16bit ifIndex (#458937)
  - move /etc/snmp/snmpd.options to /etc/sysconfig and add snmptrapd.options
    file (#459054)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-25
changelog:
  - fix buffer overflow in perl module (CVE-2008-2292) (#449898)
  - fix SNMPv3 authentication checks (unknown CVE) (#449898)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-23
changelog:
  - add ipIfStatsTable to build
  - make ipv6ScopeZoneIndexTable loading quiet (#433446)
  - make ipAddressPrefixTable loading quiet (#253399 related)
  - fix inetToMediaTable to recover from error when ipv6 kernel module is 
    not present (#431977)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-20
changelog:
  - fix snmpwalk / bulkwalk on TCP scalars (#248342)
  - fix bulkwalk security flaw (#366631)
  - interface names can be longer than 8 characters (#357121)
  - aliased interfaces have correct netmask and broadcast addresses
    (#357121)
  - fix icmpStatsTable (#256041)
  - fix race condition when reading /proc/*/cmdline (#311261)
  - fix hostname logging of snmptrapd (#270941)
  - fix race condition when reading process status (#252216)
  - fix TCP support (#251332)
  - fix reading of agentsecname and iquerysecname from config file
    (#338981, #311761)
  - fix disk statistics of mount points with spaces (#348681)
  - store temporary files to /var/run/snmpd to prevent
    users to modify them and to make selinux happy (#401211)
  - print more meaningful message when interface changes its ifIndex
    (#396141)
  - fix hrDeviceStatus and hrDeviceErrors missing during walk
    (#419511)
  - correctly cut values to 32bits in UCD-DISKIO-MIB, preventing
    "truncating integer value > 32 bits" to appear (#386821)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-15
changelog:
  - fix sending SNMPv1 traps on v2 connections (#236933)
  - fix ugly error messages when more interfaces share one IP addr.
    (#223236)
  - build with rpm-devel to support HOST-RESOURCES-MIB::hrSWInstalled
    (#232870)
  - store pid in /var/run/snmpd.pid (240470)
  - fix wrong sprintf in path generation (#240609)
  - fix too verbose snmpassert (#239083)
  - fix perl bulkwalk (#238145)
  - extend ipv6 support of some MIBs (#242483)


author: Radek Vokal <rvokal@redhat.com> 5.3.1.0-5
changelog:
  - SMUX support is still needed .. will disappear later!
  - static libs should be in devel not libs (#203571)
  - fix lm_sensors issues


author: Radek Vokal <rvokal@redhat.com> 5.3.1.pre2-1
changelog:
  - update to 5.3.1.pre2
  - fix multilib issues (#192736)
    On system with /usr/lib64 use net-snmp-config64 and net-snmp-config64.h


author: Radek Vokál <rvokal@redhat.com> 5.3-7
changelog:
  - fix parsing of /proc/diskstats
  - fix disman monitor crash
  - fix perl vendor name
  - fix OID lookup fail


author: Radek Vokal <rvokal@redhat.com> 5.3-2
changelog:
  -  Security fix. Bug granting write access to read-only users 
     or communities which were configured  using the "rocommunity" 
     or "rouser" snmpd.conf tokens fixed


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-4
changelog:
  - check for header files in configure
  - patch for SNMPv3 traps / session user creation (net-snmp bz#1374087)


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-0.rc6.1
changelog:
  - update to rc6, snmpnetstat changes due to license problems
  - persistent files in directory defined by snmp.conf persistentDir are 
    loaded at startup


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-12
changelog:
  - session free fixed, agentx modules build fine (#157851)
  - fixed dependency for net-snmp libs (#156932)


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-5
changelog:
  - 64bit needed some changes, was causing timeouts on 64bit archs!? 
  - affects bugs #125432 and #132058


author: Radek Vokal <rvokal@redhat.com> - 5.1.2-3
changelog:
  - patch from CVS - kill extra carriage return (#144917)
  - removed patch for interface indexing - doesn't show virtual interfaces


author: Radek Vokal <rvokal@redhat.com> 5.1.2-12
changelog:
  - snmpd crash with 'interfaces' directives in snmpd.conf fixed #139010
  - rather dirty patch fixing conf directory for net-snmp-config


author: Phil Knirsch <pknirsch@redhat.com> 5.1.2-9
changelog:
  - Droped obsolete lm-sensors patch and enabled lmSensors module
  - Marked several patches to be removed for 5.1.3


author: Radek Vokal <rvokal@redhat.com> 5.1.2-4
changelog:
  - New prereq for net-snmp-devel
  - lelf check removed from configure.in (#128748)
  - fixed snmpd coredump when sent SIGHUP (#127314)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.1-2
changelog:
  - Added Kaj J. Niemi that fixes ipAdEntIfIndex problem (#119106)
  - Added Kaj J. Niemi to shut up memshared message for 2.6 kernel (#119203)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-12
changelog:
  - Hacked an ugly perl hack to get rid of perl RPATH problems.
  - Fixed 64bit patch and applied it. ;-)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-9
changelog:
  - Reverted removal of _includir redefiniton due to php-snmp dependancy.
  - Remove SO_BSDCOMPAT setsockopt() call, deprecated.


author: Phil Knirsch <pknirsch@redhat.com> 5.1-3
changelog:
  - Removed snmpcheck again, needs perl(Tk) which we don't ship (#111194).
  - Fixed getopt definition in include file (#111209).
  - Included Kaj J. Niemi's patch for broken perl module (#111319).
  - Included Kaj J. Niemi's patch for broken async getnext perl call (#111479).
  - Included Kaj J. Niemi's patch for broken hr_storage (#111502).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-2
changelog:
  - Included BuildPrereq on lm_sensors-devel on x86 archs (#110616).
  - Fixed deprecated initscript options (#110618).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-1
changelog:
  - Updated to latest net-snmp-5.1 upstream version.
  - Tons of specfile and patch cleanup.
  - Cleaned up perl stuff (mib2c etc, see #107707).
  - Added lm_sensors support patch for x86 archs from Kaj J. Niemi (#107618).
  - Added support for custom mib paths and mibs to snmptrapd initscript (#102762)


author: Phil Knirsch <pknirsch@redhat.com> 5.0.9-1
changelog:
  - Updated to latest upstream version net-snmp-5.0.9
  - Added patch to fix net-snmp-perl problems (#105842).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.8-2
changelog:
  - Hack to make it build on 64bit platforms with /usr/lib64 correctly.
  - Fixed bug #85071 (leak of open descriptors for ipv6).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.1-5
changelog:
  - Added --enable-ucd-snmp-compatibility for compatibility with older version
    and fixed installation thereof.
  - Got rid of the perl(Tk) dependancy by removing snmpcheck.
  - Include /usr/include/ucd-snmp in the filelist.
  - Fixed a problem with the ucd-snmp/version.h file.


author: Phil Knirsch <pknirsch@redhat.com> 4.2.3-4
changelog:
  - Added the snmptrapd init script as per request (#49205)
  - Fixed the again broken rpm query stuff (#57444)
  - Removed all old and none-used db related stuff (libs and header checks/files)


author: Phil Knirsch <phil@redhat.de> 4.2.3-1
changelog:
  - Update to 4.2.3 final.
  - Fixed libtool/rpath buildroot pollution problem.
  - Fixed library naming problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a server segfault for snmpset operation (#53640). Thanks to Josh Giles
    and Wes Hardaker for the patch.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Final bcm5820 fix. Last one was broken.
  - Fixed bugzilla bug (#51960) where the binaries contained rpath references.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a couple of security issues:
    o /tmp race and setgroups() privilege problem
    o Various buffer overflow and format string issues.
    o One signedness problem in ASN handling.
  - Fixed an important RFE to support bcm5820 cards. (#51125)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Removed tkmib from the package once again as we don't ship the Tk.pm CPAN
    perl module required to run it (#49363)
  - Added missing Provides for the .so.0 libraries as rpm doesn't seem to find
    those during the build anymore (it used to) (#46388)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Enabled IPv6 support (RFE #47764)
  - Hopefully final fix of snmpwalk problem (#42153). Thanks to Douglas Warzecha
    for the patch and Matt Domsch for reporting the problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to 4.2.1. Removed 2 obsolete patches (fromcvs and #18153)
  - Include /usr/share/snmp/snmpconf in %files


author: Matt Wilson <msw@redhat.com>
changelog:
  - configure with --enable-reentrant and added "smux" and "agentx" to
    --with-mib-modules= argument (#29626)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - don't depend on /etc/init.d so that package will work with 6.2.
  - perl path fiddles no longer needed.
  - rely on brp-compress frpm rpm to compress man pages.
  - patch from ucd-snmp CVS (Wes Hardaker).
  - configure.in needs to check for rpm libraries correctly (#23033).
  - add simple logrotate script (#21399).
  - add options to create pidfile and log with syslog with addresses (#23476).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - tkmib doco had #!/usr/bin/perl55
  - include snmpcheck and tkmib again (still needs some CPAN module, however).


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-30
changelog:
  - fix CVE-2014-0221 - recursion in DTLS code leading to DoS
  - fix CVE-2014-3505 - doublefree in DTLS packet processing
  - fix CVE-2014-3506 - avoid memory exhaustion in DTLS
  - fix CVE-2014-3508 - fix OID handling to avoid information leak
  - fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-27
changelog:
  - fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
  - fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
  - enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
    environment variable is set (fixes CVE-2012-4929 #857051)
  - use __secure_getenv() everywhere instead of getenv() (#839735)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-23
changelog:
  - fix problem with the SGC restart patch that might terminate handshake
    incorrectly
  - fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
  - fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-22
changelog:
  - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery
    vulnerability and additional DTLS fixes (#771770)
  - fix for CVE-2011-4109 - double free in policy checks (#771771)
  - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
  - fix for CVE-2011-4619 - SGC restart DoS attack (#771780)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-21
changelog:
  - add known answer test for SHA2 algorithms (#740866)
  - make default private key length in certificate Makefile 2048 bits
    (can be changed with PRIVATE_KEY_BITS setting) (#745410)
  - fix incorrect return value in parse_yesno() (#726593)
  - added DigiCert CA certificates to ca-bundle (#735819)
  - added a new section about error states to README.FIPS (#628976)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-19
changelog:
  - presort list of ciphers available in SSL (#688901)
  - accept connection in s_server even if getaddrinfo() fails (#561260)
  - point to openssl dgst for list of supported digests (#608639)
  - fix handling of future TLS versions (#599112)
  - added VeriSign Class 3 Public Primary Certification Authority - G5
    and StartCom Certification Authority certs to ca-bundle (#675671, #617856)
  - upstream fixes for the CHIL engine (#622003, #671484)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-17
changelog:
  - fix CVE-2010-4180 - completely disable code for
    SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG (#659462)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-15
changelog:
  - fix CVE-2010-0433 - do not pass NULL princ to krb5_kt_get_entry which
    in the RHEL-5 and newer versions will crash in such case (#569774)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-14
changelog:
  - fix CVE-2009-3555 - support the safe renegotiation extension and
    do not allow legacy renegotiation on the server by default (#533125)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-13
changelog:
  - fix CVE-2009-2409 - drop MD2 algorithm from EVP tables (#510197)
  - fix CVE-2009-4355 - do not leak memory when CRYPTO_cleanup_all_ex_data()
    is called prematurely by application (#546707)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12
changelog:
  - abort if selftests failed and random number generator is polled
  - mention EVP_aes and EVP_sha2xx routines in the manpages
  - add README.FIPS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-8
changelog:
  - support multiple CRLs with same subject in a store (#457134)
  - fix CVE-2009-0590 - reject incorrectly encoded ASN.1 strings (#492304)
  - seed FIPS rng directly from kernel random device
  - do not require fipscheck to build the package (#475798)
  - call pairwise key tests in FIPS mode only (#479817)
  - do not crash when parsing bad mime data (#472440)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-5
changelog:
  - implement the integrity checking inside libcrypto so OpenSSL
    can be used in FIPS mode by the fipscheck library


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-2
changelog:
  - more changes for FIPS validation (#444800)
  - correctly initialize default CA paths (#450987)
  - allow disabling zlib support through environment (#442624)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-10
changelog:
  - compile with -march=z900 on s390 for performance improvements (#250818)
  - make ssl session ID matching strict (#233599)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-9
changelog:
  - fix CVE-2007-3108 - side channel attack on private keys (#250581)
  - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309881)
  - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321221)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-7
changelog:
  - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276)
  - fix CVE-2006-2940 - parasitic public keys DoS (#207274)
  - fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
  - fix CVE-2006-4343 - sslv2 client DoS (#206940)


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - add ipv6 support to s_client and s_server (by Jan Pazdziora) (#198737)
  - add patches for BN threadsafety, AES cache collision attack hazard fix and
    pkcs7 code memleak fix from upstream CVS


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8b-1
changelog:
  - upgrade to new version, stays ABI compatible
  - there is no more linux/config.h (it was empty anyway)


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8a-6
changelog:
  - fix stale open handles in libica (#177155)
  - fix build if 'rand' or 'passwd' in buildroot path (#178782)
  - initialize VIA Padlock engine (#186857)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8a-4
changelog:
  - fix build (-lcrypto was erroneusly dropped) of the updated libica
  - updated ICA engine to 1.3.6-rc3


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-10
changelog:
  - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
    disables the countermeasure against man in the middle attack in SSLv2
    (#169863)
  - use sha1 as default for CA and cert requests - CAN-2005-2946 (#169803)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-9
changelog:
  - add *.so.soversion as symlinks in /lib (#165264)
  - remove unpackaged symlinks (#159595)
  - fixes from upstream (constant time fixes for DSA,
    bn assembler div on ppc arch, initialize memory on realloc)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-7
changelog:
  - fix CAN-2005-0109 - use constant time/memory access mod_exp
    so bits of private key aren't leaked by cache eviction (#157631)
  - a few more fixes from upstream 0.9.7g


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-6
changelog:
  - use poll instead of select in rand (#128285)
  - fix Makefile.certificate to point to /etc/pki/tls
  - change the default string mask in ASN1 to PrintableString+UTF8String


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-4
changelog:
  - move certificates to _sysconfdir/pki/tls (#143392)
  - move CA directories to _sysconfdir/pki/CA
  - patch the CA script and the default config so it points to the
    CA directories


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-3
changelog:
  - uninitialized variable mustn't be used as input in inline
    assembly
  - reenable the x86_64 assembly again


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-2
changelog:
  - add back RC4_CHAR on ia64 and x86_64 so the ABI isn't broken
  - disable broken bignum assembly on x86_64


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-1
changelog:
  - reenable optimizations on ppc64 and assembly code on ia64
  - upgrade to new upstream version (no soname bump needed)
  - disable thread test - it was testing the backport of the
    RSA blinding - no longer needed
  - added support for changing serial number to 
    Makefile.certificate (#151188)
  - make ca-bundle.crt a config file (#118903)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7e-1
changelog:
  - new upstream source, updated patches
  - added patch so we are hopefully ABI compatible with upcoming
    0.9.7f


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-33
changelog:
  - add an intermediate <openssl/opensslconf.h> which points to the right
    arch-specific opensslconf.h on multilib arches


author: Joe Orton <jorton@redhat.com> 0.9.7a-27
changelog:
  - updated ca-bundle.crt: removed expired GeoTrust roots, added
    freessl.com root, removed trustcenter.de Class 0 root


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-25
changelog:
  - add dependency on zlib-devel for the -devel package, which depends on zlib
    symbols because we enable zlib for libssl (#102962)


author: Phil Knirsch <pknirsch@redhat.com> 0.9.7a-24
changelog:
  - Use /dev/urandom instead of PRNG for libica.
  - Apply libica-1.3.5 fix for /dev/urandom in icalinux.c
  - Use latest ICA engine patch from IBM.


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-22
changelog:
  - add -Wa,--noexecstack to RPM_OPT_FLAGS so that assembled modules get tagged
    as not needing executable stacks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add security fixes for protocol parsing bugs (CAN-2003-0543, CAN-2003-0544)
    and heap corruption (CAN-2003-0545)
  - update RHNS-CA-CERT files
  - ease back on the number of threads used in the threading test


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport fix for engine-used-for-everything from 0.9.7b
  - backport fix for prng not being seeded causing problems, also from 0.9.7b
  - add a check at build-time to ensure that RSA is thread-safe
  - keep perlpath from stomping on the libica configure scripts


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-5
changelog:
  - add patch to harden against Klima-Pokorny-Rosa extension of Bleichenbacher's
    attack (CAN-2003-0131)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-8
changelog:
  - add fix to guard against attempts to allocate negative amounts of memory
  - add patch for CAN-2003-0078, fixing a timing attack


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-6
changelog:
  - EVP_DecryptInit should call EVP_CipherInit() instead of EVP_CipherInit_ex(),
    to get the right behavior when passed uninitialized context structures
    (#83766)
  - build with -mcpu=ev5 on alpha family (#83828)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-30
changelog:
  - add configuration stanza for x86_64 and use it on x86_64
  - build for linux-ppc on ppc
  - start running the self-tests again


author: Gary Benson <gbenson@redhat.com> stronghold-0.9.6c-1
changelog:
  - upgrade to 0.9.6c
  - bump BuildArch to i686 and enable assembler on all platforms
  - synchronise with shrimpy and rawhide
  - bump soversion to 3


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-4
changelog:
  - move man pages back to %{_mandir}/man?/foo.?ssl from
    %{_mandir}/man?ssl/foo.?
  - add an [ engine ] section to the default configuration file


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-3
changelog:
  - add patches for AEP hardware support
  - add patch to keep trying when we fail to load a cert from a file and
    there are more in the file
  - add missing prototype for ENGINE_ubsec() in engine_int.h


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a script for creating dummy certificates
  - move man pages from %{_mandir}/man?/foo.?ssl to %{_mandir}/man?ssl/foo.?


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6a
  - use the build-shared target to build shared libraries
  - bump the soversion to 2 because we're no longer compatible with
    our 0.9.5a packages or our 0.9.6 packages
  - drop the patch for making rsatest a no-op when rsa null support is used
  - put all man pages into <section>ssl instead of <section>
  - break the m2crypto modules into a separate package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6
  - enable MD2
  - use the libcrypto.so and libssl.so targets to build shared libs with
  - bump the soversion to 1 because we're no longer compatible with any of
    the various 0.9.5a packages circulating around, which provide lib*.so.0


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - re-disable MD2 -- the EVP_MD_CTX structure would grow from 100 to 152
    bytes or so, causing EVP_DigestInit() to zero out stack variables in
    apps built against a version of the library without it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable some inline assembly, which on x86 is Pentium-specific
  - re-enable MD2 (see http://www.ietf.org/ietf/IPR/RSA-MD-all)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove -Wa,* and -m* compiler flags from the default Configure file (#20656)
  - add the CA.pl man page to the perl subpackage


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - byte-compile python extensions without the build-root
  - adjust the makefile to not remove temporary files (like .key files when
    building .csr files) by marking them as .PRECIOUS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.5a, modified for U.S.
  - add perl as a build-time requirement
  - move certificate makefile to another package
  - disable RC5, IDEA, RSA support
  - remove optimizations for now


author: Bernhard Rosenkrdnzer <bero@redhat.de>
changelog:
  - inital packaging
  - changes from base:
    - Move /usr/local/ssl to /usr/share/ssl for FHS compliance
    - handle RPM_OPT_FLAGS


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.5-123
changelog:
  - Remove gconv transliteration loadable modules support (CVE-2014-5119,
    - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.5-121
changelog:
  - Fix return code when starting an already started nscd daemon (#979413).
  - Fix getnameinfo for many PTR record queries (#1020486).
  - Return EINVAL error for negative sizees to getgroups (#995207).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.5-119
changelog:
  - Add support for newer L3 caches on x86-64 and correctly count
    the number of hardware threads sharing a cacheline (#1003420).


author: Carlos O'Donell <carlos@redhat.com> - 2.5-114
changelog:
  - Fix multibyte character processing crash in regexp (CVE-2013-0242, #951132)
    - Fix getaddrinfo stack overflow resulting in application crash (CVE-2013-1914, #951132)


author: Jeff Law <law@redhat.com> - 2.5-106
changelog:
  - Fix errno for various overflow situations in vfprintf.  Add
      missing overflow checks. (#857387)


author: Jeff Law <law@redhat.com> - 2.5-105
changelog:
  - Handle failure of _nl_explode_name in all cases (#848481)
    - Define the default fuzz factor to 2 to make it easier to manipulate
      RHEL 5 RPMs on RHEL 6 and newer systems.


author: Jeff Law <law@redhat.com> - 2.5-102
changelog:
  - Really fix POWER4 strncmp crash (#766832).
  - Fix integer overflow leading to buffer overflow in strto* (#847930)


author: Patsy Franklin <patsy@redhat.com> - 2.5-97
changelog:
  - Fix iconv() segfault if the invalid multibyte character 0xffff is input when
    converting from IBM930.    (#823905)


author: Jeff Law <law@redhat.com> - 2.5-92
changelog:
  - Fix return code when stopping already stopped nscd daemon (#678227)
  - Remove MAP_32BIT for pthread stack mappings,
    use MAP_STACK instead (#641094)
  - Fix setuid vs sighandler_setxid race (#769852)
  - Fix access after end of search string in regex matcher (#757887)
  - Fix POWER4 strncmp crash (#766832)
  - Fix SC_*CACHE detection for X5670 cpus (#692182)
  - Fix parsing IPV6 entries in /etc/resolv.conf (#703239)
  - Fix double-free in nss_nis code (#500767)


author: Jeff Law <law@redhat.com> - 2.5-89
changelog:
  - Do not override TTL of CNAME with TTL of its alias (#808014)
  - Fix short month names in fi_FI locale #(657266).
  - Fix nscd crash for group with large number of members (#788989)


author: Jeff Law <law@redhat.com> - 2.5-88
changelog:
  - Fix Slovakia currency (#799853)
  - Fix getent malloc failure check (#806403)
  - Fix short month names in zh_CN locale (#657588)
  - Fix decimal point symbol for Portuguese currency (#710216)
  - Avoid integer overflow in sbrk (#767358)
  - Avoid race between {,__de}allocate_stack and __reclaim_stacks during
    fork (#738665)
  - Fix race between IO_flush_all_lockp & pthread_cancel (#751748)


author: Jeff Law <law@redhat.com> - 2.5-79
changelog:
  - Complete the numeric settings fix (#675259)
  - Complete the change for error codes from pthread_create (#707998)


author: Andreas Schwab <schwab@redhat.com> - 2.5-67
changelog:
  - ldd: never run file directly (#531160)
  - Implement greedy matching of weekday and month names (#657570)
  - Fix incorrect numeric settings (#675259)
  - Implement new mode for NIS passwd.adjunct.byname table (#678318)
  - Query NIS domain only when needed (#703345)
  - Count total processors using sysfs (#706894)
  - Translate clone error if necessary (#707998)
  - Workaround kernel clobbering robust list (#711531)


author: Andreas Schwab <schwab@redhat.com> - 2.5-66
changelog:
  - Use correct type when casting d_tag (#599056, CVE-2010-0830)
  - Report write error in addmnt even for cached streams (#688980,
    CVE-2011-1089)


author: Andreas Schwab <schwab@redhat.com> - 2.5-64
changelog:
  - Don't allocate executable stack when it cannot be allocated in the
    first 4G (#448011)
  - Initialize resolver state in nscd (#676039)
  - No cancel signal in unsafe places (#684808)


author: Andreas Schwab <schwab@redhat.com> - 2.5-62
changelog:
  - Avoid too much stack use in fnmatch (#681054, CVE-2011-1071)
  - Properly quote output of locale (#625893, CVE-2011-1095)
  - Don't leave empty element in rpath when skipping the first element,
    ignore rpath elements containing non-isolated use of $ORIGIN when
    privileged (#667974, CVE-2011-0536)
  - Fix handling of newline in addmntent (#559579, CVE-2010-0296)


author: Andreas Schwab <schwab@redhat.com> - 2.5-54
changelog:
  - Add timestamps to nscd logs (#527558)
  - Fix index wraparound handling in memusage (#531576)
  - Handle running out of buffer space with IPv6 mapping enabled (#533367)
  - Don't deadlock in __dl_iterate_phdr while (un)loading objects (#549813)
  - Avoid alloca in setenv for long strings (#559974)
  - Recognize POWER7 and ISA 2.06 (#563563)
  - Add support for AT_BASE_PLATFORM (#563599)
  - Restore locking in free_check (#585674)
  - Fix lookup of collation sequence value during regexp matching (#587360)


author: Jakub Jelinek <jakub@redhat.com> 2.5-40
changelog:
  - add a barrier to ATOMIC_FASTBINS _int_free code needed
    on ppc/ppc64 (#508395)
  - don't stop parsing fopen mode string after seing 'c'
    letter (#509853)


author: Jakub Jelinek <jakub@redhat.com> 2.5-39
changelog:
  - force malloc hook pointers into register to avoid rereading them
    from memory non-atomically (#502901, BZ#9957)
  - avoid extraneous comma at the end of enum in dlfcn.h (#504704)


author: Jakub Jelinek <jakub@redhat.com> 2.5-38
changelog:
  - add optional experimental malloc (enable with MALLOC_PER_THREAD=1
    in environment, #494758)
  - nscd backport (#483636)


author: Jakub Jelinek <jakub@redhat.com> 2.5-37
changelog:
  - remove const attribute from sysconf (#490821, BZ#3493)
  - add RUSAGE_THREAD definition (#484214)
  - update i?86/x86_64 cache info for sysconf on newer CPUs


author: Jakub Jelinek <jakub@redhat.com> 2.5-36
changelog:
  - nscd GC fixes (#483636, BZ#5382, BZ#5381, BZ#9741, BZ#9750)
  - change mtrim to trim all arenas, not just main_arena (#403231)
  - fix a corner case in realloc (#478499)
  - fix a setlocale race (#455580, BZ#6712)
  - fix getifaddrs for Infiniband interfaces (#463252, BZ#6589)
  - use private futexes for process private PI mutexes (#495955, BZ#6955)
  - optimize pthread_mutex_{,un}lock for the most common mutex types (#467316)
  - fix getgrouplist with [!NOTFOUND=return] (#470768)
  - don't open /var/run/utmp in setutent_file read-write unnecessarily
    to avoid audit messages (#475332)
  - fix dlopen memory leak (#476725, BZ#6763)
  - fix crashes when fork is running in one thread concurrently with
    pthread stack cache updates in another thread (#477705)
  - fix getent to not print comma in between network aliases (#484082)
  - attempt to preserve nscd process name in paranoia mode restarts
    (#490010)
  - fix inet6_opt_init (#488748, BZ#5760)
  - fix getnameinfo with both nodename and servname NULL
    and NI_NAMEREQD in flags (#489419, BZ#7080)
  - fix inet6_rth_add (#494850, BZ#9881)
  - fix inet6_rth_reverse (#494849, BZ#9880)
  - fix _dl_runtime_profile on s390x (#470300)


author: Jakub Jelinek <jakub@redhat.com> 2.5-35
changelog:
  - increase default buffer size in opendir, if malloc fails,
    retry malloc with smaller size (#484440)


author: Jakub Jelinek <jakub@redhat.com> 2.5-25
changelog:
  - fix yp_order (#435519, BZ#5854)
  - new x86_64 optimized memset (#437394)
  - fix ppc64 dynamic linker synchronization (#441702, BZ#5741)
  - malloc speedup (#451184, #460154, BZ#4349)
  - document that setenv and putenv aren't thread-safe (#316791)
  - speed up qsort (#435182)
  - provide unwind info for x86_64 signal return pad (#445259)
  - use DNS provided TTL for nscd hosts cache (#454299)
  - robustify nscd.conf reading (#438456, BZ#5818)
  - power4/power6 math backports (#440103)
  - fix expf (BZ#3406)
  - fix ISO 646-IRV iconv error handling (BZ#6461)
  - fix setvbuf (BZ#6719)
  - fix unbuffered vfprintf (#455360)


author: Jakub Jelinek <jakub@redhat.com> 2.5-23
changelog:
  - fix gettext race conditions (#439486, BZ#5058, BZ#5443)
  - fix x86_64 pthread_mutex_timedlock (#434601)
  - only service sshd condrestart if /etc/rc.d/init.d/sshd exists
    (#428859)


author: Jakub Jelinek <jakub@redhat.com> 2.5-20
changelog:
  - allow debugging of threaded statically linked binaries (#239653)
  - fix sscanf/swscanf if errno is set to EINTR on entry (BZ#4745)
  - fix forkpty error handling (BZ#4813)
  - fix popen if some active previous popen's stream has fd 0 or 1
    (#248281)
  - fix dlinfo RTLD_DI_SERINFO* with empty entry in DT_R*PATH or
    LD_LIBRARY_PATH (BZ#4776)
  - further gettext out of memory handling fixes (#247788)
  - fix i?86 pthread_rwlock_timed{rd,wr}lock
  - add SHA-256 and SHA-512 hashing to crypt(3) (#249477, #380751)
  - power6 updates (#253116)
  - support optimistic addresses in getaddrinfo (#259681)
  - si_LK fixes (#282201)
  - fix sporadic hangs in clntudp_call (#339821)
  - getaddrinfo sorting changes (not turned on by default, to enable
    them /etc/gai.conf needs to be present and with scopev4
    rules, #352021)
  - fix nscd paranoia restarting when one of the caches is
    disabled (#352321)
  - add sfence to x86_64 memset after movnti instructions (#371561)
  - fix iso-2022-jp//translit iconv bugs (#397021)
  - fix calloc with mlocked memory (#405781)
  - optimized x86_64 memcpy (#196882)
  - misc fixes (BZ#4858, BZ#4963, BZ#5028, BZ#5071, BZ#5225, BZ#5277,
    BZ#5375, BZ#5378, BZ#5424, BZ#5435, BZ#5451, BZ#5454, BZ#5541)


author: Jakub Jelinek <jakub@redhat.com> 2.5-19
changelog:
  - fix an ABBA deadlock in ld.so (#295891)
  - workaround for bugs in ia64 /emul/ia32-linux hack (#253961)
  - nis_list fix (#254115)


author: Jakub Jelinek <jakub@redhat.com> 2.5-17
changelog:
  - fix copying of power4 ppc{,64} ld.so during %install
  - disable workaround for #210748 and #211133, instead backport
    ld.so locking fixes from the trunk (#235026)
  - Korean charsets additions (BZ#3954, BZ#3955)
  - fix handling of 2001::/32 IPv6 addresses in getaddrinfo (BZ#4102)
  - add inline optimization for fgetc_unlocked
  - fix handling of 172.{1[7-9],2[0-9],3[01]}/16 IPv4 addresses in
    getaddrinfo
  - make sure NULL checks in routines with nonnull attribute aren't
    optimized away
  - don't write uninitialized padding bytes to nscd socket
  - avoid misaligned reads/writes in gethostbyname_r (#243967, BZ#4381)
  - fix dl{,v}sym, dl_iterate_phdr and dlopen if some library is
    mapped into ld.so's inter-segment hole on x86_64 (#244545)
  - fix LD_AUDIT=a:b program (#180432)


author: Jakub Jelinek <jakub@redhat.com> 2.5-16
changelog:
  - only build 31-bit shared libraries with -march=z900, *.a and *.o
    in glibc-devel should still work with g5 and g6 CPUs (#228127)
  - build ppc and ppc64 base shared libraries with -mcpu=power4,
    i.e. only support power4 and newer CPUs, *.a and *.o in
    glibc-devel should still work on any powerpc CPU (#241003)
  - don't crash on pseudo-zero long double values passed to
    *printf on i?86/x86_64/ia64 (BZ#4586)
  - fix *printf %La and strtold with some hexadecimal floating point
    constants on ppc/ppc64
  - fix nextafterl on ppc/ppc64


author: Jakub Jelinek <jakub@redhat.com> 2.5-15
changelog:
  - robust mutex fixes (BZ#4512)
  - *printf fixes (BZ#4514)
  - as_IN updates (#218035)
  - use MADV_DONTNEED in malloc (#237711)
  - fix sem_timedwait on i?86 and x86_64
  - fix dladdr if some shared library is mapped into ld.so intersegment
    VM hole (#232224, BZ#4131)
  - fdatasync is a cancellation point (BZ#4465)
  - add a temporary hack to avoid reruning DSO initializers if dlopen
    is called from _dl_fini destructors (#234946)
  - build s390 31-bit libs with -march=z900, i.e. only support
    64-bit s390x CPUs (#228127)


author: Jakub Jelinek <jakub@redhat.com> 2.5-14
changelog:
  - add transliteration for <U2044> (BZ#3213)
  - fix *scanf with %f on hexadecimal floats without exponent (BZ#4342)
  - fix *printf with very large precisions for %s (#238406, BZ#4438)
  - fix inet_ntop size checking for AF_INET (BZ#4439)
  - for *printf %e avoid 1.000e-00, for exponent 0 always use + sign (#238431)
  - fix application crashes when doing NSS lookups through nscd
    mmapped databases and nscd decides to start garbage collection
    during the lookups (#219145, #225315)
  - fix NIS+ __nisfind_server (#235229)
  - assorted NIS+ speedups (#233460)
  - fix power6 libm compat symbols on ppc32 (#232633)
  - fix child refcntr in NPTL fork (#230198)
  - fix ifaddrs with many net devices on > 4KB page size arches (#230151)
  - fix pthread_mutex_timedlock on x86_64 (#228103)
  - fix HAVE_LIBCAP configure detection (#178934)
  - fix double free in fts_close (#222089)
  - fix vfork+execvp memory leak (#221187)
  - further localedef robustification (#203728)
  - fix printf with %g and values tiny bit smaller than 1.e-4 (#235864,
    BZ#4362, BZ#4070)
  - fix _XOPEN_VERSION (BZ#4364)
  - nexttoward*/nextafter* fixes (BZ#3306)
  - various fixes (BZ#3919, BZ#4101, BZ#4130, BZ#4181, BZ#4069, BZ#3458,
    BZ#3348, BZ#4344, BZ#4368, BZ#4305, BZ#4306)
  - fix nftw with FTW_CHDIR on / (BZ#4076)
  - nscd fixes (BZ#4074)
  - fix euidaccess (BZ#3842)
  - assorted locale data fixes (BZ#3322, BZ#3995, BZ#3884, BZ#3851, BZ#4411)
  - fix strptime (BZ#3944)
  - fix regcomp with REG_NEWLINE (BZ#3957)
  - fix %0lld printing of 0LL on 32-bit architectures (BZ#3902)
  - soft-fp fixes (BZ#2749)
  - further strtod fixes (BZ#3855)
  - update ru and sv translations
  - fix fesetround return value on ia64
  - fix nscd SIGHUP database invalidation


author: Jakub Jelinek <jakub@redhat.com> 2.5-9
changelog:
  - make sure pthread_kill doesn't return EINVAL even if
    the target thread exits in between pthread_kill ESRCH check
    and the actual tgkill syscall (#220420)


author: Jakub Jelinek <jakub@redhat.com> 2.5-8
changelog:
  - fix setcontext on ppc32 (#219107)
  - fix wide stdio after setvbuf (#217064, BZ#2337)
  - fix {j,m}rand48{,_r} on 64-bit arches (BZ#3747)
  - handle power6x AT_PLATFORM (#216970)
  - fix a race condition in getXXbyYY_r (#219145)
  - fix tst-pselect testcase


author: Jakub Jelinek <jakub@redhat.com> 2.5-7
changelog:
  - fix hasmntopt (#218802)
  - fix setusershell and getusershell (#218782)
  - strtod fixes (BZ#3664, BZ#3673, BZ#3674)
  - fix ttyname and ttyname_r with invalid file descriptor (#218276)
  - fix nis_getnames if the default domain doesn't contain at least
    two dots (#206483)
  - fix memusage with realloc (x, 0)


author: Jakub Jelinek <jakub@redhat.com> 2.5-6
changelog:
  - fix svc_run (#216834, BZ#3559)
  - make sure there is consistent timestamp for /etc/ld.so.conf,
    /etc/localtime and /etc/rpc between multilib glibc rpms
  - fix :include: /etc/alias handling (#215572)
  - update powerpc-cpu add-on to version 0.4 (#196319)
  - add power6x subdir to /lib/ and /lib/rtkaio/,
    link all libs from ../power6/* into them
  - update nl, sv, pl and tr translations
  - add mai_IN locale (#213415)
  - fix es_ES LC_TIME (BZ#3320)


author: Jakub Jelinek <jakub@redhat.com> 2.5-5
changelog:
  - remove bogus /usr/lib/librt.so.1 symlink (#213555)
  - fix memusage (#213656)
  - fix sysconf (_SC_LEVEL{2,3}_CACHE_SIZE) on Intel Core Duo
    CPUs
  - fix ld.so locking on dlopen failures (#213037, BZ#3429)
  - fix libthread_db.so on TLS_DTV_AT_TP architectures (#215513)
  - fix --inhibit-rpath (#214569)
  - fix _r_debug content when prelinked ld.so executes
    a program as its argument
  - handle new tzdata format to cope with year > 2037 transitions
    on 64-bit architectures
  - fix strxfrm
  - fix i?86 floor and ceil inlines (BZ#3451)


author: Jakub Jelinek <jakub@redhat.com> 2.5-4
changelog:
  - fix i?86 6 argument syscalls (e.g. splice)
  - fix rtld minimal realloc (BZ#3352)
  - fix RFC3484 getaddrinfo sorting according to rules 4 and 7 (BZ#3369)
  - fix xdrmem_setpos (#211452)


author: Jakub Jelinek <jakub@redhat.com> 2.5-3
changelog:
  - bump __GLIBC_MINOR__
  - increase PTHREAD_STACK_MIN on ppc{,64} to 128K to allow
    64K pagesize kernels (#209877)
  - speed up initgroups on NIS+ (#208203)


author: Jakub Jelinek <jakub@redhat.com> 2.5-2
changelog:
  - fix nscd database growing (#207928)
  - bypass prelinking when LD_DYNAMIC_WEAK=1 is in the environment


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-35
changelog:
  - fix glob with large number of matches (BZ#3253)
  - fix fchownat on kernels that don't support that syscall (BZ#3252)
  - fix lrintl on s390{,64}


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-34
changelog:
  - fix ppc{32,64} longjmp (BZ#3225)
  - fix user visible spelling errors (BZ#3137)
  - fix l{,l}rint{,f,l} around zero (BZ#2592)
  - avoid stack trampoline in s390{,x} makecontext


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-33
changelog:
  - fix dlclose (#206639)
  - don't load platform optimized libraries if kernel doesn't set
    AT_PLATFORM
  - fix ppc{32,64} libSegFault.so
  - use -mtune=generic even for glibc-devel.i386 (#206437)
  - fix /lib/librt.so.1 symlink


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-32
changelog:
  - on ppc* use just AT_PLATFORM and altivec AT_HWCAP bit for library selection
  - fix lrintl and lroundl on ppc{,64}
  - use hidden visibility on fstatat{,64} and mknodat in libc_nonshared.a


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-31
changelog:
  - fix pthread_cond_{,timed}wait cancellation (BZ#3123)
  - fix lrint on ppc32 (BZ#3155)
  - fix malloc allocating more than half of address space (BZ#2775)
  - fix mktime on 32-bit arches a few years after 2038 (BZ#2821)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-30
changelog:
  - add librtkaio, to use it add /%{lib}/rtkaio to your
    LD_LIBRARY_PATH or /etc/ld.so.conf
  - fix or_IN February name (#204730)
  - fix pthread_create called from cancellation handlers (BZ#3124)
  - fix regex case insensitive searches with characters where upper
    and lower case multibyte representations have different length
    (e.g. I and dotless i, #202991)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-29
changelog:
  - randomize resolver query ids before use instead after use (#205113)
  - fix resolver symver checking with DT_GNU_HASH (#204909)
  - put .hash section in glibc libraries at the end of RO segment
    when .gnu.hash is present


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-27
changelog:
  - allow $LIB and $PLATFORM in dlopen parameters even in suid/sgid (#204399)
  - handle $LIB/$PLATFORM in LD_LIBRARY_PATH
  - fix splice prototype (#204530)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-26
changelog:
  - real fix for the doubly linked list corruption problem
  - try harder in realloc to allocate memory (BZ#2684)
  - fix getnameinfo error reporting (#204122)
  - make localedef more robust on invalid input (#203728)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-25
changelog:
  - temporarily back out code to limit number of unsorted block
    sort iterations (#203735, #204027)
  - handle PLT symbols in dladdr properly (BZ#2683)
  - avoid malloc infinite looping for allocations larger than
    the system can allocate (#203915)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-23
changelog:
  - malloc fixes, especially for 32-bit arches (#202309)
  - further *_IN locale fixes (#200230)
  - fix get{serv,rpc}ent{,_r} if NIS map is empty (#203237)
  - fix /usr/bin/iconv (#203400)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-21
changelog:
  - if some test gets stuck, kill the tee process after make check
    finishes
  - build with -mtune=generic on i686 and x86_64


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-19
changelog:
  - adaptive malloc brk/mmap threshold
  - fix fchownat to use kernel syscall (if available) on many arches (#201870)
  - only define O_DIRECT with -D_GNU_SOURCE on ia64 to match all
    other arches (#201748)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-18
changelog:
  - NIS+ fixes
  - fix memusage and xtrace scripts (#200736)
  - redirect /sbin/service sshd condrestart std{out,err} to /dev/null
    when executed from glibc_post_upgrade


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-16
changelog:
  - fix dladdr on binaries/libraries with only DT_GNU_HASH and no
    DT_HASH (#200635)
  - fix early timeout of initgroups data in nscd (#173019)
  - add am/pm display to es_PE and es_NI locales (#167101)
  - fix nss_compat failures when nis/nis+ unavailable (#192072)


author: Roland McGrath <roland@redhat.com> 2.4.90-15
changelog:
  - fix missing destructor calls in dlclose (#197932)
  - enable transliteration support in all locales (#196713)
  - disallow RTLD_GLOBAL flag for dlmopen in secondary namespaces (#197462)
  - PI mutex support


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-12
changelog:
  - buildrequire gettext
  - enable fstatat64/newfstatat syscalls even on ppc*/s390*/ia64 (#196494)
  - fix out of memory behavior in gettext (#194321)
  - fix regex on multi-byte non-UTF-8 charsets (#193873)
  - minor NIS+ fixes (#190803)
  - don't use cancellable calls in posix_spawn* and only set{u,g}id
    current thread if requested (#193631)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-11
changelog:
  - don't exit from nscd -i <database> before the database is
    actually invalidated, add locking to prune_cache (#191464)
  - build glibc-devel.i386 static libraries with
    -mno-tls-direct-seg-refs -DNO_TLS_DIRECT_SEG_REFS
  - RFC3542 support (advanced API for IPv6; #191001, BZ##2693)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-8
changelog:
  - update from CVS
    - fix nss_compat when SETENT_BATCH_READ=TRUE is in /etc/default/nss
    - fix RFC3484 precedence table for site-local and ULA addresses (#188364)
    - fix a sunrpc memory leak


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-5
changelog:
  - update from CVS
    - some NIS+ fixes
    - allow overriding rfc3484 address sorting tables for getaddrinfo
      through /etc/gai.conf (sample config file included in %doc directory)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-4
changelog:
  - update from CVS
    - SETENT_BATCH_READ /etc/default/nss option for speeding up
      some usages of NIS+ (#188246)
    - move debug state change notification (#179208)
    - fix ldd script if one of the dynamic linkers is not installed (#190259)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-3
changelog:
  - update from CVS
    - fix a typo in nscd.conf (#190085)
    - fix handling of SIGHUP in nscd when some caches are disabled (#189978)
    - make nscd paranoia mode working with non-root server-user (#189779)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-2
changelog:
  - update from CVS
    - fix getaddrinfo (#190002)
    - add auto-propagate nscd.conf options (#177154)
    - fix nscd auditing (#169148)


author: Jakub Jelinek <jakub@redhat.com> 2.4-6
changelog:
  - update from CVS
    - NIS+ fixes
    - don't segfault on too large argp key values (#189545)
    - getaddrinfo fixes for RFC3484 (#188364)


author: Jakub Jelinek <jakub@redhat.com> 2.4-5
changelog:
  - update from CVS
    - pshared robust mutex support
    - fix btowc and bwtoc in C++ (#186410)
    - fix NIS+ (#186592)
    - don't declare __wcsto*l_internal for non-GCC or if not -O1+ (#185667)
  - don't mention nscd failures on 2.0 kernels (#185335)


author: Jakub Jelinek <jakub@redhat.com> 2.4-2
changelog:
  - accurate unwind info for lowlevellock.h stubs on %{ix86}
  - fix ppc/ppc64 ceill, floorl, rintl, roundl and truncl (BZ#2423)


author: Jakub Jelinek <jakub@redhat.com> 2.3.91-2
changelog:
  - update from CVS
    - fix sYSMALLOc for MALLOC_ALIGNMENT > 2 * SIZE_SZ (#183895)
    - revert ppc32 malloc alignment patch, it breaks malloc_set_state
      and needs some further thoughts and time (#183894)
  - provide accurate unwind info for lowlevellock.h stubs on x86_64


author: Jakub Jelinek <jakub@redhat.com> 2.3.91-1
changelog:
  - update from CVS
    - fixes for various arches
  - ensure malloc returns pointers aligned to at least
    MIN (2 * sizeof (size_t), __alignof__ (long double))
    (only on ppc32 this has not been the case lately with addition
     of 128-bit long double, #182742)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-36
changelog:
  - update from CVS
    - fix frequency setting for ITIMER_PROF (#179938, BZ#2268)
    - fix powerpc inline fegetround ()
    - fix nptl_db (#179946)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-35
changelog:
  - update from CVS
    - handle futimesat (fd, NULL, tvp) as futimes (fd, tvp)
  - fix <stdlib.h> q{e,f,g}cvt{,_r} for -mlong-double-64


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-34
changelog:
  - fix <math.h> with C++ and -mlong-double-64 (#179742)
  - add nexttowardl redirect for -mlong-double-64


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-32
changelog:
  - update from CVS
    - 128-bit long double fixes for ppc{,64}, s390{,x} and sparc{,v9},
      alpha 128-bit long double support
  - add inotify syscall numbers to the override <asm/unistd.h> headers
    (#179366)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-31
changelog:
  - update from CVS
    - 128-bit long double on ppc, ppc64, s390, s390x and sparc{,v9}
  - add some new syscall numbers to the override <asm/unistd.h>
    headers


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-30
changelog:
  - update from CVS
    - <pthread.h> initializer fixes for -std=c{8,9}9 on 32-bit
      arches
  - avoid writable .rodata (#177121)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-29
changelog:
  - update from CVS
    - make pthread_mutex_t an unnamed union again, as it affects
      libstdc++ ABI mangling


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-26
changelog:
  - update from CVS
    - for newly linked lio_listio* callers, send per request
      notifications (#170116)
    - fixup nscd -S option removal changes (#176860)
    - remove nonnull attribute from ctermid (#176753)
    - fix PTHREAD_*_INITIALIZER{,_NP} on 64-bit arches
    - SPARC NPTL support for pre-v9 CPUs
  - drop support for 2.4.xx and < 2.6.9 kernels


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-25
changelog:
  - update from CVS
    - s390{,x} and sparc{,64} pointer mangling fixes
  - install a sanitized LinuxThreads <bits/libc-lock.h>


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-23
changelog:
  - update from CVS
    - robust mutexes
  - fix transliteration segfaults (#176573, #176583)
  - ignore prelink temporaries in ldconfig (#176570)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-22
changelog:
  - update from CVS
    - minor fts fixes
  - revert broken _Pragma () workaround
  - fix ldconfig on bi-arch architectures (#176316)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-20
changelog:
  - update from CVS
    - time ((void *) 1) should segfault, not return -EFAULT (#174856, BZ#1952)
    - fix errlist generation
  - update ulps for GCC 4.1 on IA-64


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-19
changelog:
  - update from CVS
    - sysdeps/generic reorg
    - setjmp/longjmp jump pointer mangling
  - rebuilt with GCC 4.1-RH prerelease, worked around broken _Pragma ()
    handling in it
  - remove glibc-profile subpackage
  - use non-PLT calls for malloc/free/realloc/memalign invocations in
    mtrace and mcheck hooks (#175261)
  - setjmp/longjmp jump pointer mangling on ppc{,64}/ia64/s390{,x}


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-18
changelog:
  - update from CVS
    - change <sys/stat.h> for broken apps that #define const /**/,
      handle non-GCC compilers
    - fix ppc{32,64} strncmp (BZ#1877, #173643, IT#83510)
    - provide shmatt_t typedef in ia64 <sys/shm.h (#173680)
    - support 2nd arg to futimesat being NULL (#173581)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-17
changelog:
  - update from CVS
    - fix <sys/stat.h> in C++
    - {fstat,fchown,rename,unlink}at fixes
    - epoll_wait is now a cancellation point


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-15
changelog:
  - update from CVS
    - be permissive in %n check because of kernel bug #165351 (#171240)
    - don't misalign stack in pthread_once on x86_64 (#170786, IT#81521)
    - many locale fixes


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-14
changelog:
  - update from CVS
    - fix malloc bug after fork introduced in the last update
    - fix getent hosts IP for IPv4 IPs (#169831)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-13
changelog:
  - update from CVS
    - fix setuid etc. hangs if some thread exits during the call (#167766)
    - fix innetgr memory leak (#169051)
    - support > 2GB nscd log files (#168851)
    - too many other changes to list here
  - include errno in nscd message if audit_open failed (#169148)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-12
changelog:
  - update from CVS
    - netgrp handling fixes (#167728)
    - fix memory leak in setlocale (BZ#1318)
    - fix hwcaps computation
    - several regex portability improvements (#167019)
    - hypotf fix
    - fix *printf return code if underlying write fails (BZ#1146)
    - PPC64 dl{,v}sym fixes for new ABI .opd symbols
  - fix calloc with MALLOC_PERTURB_ in environment on 64-bit architectures
    (#166719)
  - source /etc/sysconfig/nscd (if it exists) in /etc/rc.d/init.d/nscd
    (#167083)
  - add %triggerin for tzdata to glibc-common, so that tzdata updates
    update /etc/localtime and /var/spool/postfix/etc/localtime if they
    exist (#167787)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-10
changelog:
  - update from CVS
    - fix growing of nscd persistent database (BZ#1204)
    - fix _FORTIFY_SOURCE mbstowcs and wcstombs if destination size
      is known at compile time, but length argument is not


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-9
changelog:
  - update from CVS
    - fix resolving over TCP (#161181, #165802)
    - on ia64 don't abort on unhandled math function exception codes
      (#165693)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-8
changelog:
  - update from CVS
    - nscd persistent database verifier (#164001)
    - cleanup _FORTIFY_SOURCE bits/*.h headers (#165000)
    - handle EINTR in sigwait properly
  - make sure poor man's stack guard randomization keeps first
    byte 0 even on big-endian 32-bit arches
  - fix {elf,nptl}/tst-stackguard1
  - obsolete linuxthreads-devel in glibc-devel


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-7
changelog:
  - update from CVS
  - do some poor man's stack guard randomization even without
    the costly --enable-stackguard-randomization
  - rebuilt with new GCC to make it use -msecure-plt on PPC32


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-6
changelog:
  - update from CVS
    - fix execvp if PATH is not in environment and the call is going
      to fail (BZ#1125)
    - another bits/wchar2.h fix (#163990)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-4
changelog:
  - update from CVS
    - make sure bits/wchar2.h header is installed
    - fix __getgroups_chk return type


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-3
changelog:
  - update from CVS
    - make sure nscd cmsg buffers aren't misaligned, handle EINTR from
      poll when contacting nscd more gracefully
    - remove malloc attribute from posix_memalign
    - correctly size nscd buffer for grpcache key (#163538)
    - fix atan2f
    - fix error memory leaks
    - some more _FORTIFY_SOURCE protection


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-2
changelog:
  - update from CVS
    - ia64 stack protector support
    - handle DNS referral results as server errors (#162625)
    - ctan{,h}{,f,l} fixes (#160759)
    - pass argc, argv and envp also to executable's *ni_array
      functions (BZ#974)
    - add ellipsis to clone prototype (#161593)
    - fix glibc-profile (#162601)
    - nss_compat fixes
  - use sysdeps/generic version of <bits/stdio-lock.h> in installed
    headers instead of NPTL version (#162634)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-1
changelog:
  - update from CVS
    - stack protector support
    - fix xdr_{,u_}{longlong_t,hyper} on 64-bit arches (#161583)
  - enable @GLIBC_2.4 symbols
  - remove linuxthreads


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-11
changelog:
  - update from CVS
    - PPC32 -msecure-plt support
    - support classes keyword in /etc/hesiod.conf (#150350)
    - add RLIMIT_NICE and RLIMIT_RTPRIO to <sys/resources.h> (#157049)
    - decrease number of .plt relocations in libc.so
    - use -laudit in nscd (#159217)
    - handle big amounts of networking interfaces in getifaddrs/if_nameindex
      (#159399)
    - fix pa_IN locale's am_pm (#158715, BZ#622)
    - fix debugging of PIEs


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-10
changelog:
  - fix LD_ASSUME_KERNEL (since 2.3.5-8 GLRO(dl_osversion)
    has been always overwritten with the version of currently
    running kernel)
  - remove linuxthreads man pages other than those covered in
    3p section, as 3p man pages are far better quality and describe
    POSIX behaviour that NPTL implements (#159084)


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-9
changelog:
  - update from CVS
    - increase bindresvport's LOWPORT to 512, apparently some
      broken daemons don't think 0 .. 511 ports are reserved


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-8
changelog:
  - update from CVS
    - fix kernel version check in ld.so
  - fix sendfile{,64} prototypes (BZ#961)
  - try more ports in bindresvport if all 600..1023 are
    used, don't use priviledged ports when talking to portmap
    (#141773)


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-7
changelog:
  - update from CVS
    - make regexec thread safe (BZ#934)
  - fix statically linked programs on i?86, x86_64, s390* and
    sparc* (#158027)
  - fix IBM939 iconv module (BZ#955)


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-5
changelog:
  - update from CVS
    - add some more UTF-8 locales (#156115)
  - clean up /lib64/tls instead of /lib/tls on x86-64, s390x and
    ppc64 in glibc_post_upgrade (#156656)
  - fix posix_fallocate{,64} (#156289)


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-3
changelog:
  - update from CVS
    - fix linuxthreads clocks
  - put xen libs into the glibc-2*.i686 package instead of a separate one
  - fix librt.so symlink in linuxthreads-devel
  - do not include linuxthreads-devel on i586 i686 athlon sparcv9 alphaev6,
    just on the base architectures


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-2
changelog:
  - update from CVS
    - with MALLOC_CHECK_=N N>0 (#153003)
    - fix recursive dlclose (#154641)
    - handle %z in strptime (#154804)
    - automatically append /lib/obsolete/linuxthreads/
      to standard library search path if LD_ASSUME_KERNEL=N N <= 2.4.19
      or for glibc 2.0 binaries (or broken ones that don't use errno/h_errno
      properly).  Warning: all those will stop working when LinuxThreads
      is finally nuked, which is not very far away
    - remove nonnull attribute from acct prototype (BZ#877)
    - kernel CPU clocks support
    - fix *scanf in locales with multi-byte decimal point


author: Roland McGrath <roland@redhat.com> 2.3.5-1
changelog:
  - update from CVS
    - fix execvp regression (BZ#851)
    - ia64 libm updates
    - sparc updates
    - fix initstate{,_r}/strfry (#154504)
    - grok PT_NOTE in vDSO for kernel version and extra hwcap dirs,
      support "hwcap" keyword in ld.so.conf files


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-21
changelog:
  - update from CVS
    - fix xdr_rmtcall_args on 64-bit arches (#151686)
  - fix <pthread.h> and <bits/libc-lock.h> with -std=c89 -fexceptions (#153774)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-20
changelog:
  - move LinuxThreads libraries to /lib/obsolete/linuxthreads/
    and NPTL libraries to /lib.  To run a program against LinuxThreads,
    LD_ASSUME_KERNEL=2.4.xx LD_LIBRARY_PATH=/lib/obsolete/linuxthreads/
    is now needed
  - bzip2 ChangeLog* files instead of gzipping them


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-19
changelog:
  - update from CVS
    - fix nextafterl and several other libm routines on ia64
    - fix initgroups (BZ#661)
  - kill nptl-devel subpackage, add linuxthreads-devel,
    compile and link by default against NPTL and only with
    -I/usr/include/linuxthreads -L/usr/lib/linuxthreads
    against LinuxThreads
  - package /usr/lib/debug/lib/tls/i{5,6}86 symlinks in
    i386 glibc-debuginfo
  - limit number of ChangeLog* files in glibc-common %doc
    to last 2.5 years of changes only to save space


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-17
changelog:
  - update from CVS
    - fix LD_AUDIT in LinuxThreads ld.so
    - fix calloc with M_PERTURB
    - fix error handling in pthread_create with PTHREAD_EXPLICIT_SCHED
      on ppc*/ia64/alpha/mips (BZ#801)
    - fix a typo in WINDOWS-31J charmap (#151739)
    - fix NIS ypprot_err (#151469)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-15
changelog:
  - update from CVS
    - better fix for the dlclose bug (#145810, #150414)
    - fix regex crash on case insensitive search in zh_CN locale
      (#151215)
    - fix malloc_trim (BZ#779)
    - with -D_FORTIFY_SOURCE=*, avoid defining read and a bunch of others
      as function-like macros, there are too many broken programs
      out there
  - add %dir /usr/lib/gconv to glibc's file list (#151372)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-12
changelog:
  - fix tst-chk{2,3}
  - fix up AS_NEEDED directive in /usr/lib/libc.so
  - BuildReq binutils >= 2.15.94.0.2-1 for AS_NEEDED, in
    glibc-devel Conflict with binutils < 2.15.94.0.2-1


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-11
changelog:
  - update from CVS
    - fix execvp (#149290)
    - fix dlclose (#145810)
    - clear padding in gconv-modules.cache (#146614, BZ#776)
  - rebuilt with GCC4
  - changed __GLIBC_MINOR__ for now back to 3
  - back out the newly added GLIBC_2.4 *_chk routines, instead
    do the checking in macros


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-8
changelog:
  - update from CVS
    - bi-arch <gnu/lib-names.h> (BZ#632)
    - fix libdl on s390 and maybe other platforms
    - fix initstate{,_r} (BZ#710)
    - fix <gnu/stubs.h> generation (BZ#157)
  - define CMSPAR in bits/termios.h (#147533)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-6
changelog:
  - update from CVS
    - ld.so auditing
    - fix segfault if chrooted app attempts to dlopen a library
      and no standard library directory exists at all (#147067, #144303)
    - fix initgroups when nscd is running, but has group caching disabled
      (#146588)
    - fix pthread_key_{create,destroy} in LinuxThreads when pthread_create
      has not been called yet (#146710)
    - fix ppc64 swapcontext and setcontext (#146736, BZ#700)
    - service nscd cosmetic fixes (#146776)
    - fix IA-32 and x86-64 stack alignment in DSO constructors (#145689)
    - fix zdump -v segfaults on x86-64 (#146210)
    - avoid calling sigaction (SIGPIPE, ...) inside syslog (#146021, IT#56686)
    - fix errno values for futimes (BZ#633)
    - unconditionally include <features.h> in malloc.h (BZ#650)
    - change regex \B handling to match old GNU regex as well as perl/grep's dfa
      (from empty string inside of word to empty string not at a word boundary,
       BZ#693)
    - slightly optimize i686 TLS accesses, use direct TLS %gs access in sem_*
      and allow building -mno-tls-direct-seg-refs glibc that is free of direct TLS
      %gs access with negative offsets
    - fix addseverity
    - fix fmemopen
    - fix rewinddir
    - increase svc{tcp,unix}_create listen backlog


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-5
changelog:
  - update from CVS
    - add some warn_unused_result marking
    - make ftruncate available even for just -D_POSIX_C_SOURCE=200112L
      (BZ#640)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-4
changelog:
  - update from CVS
    - fix IA-32 stack alignment for LinuxThreads thread functions
      and functions passed to clone(2) directly
    - fix ecvt{,_r} on denormals (#143279)
    - fix __tls_get_addr typo
    - fix rounding in IA-64 alarm (#143710)
    - don't reinitialize __environ in __libc_start_main, so that
      effects of setenv/putenv done in DSO initializers are preserved
      (#144037, IT#57403)
    - fix fmemopen
    - fix vDSO l_map_end and l_text_end values
    - IA64 libm update (#142494)
  - fix ppc rint/ceil etc. (BZ#602)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-1
changelog:
  - update from CVS
    - glibc 2.3.4 release
    - add -o and --nostdlib options to iconvconfig
  - if /sbin/ldconfig doesn't exist when running
    glibc_post_upgrade.%{_target_cpu}, just don't attempt to run it.
    This can happen during first install of bi-arch glibc and the
    other arch glibc's %post wil run /sbin/ldconfig (#143326)
  - use -o and --nostdlib options to create all needed
    gconv-modules.cache files on bi-arch setups


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-98
changelog:
  - add .%{_target_cpu} to glibc_post_upgrade, only run telinit u
    if /sbin/init is the same ELF class and machine as
    glibc_post_upgrade.%{_target_cpu} and similarly with
    condrestarting sshd (#143046)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-96
changelog:
  - update from CVS
    - fix i686 __USE_STRING_INLINES strncat
    - make sure ppc/ppc64 maintain correct stack alignment
      across clone


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-93
changelog:
  - update from CVS
    - ppc/ppc64 clone without CLONE_THREAD getpid () adjustement
    - fix MALLOC_CHECK_={1,2,3} for non-contiguous main arena
      (BZ#457)
    - fix sysconf (_POSIX_V6_*) for other ABI environments in
      bi-arch setups
  - s390/s390x clone without CLONE_THREAD getpid () adjustement


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-91
changelog:
  - update from CVS
    - double buffer size in getXXbyYY or getXXent on ERANGE
      instead of adding BUFLEN (#142617)
    - avoid busy loop in malloc if another thread is doing fork
      (#142214)
    - some more realloc corruption checks
    - fix getconf _POSIX_V6_WIDTH_RESTRICTED_ENVS output,
      tweak /usr/libexec/getconf/ filenames


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-90
changelog:
  - update from CVS
    - regex speedups
    - use | cat in ldd if running under bash3+ to allow running
      it on binaries that are not through SELinux allowed to access
      console or tty
  - add __NR_waitid defines for alpha and ia64


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-89
changelog:
  - update from CVS
    - fix clone2 on ia64
    - avoid tst-timer5 failing with linuxthreads implementation
  - if __libc_enable_secure, disallow mode != normal
  - change ldd script to imply -r when -u is used, properly
    propagate return value and handle suid binaries


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-88
changelog:
  - update from CVS
    - disregard LD_SHOW_AUXV and LD_DYNAMIC_WEAK if __libc_enable_secure
    - disregard LD_DEBUG if __libc_enable_secure in normal mode
      if /suid-debug doesn't exist
    - fix fseekpos after ungetc
    - avoid reading bytes before start of buffers in regex's
      check_dst_limits_calc_pos_1 (#142060)
    - make getpid () working with clone/clone2 without CLONE_THREAD
      (so far on i386/x86_64/ia64 only)
  - move /usr/libexec/getconf/* to glibc from glibc-common
  - make /usr/libexec/getconf directory owned by glibc package


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-87
changelog:
  - update from CVS
    - build libpthread_nonshared.a objects with -fPIC on s390/s390x
    - fix mktime with < 0 or > 59 tm_sec on entry
    - remove nonnull attribute for realpath
    - add $(make-target-directory) for errlist-compat.c rule
      (hopefully fix #141404)
  - add testcase for ungetc bug
  - define _POSIX_{,THREAD_}CPUTIME to 0 on all Linux arches


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-86
changelog:
  - update from CVS
    - some posix_opt.h fixes
  - fix strtold use of unitialized memory (#141000)
  - some more bugfixes for bugs detected by valgrind
  - rebuilt with GCC >= 3.4.3-5 to avoid packed stack layout
    on s390{,x} (#139678)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-85
changelog:
  - update from CVS
    - support -v specification in getconf
    - fix sysconf (_SC_LFS64_CFLAGS) etc.
    - avoid thread stack aliasing issues on EM64T (#140803)
  - move /usr/include/nptl headers from nptl-devel
    to glibc-headers, so that even NPTL specific programs
    can be built bi-arch without problems


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-84
changelog:
  - update from CVS
    - fix memory leak in getaddrinfo if using nscd (#139559)
    - handle large lines in /etc/hosts and /etc/networks
      (#140378)
    - add nonnull attributes to selected dirent.h and dlfcn.h
      functions


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-83
changelog:
  - update from CVS
    - add deprecated and/or nonnull attribute to some signal.h
      functions
    - speed up tzset () by only using stat instead of open/fstat
      when calling tzset for the second and following time if
      /etc/localtime has not changed
  - fix tgamma (BZ #552)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-82
changelog:
  - update from CVS
    - some malloc () checking
    - libpthread.a object dependency cleanups (#115157)
    - <bits/socket.h> fix for -std=c89 -pedantic-errors (#140132)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-80
changelog:
  - update from CVS
    - with -D_FORTIFY_SOURCE=2, prevent missing %N$ formats
    - for -D_FORTIFY_SOURCE=2 and %n in writable format string,
      issue special error message instead of using the buffer overflow
      detected one
    - speedup regex searching with REG_NOSUB, add RE_NO_SUB,
      speedup searching with nested subexps (BZ #544)
    - block SIGCANCEL in NPTL timer_* helper thread
  - further free () checking


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-79
changelog:
  - update from CVS
  - fix free () checking
  - move /etc/default/nss into glibc-common (hopefully fix #132392)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-78
changelog:
  - update from CVS
    - fix LD_DEBUG=statistics
    - issue error message before aborting in __chk_fail ()
  - some more free () checking


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-77
changelog:
  - update from CVS
    - speedup regex on palindromes (BZ #429)
    - fix NPTL set{,e,re,res}[ug]id, so that even if making process
      less priviledged all threads change their credentials successfully


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-76
changelog:
  - update from CVS
    - fix regcomp crash (#138439)
    - fix ftell{,o,o64} (#137885)
    - robustification of nscd to cope with corrupt databases (#137140)
    - fix NPTL with pthread_exit immediately after pthread_create (BZ #530)
    - some regex optimizations


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-75
changelog:
  - update from CVS
    - mktime cleanups (BZ #487, #473)
    - unique comments in free(3) check error messages
  - adjust some x86_64 headers for -m32 (#129712)
  - object size checking support even with GCC-3.4.2-RH >= 3.4.2-8


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-74
changelog:
  - fix <netinet/udp.h> header
  - fix globfree (#137176)
  - fix exiting if there are dlmopened libraries in namespaces
    other than main one not closed yet
  - export again _res_opcodes and __p_{class,type}_syms from
    libresolv.so that were lost in -69


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-72
changelog:
  - back out setaltroot and key{_add,_request,ctl} addition
  - fix severe x86-64 symbol versioning regressions that breaks
    e.g. java binaries


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-71
changelog:
  - update from CVS
    - fix minor catchsegv temp file handling vulnerability
      (CAN-2004-0968, #136319)
    - add 4 new errno codes
    - setaltroot, key{_add,_request,ctl} syscalls on some arches
    - export _dl_debug_state@GLIBC_PRIVATE from ld.so again for
      gdb purpose
    - use inet_pton to decide what is address and what is hostname
      in getent (#135422)
    - change dladdr/dladdr1, so that dli_saddr is the same kind
      of value as dlsym/dlvsym return (makes difference on ia64/hppa only)
    - fix catchsegv script so that it works with both 32-bit and 64-bit
      programs on multi-arch platforms


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-70
changelog:
  - update from CVS
  - require newer selinux-policy (#135978)
  - add %dir for /var/run/nscd and /var/db/nscd and %ghost
    files in it
  - conflict with gcc4 4.0.0-0.6 and earlier (needs __builtin_object_size)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-68
changelog:
  - update from CVS
    - support for namespaces in the dynamic linker
    - fix dlclose (BZ #77)
    - libSegFault.so uses now backtrace() to work on IA-64, x86-64
      and s390 (#130254)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-67
changelog:
  - update from CVS
    - use non-blocking sockets in resolver (#135234)
    - reset pd->res options on thread exit, so that threads
      reusing cached stacks get resolver state properly initialized
      (BZ #434)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-66
changelog:
  - update from CVS
  - avoid using perl in the spec file, buildrequire sed >= 3.95
    (#127671)
  - export TIMEOUTFACTOR=16
  - fix _JMPBUF_CFA_UNWINDS_ADJ on s390{,x}


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-65
changelog:
  - update from CVS
    - define _POSIX_THREAD_PROCESS_SHARED and _POSIX_CLOCK_SELECTION
      to -1 in LinuxThreads
    - define _POSIX_CPUTIME and _POSIX_THREAD_CPUTIME to 0
      on i?86/ia64 and make sure sysconf (_SC_{,THREAD_}CPUTIME)
      returns correct value
  - if _POSIX_CLOCK_SELECTION == -1 in nscd, still try
    sysconf (_SC_CLOCK_SELECTION) and if it returns true,
    dlopen libpthread.so and dlsym pthread_condattr_setclock
  - build nscd with -z relro and -z now


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-64
changelog:
  - update from CVS
    - stop using __builtin_expect in assert and assert_perror
      (#127606)
    - try to avoid too much VA fragmentation with malloc
      on flexmap layout (#118574)
    - nscd robustification
    - change valloc to use debugging hooks (#134385)
  - make glibc_post_upgrade more verbose on errors (Fergal Daly,


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-61
changelog:
  - update from CVS
    - some nscd fixes (#134193)
    - cache initgroups in nscd (#132850)
    - reread /etc/localtime in tzset () even if just mtime changed
      (#133481)
    - fix glob (#126460)
    - another get_myaddress fix


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-60
changelog:
  - update from CVS
    - fix get_myaddress (#133982)
    - remove nonnull attribute from second utime argument (#133866)
    - handle SIGSETXID the same way as SIGCANCEL in
      sigaction/pthread_kill/sigwait/sigwaitinfo etc.
    - add __extension__ to long long types in NPTL <bits/pthreadtypes.h>


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-58
changelog:
  - update from CVS
    - vasprintf fix (BZ #346)
    - gettext locking (BZ #322)
  - change linuxthreads useldt.h inclusion login again, the last
    one failed all linuxthreads FLOATING_STACKS tests


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-57
changelog:
  - update from CVS
    - fix setuid in LD_ASSUME_KERNEL=2.2.5 libc (#133558)
    - fix nis locking (#132204)
    - RTLD_DEEPBIND support
    - fix pthread_create bugs (BZ #401, #405)


author: Roland McGrath <roland@redhat.com> 2.3.3-56
changelog:
  - migrated CVS to fedora-branch in sources.redhat.com glibc repository
    - source tarballs renamed
    - redhat/ moved to fedora/, some old cruft removed
  - update from trunk
    - some __nonnull annotations


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-55
changelog:
  - update from CVS
    - set{re,e,res}[ug]id now affect the whole process in NPTL
    - return EAGAIN instead of ENOMEM when not enough memory
      in pthread_create


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-52
changelog:
  - update from CVS
    - nscd bi-arch fix
    - remove all uses of __P()/__PMT() from glibc headers
  - update and reenable nscd SELinux patch
  - remove libnss1* and libnss*.so.1 compatibility NSS modules
    on IA-32, SPARC and Alpha


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-51
changelog:
  - update from CVS
    - disable one of the malloc double free checks for non-contiguous
      arenas where it doesn't have to be true even for non-broken
      apps


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-50
changelog:
  - update from CVS
    - pwd/grp/host loops with nscd speed up by sharing the
      nscd cache r/o with applications
    - inexpensive double free check in free(3)
    - make NPTL pthread.h initializers usable even from C++
      (BZ #375)
  - use atomic instructions even in i386 nscd on i486+ CPUs
    (conditionally)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-48
changelog:
  - update from CVS
    - fix pthread_cond_destroy (BZ #342)
    - fix fnmatch without FNM_NOESCAPE (BZ #361)
    - fix ppc32 setcontext (BZ #357)
  - add NPTL support for i386 glibc (only if run on i486 or higher CPU)
  - add __NR_waitid defines for i386, x86_64 and sparc*


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-47
changelog:
  - update from CVS
    - persistent nscd caching
    - ppc64 32-bit atomicity fix
    - fix x86-64 nptl-devel headers for -m32 compilation
  - %ghost /etc/ld.so.cache (#130597)
  - edit /etc/ld.so.conf in glibc_post_upgrade if
    include ld.so.conf.d/*.conf line is missing (#120588)
  - ugly hacks for the IA-64 /emul braindamage (#124996, #128267)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-45
changelog:
  - update from CVS
    - fix nss_compat's initgroups handling (#130363)
    - fix getaddrinfo ai_canonname setting


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-44
changelog:
  - update from CVS
    - add ip6-dotint resolv.conf option, make
      no-ip6-dotint the default
  - BuildPrereq libselinux-devel (#129946)
  - on ppc64, build without dot symbols


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-43
changelog:
  - update from CVS
    - remove debugging printout (#129747)
    - make <sys/shm.h> usable in C++ (IT#45148)
  - update RLIMIT_* constants in <bits/resource.h>, make
    <sys/resource.h> POSIX compliant (#129740)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-42
changelog:
  - fix last tzset () fixes, disable rereading of /etc/localtime
    every time for now
  - really enable SELinux support for NSCD


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-41
changelog:
  - update from CVS
    - fread_unlocked/fwrite_unlocked macro fixes (BZ #309, #316)
    - tzset () fixes (BZ #154)
  - speed up pthread_rwlock_unlock on arches other than i386 and
    x86_64 (#129455)
  - fix compilation with -ansi (resp. -std=c89 or -std=c99) and
    -D_XOPEN_SOURCE=[56]00 but no -D_POSIX_SOURCE* or -D_POSIX_C_SOURCE*
    (BZ #284)
  - add SELinux support for NSCD


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-40
changelog:
  - update from CVS
    - change res_init to force all threads to re-initialize
      resolver before they use it next time (#125712)
    - various getaddrinfo and related fixes (BZ #295, #296)
    - fix IBM{932,943} iconv modules (#128674)
    - some nscd fixes (e.g. BZ #292)
    - RFC 3678 support (Multicast Source Filters)
  - handle /lib/i686/librtkaio-* in i386 glibc_post_upgrade
    the same as /lib/i686/librt-*


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-39
changelog:
  - update from CVS
    - conformance related changes in headers
  - remove -finline-limit=2000 for GCC 3.4.x+


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-38
changelog:
  - update from CVS
    - fix res_init leaks
    - fix newlocale races
    - fix ppc64 setjmp
  - fix strtold (BZ #274)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-37
changelog:
  - update from CVS
    - allow pthread_cancel in DSO destructors run at exit time
  - fix pow{f,,l} on IA-32 and powl on x86-64
  - allow PIEs on IA-32 to have main in a shared library they depend on


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-34
changelog:
  - update from CVS
    - if_nameindex using preferably netlink
    - printf_parsemb initialization fix
    - NPTL version is now the same as glibc version


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-33
changelog:
  - update from CVS
    - reread resolv.conf for nscd --invalidate=hosts
    - fix F_GETLK/F_SETLK/F_SETLKW constants on x86_64 for
      -m32 -D_FILE_OFFSET_BITS=64 compilations
    - avoid calling non-existing fcntl64 syscall on ppc64


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-32
changelog:
  - update from CVS
    - FUTEX_CMP_REQUEUE support (fix pthread_cond_* deadlocks)
    - fix backtrace in statically linked programs
  - rebuilt with GCC 3.4, adjusted ulps and i386 <bits/string.h>


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-31
changelog:
  - update from CVS
  - <bits/string2.h> and <bits/mathinline.h> changes for GCC 3.{2,4,5}+
  - make c_stubs buildable even with GCC 3.2.x (#123042)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-28
changelog:
  - update from CVS
    - FUTEX_REQUEUE fixes (#115349)
    - SPARC GCC 3.4 build fix
    - fix handling of undefined TLS symbols on IA32 (RELA only),
      SPARC and SH
    - regex translate fix
    - speed up sprintf
    - x86_64 makecontext alignment fix
    - make POSIX sigpause the default sigpause, unless BSD sigpause
      requested


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-27
changelog:
  - remove /lib64/tls/librtkaio-2.3.[23].so in glibc_post_upgrade
    on x86-64, s390x and ppc64 instead of /lib/tls/librtkaio-2.3.[23].so
  - build mq_{send,receive} with -fexceptions


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-26
changelog:
  - update from CVS
    - fix <tgmath.h>
    - fix memory leaks in nis, getifaddrs, etc. caused by incorrect
      use of realloc
  - remove /lib/{tls,i686}/librtkaio-2.3.[23].so in glibc_post_upgrade
    and rerun ldconfig if needed, otherwise after glibc upgrade librt.so.1
    might be a stale symlink


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-24
changelog:
  - update from CVS
    - define S_ISSOCK in -D_XOPEN_SOURCE=600 and S_I[FS]SOCK
      plus F_[SG]ETOWN also in -D_XOPEN_SOURCE=500 (both
      included already in XNS5)
    - reorder dlopen checks, so that dlopening ET_REL objects
      complains about != ET_DYN != ET_EXEC, not about phentsize
      (#121606)
    - fix strpbrk macro for GCC 3.4+ (BZ #130)
    - fix <sys/sysctl.h> (BZ #140)
    - sched_[gs]etaffinity documentation fix (BZ #131)
    - fix sparc64 build (BZ #139)
    - change linuxthreads back to use non-cancellable writes
      to manager pipes etc.
    - fix sem_timedwait return value in linuxthreads (BZ #133)
    - ia64 unnecessary PLT relocs removal


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-23
changelog:
  - update from CVS
    - fix *scanf
    - fix shm_unlink, sem_unlink and mq_unlink errno values
    - avoid memory leaks in error
    - execstack fixes on s390


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-22
changelog:
  - update from CVS
    - mq and timer fixes
  - rebuilt with binutils >= 2.15.90.0.3-2 to fix IA-64 statically
    linked binaries
  - fix linuxthreads librt.so on s390{,x}, so it is no longer DT_TEXTREL


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-21
changelog:
  - disable rtkaio
  - update from CVS
    - POSIX message passing support
    - fixed SIGEV_THREAD support for POSIX timers
    - fix free on non-malloced memory in syslog
    - fix ffsl on some 64-bit arches
    - fix sched_setaffinity on x86-64, ia64
    - fix ppc64 umount
    - NETID_AUTHORITATIVE, SERVICES_AUTHORITATIVE support
    - various NIS speedups
    - fix fwrite with > 2GB sizes on 64-bit arches
    - fix pthread_getattr_np guardsize reporting in NPTL
  - report PLT relocations in ld.so and libc.so during the build


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-20
changelog:
  - update from CVS
    - change NPTL PTHREAD_MUTEX_ADAPTIVE_NP mutexes to spin on SMP
    - strtol speed optimization
    - don't try to use certainly unimplemented syscalls on ppc64
  - kill -debug subpackage, move the libs to glibc-debuginfo{,-common}
    into /usr/lib/debug/usr/lib/ directory
  - fix c_stubs with gcc 3.4
  - move all the up to 3 builds into %build scriptlet and
    leave only installation in the %install scriptlet


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-18
changelog:
  - update from CVS
    - fix ia64 iopl (#118591)
    - add support for /etc/ld.so.conf.d/*.conf
    - fix x86-64 LD_DEBUG=statistics
  - fix hwcap handling when using ld.so.cache (#118518)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-15
changelog:
  - update from CVS
    - special section for compatibility code
    - make getpid () work even in vfork () child
  - configure with --enable-bind-now to avoid lazy binding in ld.so
    and libc.so


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-14
changelog:
  - update from CVS
    - fix iconv -c (#117021)
    - fix PIEs on sparc/sparc64
    - fix posix_fadvise on 64-bit architectures
  - add locale-archive as %ghost file (#117014)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-7
changelog:
  - update from CVS
    - dl_iterate_phdr extension to signal number of added/removed
      libraries
  - fix PT_GNU_RELRO support on ppc* with prelinking


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-4
changelog:
  - update from CVS
    - some further regex speedups
    - fix re.translate handling in regex (#112869)
    - change regfree to match old regex behaviour (what is freed
      and clearing of freed pointers)
    - fix accesses to unitialized memory in regex (#113507, #113425,
        - PT_GNU_RELRO support


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-3
changelog:
  - update from CVS
    - fix pmap_set fd and memory leak (#112726)
  - fix backreference handling in regex
  - rebuilt under glibc without the above bug to fix
    libc.so linker script (#112738)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-2
changelog:
  - update from CVS
    - faster getpid () in NPTL builds
    - fix to make pthread_setcancelstate (PTHREAD_CANCEL_DISABLE, )
      really disable cancellation (#112512)
    - more regex fixes and speedups
    - fix nextafter*/nexttoward*
    - handle 6th syscall(3) argument on AMD64
    - handle memalign/posix_memalign in mtrace
    - fix linuxthreads memory leak (#112208)
    - remove throw () from cancellation points in linuxthreads (#112602)
    - fix NPTL unregister_atfork
    - fix unwinding through alternate signal stacks


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-1
changelog:
  - update from CVS
    - 2.3.3 release
    - lots of regex fixes and speedups (#110401)
    - fix atan2
    - fix pshared condvars in NPTL
    - fix pthread_attr_destroy for attributes created with
      pthread_attr_init@GLIBC_2.0
  - for the time being, include both nb_NO* and no_NO* as locales
    so that the distribution can catch up with the no_NO->nb_NO
    transition
  - add BuildPrereq texinfo (#110252)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-102
changelog:
  - update from CVS
    - fix getifaddrs (CAN-2003-0859)
    - fix ftw fd leak
    - fix linuxthreads sigaction (#108634)
    - fix glibc 2.0 stdio compatibility
    - fix uselocale (LC_GLOBAL_LOCALE)
    - speed up stdio locking in non-threaded programs on IA-32
    - try to maintain correct order of cleanups between those
      registered with __attribute__((cleanup))
      and with LinuxThreads style pthread_cleanup_push/pop (#108631)
    - fix segfault in regex (#109606)
    - fix RE_ICASE multi-byte handling in regex
    - fix pthread_exit in libpthread.a (#109790)
    - FTW_ACTIONRETVAL support
    - lots of regex fixes and speedups
    - fix ceill/floorl on AMD64


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-100
changelog:
  - update from CVS
    - fix sprof (#103727)
    - avoid infinite loops in {,f}statvfs{,64} with hosed mounts file
    - prevent dlopening of executables
    - fix glob with GLOB_BRACE and without GLOB_NOESCAPE
    - fix locale printing of word values on 64-bit big-endian arches
      (#107846)
    - fix getnameinfo and getaddrinfo with reverse IPv6 lookups
      (#101261)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-99
changelog:
  - update from CVS
    - dl_iterate_phdr in libc.a on arches other than IA-64
    - LD_DEBUG=statistics prints number of relative relocations
    - fix hwcap computation
  - NPTL is now part of upstream glibc CVS
  - include {st,xh,zu}_ZA{,.UTF-8} locales


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-98
changelog:
  - update from CVS
    - fix close, pause and fsync (#105348)
    - fix pthread_once on IA-32
  - implement backtrace () on IA-64, handle -fomit-frame-pointer
    in AMD64 backtrace () (#90402)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-97
changelog:
  - update from CVS
    - fix <sys/sysmacros.h> with C++ or -ansi or -pedantic C
    - fix mknod/ustat return value when given bogus device number (#105768)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-94
changelog:
  - update from CVS
  - fix syslog with non-C non-en_* locales (#61296, #104979)
  - filter GLIBC_PRIVATE symbols from glibc provides
  - fix NIS+


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-93
changelog:
  - update from CVS
  - assume 2.4.21 kernel features on RHEL/ppc*, so that
    {make,set,get,swap}context works
  - backout execstack support for RHEL
  - build rtkaio on amd64 too


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-92
changelog:
  - update from CVS
    - execstack/noexecstack support
    - build nscd as PIE
  - move __libc_stack_end back to @GLIBC_2.1
  - build against elfutils >= 0.86 to fix stripping on s390x


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-88
changelog:
  - update from CVS
    - retrieve affinity in pthread_getattr_np
    - fix pthread_attr_[gs]etaffinity_np
    - handle hex and octal in wordexp


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-87
changelog:
  - update from CVS
    - truncate instead of round in utimes when utimes syscall is not available
    - don't align stack in every glibc function unnecessarily on IA-32
    - make sure threads have their stack 16 byte aligned on IA-32
    - move sched_[sg]etaffinity to GLIBC_2.3.3 symbol version (#103231)
    - fix pthread_getattr_np for the initial thread (#102683)
    - avoid linuxthreads signal race (#104368)
  - ensure all gzip invocations are done with -n option


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-86
changelog:
  - update from CVS
  - avoid linking in libgcc_eh.a unnecessarily
  - change ssize_t back to long int on s390 -m31, unless
    gcc 2.95.x is used


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-83
changelog:
  - update from CVS
  - change *nlink_t, *ssize_t and *intptr_t types on s390 -m31 to
    {unsigned,} int
  - change *u_quad_t, *quad_t, *qaddr_t, *dev_t, *ino64_t, *loff_t,
    *off64_t, *rlim64_t, *blkcnt64_t, *fsblkcnt64_t, *fsfilcnt64_t
    on 64-bit arches from {unsigned,} long long int {,*} to
    {unsigned,} long int {,*} to restore binary compatibility
    for C++ functions using these types as arguments


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-80
changelog:
  - update from CVS
    - fix IA-64 cancellation when mixing __attribute__((cleanup ()))
      and old-style pthread_cleanup_push cleanups


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-79
changelog:
  - updated from CVS
    - lots of cancellation fixes
    - fix posix_fadvise* on ppc32
    - TLS layout fix
    - optimize stdio cleanups (#103354)
    - sparcv9 NPTL
    - include sigset, sighold, sigrelse, sigpause and sigignore prototypes
      in signal.h even if -D_XOPEN_SOURCE_EXTENDED (#103269)
    - fix svc_getreqset on 64-bit big-endian arches
    - return ENOSYS in linuxthreads pthread_barrierattr_setpshared for
      PTHREAD_PROCESS_SHARED
    - add pthread_cond_timedwait stubs to libc.so (#102709)
  - split glibc-devel into glibc-devel and glibc-headers to ensure
    amd64 /usr/include always wins on amd64/i386 bi-arch installs
  - increase PTHREAD_STACK_MIN on alpha, ia64 and sparc*
  - get rid of __syscall_* prototypes and stubs in sysdeps/unix/sysv/linux
  - run make check also with linuxthreads (on IA-32 non-FLOATING_STACKS)
    ld.so and NPTL (on IA-32 also FLOATING_STACKS linuxthreads) libraries
    and tests


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-77
changelog:
  - update from CVS
    - fix glibc 2.0 libio compatibility (#101385)
    - fix ldconfig with /usr/lib/lib*.so symlinks (#102853)
    - fix assert.h (#102916, #103017)
    - make ld.so.cache identical between IA-32 and AMD64 (#102887)
    - fix static linking of large IA-64 binaries (#102586)
  - avoid using floating point regs in lazy binding code on ppc64 (#102763)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-72
changelog:
  - update from CVS
    - fix rtkaio aio_fsync{,64}
    - update rtkaio for !BROKEN_THREAD_SIGNALS
    - fix assert macro when used on pointers


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-70
changelog:
  - update from CVS
  - disable CLONE_STOPPED for now until it is resolved
  - strip crt files
  - fix libio on arches with no < GLIBC_2.2 support (#102102, #102105)
  - fix glibc-debuginfo to include all nptl and nptl_db sources


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-69
changelog:
  - update from CVS
    - fix pthread_create@GLIBC_2.0 (#101767)
  - __ASSUME_CLONE_STOPPED on all arches but s390* in RHEL


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-68
changelog:
  - update from CVS
    - only use CLONE_STOPPED if kernel supports it, fix setting of thread
      explicit scheduling (#101457)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-67
changelog:
  - update from CVS
    - fix utimes and futimes if kernel doesn't support utimes syscall
    - fix s390 ssize_t type
    - fix dlerror when called before any dlopen/dlsym
    - update IA-64 bits/sigcontext.h (#101344)
    - various warning fixes
    - fix pthread.h comment typos (#101363)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-65
changelog:
  - update from CVS
    - fix timer_create
    - use __extension__ before long long typedefs in <bits/types.h> (#100718)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-64
changelog:
  - update from CVS
    - fix wcpncpy (#99462)
    - export _res@GLIBC_2.0 even from NPTL libc.so (__res_state ()
      unlike __errno_location () or __h_errno_location () was introduced
      in glibc 2.2)
    - fix zic bug on 64-bit platforms
    - some TLS handling fixes
    - make ldconfig look into alternate ABI dirs by default (#99402)
  - move /usr/share/zoneinfo to tzdata package, so that it can be
    errataed separately from glibc
  - new add-on - rtkaio
  - prereq libgcc, as glibc now relies on libgcc_s.so.1 for pthread_cancel


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-61
changelog:
  - update from CVS
    - build libc_nonshared.a with -fPIC instead of -fpic
  - fix ppc64 PIE support
  - add cfi directives to NPTL sysdep-cancel.h on ppc/ppc64/s390/s390x


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-59
changelog:
  - update from CVS
  - on IA-64 use different symbols for cancellation portion of syscall
    handlers to make gdb happier


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-56
changelog:
  - fix condvars and semaphores in ppc* NPTL
  - fix test-skeleton.c reporting of timed-out tests (#91269)
  - increase timeouts for tests during make check


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-55
changelog:
  - make ldconfig default to both /lib+/usr/lib and /lib64+/usr/lib64
    on bi-ABI architectures (#97557)
  - disable FUTEX_REQUEUE on ppc* temporarily


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-49
changelog:
  - update from CVS
    - fix pthread_cond_signal on IA-32 (#92080, #92253)
    - fix setegid (#91567)
  - don't prelink -R libc.so on any architecture, it prohibits
    address randomization


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-47
changelog:
  - update from CVS
  - PT_GNU_STACK segment in binaries/executables and .note.GNU-stack
    section in *.[oa]


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-44
changelog:
  - update from CVS
  - enable NPTL on s390 and s390x
  - make __init_array_start etc. symbols in elf-init.oS hidden undefined


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-41
changelog:
  - update from CVS
  - use NPTL libs if uname -r contains nptl substring or is >= 2.5.69
    or set_tid_address syscall is available instead of checking
    AT_SYSINFO dynamic tag


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-31
changelog:
  - update from CVS
    - nscd fixes
    - fix Bahrain spelling (#56298)
    - fix Ukrainian collation (#83973)
    - accept trailing spaces in /etc/ld.so.conf (#86032)
    - perror fix (#85994)
    - fix localedef (#88978)
    - fix getifaddrs (#89026)
    - fix strxfrm (#88409)
  - fix ppc TLS
  - fix getaddrinfo (#89448)
  - don't print warning about errno, h_errno or _res if
    LD_ASSUME_KERNEL=2.4.1 or earlier


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-30
changelog:
  - update from CVS
  - fix prelink on ppc32
  - add TLS support on ppc32 and ppc64
  - make sure on -m64 arches all helper binaries are built with this
    option


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-29
changelog:
  - update from CVS
    - fix strxfrm (#88409)
  - use -m64 -mno-minimal-toc on ppc64
  - conflict with kernels < 2.4.20 on ppc64 and < 2.4.0 on x86_64
  - link glibc_post_upgrade against newly built libc.a


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-28
changelog:
  - update from CVS
    - fix NPTL pthread_detach and already terminated, but not yet
      joined thread (#88219)
    - fix bug-regex4 testcase (#88118)
    - reenable prelink support broken in 2.3.2-13
    - fix register_printf_function (#88052)
    - fix double free with fopen using ccs= (#88056)
    - fix potential access below $esp in {set,swap}context (#88093)
    - fix buffer underrun in gencat -H (#88099)
    - avoid using unitialized variable in tst-tgmath (#88101)
    - fix gammal (#88104)
    - fix iconv -c
    - fix xdr_string (PR libc/4999)
    - fix /usr/lib/nptl/librt.so symlink
    - avoid running NPTL cleanups twice in some cases
    - unblock __pthread_signal_cancel in linuxthreads, so that
      linuxthreads threaded programs work correctly if spawned
      from NPTL threaded programs
    - fix sysconf _SC_{NPROCESSORS_{CONF,ONLN},{,AV}PHYS_PAGES}
  - remove /lib/i686 directory before running ldconfig in glibc post
    during i686 -> i386 glibc "upgrades" (#88456)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-20
changelog:
  - update from CVS
  - if kernel >= 2.4.1 doesn't support NPTL, fall back to
    /lib/i686 libs on i686, not stright to /lib


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-18
changelog:
  - update from CVS
  - fix NPTL pthread_cond_timedwait
  - fix sysconf (_SC_MONOTONIC_CLOCK)
  - use /%{_lib}/tls instead of /lib/tls on x86-64
  - add /lib/tls/librt*so* and /lib/i686/librt*so*
  - display content of .out files for all make check failures


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-16
changelog:
  - update from CVS
    - export __fork from glibc again
  - fix glibc-compat build in NPTL
  - fix c_stubs
  - fix some more atomic.h problems
  - don't check abi in glibc-compat libs


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-15
changelog:
  - update from CVS
  - build glibc-compat (for glibc 2.0 compatibility) and c_stubs add-ons
  - condrestart sshd in glibc_post_upgrade so that the user can
    log in remotely and handle the rest (#86339)
  - fix a typo in glibc_post_upgrade on sparc


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-9
changelog:
  - update from CVS
  - fix glibc-debug description (#85111)
  - make librt.so a symlink again, not linker script


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-3
changelog:
  - update from CVS
  - only warn about errno, h_errno or _res for binaries, never
    libraries
  - rebuilt with gcc-3.2.2-4 to use direct %gs TLS access insn sequences


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-45
changelog:
  - update from CVS
  - include also linuxthreads FLOATING_STACKS libs on i686 and athlon:
    LD_ASSUME_KERNEL=2.2.5 to LD_ASSUME_KERNEL=2.4.0 is non-FLOATING_STACKS lt,
    LD_ASSUME_KERNEL=2.4.1 to LD_ASSUME_KERNEL=2.4.19 is FLOATING_STACKS lt,
    later is NPTL
  - enable TLS on alpha/alphaev6
  - add BuildPreReq: /usr/bin/readlink


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-43
changelog:
  - update from CVS
  - vfork fix on s390
  - rebuilt with binutils 2.13.90.0.18-5 so that accesses to errno
    don't bind locally (#83325)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-38
changelog:
  - update from CVS
  - initialize __environ in glibc_post_upgrade to empty array,
    so that it is not NULL
  - compat symlink for s390x /lib/ld64.so.1
  - enable glibc-profile on x86-64
  - only include libNoVersion.so on IA-32, Alpha and Sparc 32-bit


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-37
changelog:
  - update from CVS
    - nscd fixes, *scanf fix
  - fix %nptlarches noarch build (#81909)
  - IA-64 TLS fixes


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-36
changelog:
  - update from CVS
  - rework -debuginfo subpackage, add -debuginfo-common
    subpackage on IA-32, Alpha and Sparc (ie. auxiliary arches)
  - fix vfork in libc.a on PPC32, Alpha, Sparc
  - fix libio locks in linuxthreads libc.so if libpthread.so
    is dlopened later (#81374)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-35
changelog:
  - update from CVS
    - dlclose bugfixes
  - fix NPTL libpthread.a
  - fix glibc_post_upgrade on several arches


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-32
changelog:
  - update from CVS
  - don't use TLS libs if kernel doesn't set AT_SYSINFO
    (#80921, #81212)
  - add ntp_adjtime on alpha (#79996)
  - fix nptl_db (#81116)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-30
changelog:
  - fix condvar compatibility wrappers
  - add ugly hack to use non-TLS libs if a binary is seen
    to have errno, h_errno or _res symbols in .dynsym


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-27
changelog:
  - update from CVS
  - fix #include <sys/stat.h> with -D_BSD_SOURCE or without
    feature set macros
  - make *sigaction, sigwait and raise the same between
    -lpthread -lc and -lc -lpthread in linuxthreads builds


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-21
changelog:
  - system(3) fix for linuxthreads
  - don't segfault in pthread_attr_init from libc.so
  - add cancellation tests from nptl to linuxthreads


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-18
changelog:
  - update from CVS
    - fix NPTL hanging mozilla
    - initialize malloc in mALLOPt (fixes problems with squid, #79957)
    - make linuxthreads work with dl_dynamic_weak 0
    - clear dl_dynamic_weak everywhere


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-17
changelog:
  - update from CVS
    - NPTL socket fixes, flockfile/ftrylockfile/funlockfile fix
    - kill -debug sub-package, rename -debug-static to -debug
    - clear dl_dynamic_weak for NPTL


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-16
changelog:
  - fix <bits/mathinline.h> and <bits/nan.h> for C++
  - automatically generate NPTL libpthread wrappers


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-15
changelog:
  - update from CVS
    - all functions which need cancellation should now be cancellable
      both in libpthread.so and libc.so
    - removed @@GLIBC_2.3.2 cancellation wrappers


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-14
changelog:
  - update from CVS
    - replace __libc_lock_needed@GOTOFF(%ebx) with
      %gs:offsetof(tcbhead_t, multiple_threads)
    - start of new NPTL cancellation wrappers


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-10
changelog:
  - update from CVS
  - non-nptl --with-tls --without-__thread FLOATING_STACKS libpthread
    should work now
  - faster libc locking when using nptl
  - add OUTPUT_FORMAT to linker scripts
  - fix x86_64 sendfile (#79111)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-9
changelog:
  - update from CVS
    - RUSCII support (#78906)
  - for nptl builds add BuildRequires
  - fix byteswap.h for non-gcc (#77689)
  - add nptl-devel package


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-8
changelog:
  - update from CVS
    - make --enable-kernel=2.2.5 --with-tls --without-__thread
      ld.so load nptl and other --with-__thread libs
  - disable nptl by default for now


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-7
changelog:
  - update from CVS
  - restructured redhat/Makefile and spec, so that src.rpm contains
    glibc-<date>.tar.bz2, glibc-redhat-<date>.tar.bz2 and glibc-redhat.patch
  - added nptl


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-3
changelog:
  - update from CVS
    - some more regex fixes
  - fix libpthread.a (#76484)
  - fix locale-archive enlarging


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-2
changelog:
  - update from CVS
    - don't need to use 128K of stacks for DNS lookups
    - regex fixes
    - updated timezone data e.g. for this year's Brasil DST
      changes
    - expand ${LIB} in RPATH/RUNPATH/dlopen filenames


author: Jakub Jelinek <jakub@redhat.com> 2.2.94-3
changelog:
  - don't prelink -r libc.so on ppc/x86-64/sparc*, it doesn't
    speed things up, because they are neither REL arches, nor
    ELF_MACHINE_REL_RELATIVE
  - fix sparc64 build


author: Jakub Jelinek <jakub@redhat.com> 2.2.94-1
changelog:
  - update from CVS
  - prelink on ppc and x86-64 too
  - don't remove ppc memset
  - instead of listing on which arches to remove glibc-compat
    list where it should stay


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-5
changelog:
  - fix wcsmbs functions with invalid character sets (or malloc
    failures)
  - make sure __ctype_b etc. compat vars are updated even if
    they are copy relocs in the main program


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-4
changelog:
  - fix /lib/libnss1_dns.so.1 (missing __set_h_errno definition
    leading to unresolved __set_h_errno symbol)


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-3
changelog:
  - security fix - increase dns-network.c MAXPACKET to at least
    65536 to avoid buffer overrun. Likewise glibc-compat
    dns-{host,network}.c.


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-2
changelog:
  - temporarily add back __ctype_b, __ctype_tolower and __ctype_toupper to
    libc.a and export them as @@GLIBC_2.0 symbols, not @GLIBC_2.0
    from libc.so - we have still lots of .a libraries referencing
    __ctype_{b,tolower,toupper} out there...


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-1
changelog:
  - update from CVS
    - 2.2.93 release
    - use double instead of single indirection in isXXX macros
    - per-locale wcsmbs conversion state


author: Jakub Jelinek <jakub@redhat.com> 2.2.92-1
changelog:
  - update from CVS
    - 2.2.92 release
    - fix gettext after uselocale
    - fix locales in statically linked threaded programs
    - fix NSS


author: Jakub Jelinek <jakub@redhat.com> 2.2.91-1
changelog:
  - update from CVS
    - 2.2.91 release
    - fix fd leaks in locale-archive reader (#72043)
  - handle EROFS in build-locale-archive gracefully (#71665)


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-25
changelog:
  - update from CVS
    - fix locale-archive loading hang on some (non-primary) locales
      (#72122, #71878)
    - fix umount problems with locale-archives when /usr is a separate
      partition (#72043)
  - add LICENSES file


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-24
changelog:
  - update from CVS
    - only mmap up to 2MB of locale-archive on 32-bit machines
      initially
    - fix fseek past end + fread segfault with mmaped stdio
  - include <sys/debugreg.h> which is mistakenly not included
    in glibc-devel on IA-32


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-21
changelog:
  - fix path to locale-archive in libc reader
  - build locale archive at glibc-common %post time
  - export __strtold_internal and __wcstold_internal on Alpha again
  - workaround some localedata problems


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-19
changelog:
  - update from CVS
  - GB18030 patch from Yu Shao
  - applied Debian patch for getaddrinfo IPv4 vs. IPv6
  - fix regcomp (#71039)


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-16
changelog:
  - update from CVS
    - ungetc fix (#69586)
    - fseek errno fix (#69589)
    - change *etrlimit prototypes for C++ (#68588)
  - use --without-tls instead of --disable-tls


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-15
changelog:
  - set nscd user's shell to /sbin/nologin (#68369)
  - fix glibc-compat buffer overflows (security)
  - buildrequire prelink, don't build glibc's own copy of it (#67567)
  - update from CVS
    - regex fix (#67734)
    - fix unused warnings (#67706)
    - fix freopen with mmap stdio (#67552)
    - fix realloc (#68499)


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-12
changelog:
  - update from CVS
    - don't use __thread in headers
  - fix system(3) in threaded apps
  - update prelink, so that it is possible to prelink -u libc.so.6.1
    on Alpha


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-11
changelog:
  - update from CVS
    - fix __moddi3 (#65612, #65695)
    - fix ether_line (#64427)
  - fix setvbuf with mmap stdio (#65864)
  - --disable-tls for now, waiting for kernel
  - avoid duplication of __divtf3 etc. on IA-64
  - make sure get*ent_r and _IO_wfile_jumps are exported (#62278)


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-34
changelog:
  - add relocation dependencies even for weak symbols (#63422)
  - stricter check_fds check for suid/sgid binaries
  - run make check at %install time


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-33
changelog:
  - handle Dec 31 1969 in mktime for timezones west of GMT (#63369)
  - back out do-lookup.h change (#63261, #63305)
  - use "memory" clobber instead all the fancy stuff in i386/i686/bits/string.h
    since lots of compilers break on it
  - fix sparc build with gcc 3.1
  - fix spec file for athlon


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-32
changelog:
  - fix debugging of threaded apps (#62804)
  - fix DST for Estonia (#61494)
  - document that pthread_mutexattr_?etkind_np are deprecated
    and pthread_mutexattr_?ettype should be used instead in man
    pages (#61485)
  - fix libSegFault.so undefined externals


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-31
changelog:
  - temporarily disable prelinking ld.so, as some statically linked
    binaries linked against debugging versions of old glibcs die on it
    (#62352)
  - fix <semaphore.h> for -std=c99 (#62516)
  - fix ether_ntohost segfault (#62397)
  - remove in glibc_post_upgrade on i386 all /lib/i686/libc-*.so,
    /lib/i686/libm-*.so and /lib/i686/libpthread-*.so, not just current
    version (#61633)
  - prelink -r on alpha too


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-28
changelog:
  - update from CVS
    - fix nscd with huge groups
    - fix nis to not close fds it shouldn't
  - rebuilt against newer glibc-kernheaders to use the correct
    PATH_MAX
  - handle .athlon.rpm glibc the same way as .i686.rpm
  - add a couple of .ISO-8859-15 locales (#61922)
  - readd temporarily currencies which were superceeded by Euro
    into the list of accepted currencies by localedef to make
    standard conformance testsuites happy
  - temporarily moved __libc_waitpid back to make Sun JDK happy
  - use old malloc code
  - prelink i686/athlon ld.so and prelink -r i686/athlon libc.so


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-27
changelog:
  - update from CVS
    - fix DST handling for southern hemisphere (#60747)
    - fix daylight setting for tzset (#59951)
    - fix ftime (#60350)
    - fix nice return value
    - fix a malloc segfault
  - temporarily moved __libc_wait, __libc_fork and __libc_stack_end
    back to what they used to be exported at
  - censorship (#60758)


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-26
changelog:
  - update from CVS
  - use __attribute__((visibility(...))) if supported, use _rtld_local
    for ld.so only objects
  - provide libc's own __{,u}{div,mod}di3


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-6
changelog:
  - fix mmap stdio bug (seen on ld as File truncated error, #60043)
  - apply Andreas Schwab's fix for pthread sigwait
  - remove /lib/i686/ libraries in glibc_post_upgrade when
    performing i386 glibc install


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-5
changelog:
  - update to CVS
  - added glibc-utils subpackage
  - disable autoreq in glibc-debug
  - readd %lang() to locale files


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-1
changelog:
  - update from CVS
  - remove -D__USE_STRING_INLINES
  - add debug subpackage to trim glibc and glibc-devel size


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-18
changelog:
  - fix a ld.so bug with duplicate searchlists in l_scope
  - fix erfcl(-inf)
  - turn /usr/lib/librt.so into linker script


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-17
changelog:
  - fix a ld.so lookup bug after lots of dlopen calls
  - fix CMSG_DATA for non-gcc non-ISOC99 compilers (#53984)
  - prelinking support for Sparc64


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-15
changelog:
  - update from CVS
    - linuxthreads now retries if -1/EINTR is returned from
      reading or writing to thread manager pipe (#43742)
  - use DT_FILTER in librt.so (#53394)
    - update glibc prelink patch so that it handles filters
  - fix timer_* with SIGEV_NONE (#53494)
  - make glibc_post_upgrade work on PPC (patch from Franz Sirl)


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-8
changelog:
  - kill stale library symlinks in ldconfig (#52350)
  - fix inttypes.h for G++ < 3.0
  - use DT_REL*COUNT


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-4
changelog:
  - don't crash on catclose(-1)
  - fix wscanf %[] handling
  - fix return value from swprintf
  - handle year + %U/%W week + week day in strptime


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-3
changelog:
  - update from CVS to
    - fix strcoll (#50548)
    - fix seekdir (#51132)
    - fix memusage (#50606)
  - don't make gconv-modules.cache %config file, just don't verify
    its content.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
    - fix iconv cache handling
  - glibc should not own /usr/share/info, /usr/share/man nor /usr/share/man/man3 (#50673)
  - add gconv-modules.cache as emtpy config file (#50699)
  - only run iconvconfig if /usr is mounted read-write (#50667)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - move iconvconfig from glibc-common into glibc subpackage,
    call it from glibc_post_upgrade instead of common's post.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - adjust prelinking DT_* and SHT_* values in elf.h
  - update from CVS
    - iconv cache
    - make iconv work in SUID/SGID programs (#34611)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
    - kill non-pic code in libm.so
    - fix getdate
    - fix some locales (#49402)
  - rebuilt with binutils-2.11.90.0.8-5 to place .interp section
    properly in libBrokenLocale.so, libNoVersion.so and libanl.so
  - add floating stacks on IA-64, Alpha, Sparc (#49308)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix a bunch of math bugs (#43210, #43345, #43346, #43347, #43348, #43355)
  - make rpc headers -ansi compilable (#42390)
  - remove alphaev6 optimized memcpy, since there are still far too many
    broken apps which call memcpy where they should call memmove
  - update from CVS to (among other things):
    - fix tanhl bug (#43352)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix #include <signal.h> with -D_XOPEN_SOURCE=500 on ia64 (#35968)
  - fix a dlclose reldeps handling bug
  - some more profiling fixes
  - fix tgmath.h


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix the hardlink program, so that it really catches all files with
    identical content
  - add a s390x clone fix


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix rpc for non-threaded apps using svc_fdset and similar variables (#40409)
  - fix nss compatibility DSO versions for alphaev6
  - add a hardlink program instead of the shell 3x for plus cmp -s/link
    which takes a lot of time during build
  - rework BuildPreReq and Conflicts with gcc, so that
    it applies only where it has to


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix locale name of ja_JP in UTF-8 (#39783)
  - fix re_search_2 (#40244)
  - fix memusage script (#39138, #39823)
  - fix dlsym(RTLD_NEXT, ) from main program (#39803)
  - fix xtrace script (#39609)
  - make glibc conflict with glibc-devel 2.2.2 and below (to make sure
    libc_nonshared.a has atexit)
  - fix getconf LFS_CFLAGS on 64bitters
  - recompile with gcc-2.96-84 or above to fix binary compatibility problem
    with __frame_state_for function (#37933)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - support even 2.4.0 kernels on ia64, sparc64 and s390x
  - include UTF-8 locales
  - make gconv-modules %config(noreplace)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
    - run atexit() registered functions at dlclose time if they are in shared
      libraries (#28625)
    - add pthread_getattr_np API to make JVM folks happy


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - require 2.4.1 instead of 2.4.0 on platforms where it required 2.4 kernel
  - fix ldd behaviour on unresolved symbols
  - remove nonsensical ldconfig warning, update osversion for the most
    recent library with the same soname in the same directory instead (#31703)
  - apply selected patches from CVS
  - s390x spec file changes from Florian La Roche


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
  - make pthread_attr_setstacksize consistent before and after pthread manager
    is started (#28194)
  - pass back struct sigcontext from pthread signal wrapper (on ia32 only so
    far, #28493)
  - on i686 ship both --enable-kernel 2.2.5 and 2.4.0 libc/libm/libpthread,
    make ld.so pick the right one


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
    - fix ia64 build with gnupro
    - make regex 64bit clean
    - fix tgmath make check failures on alpha


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - build all auxiliary arches with --enablekernel 2.4.0, those wanting
    to run 2.2 kernels can downgrade to the base architecture glibc.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update to 2.2.1 final
    - fix a pthread_kill_other_threads_np breakage (#23966)
    - make static binaries using dlopen work on ia64 again
  - fix a typo in glibc-common group


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - some more security fixes:
    - don't look up LD_PRELOAD libs in cache for SUID apps
      (because that bypasses SUID bit checking on the library)
    - place output files for profiling SUID apps into /var/profile,
      use O_NOFOLLOW for them
    - add checks for $MEMUSAGE_OUTPUT and $SEGFAULT_OUTPUT_NAME
  - hardlink identical locale files together
  - add %lang() tags to locale stuff
  - remove ko_KR.utf8 for now, it is provided by locale-utf8 package


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - add glibc-common subpackage
  - fix alphaev6 memcpy (#22494)
  - fix sys/cdefs.h (#22908)
  - don't define stdin/stdout/stderr as macros for -traditional (#22913)
  - work around a bug in IBM JDK (#22932, #23012)
  - fix pmap_unset when network is down (#23176)
  - move nscd in rc.d before netfs on shutdown
  - fix $RESOLV_HOST_CONF in SUID apps (#23562)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update to CVS to:
    - fix getnameinfo (#21934)
    - don't stomp on memory in rpath handling (#21544)
    - fix setlocale (#21507)
  - fix libNoVersion.so.1 loading code (#21579)
  - use auxarches define in spec file for auxiliary
    architectures (#21219)
  - remove /usr/share directory from filelist (#21218)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update to CVS, including:
    - fix WORD_BIT/LONG_BIT definition in limits.h (#19088)
    - fix hesiod (#19375)
    - set LC_MESSAGES in zic/zdump for proper error message output (#19495)
    - fix LFS fcntl when used with non-LFS aware kernels (#19730)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix alpha semctl (#19199)
  - update to CVS, including:
    - fix glibc headers for Compaq non-gcc compilers
    - fix locale alias handling code (#18832)
    - fix rexec on little endian machines (#18886)
  - started writing changelog again


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-400.el5]
changelog:
  - [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
  - [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
  - [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
  - [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
  - [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
  - [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
  - [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
  - [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
  - [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-397.el5]
changelog:
  - [fs] gfs2: Detect and release delayed bufdata structures (Robert S Peterson) [516025]
  - [fs] nfs: don't invalidate dentries that act as mountpoints (Steve Dickson) [1117211]
  - [audit] auditsc: audit_krule mask accesses need bounds checking (Denys Vlasenko) [1102703] {CVE-2014-3917}
  - [scsi] Initialize eh_timeout value earlier on probe (Ewan Milne) [1119532]
  - [mm] writeback: Fix hang when low on memory due to NFS traffic (Larry Woodman) [1080194]
  - [fs] skip atime update on a frozen filesystem (Aaron Tomlin) [1000836]
  - [xen] x86: check segment descriptor read in 64-bit OUTS emulation (Radim Krcmar) [1012959]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-396.el5]
changelog:
  - [s390] kernel: fix restore of invalid floating-point-control (Hendrik Brueckner) [1121953]
  - [fs] cifs: Use cifs_set_ops() in fill_in_inode() functions (Sachin Prabhu) [1108624]
  - [fs] cifs: Fix cifs_set_ops() (Sachin Prabhu) [1108624]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-395.el5]
changelog:
  - [fs] gfs2: When glock is freed make sure it gets unlocked in DLM (Abhijith Das) [1022254]
  - [fs] gfs2: Requeue work if reply becomes pending during work_func (Abhijith Das) [1022254]
  - [fs] gfs2: Wait for glock demotes when evicting an inode (Abhijith Das) [1022254]
  - [fs] gfs2: Attempt to close GLF_DIRTY timing windows (Abhijith Das) [1022254]
  - [fs] gfs2: Change truncate page allocation to be GFP_NOFS (Abhijith Das) [1022254]
  - [net] tg3: Poll cpmu link state on APE + ASF enabled devices (Ivan Vecera) [1097866]
  - [net] tg3: Fix Read DMA workaround for 5719 A0 (Ivan Vecera) [924590]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-394.el5]
changelog:
  - Revert: [net] bridge: Fix typo that may render snooping less effective (Amerigo Wang) [902454]
  - Revert: [net] bridge: only expire the mdb entry when query is received (Amerigo Wang) [902454]
  - Revert: [net] bridge: send query as soon as leave is received (Amerigo Wang) [902454]
  - Revert: [net] bridge: fix some kernel warning in multicast timer (Amerigo Wang) [902454]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-393.el5]
changelog:
  - [fs] jbd: don't wake kjournald unnecessarily (Denys Vlasenko) [1081785]
  - [fs] jbd: don't wait (forever) for stale tid caused by wraparound (Denys Vlasenko) [1081785]
  - [fs] ext4: fix waiting and sending of barrier in ext4_sync_file() (Denys Vlasenko) [1081785]
  - [fs] jbd2: Add function jbd2_trans_will_send_data_barrier() (Denys Vlasenko) [1081785]
  - [fs] jbd2: fix sending of data flush on journal commit (Denys Vlasenko) [1081785]
  - [fs] ext4, jbd2: Add barriers for file systems with ext journals (Denys Vlasenko) [1081785]
  - [fs] jbd: fix fsync() tid wraparound bug (Denys Vlasenko) [1081785]
  - [fs] ext4: fix fdatasync() for files with only i_size changes (Eric Sandeen) [1102768]
  - [fs] ext3: explicitly rm inode from orphan list after failed io (Eric Sandeen) [1088041]
  - [infiniband] mlx4: Fix BlueFlame race (Amir Vadai) [1088582]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-392.el5]
changelog:
  - [redhat] kabi: Adding symbol pci_num_vf (Jiri Olsa) [999389]
  - [fs] gfs2: Allocate directory memory with GFP_NOFS (Robert S Peterson) [1103256]
  - [kernel] compat: compat_sys_times: don't take tasklist_lock (Mateusz Guzik) [984541]
  - [fs] nfs4: Add recovery for individual stateids (Dave Wysochanski) [867570]
  - [fs] nfs4: Don't start state recovery in nfs4_close_done (Dave Wysochanski) [867570]
  - [s390] kernel: fix save and restore of the fp-control register (Hendrik Brueckner) [1034342]
  - [net] bridge: fix some kernel warning in multicast timer (Amerigo Wang) [902454]
  - [net] bridge: send query as soon as leave is received (Amerigo Wang) [902454]
  - [net] bridge: only expire the mdb entry when query is received (Amerigo Wang) [902454]
  - [net] bridge: Fix typo that may render snooping less effective (Amerigo Wang) [902454]
  - [net] AF_UNIX: EOF on non-blocking SOCK_SEQPACKET (Swapnil Nagarkar) [1025410]
  - [fs] gfs2: clear directory cache from master directory at unmount (Robert S Peterson) [859964]
  - [net] netlink: Make netlink processing routines semi-synchronious (Daniel Borkmann) [947562]
  - [xen] page-alloc: scrub anonymous domain heap pages upon freeing (Vitaly Kuznetsov) [1103649]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-391.el5]
changelog:
  - [fs] dcache: fix cleanup on warning in d_splice_alias (Denys Vlasenko) [1080606]
  - [net] forcedeth: run loopback test only on chips that support it (Ivan Vecera) [661959]
  - [net] neigh: Make neigh_add_timer symmetrical to neigh_del_timer (Marcelo Ricardo Leitner) [1109888]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-390.el5]
changelog:
  - [net] neigh: set NUD_INCOMPLETE when probing router reachability (Marcelo Ricardo Leitner) [1090806]
  - [net] ipv6: router reachability probing (Marcelo Ricardo Leitner) [1090806]
  - [net] ipv6: probe routes asynchronous in rt6_probe (Marcelo Ricardo Leitner) [1090806]
  - [net] ndisc: Update neigh->updated with write lock (Marcelo Ricardo Leitner) [1090806]
  - [net] ipv6: remove the unnecessary statement in find_match() (Marcelo Ricardo Leitner) [1090806]
  - [net] ipv6: fix route selection if CONFIG_IPV6_ROUTER_PREF unset (Marcelo Ricardo Leitner) [1090806]
  - [net] ipv6: Fix def route failover when CONFIG_IPV6_ROUTER_PREF=n (Marcelo Ricardo Leitner) [1090806]
  - [net] ipv6: Prefer reachable nexthop only if the caller requests (Marcelo Ricardo Leitner) [1090806]
  - [fs] ext4/jbd2: don't wait forever stale tid caused by wraparound (Eric Sandeen) [980268]
  - [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [980268]
  - [fs] jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [980268]
  - [fs] jbd2: fix fsync() tid wraparound bug (Eric Sandeen) [980268]
  - [fs] knfsd: demote some printk()s to dprintk()s (J. Bruce Fields) [984732]
  - [infiniband] rds: do not deref NULL dev in rds_iw_laddr_check() (Jacob Tanenbaum) [1093312] {CVE-2014-2678}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-389.el5]
changelog:
  - [block] floppy: don't write kern-only members to FDRAWCMD output (Denys Vlasenko) [1094303] {CVE-2014-1737 CVE-2014-1738}
  - [block] floppy: ignore kernel-only members in FDRAWCMD input (Denys Vlasenko) [1094303] {CVE-2014-1737 CVE-2014-1738}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-388.el5]
changelog:
  - [virt] hyperv: Fix kernel warning in netvsc_linkstatus_callback() (Jason Wang) [1091183]
  - [nfs] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [976201]
  - [scsi] lpfc: Remove NDLP reference put in lpfc_cmpl_els_logo_acc (Rob Evers) [1075228]
  - [infiniband] rds: dereference of a NULL device (Jacob Tanenbaum) [1079217] {CVE-2013-7339}
  - [kernel] futex: check relative timeouts for overflow (Denys Vlasenko) [1084168]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-387.el5]
changelog:
  - [net] bnx2x: Change MDIO clock settings (Michal Schmidt) [960930]
  - [virt] kvm: correctly detect KVM when hv emulation is enalbed (Jason Wang) [985767]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-386.el5]
changelog:
  - [ia64] stop trap/interrupt handlers enabling PSR.ac kernel entry (Prarit Bhargava) [1073682]
  - [xen] ia64: stop trap/interrupts enabling PSR.ac on kern entry (Prarit Bhargava) [1073682]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-385.el5]
changelog:
  - [fs] GFS2: gfs2_quota reports erroneous and non-existent quotas (Abhijith Das) [999623]
  - [virt] virtio_net: introduce VIRTIO_NET_HDR_F_DATA_VALID (Vlad Yasevich) [1014328]
  - [virt] hyperv: Fix race between probe and open calls (Luiz Capitulino) [987791]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-384.el5]
changelog:
  - [scsi] qla2xxx: test for validity virtual host in netlink i/f (Chad Dupuis) [997602]
  - [mm] HugePages_Rsvd wraps on dealloc when testcase run under gdb (Jacob Tanenbaum) [837442]
  - [virt] HID: memory corruption flaw drivers/usb/input/hid-core.c (Jacob Tanenbaum) [1032999] {CVE-2013-2888}
  - [virt] HID: memory corruption flaw in drivers/hv/hid-core.c (Jacob Tanenbaum) [1032999] {CVE-2013-2888}


author: Phillip Lougher <plougher@redhat.com> [2.6.18-383.el5]
changelog:
  - [scsi] lpfc: Fix task management commands having a fixed timeout (Ewan Milne) [1061120]
  - [net] tcp: drop SYN+FIN messages (Jiri Pirko) [1066058] {CVE-2012-6638}
  - [fs] GFS2: Check if glock held in gfs2_readpage (Robert S Peterson) [1063434]
  - [s390] af_iucv: Kernel panic during connect (IUCV transport) (Hendrik Brueckner) [1026388]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-382.el5]
changelog:
  - [net] be2net: don't use skb_get_queue_mapping() (Ivan Vecera) [1063955]
  - [fs] ext2: update ctime changing the file permission by setfacl (Eric Sandeen) [969322]
  - [usb] usbcore: fix refcount bug in endpoint removal (Don Zickus) [1023287 1033620 913784 977905]
  - [net] tcp: diag: Dont report negative values for rx queue (Jiri Pirko) [1034052]
  - [fs] writeback: remove pages_skipped accounting (Lachlan McIlroy) [1031450]
  - [s390] qeth: change default standard blkt settings for OSA (Hendrik Brueckner) [997628]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-381.el5]
changelog:
  - [ipc] change refcount to atomic_t (Phillip Lougher) [1024868] {CVE-2013-4483}
  - [s390] qeth: buffer overflow in snmp ioctl (Jacob Tanenbaum) [1034404] {CVE-2013-6381}
  - [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1033532] {CVE-2013-6383}
  - [xen] x86/AMD: work around erratum 793 (Radim Krcmar) [1035836] {CVE-2013-6885}
  - [xen] do not expose hypercalls to rings 1 and 2 of HVM guests (Andrew Jones) [1029113] {CVE-2013-4554}


author: Phillip Lougher <plougher@redhat.com> [2.6.18-380.el5]
changelog:
  - [fs] nfs: ensure that nfsd threads allow expected signals (Jeff Layton) [705387]
  - [fs] nfs: fix crash handling > 1024 nonidempotent requests (J. Bruce Fields) [1024485]
  - [fs] nfs: don't check lock owner compat unless locked part 2 (Jeff Layton) [736578]
  - [fs] nfs: don't check lock owner compat in writes unless locked (Jeff Layton) [736578]
  - [redhat] kabi: Adding symbol print_hex_dump (Jiri Olsa) [662558]
  - [redhat] kabi: Adding symbol vzalloc (Jiri Olsa) [979136]
  - [scsi] megaraid_sas: a touch to version string (Tomas Henzl) [948648]
  - [scsi] megaraid_sas: Remove completion_lock spinlock calls (Tomas Henzl) [948648]
  - [scsi] megaraid_sas: Move poll_aen_lock initializer (Tomas Henzl) [948648]
  - [fs] cifs: revalidate directories instiantiated via FIND_xxx (Sachin Prabhu) [905231]
  - [fs] cifs: only set ops for inodes in I_NEW state (Sachin Prabhu) [905231]
  - [fs] cifs: mark dentry as dfs entry in cifs_d_revalidate (Sachin Prabhu) [905231]
  - [fs] ext4: add BH_Verified flag avoiding metadata validation (Lukas Czerner) [1000233]
  - [net] ipt_recent: avoid high order page allocations (Jiri Pirko) [571322]
  - [scsi] Allow error handling timeout to be specified (Ewan Milne) [826060]
  - [net] tg3: Remove incorrect switch to aux power (Ivan Vecera) [1013730]
  - [fs] nfs: silence build warnings with undeclared struct nfs_fattr (Jeff Layton) [1026287]
  - [net] ipv6: fix overlap check for fragments (Francesco Fusco) [995277]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-379.el5]
changelog:
  - [net] ipvs: add boundary check on ioctl arguments (Francesco Fusco) [1030816] {CVE-2013-4588}
  - [scsi] Add 'eh_deadline' to limit SCSI EH runtime (Ewan Milne) [956132]
  - [scsi] remove check for 'resetting' (Ewan Milne) [956132]
  - [scsi] dc395: Move 'last_reset' into internal host structure (Ewan Milne) [956132]
  - [scsi] tmscsim: Move 'last_reset' into host structure (Ewan Milne) [956132]
  - [scsi] advansys: Remove 'last_reset' references (Ewan Milne) [956132]
  - [scsi] dpt_i2o: return SCSI_MLQUEUE_HOST_BUSY when in reset (Ewan Milne) [956132]
  - [scsi] dpt_i2o: Remove DPTI_STATE_IOCTL (Ewan Milne) [956132]
  - [net] ipv6: fix leaking uninit port number of offender sockaddr (Florian Westphal) [1035881] {CVE-2013-7263 CVE-2013-7264 CVE-2013-7265 CVE-2013-7281}
  - [net] fix addr_len/msg->msg_namelen assign in recv_error funcs (Florian Westphal) [1035881] {CVE-2013-7263 CVE-2013-7264 CVE-2013-7265 CVE-2013-7281}
  - [net] prevent leakage of uninitialized memory to user in recv (Florian Westphal) [1035881] {CVE-2013-7263 CVE-2013-7264 CVE-2013-7265 CVE-2013-7281}
  - [net] be2net: prevent Tx stall on SH-R when packet size < 32 (Ivan Vecera) [1007995]
  - [net] be2net: Trim padded packets for Lancer (Ivan Vecera) [1007995]
  - [net] be2net: Pad skb to meet min Tx pkt size in lancer (Ivan Vecera) [1007995]
  - [net] be2net: refactor HW workarounds in be_xmit() (Ivan Vecera) [1007995]
  - [fs] gfs2: slab memory still in use after gfs2 unmount (Robert S Peterson) [516025]
  - [fs] exec/ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039484] {CVE-2013-2929}
  - [fs] cifs: stop trying to use virtual circuits (Sachin Prabhu) [1013469]
  - [security] Fix spurious warnings in security_ops_task_setrlimit (Mateusz Guzik) [916235]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-376.el5]
changelog:
  - [fs] NTLM auth and sign - Use appropriate server challenge (Sachin Prabhu) [1018286]
  - [net] sunrpc: fix deadlock in task wakeup code (Jeff Layton) [998126]
  - [xen] gnttab: correct locking order reversal (Radim Krcmar) [1026246] {CVE-2013-4494}


author: Phillip Lougher <plougher@redhat.com> [2.6.18-375.el5]
changelog:
  - [md] dm snapshot: fix data corruption (Mikulas Patocka) [975353] {CVE-2013-4299}
  - [xen] information leak via I/O instruction emulation (Igor Mammedov) [1009603] {CVE-2013-4355}


author: Phillip Lougher <plougher@redhat.com> [2.6.18-373.el5]
changelog:
  - [scsi] mpt2sas: bump version (Tomas Henzl) [956330]
  - [scsi] mpt2sas: fix the incorrect scsi_dma_map error checking (Tomas Henzl) [956330]
  - [net] tg3: call pci_enable_wake() to set power state (John Feeney) [996331]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-372.el5]
changelog:
  - [crypto] ansi_cprng fix off by one err in non-block size request (Neil Horman) [1007693] {CVE-2013-4345}
  - [fs] gfs2: yield() in shrinker to allow glock_workqueues to run (Abhijith Das) [928518]
  - [misc] backport fixes for percpu-rw-semaphore (Mikulas Patocka) [867997]
  - [net] ipv6: ipv6_create_tempaddr cleanup (Petr Holasek) [999362] {CVE-2013-0343}
  - [net] ipv6: remove max_addresses check from ipv6_create_tempaddr (Petr Holasek) [999362] {CVE-2013-0343}


author: Phillip Lougher <plougher@redhat.com> [2.6.18-370.el5]
changelog:
  - [net] be2net: Fix to avoid hardware workaround when not needed (Ivan Vecera) [995961]
  - [kernel] signals: stop info leak via tkill and tgkill syscalls (Oleg Nesterov) [970875] {CVE-2013-2141}


author: Phillip Lougher <plougher@redhat.com> [2.6.18-369.el5]
changelog:
  - [fs] nlm: Ensure we resend pending blocking locks after a reclaim (Steve Dickson) [918592]
  - [kernel] kmod: kthread_run causes oom killer deadlock (Frantisek Hrbata) [983506]
  - [fs] nfs4: ratelimit some messages, add name to bad seq-id mess (Dave Wysochanski) [953121]
  - [fs] nfsd: fix EXDEV checking in rename (J. Bruce Fields) [515599]
  - [misc] tty: Fix abusers of current-sighand->tty (Aaron Tomlin) [858981]
  - [net] ipv6: don't call addrconf_dst_alloc again when enable lo (Jiri Benc) [981417]
  - [redhat] kabi: Adding symbol fc_fabric_login (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fcoe_ctlr_recv (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_exch_mgr_reset (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_lport_init (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_exch_recv (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_lport_destroy (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fcoe_ctlr_els_send (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fcoe_ctlr_destroy (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_exch_init (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_fabric_logoff (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_set_mfs (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_elsct_init (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fcoe_ctlr_link_up (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fcoe_ctlr_recv_flogi (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_change_queue_depth (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fcoe_ctlr_init (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fcoe_ctlr_link_down (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_change_queue_type (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_exch_mgr_free (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_exch_mgr_alloc (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_lport_config (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_disc_init (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol strict_strtoul (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_rport_init (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_get_host_port_state (Jiri Olsa) [864256]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-368.el5]
changelog:
  - [net] tg3: Add read dma workaround for 5720 (Ivan Vecera) [984064]
  - [net] tg3: Add New 5719 Read DMA workaround (Ivan Vecera) [984064]
  - [net] vlan: fix perf regression due to missing features flags (Michal Schmidt) [977711]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-367.el5]
changelog:
  - [net] ipv6: do udp_push_pending_frames AF_INET sock pending data (Jiri Benc) [987648] {CVE-2013-4162}
  - [net] mlx4: restore pre-RHEL5.9 default value of log_num_mac (Michal Schmidt) [968352]
  - [x86_64] Fix kdump failure due to 'x86_64: Early segment setup' (Paolo Bonzini) [987244]
  - [fs] vfs: remove unused __d_splice_alias argument (J. Bruce Fields) [785916]
  - [fs] vfs: stop d_splice_alias creating directory aliases (J. Bruce Fields) [785916]
  - [xen] skip tracing if it was disabled instead of dying (Igor Mammedov) [967053]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-366.el5]
changelog:
  - [net] be2net: Activate new FW after FW download for Lancer (Ivan Vecera) [982590]
  - [net] be2net: Fix initialization sequence for Lancer (Ivan Vecera) [982590]
  - [net] be2net: Fix FW download in Lancer (Ivan Vecera) [982590]
  - [net] qlge: Fix receive path to drop error frames (Chad Dupuis) [975852]
  - [net] qlge: remove NETIF_F_TSO6 flag (Chad Dupuis) [975852]
  - [net] qlge: Moving low level frame error to ethtool statistics (Chad Dupuis) [975852]
  - [net] qlge: Fixed double pci free on tx_ring->q allocation fail (Chad Dupuis) [975852]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-365.el5]
changelog:
  - [net] be2net: Mark checksum fail for IP fragmented packets (Ivan Vecera) [956322]
  - [net] be2net: Avoid double insertion of vlan tags (Ivan Vecera) [956322]
  - [net] be2net: disable TX in be_close() (Ivan Vecera) [956322]
  - [net] be2net: fix EQ from getting full while cleaning RX CQ (Ivan Vecera) [956322]
  - [net] be2net: avoid napi_disable() when not enabled (Ivan Vecera) [956322]
  - [net] be2net: Fix receive Multicast Packets w/ Promiscuous mode (Ivan Vecera) [956322]
  - [net] be2net: Fixed memory leak (Ivan Vecera) [956322]
  - [net] be2net: Fix PVID tag offload for packets w/ inline VLAN tag (Ivan Vecera) [956322]
  - [net] be2net: fix a Tx stall bug caused by a specific ipv6 packet (Ivan Vecera) [956322]
  - [net] be2net: Remove an incorrect pvid check in Tx (Ivan Vecera) [956322]
  - [net] be2net: Fix issues in error recovery with wrong queue state (Ivan Vecera) [956322]
  - [net] netpoll: revert 6bdb7fe3104 and fix be_poll() instead (Ivan Vecera) [956322]
  - [net] be2net: Fix to parse RSS hash Receive completions correctly (Ivan Vecera) [956322]
  - [net] be2net: Fix cleanup path when EQ creation fails (Ivan Vecera) [956322]
  - [net] be2net: Fix Endian (Ivan Vecera) [956322]
  - [net] be2net: Fix to trim skb for padded vlan packets (Ivan Vecera) [956322]
  - [net] be2net: Explicitly clear reserved field in Tx Descriptor (Ivan Vecera) [956322]
  - [net] be2net: remove unnecessary usage of unlikely() (Ivan Vecera) [956322]
  - [net] be2net: do not modify PCI MaxReadReq size (Ivan Vecera) [956322]
  - [net] be2net: cleanup be_vid_config() (Ivan Vecera) [956322]
  - [net] be2net: don't call vid_config() when there no vlan config (Ivan Vecera) [956322]
  - [net] be2net: Ignore status of some ioctls during driver load (Ivan Vecera) [956322]
  - [net] be2net: Fix wrong status getting returned for MCC commands (Ivan Vecera) [956322]
  - [net] be2net: Fix VLAN/multicast packet reception (Ivan Vecera) [956322]
  - [net] be2net: fix wrong frag_idx reported by RX CQ (Ivan Vecera) [956322]
  - [infiniband] cxgb4: Compile when CXGB4 is set, not CXGB3 (Doug Ledford) [871555]
  - Revert: [infiniband] qib: add qib, mod ipath to only support HTX (Doug Ledford) [871555]
  - Revert: [infiniband] Enable Kconfig for ipath (Doug Ledford) [871555]
  - Revert: [infiniband] Revert upstream 'Infiniband: make ipath' (Doug Ledford) [871555]
  - Revert: [infiniband] Revert upstream 'IB/ipath: Make ipath_port' (Doug Ledford) [871555]
  - Revert: [infiniband] Revert upstream 'IB/ipath: Convert from ...' (Doug Ledford) [871555]
  - Revert: [infiniband] Revert upstream 'cpumask: use new cpumask' (Doug Ledford) [871555]
  - Revert: [infiniband] Import of backport patch from ofed 1.4.2 (Doug Ledford) [871555]
  - Revert: [infiniband] Pull in backport from ofed 1.4.2 (Doug Ledford) [871555]
  - Revert: [infiniband] aio_write not right entrypoint to use in our (Doug Ledford) [871555]
  - Revert: [infiniband] make up for lack of HT_IRQ config option (Doug Ledford) [871555]
  - Revert: [infiniband] Don't use vmalloc_user (Doug Ledford) [871555]
  - Revert: [infiniband] More device->class_device conversions (Doug Ledford) [871555]
  - Revert: [scsi] qla4xxx: ISP8xxx: Correct retry of adapter initial (Chad Dupuis) [978150]
  - [net] af_key: fix info leaks in notify messages (Jiri Benc) [981000] {CVE-2013-2234}
  - [net] af_key: initialize satype in key_notify_policy_flush() (Jiri Benc) [981224] {CVE-2013-2237}
  - [net] Fix panic for vlan over gre via tun (Thomas Graf) [981337]
  - [net] ipv6: ip6_sk_dst_check() must not assume ipv6 dst (Jiri Pirko) [981557] {CVE-2013-2232}


author: Phillip Lougher <plougher@redhat.com> [2.6.18-364.el5]
changelog:
  - [net] sctp: Disallow new connection on a closing socket (Daniel Borkmann) [974936] {CVE-2013-2206}
  - [net] sctp: Use correct sideffect command in dup cookie handling (Daniel Borkmann) [974936] {CVE-2013-2206}
  - [net] sctp: deal with multiple COOKIE_ECHO chunks (Daniel Borkmann) [974936] {CVE-2013-2206}
  - [scsi] qla4xxx: Update vers to 5.02.04.06.05.10-d0 for Inbox rel (Chad Dupuis) [978150]
  - [scsi] qla4xxx: ISP8xxx: Correct retry of adapter initialization (Chad Dupuis) [978150]
  - [scsi] qla4xxx: Fix req queue count manipulation on response path (Chad Dupuis) [978150]
  - [scsi] qla4xxx: Fix targets not coming back if chap is enabled (Chad Dupuis) [978150]
  - [scsi] qla4xxx: Correct early completion of pending mbox (Chad Dupuis) [978150]
  - [net] fix invalid free in ip_cmsg_send() callers (Petr Matousek) [980142] {CVE-2013-2224}
  - [x86_64] Early segment setup for VT (Paolo Bonzini) [978305]
  - [block] cpqarray: info leak in ida_locked_ioctl() (Tomas Henzl) [971246] {CVE-2013-2147}
  - [net] tcp: bind() use stronger condition for bind_conflict (Flavio Leitner) [957604]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-363.el5]
changelog:
  - [virt] netback: don't disconnect frontend with oversize packet (Andrew Jones) [971155]
  - [virt] netfront: reduce gso_max_size to account max TCP header (Andrew Jones) [971155]
  - [block] cdrom: use kzalloc() for failing hardware (Frantisek Hrbata) [973104] {CVE-2013-2164}
  - [block] cciss: Update version string (Linda Knippers) [919633]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-362.el5]
changelog:
  - [block] cciss: Silence noisy per-device cciss messages (Tomas Henzl) [827515]
  - [fs] gfs2: flush work queue before clearing glock hash tables (Abhijith Das) [959532]
  - [fs] extN: tighten restrictions on inode flags (Eric Sandeen) [756309]
  - [mm] use-after-free in madvise_remove() (Jacob Tanenbaum) [849736] {CVE-2012-3511}
  - [internal] kernel.spec: add Provides line to kernel-debug-devel (Phillip Lougher) [709658]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-361.el5]
changelog:
  - [fs] ext4: Avoid crashing on NULL ptr dereference on fs error (Carlos Maiolino) [867748]
  - [fs] ext4: set extents flag when migrating file to use extents (Carlos Maiolino) [867748]
  - [fs] ext4: Convert more i_flags references to use accessors (Carlos Maiolino) [867748]
  - [fs] ext4: Fix remaining racy updates of EXT4_I(inode)->i_flags (Carlos Maiolino) [867748]
  - [fs] ext4: Use bitops to read/modify i_flags in ext4_inode_info (Carlos Maiolino) [867748]
  - [fs] ext3/4: don't clear orphan list on ro mount with errors (Eric Sandeen) [850803]
  - [fs] jbd2: round commit timer up to avoid uncommitted transaction (Carlos Maiolino) [892393]
  - [scsi] ibmvfc: Ignore fabric RSCNs when link is dead (Steve Best) [964334]
  - [mm] Page migration: Don't accept invalid nodes in target nodeset (Jan Stancek) [848473]
  - [mm] Break out when there is nothing more to write for the fs. (Larry Woodman) [965359]
  - [sound] ALSA - fix the no-sound issue for Creative Recon3D cards (Jaroslav Kysela) [796912]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-360.el5]
changelog:
  - [fs] zisofs: fix readpage() outside i_size (Eric Sandeen) [952860]
  - [net] fixed: fix module unloading for the 'fixed' driver (Nikolay Aleksandrov) [647894]
  - [net] ipv6: assign rt6_info to inet6_ifaddr in init_loopback (Jiri Benc) [971067]
  - [net] Bluetooth: fix possible info leak in bt_sock_recvmsg() (Radomir Vrbovsky) [955601] {CVE-2013-3224}
  - [block] gen8plus Smart Array IDs (Linda Knippers) [919633]
  - [net] Bluetooth: HCI & L2CAP information leaks (Jacob Tanenbaum) [922416] {CVE-2012-6544}
  - [virt] xen PV passthru: assign SR-IOV VFs to sep virtual slots (Laszlo Ersek) [865736]
  - [scsi] be2iscsi: This patch bumps the version number (Rob Evers) [962503]
  - [scsi] be2iscsi: This patch fixes the NOPIN issues (Rob Evers) [962503]
  - [xen] cap physmem at 1TB (Andrew Jones) [961667]
  - [xen] cleanup invalid checksum error (Andrew Jones) [914814]
  - [xen] mask cpuid avx (Andrew Jones) [894360]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-359.el5]
changelog:
  - [fs] autofs4: use __simple_empty() for empty directory check (Ian Kent) [873922]
  - [fs] autofs: remove autofs dentry mount check (Ian Kent) [928098]
  - [redhat] kabi: Adding symbol register_lro_netdev (Jiri Olsa) [873514]
  - [redhat] kabi: Adding symbol unregister_lro_netdev (Jiri Olsa) [873514]
  - [misc] signal: use __ARCH_HAS_SA_RESTORER instead of SA_RESTORER (Nikola Pajkovsky) [920504] {CVE-2013-0914}
  - [misc] signal: always clear sa_restorer on execve (Nikola Pajkovsky) [920504] {CVE-2013-0914}
  - [misc] signal: Def __ARCH_HAS_SA_RESTORER for sa_restorer clear (Nikola Pajkovsky) [920504] {CVE-2013-0914}
  - [net] ipv6: Fix broken IPv6 routing table after loopback down-up (Jiri Benc) [745321]
  - [virt] hv: use gracefully shutdown instead of poweroff (Jason Wang) [903460]
  - [md] dm kcopyd throttling (Mikulas Patocka) [958556]
  - [scsi] storvsc: Properly handle in-transit packets during a reset (Jason Wang) [865292]
  - [net] sky2: fix scheduling while atomic in sky2_vlan_rx_register (Nikolay Aleksandrov) [920757]
  - [x86] fix timeout of poll(2) w/ 32-bit processes on x86_64 (Naoya Horiguchi) [794670]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-358.el5]
changelog:
  - [net] tg3: buffer overflow in VPD firmware parsing (Jacob Tanenbaum) [949940] {CVE-2013-1929}
  - [net] atm: update msg_namelen in vcc_recvmsg() (Nikola Pajkovsky) [955223] {CVE-2013-3222}
  - [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [960783]
  - [cpufreq] acpi-cpufreq more defensive against BIOS freq changes (Lenny Szubowicz) [921856]
  - [net] tcp: connect() race with timewait reuse (Jiri Pirko) [947038]
  - [block] ide: Allow configuration of prefer_ms_hyperv (Radomir Vrbovsky) [907231]
  - [infiniband] Return link layer type to userspace query port op (Jay Fenlason) [866331]
  - [scsi] ipr: Fix oops while resetting an ipr adapter (Steve Best) [914391]
  - [net] ipv6: Remove IPV6_ADDR_RESERVED (Amerigo Wang) [728922]
  - [net] IP_MULTICAST_IF setsockopt now recognizes struct mreq (Jiri Pirko) [847613]
  - [net] reduce per cpu ram used for loopback stats (Weiping Pan) [872466]
  - [net] ipv4: check optlen for IP_MULTICAST_IF option (Jiri Pirko) [866743]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-357.el5]
changelog:
  - [fs] ext4: prevent race while walking extent tree for fiemap (Lukas Czerner) [692071]
  - [fs] ext4: Fix possibly very long loop in fiemap (Lukas Czerner) [692071]
  - [fs] ext4: make FIEMAP and delayed allocation play well together (Lukas Czerner) [692071]
  - [fs] ext4: handle NULL p_ext in ext4_ext_next_allocated_block() (Lukas Czerner) [692071]
  - [fs] ext4: drop ec_type from the ext4_ext_cache structure (Lukas Czerner) [692071]
  - [fs] afs: export a couple of core functions for AFS write support (Lukas Czerner) [692071]
  - [fs] cifs: show sec= option in /proc/mounts (Sachin Prabhu) [806481]
  - [fs] cifs: Introduce workaround for crypto module loading problem (Sachin Prabhu) [806481]
  - [fs] cifs: Fix extended security auth failure (Sachin Prabhu) [806481]
  - [fs] cifs: silence printk when establishing first sess on socket (Sachin Prabhu) [806481]
  - [fs] cifs: Fix sign failure when serv mandates sign for NTLMSSP (Sachin Prabhu) [806481]
  - [fs] cifs: Support NTLM2 sess security dur NTLMSSP authenticate (Sachin Prabhu) [806481]
  - [fs] cifs: ignore everything in SPNEGO blob after mechTypes (Sachin Prabhu) [806481]
  - [fs] cifs: check offset in decode_ntlmssp_challenge() (Sachin Prabhu) [806481]
  - [fs] cifs: endian fix in decode_ntlmssp_challenge (Sachin Prabhu) [806481]
  - [fs] cifs: NTLM auth/sign - create & send keys for key exchange (Sachin Prabhu) [806481]
  - [fs] cifs: mv 'ntlmssp' & 'local_leases' opts from experimental (Sachin Prabhu) [806481]
  - [fs] cifs: Remove distinction between rawntlmssp and ntlmssp. (Sachin Prabhu) [806481]
  - [fs] cifs: Fix broken sec=ntlmv2/i sec option (try #2) (Sachin Prabhu) [806481]
  - [fs] cifs: NTLM auth/sign - minor error corrections and cleanup (Sachin Prabhu) [806481]
  - [fs] cifs: NTLM auth/sign - Alloc sess key/client res dynamically (Sachin Prabhu) [806481]
  - [fs] cifs: NTLM authent & signing - Calc auth response per sess (Sachin Prabhu) [806481]
  - [fs] cifs: ntlm authent & signing - proper av/ti pair for ntlmv2 (Sachin Prabhu) [806481]
  - [fs] cifs: fix module refcount leak in find_domain_name (Sachin Prabhu) [806481]
  - [fs] cifs: ntlm authent & signing - Fix response len for ntlmv2 (Sachin Prabhu) [806481]
  - [fs] cifs: NTLMv2/NTLMSSP ntlmv2 within ntlmssp authenticate code (Sachin Prabhu) [806481]
  - [fs] cifs: NTLMv2/NTLMSSP Change var name mac_key to session key (Sachin Prabhu) [806481]
  - [fs] cifs: ntlmv2/ntlmssp rem function CalcNTLMv2_partial_mac_key (Sachin Prabhu) [806481]
  - [fs] cifs: have decode_negTokenInit set flags in server struct (Sachin Prabhu) [806481]
  - [fs] cifs: eliminate 'first_time' parm to CIFS_SessSetup (Sachin Prabhu) [806481]
  - [fs] cifs: Allow raw ntlmssp code to be enabled with sec=ntlmssp (Sachin Prabhu) [806481]
  - [fs] cifs: Fix SMB uid in NTLMSSP authenticate request (Sachin Prabhu) [806481]
  - [fs] cifs: NTLMSSP reenabled after move from connect.c to sess.c (Sachin Prabhu) [806481]
  - [fs] cifs: Add remaining ntlmssp flags & standardize field names (Sachin Prabhu) [806481]
  - [misc] genalloc: stop crashing the system when destroying a pool (Steve Best) [859194]
  - [x86] mm: introduce proper mem barriers smp_invalidate_interrupt (Rafael Aquini) [865095]
  - [x86] Add sysctl to allow panic on IOCK NMI error (Prarit Bhargava) [918279]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-356.el5]
changelog:
  - [fs] nfs: flush cached dir information slightly more readily (Scott Mayhew) [853145]
  - [fs] nfs: Fix resolution prob with cache_change_attribute (Scott Mayhew) [853145]
  - [fs] nfs: define function to update nfsi->cache_change_attribute (Scott Mayhew) [853145]
  - [fs] nfsv4: Save the owner/group name string when doing open (Scott Mayhew) [609252]
  - [fs] nfsv4: Don't do idmapper upcalls for asynchronous RPC calls (Scott Mayhew) [609252]
  - [fs] nfsv4: Fix cache validate bug where getcwd() returns ENOENT (Scott Mayhew) [609252]
  - [fs] nfsv4: Simplify some cache consistency post-op GETATTRs (Scott Mayhew) [609252]
  - [fs] nfsv4: set fattr->valid to reflect what was decoded (Scott Mayhew) [609252]
  - [fs] nfsv4: Clean up decode_getfattr() (Scott Mayhew) [609252]
  - [fs] nfsv4: Support NFSv4 optional attrs in the struct nfs_fattr (Scott Mayhew) [609252]
  - [fs] nfs: Fix nfs_post_op_update_inode_force_wcc() (Scott Mayhew) [609252]
  - [md] shutdown, don't switch to RO, mark clean and set safemode=2 (Jes Sorensen) [864727]
  - [net] cxgb4: zero out another firmware request struct (Jay Fenlason) [872531]
  - [net] cxgb4: clear out most firmware request structures (Jay Fenlason) [872531]
  - [net] ethtool: allow enable GRO even if RX csum is disabled (Ivan Vecera) [894636]
  - [net] enable GRO by default for vlan devices (Ivan Vecera) [894636]
  - [net] bonding: enable gro by default (Ivan Vecera) [894636]
  - [mm] writeback: remove unnecessary wait in throttle_vm_writeout() (Frantisek Hrbata) [822768]
  - [mm] throttle_vm_writeout: don't loop on GFP_NOFS/GFP_NOIO alloc (Frantisek Hrbata) [822768]
  - [char] random: mix in architectural randomness in extract_buf() (Prarit Bhargava) [871559]
  - [char] random: Use arch-specific RNG to init the entropy store (Prarit Bhargava) [871559]
  - [x86] random: Verify RDRAND function and allow it to be disabled (Prarit Bhargava) [871559]
  - [x86] random: Arch inlines to get random integers with RDRAND (Prarit Bhargava) [871559]
  - [char] random: Add support for architectural random hooks (Prarit Bhargava) [871559]
  - [char] random: make mixing interface byte-oriented (Prarit Bhargava) [871559]
  - [char] random: remove some prefetch logic (Prarit Bhargava) [871559]
  - [char] random: improve variable naming, clear extract buffer (Prarit Bhargava) [871559]
  - [x86] add clear_cpu_cap() operation (Prarit Bhargava) [871559]
  - [x86] 32-bit, add alternative_io() (Prarit Bhargava) [871559]
  - [x86] add X86_FEATURE_RDRAND (Prarit Bhargava) [871559]
  - [x86] add ASM_OUTPUT2 (Prarit Bhargava) [871559]
  - [x86] mce, kernel supports MCE for Nehalem (Prarit Bhargava) [958905]
  - [scsi] qla2xxx: Add a mutex around use of optrom variables. (Chad Dupuis) [795550]
  - [net] be2net: fix wrong frag_idx reported by RX CQ (Ivan Vecera) [862520]
  - [net] bnx2x: Prevent NULL pointer dereference in kdump (Michal Schmidt) [867302]
  - [scsi] cxgb4i hot-unplug (Jay Fenlason) [786024]
  - [net] bond: add support to read speed and duplex via ethtool (Andy Gospodarek) [704575]
  - [net] netpoll: workaround a race condition (Amerigo Wang) [742495]
  - [net] IPV6: Allow address changes while administrative down (Flavio Leitner) [868622]
  - [sound] ALSA - HDA - fix NULL pointer dereference for ALC268 (Jaroslav Kysela) [901337]
  - [scsi] cciss: use lun reset not target reset (Tomas Henzl) [893049]
  - [net] igbvf: work around i350 erratum (Stefan Assmann) [878904]
  - [net] llc: Fix missing msg_namelen update in llc_ui_recvmsg() (Jesper Brouer) [956097] {CVE-2013-3231}
  - [net] tipc: fix info leaks via msg_name in recv_msg/recv_stream (Jesper Brouer) [956149] {CVE-2013-3235}
  - [net] Bluetooth: RFCOMM Fix info leak in ioctl(RFCOMMGETDEVLIST) (Radomir Vrbovsky) [922407] {CVE-2012-6545}
  - [net] Bluetooth: RFCOMM - Fix info leak via getsockname() (Radomir Vrbovsky) [922407] {CVE-2012-6545}
  - [kernel] Make futex_wait() use an hrtimer for timeout (Prarit Bhargava) [864648]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-355.el5]
changelog:
  - [char] ipmi: use a tasklet for handling received messages (Tony Camuso) [947732]
  - [char] ipmi: do run_to_completion properly in deliver_recv_msg (Tony Camuso) [947732]
  - [fs] nfs4: fix locking around cl_state_owners list (Dave Wysochanski) [948317]
  - [s390] qeth: fix qeth_wait_for_threads() deadlock for OSN devices (Hendrik Brueckner) [952451]
  - [fs] ext4: check for zero length extent (Lukas Czerner) [866433]
  - [net] be2net: fix be_close() to ensure all events are ack'ed (Ivan Vecera) [950137]
  - [net] be2net: fix a race in be_xmit() (Ivan Vecera) [949959]
  - [kernel] kmod: avoid deadlock from recursive request_module call (Frantisek Hrbata) [949568]
  - [net] netxen: write IP address to firmware when using bonding (Nikolay Aleksandrov) [756502]
  - [s390] kernel: sched_clock() overflow (Hendrik Brueckner) [903338]
  - [net] devinet: Register inetdev earlier (Jiri Pirko) [770813]
  - [fs] nfs: Fix bugs on short read (Sachin Prabhu) [924011]
  - [fs] nfs: Don't allow NFS silly-renamed files to be deleted (Dave Wysochanski) [906472]
  - [xen] AMD IOMMU: spot missing IO-APIC entries in IVRS table (Igor Mammedov) [910913] {CVE-2013-0153}
  - [xen] AMD, IOMMU: Make per-device interrupt remap table default (Igor Mammedov) [910913] {CVE-2013-0153}
  - [xen] AMD, IOMMU: Disable IOMMU if SATA Combined mode is on (Igor Mammedov) [910913] {CVE-2013-0153}
  - [xen] AMD, IOMMU: On creating entry clean up in remapping tables (Igor Mammedov) [910913] {CVE-2013-0153}
  - [xen] ACPI: acpi_table_parse() should return handler's err code (Igor Mammedov) [910913] {CVE-2013-0153}
  - [xen] introduce xzalloc() & Co (Igor Mammedov) [910913] {CVE-2013-0153}


author: Phillip Lougher <plougher@redhat.com> [2.6.18-354.el5]
changelog:
  - [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [731531]
  - [i386] add sleazy FPU optimization (Prarit Bhargava) [731531]
  - [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [731531]
  - [net] be2net: fix calling __vlan_put_tag() after eth_type_trans() (Ivan Vecera) [916640]
  - [net] be2net: increment/decrement vlans_added only once (Ivan Vecera) [922223]
  - [net] tg3: use PCI PM core funcs not direct access to registers (Ivan Vecera) [866822]
  - [fs] ext3: fix update of mtime and ctime on rename (Carlos Maiolino) [919191]
  - [fs] nfs: handle getattr failure during nfsv4 open (David Jeffery) [906909]
  - [pci] read-modify-write PCIe dev control reg when initiating FLR (Myron Stowe) [854001]
  - [fs] ext3: fix wrong gfp type under transaction (Lukas Czerner) [816665]
  - [pci] intel-iommu: Prev devs with RMRRs from going in SI Domain (Tony Camuso) [839334]
  - [net] tcp: fix >2 iw selection (Daniel Borkmann) [871787]
  - [ata] sata_svw: check DMA start bit before reset (David Milburn) [754311]
  - [s390] qeth: set new mac even if old mac is gone (Hendrik Brueckner) [883459]
  - [s390] qeth: fix deadlock between recovery and bonding driver (Hendrik Brueckner) [869646]
  - [s390] dasd: check count address during online setting (Hendrik Brueckner) [859527]
  - [s390] hugetlb: use direct TLB flushing for hugetlbfs pages (Hendrik Brueckner) [861178]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-353.el5]
changelog:
  - [virt] xen-netback: backports (Andrew Jones) [910885] {CVE-2013-0216 CVE-2013-0217}
  - [virt] xen-netback: netif_schedulable should take a netif (Andrew Jones) [910885] {CVE-2013-0216 CVE-2013-0217}
  - [virt] pciback: rate limit error mess from pciback_enable_msi() (Igor Mammedov) [910877] {CVE-2013-0231}
  - [net] be2net: remove BUG_ON() in be_mcc_compl_is_new() (Ivan Vecera) [907524]
  - [net] ipv4: Update MTU to all related cache entries (Amerigo Wang) [905190]
  - [net] annotate rt_hash_code() users (Amerigo Wang) [905190]
  - [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922427] {CVE-2012-6537}
  - [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922427] {CVE-2012-6537}
  - [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922427] {CVE-2012-6537}
  - [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922385] {CVE-2012-6546}
  - [net] atm: fix info leak via getsockname() (Thomas Graf) [922385] {CVE-2012-6546}
  - [net] tun: fix ioctl() based info leaks (Thomas Graf) [922349] {CVE-2012-6547}
  - [net] llc, zero sockaddr_llc struct (Thomas Graf) [922329] {CVE-2012-6542}
  - [net] llc: fix info leak via getsockname() (Thomas Graf) [922329] {CVE-2012-6542}
  - [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919387] {CVE-2013-1826}
  - [kernel] wait_for_helper: SIGCHLD from u/s cause use-after-free (Frantisek Hrbata) [858753] {CVE-2012-4398}
  - [kernel] Fix ____call_usermodehelper errs being silently ignored (Frantisek Hrbata) [858753] {CVE-2012-4398}
  - [kernel] wait_for_helper: remove unneeded do_sigaction() (Frantisek Hrbata) [858753] {CVE-2012-4398}
  - [kernel] kmod: avoid deadlock from recursive kmod call (Frantisek Hrbata) [858753] {CVE-2012-4398}
  - [kernel] kmod: make request_module() killable (Frantisek Hrbata) [858753] {CVE-2012-4398}
  - [net] ixgbevf: allocate room for mailbox MSI-X interrupt's name (Laszlo Ersek) [862862]
  - [fs] knfsd: allow nfsd READDIR to return 64bit cookies (Niels de Vos) [918952]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-352.el5]
changelog:
  - [utrace] ensure arch_ptrace() can never race with SIGKILL (Oleg Nesterov) [912072] {CVE-2013-0871}
  - [x86] msr: Add capabilities check (Nikola Pajkovsky) [908697] {CVE-2013-0268}


author: Phillip Lougher <plougher@redhat.com> [2.6.18-351.el5]
changelog:
  - [misc] tainted flags, fix buffer size (Prarit Bhargava) [901547]
  - [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [878316]
  - [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [878316]
  - [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [878316]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-350.el5]
changelog:
  - [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [862865]
  - [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843141] {CVE-2012-3400}
  - [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843141] {CVE-2012-3400}
  - [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843141] {CVE-2012-3400}


author: Phillip Lougher <plougher@redhat.com> [2.6.18-349.el5]
changelog:
  - [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [885125]
  - [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [831330]
  - [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804954] {CVE-2012-1568}
  - [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [878209]
  - [net] tg3: Avoid dma read error (John Feeney) [877474]
  - [misc] Fix unsupported hardware message (Prarit Bhargava) [876587]
  - [net] ipv6: discard overlapping fragment (Jiri Pirko) [874838] {CVE-2012-4444}
  - [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [845447]
  - [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [843473]
  - [fs] nfs: move wait for server->active from put_super to kill_sb (Jeff Layton) [839839]
  - [scsi] libfc: fix indefinite rport restart (Neil Horman) [595184]
  - [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [595184]
  - [scsi] libfc: Fix remote port restart problem (Neil Horman) [595184]
  - [xen] memop: limit guest specified extent order (Laszlo Ersek) [878450] {CVE-2012-5515}
  - [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [881885]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-347.el5]
changelog:
  - [xen] add guest address range checks to XENMEM_exchange handlers (Igor Mammedov) [878034] {CVE-2012-5513}
  - [xen] x86/physmap: Prevent incorrect updates of m2p mappings (Igor Mammedov) [870149] {CVE-2012-4537}
  - [xen] VCPU/timer: Dos vulnerability prev overflow in calculations (Igor Mammedov) [870151] {CVE-2012-4535}


author: Phillip Lougher <plougher@redhat.com> [2.6.18-346.el5]
changelog:
  - [mm] check for populated zone in __drain_pages (Rafael Aquini) [873708]
  - [mm] do not allocate pagesets for unpopulated zones (Rafael Aquini) [873708]
  - [mm] do not check unpopulated zones for draining/counter updates (Rafael Aquini) [873708]
  - [x86] Mark Haswell HDMI Audio as unsupported. (Prarit Bhargava) [874248]
  - [misc] Backport mark_hardware_unsupported() (Prarit Bhargava) [874248]
  - [fs] ext4: race-cond protect for convert_unwritten_extents_endio (Lukas Czerner) [869911] {CVE-2012-4508}
  - [fs] ext4: serialize fallocate w/ ext4_convert_unwritten_extents (Lukas Czerner) [869911] {CVE-2012-4508}
  - [fs] ext4: flush the i_completed_io_list during ext4_truncate (Lukas Czerner) [869911] {CVE-2012-4508}
  - [fs] ext4: init pagevec in ext4_da_block_invalidatepages (Eric Sandeen) [869980]
  - [scsi] megaraid_sas: mark Invader support as tech preview (Tomas Henzl) [855434]
  - [scsi] mpt2sas: Fix panic when drives removed during diag reset (Tomas Henzl) [871422]
  - [net] bnx2x: Fix 57810 1G-KR link against certain switches. (Michal Schmidt) [865639]
  - [fs] Fix FREEZE/THAW compat_ioctl regression (Lukas Czerner) [874029]
  - [net] WARN if struct ip_options was allocated directly by kmalloc (Jiri Pirko) [872612]
  - [net] ipv4: add RCU protection to inet->opt (Jiri Pirko) [855302] {CVE-2012-3552}
  - [net] rds-ping cause kernel panic (Jay Fenlason) [822756] {CVE-2012-2372}
  - [x86] exclude iomem resource over 4G for i686 non PAE kernel (Dave Young) [875743]
  - [fs] ext4: remove mb_groups before tearing down the buddy_cache (Carlos Maiolino) [869135]
  - [fs] ext3: retry failed direct IO allocations (Carlos Maiolino) [657575]
  - [net] svcrpc: enforce a maximum socket buffer size (J. Bruce Fields) [863535]
  - [x86] Revert 'mm: randomize SHLIB_BASE' (Dave Anderson) [871692]
  - [xen] x86: whitelist AMD thermal & power management for dom0 (Laszlo Ersek) [872306]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-345.el5]
changelog:
  - [net] revert igb: Drop unnecessary write of E1000_IMS from ... (Stefan Assmann) [864848]
  - [net] bna: remove tech preview status (Ivan Vecera) [816215]
  - [scsi] bfa: remove tech-preview tainting (Rob Evers) [816212]
  - [scsi] bfa: Fix NULL pointer dereference with vport module unload (Rob Evers) [865962]
  - [scsi] sg: fix races during device removal (Ewan Milne) [861004]
  - [fs] autofs4: fix reset pending flag on mount fail (Ian Kent) [866937]
  - [net] mlx4: Fix an oops in vlan handling (Doug Ledford) [842486]
  - [net] be2net: Remove stops to further access to BE NIC on UE bits (Ivan Vecera) [862811]
  - [net] be2net: Fix traffic stall INTx mode (Ivan Vecera) [857872]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-344.el5]
changelog:
  - [fs] ext4: fix undefined bit shift result in ext4_fill_flex_info (Eric Sandeen) [809689] {CVE-2012-2100}
  - [fs] ext4: fix undefined behavior in ext4_fill_flex_info (Eric Sandeen) [809689] {CVE-2012-2100}
  - [misc] panic: fix a possible deadlock in panic() (Takahiro MUNEDA) [864553]
  - [fs] xfs: ensure f_ffree returned by statfs() is non-negative (Carlos Maiolino) [844961]
  - [fs] fix crash if block {device|size} read & changed at sametime (Mikulas Patocka) [756506]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-343.el5]
changelog:
  - [fs] ext4: correct comments for ext4_free_blocks() (Lukas Czerner) [847975]
  - [fs] ext4: fix i_blocks/quota accounting when extent insert fails (Eric Sandeen) [847975]
  - [fs] ext4: Add flags to the ext4_free_blocks() (Lukas Czerner) [847975]
  - [fs] ext4: fold ext4_free_blocks() and ext4_mb_free_blocks() (Eric Sandeen) [847975]
  - [fs] ext4: fix race in xattr block allocation path (Nikola Pajkovsky) [844854]
  - [misc] kdump: fix crash_kexec()/smp_send_stop() race in panic() (Takahiro MUNEDA) [748004]
  - [char] ipmi: lock si_lock in poll() to avoid system stall (Nikolay Aleksandrov) [795344]
  - [sound] alsa: add one more Haswell PCI ID (Jaroslav Kysela) [831964]
  - [net] tg3: Fix autoneg off (John Feeney) [854827]
  - [net] ethtool: Report link-down while interface is down (Ivan Vecera) [849566]
  - [x86] mm: randomize SHLIB_BASE (Dave Anderson) [804954] {CVE-2012-1568}
  - [net] bnx2x: fix rx performance regression due to small ring size (Michal Schmidt) [852096]
  - [fs] ext4: Add err check after calling ext4_mb_regular_allocator (Eric Sandeen) [833636]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-342.el5]
changelog:
  - [fs] nfsd: don't fail unchecked creates of non-special files (J. Bruce Fields) [848666]
  - [fs] nfsd4: return nfserr_symlink on v4 OPEN of non-regular file (J. Bruce Fields) [848666]
  - [sound] alsa: snd-aloop - improve the sample copy accurracy (Jaroslav Kysela) [854008]
  - [sound] alsa: aloop - Fix possible IRQ lock inversion (Jaroslav Kysela) [854008]
  - [sound] alsa: snd-aloop - add pause support (Jaroslav Kysela) [854008]
  - [redhat] kabi: Adding symbol nmi_watchdog (Jiri Olsa) [796988]
  - [redhat] kabi: Adding symbol ip_mc_rejoin_group (Jiri Olsa) [796988]
  - [redhat] kabi: Adding symbol kernel_sock_ioctl (Jiri Olsa) [796988]
  - [redhat] kabi: Adding symbol kernel_bind (Jiri Olsa) [796988]
  - [redhat] kabi: Adding symbol netdev_fix_features (Jiri Olsa) [796988]
  - [redhat] kabi: Adding symbol netdev_increment_features (Jiri Olsa) [796988]
  - [redhat] kabi: Adding symbol unregister_kprobe (Jiri Olsa) [796988]
  - [redhat] kabi: Adding symbol register_kprobe (Jiri Olsa) [796988]
  - [fs] cifs: fix name parsing in CIFSSMBQAllEAs (Sachin Prabhu) [846522]
  - [fs] xfs: obey minleft values during extent allocation correctly (Carlos Maiolino) [611746]
  - [net] vlan support ethtool get driver info (Jacob Tanenbaum) [844277]
  - [net] bnx2x: remove false warning regarding interrupt number (Michal Schmidt) [859158]
  - [net] ipv6: Fix fib6_dump_table walker leak (Jiri Benc) [819830]
  - [scsi] fcoe: move link speed checking into its own routine (Neil Horman) [852340]
  - [net] tg3: fix get stats to avoid lockup (John Feeney) [840864]
  - [pci] Quirk for still enabled interrupts Intel Sandy Bridge GPUs (Prarit Bhargava) [816725]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-341.el5]
changelog:
  - [fs] ext4: fix missing iput of root for some mount error paths (Phillip Lougher) [845906]
  - [ata] libata-eh: fix slave link EH action mask handling (David Milburn) [855228]
  - [fs] cifs: update cifs_dfs_d_automount caller path (Sachin Prabhu) [857448]
  - [net] bnx2x: fix rx checksum validation for IPv6 (Michal Schmidt) [852096]
  - [fs] tcp: bind() fix autoselection to share ports (Jacob Tanenbaum) [846518]
  - [xen] x86: change the default behaviour of CVE-2012-2934 fix (Petr Matousek) [858724]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-340.el5]
changelog:
  - [fs] cifs: Invalidate file cache in case of posix open (Sachin Prabhu) [852526]
  - [scsi] bfa: Address memory leaks in rare cases (Rob Evers) [843634]
  - [scsi] bfa: add comment regarding firmware versioning (Rob Evers) [843634]
  - [scsi] bfa: set correct return codes, misc. cleanup (Rob Evers) [843634]
  - [ia64] export cpu_sibling_map (like i386 and x86_64) (Nikola Pajkovsky) [847026]
  - [net] sfc: Fix VLAN TX offload features (Michal Schmidt) [847026]
  - [net] sfc: Set default parallelism to per-core by default (Michal Schmidt) [847026]
  - [net] sfc: Remove ancient support for nesting of TX stop (Michal Schmidt) [847026]
  - [net] sfc: Properly initialise NAPI context (Michal Schmidt) [847026]
  - [net] sfc: Warn if unable to create MTDs (Michal Schmidt) [847026]
  - [net] sfc: Fix ethtool_ops::get_link (Michal Schmidt) [847026]
  - [x86] amd: Re-enable CPU topology extensions (Frank Arnold) [848487]
  - [x86] amd: Fix L1i/L2 cache sharing info for AMD family 15h procs (Frank Arnold) [848487]
  - [net] bnx2x: Fix compiler warnings (Michal Schmidt) [846985]
  - [net] bnx2x: Fix recovery flow cleanup during probe (Michal Schmidt) [846985]
  - [net] bnx2x: fix unload previous driver flow when flr-capable (Michal Schmidt) [846985]
  - [net] bnx2x: fix mem leak when command is unknown (Michal Schmidt) [846985]
  - [net] bnx2x: Correct EEE statistics gathering (Michal Schmidt) [846985]
  - [net] bnx2x: fix 57840_MF pci id (Michal Schmidt) [846987]
  - [net] bnx2x: Add new 57840 device IDs (Michal Schmidt) [846987]
  - [infiniband] Backport of deactivate_locked_super (Doug Ledford) [846159]
  - [infiniband] More device->class_device conversions (Doug Ledford) [846159]
  - [infiniband] Don't use vmalloc_user (Doug Ledford) [846159]
  - [infiniband] make up for lack of HT_IRQ config option (Doug Ledford) [846159]
  - [infiniband] aio_write not right entrypoint to use in our kernel (Doug Ledford) [846159]
  - [infiniband] Pull in backport from ofed 1.4.2 (Doug Ledford) [846159]
  - [infiniband] Import of backport patch from ofed 1.4.2 (Doug Ledford) [846159]
  - [infiniband] Revert upstream 'cpumask: use new cpumask API ...' (Doug Ledford) [846159]
  - [infiniband] Revert upstream 'IB/ipath: Convert from .nopage ...' (Doug Ledford) [846159]
  - [infiniband] Revert upstream 'IB/ipath: Make ipath_portdata ...' (Doug Ledford) [846159]
  - [infiniband] Revert upstream 'Infiniband: make ipath driver ...' (Doug Ledford) [846159]
  - [infiniband] Enable Kconfig for ipath (Doug Ledford) [846159]
  - [net] ipvs: allow transmit of GRO aggregated skbs (Jesper Brouer) [854067]
  - [scsi] bnx2i: Fixed NULL ptr deference for 1G Linux iSCSI offload (Tomas Henzl) [851320]
  - [net] netpoll: fix an incorrect check for NULL pointer (Amerigo Wang) [848098]
  - [net] bridge: fix bridge module unloading race (Jiri Pirko) [854815]
  - [net] add unknown state to sysfs NIC duplex export (Nikolay Aleksandrov) [853472]
  - [scsi] isci: fixup linkspeed definitions (David Milburn) [833000]
  - [virt] hv: detect hyperv platform through x86_hyper_vendor (Jason Wang) [852692]
  - [misc] lockdep: double MAX_LOCKDEP_ENTRIES (Prarit Bhargava) [852546]
  - [scsi] qla2xx: Don't toggle inter bits after IRQ lines attached (Chad Dupuis) [800708]
  - [fs] autofs4: Merge the remaining dentry ops tables (Ian Kent) [850977]


author: Aristeu Rozanski <aris@redhat.com> [2.6.18-339.el5]
changelog:
  - [netdrv] igb: Change how we check for pre-existing and assigned VFs (Stefan Assmann) [845399]
  - [pci] Add SR-IOV convenience functions and macros (Stefan Assmann) [845399]
  - [netdrv] bnx2: Enable vlan tso and csum offload for bnx2 (Neil Horman) [844251]
  - [kernel] xacct_add_tsk: fix pure theoretical ->mm use-after-free (Nikola Pajkovsky) [849725] {CVE-2012-3510}
  - [net] net_sched: qdisc_alloc_handle() can be too slow (Jiri Pirko) [846939]
  - [netdrv] igb: reset PHY in the link_up process to recover PHY setting after power down (Stefan Assmann) [849103]
  - [net] igb: fix VLAN for i350 (Stefan Assmann) [845962]
  - [net] igb: Fix for failure to init on some 82576 devices (Stefan Assmann) [841410]
  - [fs] hfsplus: Buffer overflow in the HFS plus filesystem (Jacob Tanenbaum) [820256] {CVE-2012-2319}
  - [netdrv] igb: add delay to allow igb loopback test to succeed on 8086:10c9 (Stefan Assmann) [815701]
  - [net] netfilter: add dscp netfilter match (Thomas Graf) [842029]
  - [net] e1000e: drop check of RXCW.CW to eliminate link up and down (Dean Nelson) [840642]
  - [usb] fix interrupt disabling for HCDs with shared interrupt handlers (Don Zickus) [834665]
  - [net] sysfs: export nic speed and duplex (Nikolay Aleksandrov) [640206]
  - [redhat] kabi: Adding symbol kobject_uevent_env (Jiri Olsa) [739414]
  - [scsi] aacraid: Fixes kernel oops in  (Tomas Henzl) [801409]
  - [virt] hv: remove the compact version of netif_notify_peers() (Jason Wang) [824877]
  - [net] ipv4, ipv6, bonding: Restore control over number of peer notifications (Amerigo Wang) [845892]
  - [netdrv] bonding: Remove obsolete source file 'bond_ipv6.c' (Amerigo Wang) [845892]
  - [netdrv] bonding, ipv4, ipv6, vlan: Handle NETDEV_BONDING_FAILOVER in event notifier (Amerigo Wang) [845892]
  - [netdrv] vlan: Propagate NETDEV_NOTIFY_PEERS notifier (Amerigo Wang) [845892]
  - [net] ipv6: Send unsolicited neighbour advertismements when notified (Amerigo Wang) [845892]
  - [netdrv] arp_notify: unconditionally send gratuitous ARP for NETDEV_NOTIFY_PEERS (Amerigo Wang) [845892]
  - [netdrv] arp_notify: allow drivers to explicitly request a notification event (Amerigo Wang) [845892]
  - [scsi] mpt2sas: Bump driver vesion to 13.101.00.00 (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Fix for panic happening because of improper memory allocation (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Fix for hard drive going OFFLINE when hard reset issued and simultaneously another hard drive is hot unplugged (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Set the phy identifier of the end device to to the phy number of the parent device it is linked to (Tomas Henzl) [785653]
  - [scsi] mpt2sas: While enabling phy, read the current port number from sas iounit page 0 instead of page 1 (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Fix linux driver sparse errors (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Fix security scan issues reported by source code analysis tool (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Improvement were made to better protect the sas_device, raid_device, and expander_device lists (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Perform Target Reset instead of HBA reset when a SATA_PASSTHROUGH cmd timeout happens (Tomas Henzl) [785653]
  - [scsi] mpt2sas: MPI next revision header update (Tomas Henzl) [785653]
  - [scsi] mpt2sas: use pci_dev->revision (Tomas Henzl) [785653]
  - [scsi] mpt2sas: remove extraneous sas_log_info messages (Tomas Henzl) [785653]
  - [scsi] mpt2sas: spell  correctly in function prototype (Tomas Henzl) [785653]
  - [scsi] mpt2sas: add missing allocation check (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Fix mismatch in mpt2sas_base_hard_reset_handler() mutex lock-unlock (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Fix possible integer truncation of cpu_count (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Fix leak on mpt2sas_base_attach() error path (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Fix for memory allocation error for large host credits (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Do not retry a timed out direct IO for warpdrive (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Release spinlock for the raid device list before blocking it (Tomas Henzl) [785653]
  - [scsi] mpt2sas: MPI next revision header update (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Added support for customer specific branding (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Increase max transfer support from 4MB to 16MB (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Support for greater than 2TB capacity WarpDrive (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Rearrange the the code so that the completion queues are initialized prior to sending the request to controller firmware (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Do not set sas_device->starget to NULL from the slave_destroy callback when all the LUNS have been deleted (Tomas Henzl) [785653]
  - [scsi] mpt2sas: MPI next revision header update (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Adding support for customer specific branding (Tomas Henzl) [785653]
  - [scsi] mpt2sas: When IOs are terminated, update the result to DID_SOFT_ERROR to avoid infinite resets (Tomas Henzl) [785653]
  - [scsi] mpt2sas: _scsih_smart_predicted_fault uses GFP_KERNEL in interrupt context (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Fix for Panic when inactive volume is tried deleting (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Fix for issue Port Reset taking long time(around 5 mins) to complete while issued during creating a volume (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Fix for deadlock between hot plug worker threads and host reset context (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Fix for dead lock occurring between host_lock and sas_device_lock (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Fix drives not getting properly deleted if sas cable is removed while host reset is active (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Fix failure message displayed during diag reset (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Fix for system hang when discovery in progress (Tomas Henzl) [785653]
  - [scsi] mpt2sas: MPI next revision header update (Tomas Henzl) [785653]
  - [scsi] mpt2sas: take size of pointed value, not pointer (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Support added for controllers capable of multi reply queues (Tomas Henzl) [785653]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-338.el5]
changelog:
  - [virt] hv: bypass timer_irq_works() check when in hyperv (Jason Wang) [849534]
  - [virt] hv: fail probing immediately when not in hyperv platform (Jason Wang) [849548]
  - [x86] crash driver: prep for pseudo-phys pages w/o machine frames (Laszlo Ersek) [846328]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-337.el5]
changelog:
  - [scsi] qla4xxx: Update driver to 5.02.04.05.05.09-d0 (Chad Dupuis) [846698]
  - [scsi] qla4xxx: Clear interrupt while unloading driver (Chad Dupuis) [846698]
  - [scsi] qla4xxx: Properly handle underrun processing status IOCBs (Chad Dupuis) [846690]
  - [net] tg3: tg3_work avoid panic from statblk access (John Feeney) [844864]
  - [net] sock: validate data_len before allocating skb (Jason Wang) [816106] {CVE-2012-2136}


author: Phillip Lougher <plougher@redhat.com> [2.6.18-336.el5]
changelog:
  - [virt] hv: Add missing __KERNEL__ guard in hv_compat.h (Jason Wang) [824877]
  - [redhat] config: disable hyperv drivers for xen (Jason Wang) [824877]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-335.el5]
changelog:
  - [net] sfc: Fix max no of TSO segments and min TX queue size (Nikola Pajkovsky) [845555] {CVE-2012-3412}
  - [net] netpoll: use RCU to protect npinfo to avoid race conditions (Amerigo Wang) [741667]
  - [net] netconsole: hold rtnl lock before calling netpoll_cleanup() (Amerigo Wang) [741667]
  - [s390] lgr: Make lgr_page static (Hendrik Brueckner) [845131]
  - [net] mlx4: Add support for EEH error recovery (Steve Best) [798048]
  - [net] tcp: Add TCP_USER_TIMEOUT negative value check (Jiri Benc) [842765]
  - [net] bonding: send igmp report for its master (Veaceslav Falico) [843473]
  - [x86_64] amd_iommu: Fix page table walk in iommu_unmap_page (Alex Williamson) [845034]
  - [net] be2net: Fix EEH error reset before a flash dump completes (Steve Best) [845169]
  - [net] cxgb4: unify return value of .ndo_set_mac_address (Jay Fenlason) [802610]
  - [net] cxgb4: Add support for T480-CR and T440-LP-CR adapters (Jay Fenlason) [802610]
  - [net] cxgb4: make ethtool_ops const (Jay Fenlason) [802610]
  - [net] cxgb4: remove netdev_alloc_page and use __GFP_COLD (Jay Fenlason) [802610]
  - [net] cxgb4: Sweep away N/A fw_version from .get_drvinfo (Jay Fenlason) [802610]
  - [net] cxgb4: fix strcpy in .get_drvinfo routines (Jay Fenlason) [802610]
  - [net] cxgb4: fix mislocated headers in cxgb4/l2t.c (Jay Fenlason) [802610]
  - [net] cxgb4: add skb frag size accessors (Jay Fenlason) [802610]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-334.el5]
changelog:
  - [virt] hv: Move wait compl msg code to rndis_filter_halt_device (Jason Wang) [824877]
  - [virt] hv: add the Hyper-V virtual clocksource driver (Jason Wang) [824877]
  - [x86] Detect running on a Microsoft HyperV system (Jason Wang) [824877]
  - [virt] hv: add the Hyper-V mouse driver (Jason Wang) [824877]
  - [block] ide: defer disks to the Hyper-V drivers by default (Jason Wang) [824877]
  - [virt] hv: add the Hyper-V virtual storage driver (Jason Wang) [824877]
  - [virt] hv: add the Hyper-V virtual network driver (Jason Wang) [824877]
  - [virt] hv: add the Hyper-V virtual bus (Jason Wang) [824877]
  - [virt] hv:Add struct hv_vmbus_device_id to mod_devicetable.h (Jason Wang) [824877]
  - [misc] time: export ns_to_timespec() (Jason Wang) [824877]
  - [mm] export __PAGE_KERNEL_EXEC (Jason Wang) [824877]
  - [x86] implement always-locked bit ops, for SMP hypervisor (Jason Wang) [824877]
  - [misc] Unified UUID/GUID definition (Jason Wang) [824877]
  - [scsi] qla2xxx: Rename driver version to 8.03.07.15.05.09-k. (Chad Dupuis) [844476]
  - [net] rds: set correct msg_namelen (Weiping Pan) [822728] {CVE-2012-3430}
  - [misc] ERESTARTNOINTR seen from fork call in userspace (Oleg Nesterov) [693822]
  - [net] netfilter: fix NAT issue with conntrack (Amerigo Wang) [810228]
  - [pci] ahci: add pci quirk for JMB362 (Prarit Bhargava) [836879]
  - [infiniband] cxgb3: Don't pass irq flags to flush_qp() (Jay Fenlason) [802617]
  - [infiniband] cxgb3: Serialize calls to CQ's comp_handler (Jay Fenlason) [802617]
  - [infiniband] cxgb3: Make needlessly global iwch_l2t_send() static (Jay Fenlason) [802617]
  - [infiniband] cxgb3: Clean up signed check of unsigned variable (Jay Fenlason) [802617]
  - [infiniband] cxgb3: Shrink .text compile-time init handler arrays (Jay Fenlason) [802617]
  - [infiniband] cxgb3: Set approp IO chan in rdma_init work requests (Jay Fenlason) [802617]
  - [infiniband] cxgb3: iwch_unregister_device leaks memory (Jay Fenlason) [802617]
  - [infiniband] cxgb3: Limit fast reg size based on T3 limitations (Jay Fenlason) [802617]
  - [infiniband] cxgb3: Enforce required firmware (Prarit Bhargava) [802617]
  - [infiniband] cxgb3: Fix too-big reserved field zeroing (Jay Fenlason) [802617]
  - [net] qlcnic: off by one in qlcnic_init_pci_info() (Chad Dupuis) [836176]
  - [net] qlcnic: Fix protcol type in case of inband vlan. (Chad Dupuis) [836176]
  - [net] qlcnic: fix unsupported CDRP command error message. (Chad Dupuis) [836176]
  - [net] qlcnic: Fix estimation of recv MSS in case of LRO (Chad Dupuis) [836176]
  - [net] qlcnic: Add call back for lro disable. (Chad Dupuis) [836176]
  - [fs] quota: manage reserved space when quota is not active (Eric Sandeen) [818087]
  - [fs] quota: Fix warning if delayed write before quota is enabled (Eric Sandeen) [818087]
  - [net] bna: update firmware to version 3.0.23.0 (Ivan Vecera) [843504]
  - [scsi] bfa: Fix to set vport FC host sysfs entries (Rob Evers) [821555]
  - [scsi] bfa: added entry for bfa in maintainers file (Rob Evers) [796490]
  - [scsi] bfa: els ct passthru ioctl enablement (Rob Evers) [796490]
  - [scsi] bfa: vendor ioctl enablement (Rob Evers) [796490]
  - [scsi] bfa: Fix bfa logging for Logical port state (Rob Evers) [796490]
  - [scsi] bfa: Fix to defer vport delete handler invocation (Rob Evers) [796490]
  - [scsi] bfa: Update the driver version to 3.0.23.0 (Rob Evers) [796490]
  - [scsi] bfa: BSG and User interface fixes. (Rob Evers) [796490]
  - [scsi] bfa: Fix to avoid vport delete hang (Rob Evers) [796490]
  - [scsi] bfa: Move service parameter logic into fw (Rob Evers) [796490]
  - [scsi] bfa: Revised Fabric Assigned Address(FAA) (Rob Evers) [796490]
  - [scsi] bfa: Flash controller IOC pll init fixes. (Rob Evers) [796490]
  - [scsi] bfa: Serialize the IOC hw semaphore unlock logic. (Rob Evers) [796490]
  - [scsi] bfa: Modify ISR to process pending completions (Rob Evers) [796490]
  - [scsi] bfa: Add fc host issue lip support (Rob Evers) [796490]
  - [scsi] bfa: fix endian and bit field check bug (Rob Evers) [796490]
  - [scsi] bfa: fix formating and checkpatch issues (Rob Evers) [796490]
  - [scsi] bfa: sysfs model description fix. (Rob Evers) [796490]
  - [scsi] bfa: update bfa to version v3.0.3.0 (Rob Evers) [796490]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-333.el5]
changelog:
  - [sound] alsa: Update the ALSA HDA audio driver v2 (Jaroslav Kysela) [801892]
  - [sound] alsa: update vmaster (virtual mixer master) core (Jaroslav Kysela) [801892]
  - [redhat] configs: only enable the ib_qib driver on x86_64 (Prarit Bhargava) [771441]
  - [net] fix the core ip_ib_mc_map function and remove the backport (Doug Ledford) [771441]
  - [redhat] configs: enable new config items in our config files (Doug Ledford) [771441]
  - [infiniband] backports: various items needed for update to work (Doug Ledford) [771441]
  - [infiniband] rds: major update to go with infiniband update (Doug Ledford) [546374 771441]
  - [infiniband] ib/srp: minor update to go with core update (Doug Ledford) [771441]
  - [infiniband] ib/sdp: considerable update indep of core update (Doug Ledford) [771441]
  - [infiniband] ib/ipoib: update to go with core update (Doug Ledford) [771441]
  - [infiniband] qib: add qib, mod ipath to only support HTX cards (Doug Ledford) [576888 771441]
  - [infiniband] nes: significant update (more than core update) (Doug Ledford) [771441]
  - [infiniband] ehca: driver update to go with core update (Doug Ledford) [771441]
  - [infiniband] amso1100: driver update to go with core update (Doug Ledford) [771441]
  - [infiniband] mthca: minor driver updates to go with core update (Doug Ledford) [771441]
  - [infiniband] mlx4: update ib/net drivers (Doug Ledford) [649623 751222 771441 790841 796682 796684 796762]
  - [infiniband] core update (Doug Ledford) [771441]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-332.el5]
changelog:
  - [infiniband] cxgb4: Drop peer_abort when no endpoint found (Jay Fenlason) [802618]
  - [infiniband] cxgb4: Fix iw_cxgb4 count_rcqes() logic (Jay Fenlason) [802618]
  - [infiniband] cxgb4: Mark QP in error before disabling queue in fw (Jay Fenlason) [802618]
  - [infiniband] cxgb4: Serialize calls to CQ's comp_handler (Jay Fenlason) [802618]
  - [infiniband] cxgb4: Use correct QID in insert_recv_cqe() (Jay Fenlason) [802618]
  - [infiniband] cxgb4: collect flush CQ entries on connection close (Jay Fenlason) [802618]
  - [infiniband] cxgb4: Fix missing parentheses (Jay Fenlason) [802618]
  - [infiniband] cxgb4: Debugfs dump_qp() updates (Jay Fenlason) [802618]
  - [infiniband] cxgb4: Use ULP_MODE_TCPDDP (Jay Fenlason) [802618]
  - [net] bnx2x: add missing VLAN feature flags (Michal Schmidt) [748357]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-331.el5]
changelog:
  - [fs] aio: fix the 'too late munmap()' race (Jeff Moyer) [801540]
  - [fs] aio: fix io_setup/io_destroy race (Jeff Moyer) [801540]
  - [fs] nfs: nfs_d_automount update caller path after do_add_mount (Carlos Maiolino) [834379]
  - [fs] vfs: Fix vfsmount overput on simultaneous automount (Carlos Maiolino) [834379]
  - [crypto] allow padlock module to load without xcrypt support (Laszlo Ersek) [678096]
  - [trace] Make syscall tracepoints conditional (Satoru Moriya) [827604]
  - [trace] Rename FTRACE_SYSCALLS for tracepoints (Satoru Moriya) [827604]
  - [trace] Fix syscall tracing on !HAVE_FTRACE_SYSCALLS arches (Satoru Moriya) [827604]
  - [x86_64] Add syscall tracepoints (Satoru Moriya) [827604]
  - [x86_64] basic implementation of syscall traceing for x86_64 (Satoru Moriya) [827604]
  - [trace] tracing: Add DEFINE_TRACE_WITH_CALLBACK() macro (Satoru Moriya) [827604]
  - [x86_64] introduce _TIF_WORK_SYSCALL_ENTRY/EXIT macro (Satoru Moriya) [827604]
  - [x86_64] ptrace: sysret path should reach syscall_trace_leave (Satoru Moriya) [827604]
  - [x86_64] introduce offset to FIXUP_TOP_OF_STACK (Satoru Moriya) [827604]
  - [net] e1000e: Cleanup logic in e1000_check_for_serdes_link_82571 (Dean Nelson) [771366]
  - [net] e1000e: Correct link check logic for 82571 serdes (Dean Nelson) [771366]
  - [net] sfc: Fix interface statistics running backward (Michal Schmidt) [840071]
  - [x86-32] Disable Advanced RAS/MCE on newer Intel processors (Prarit Bhargava) [840623]
  - [fs] ext3: handle deleting corrupted indirect blocks (Eric Sandeen) [560885]
  - [fs] autofs4 - check for autofs mountpoint before access (Ian Kent) [754875]
  - [scsi] qla2xxx: Update version number to 8.04.00.05.05.09-k. (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Revert: During loopdown perform Diagnostic (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Disp proper fw ver when minidump for ISP82xx (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Proper comp to scsi-ml for task_set_full and busy (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Don't cap minidump for ISP82xx on flash update (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Block access to app when dev is init for ISP82xx (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Detect PEG errors. (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Handle interrupt reg failures more gracefully (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Remove unneeded DPC wakeups from qla82xx_watchdog (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Check for current state after fabric-login req (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Remove resetting mem during dev init for ISP82xx (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Proper detection of fw abort err code for ISP82xx (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Add an  helper. (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Stop iteration after first failure in *_id funcs (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Remove EDC sysfs interface. (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Change log mess when prev dump avail for ISP82xx (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Print mbox cmd opcode/ret code when cmd times out (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Remove check null fcport from host reset handler (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Correct out of bounds read of ISP2200 mbox regs (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Reduce mbx-cmd timeout for Login/Logout requests. (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Perform implicit logout during rport tear-down. (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Handle failure cases during fabric_login. (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Encap prem completing mbx cmds in ISP82xx fw hang (Chad Dupuis) [796712]
  - [scsi] qla2xxx: improve firmware load speed in ISP82xx adapters (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Perform fw dump procedure on mailbox timeout. (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Clr opt-flags while issuing stop-firmware mbx cmd (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Use a valid enode-mac if none defined. (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Disable pause when driver detects fw hang (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Clr mbox busy flag in premature mbox completion (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Ret corr val for mbox cmd if 82xx in reset (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Display IPE error message for ISP82xx. (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Group CS_RESET return status with others (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Enable Minidump by default (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Correct report-id acquisiton check. (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Limit excessive DPC cycles. (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Fix race that could hang kthread_stop() (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Only read requested mailbox registers. (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Stop mbox cmd comp issued in interrupt in fw hang (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Fix display of fw dump availability for ISP82xx (Chad Dupuis) [796712]
  - [scsi] qla2xxx: Corrections to returned sysfs error codes (Chad Dupuis) [796712]
  - [net] cnic: Fix mmap regression (Michal Schmidt) [838119]
  - [net] bnx2x, cnic, bnx2i: bnx2x to v1.72.51-0 +, update cnic (Michal Schmidt) [796905]
  - [net] bnx2x: update firmware to 7.2.51 (Michal Schmidt) [796905]
  - [net] bnx2x, cnic: update bnx2x to version 1.72.50-0, cnic fix (Michal Schmidt) [683303 688354 747523 758579 796905 812608]
  - [net] bnx2x: update firmware to 7.2.16 (Michal Schmidt) [796905]
  - [net] bnx2x, cnic: update bnx2x to version 1.72.10-0, update cnic (Michal Schmidt) [747523 782005 796905]
  - [net] bnx2x: update firmware to 7.0.29 (Michal Schmidt) [796905]
  - [net] bnx2x: update bnx2x to version 1.70.30-0 (Michal Schmidt) [796905]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-330.el5]
changelog:
  - [net] igb: configure rx_checksum before calling igb_receive_skb() (Stefan Assmann) [839633]
  - [net] e1000e: fix test for PHY accessible on 82577/8/9 and I217 (Dean Nelson) [838624]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-329.el5]
changelog:
  - [fs] gfs2: Use mempool for fake buffer heads in log flushing (Abhijith Das) [807723]
  - [fs] gfs2: Sort ordered write list (Abhijith Das) [800509]
  - [fs] gfs2: speed up glock dump (Abhijith Das) [773020]
  - [net] cxgb4: firmware update to 1.4.23.0 upstream (Jay Fenlason) [802614]
  - [mm] NULL pointer dereference in __vm_enough_memory (Jerome Marchand) [836244]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-328.el5]
changelog:
  - [net] introduce build_skb() (Michal Schmidt) [837083]
  - [net] fix conflict between null_or_orig and null_or_bond (Veaceslav Falico) [809686]
  - [virt] blkback: Don't disconnect until state XenbusStateClosed. (Miroslav Rezanina) [794806]
  - [net] tg3: Apply short DMA frag workaround to 5906 (John Feeney) [796825]
  - [net] tg3: Avoid panic from reserved statblk field access (John Feeney) [796825]
  - [net] tg3: Fix 5717 serdes powerdown problem (John Feeney) [796825]
  - [net] tg3: Fix RSS ring refill race condition (John Feeney) [796825]
  - [net] tg3: Recode PCI MRRS adjustment as a PCI quirk (John Feeney) [796825]
  - [net] tg3: Fix poor tx performance on 57766 after MTU change (John Feeney) [796825]
  - [net] tg3: Fix jumbo loopback test on 5719 (John Feeney) [796825]
  - [net] tg3: unify return value of .ndo_set_mac_address (John Feeney) [796825]
  - [net] tg3: Clear RECOVERY_PENDING with reset_task_cancel (John Feeney) [796825]
  - [net] tg3: remove IRQF_SAMPLE_RANDOM flag (John Feeney) [796825]
  - [net] tg3: Update copyright (John Feeney) [796825]
  - [net] tg3: Remove unused link config code (John Feeney) [796825]
  - [net] tg3: Consolidate ASIC rev detection code (John Feeney) [796825]
  - [net] tg3: Reduce UMP event collision window (John Feeney) [796825]
  - [net] tg3: Fix NVRAM page writes on newer devices (John Feeney) [796825]
  - [net] tg3: Fix copper autoneg adv checks (John Feeney) [796825]
  - [net] tg3: Fix stats while interface is down (John Feeney) [796825]
  - [net] tg3: Disable new DMA engine for 57766 (John Feeney) [796825]
  - [net] tg3: Move transmit comment to a better location (John Feeney) [796825]
  - [net] tg3: Relocate tg3_find_peer (John Feeney) [796825]
  - [net] tg3: Move tg3_nvram_write_block functions (John Feeney) [796825]
  - [net] tg3: Move tg3_set_rx_mode (John Feeney) [796825]
  - [net] tg3: Move tg3_change_mtu to a better location (John Feeney) [796825]
  - [net] tg3: Relocate tg3_reset_task (John Feeney) [796825]
  - [net] tg3: Move tg3_restart_hw to a better location (John Feeney) [796825]
  - [net] tg3: Remove alloc_etherdev error messages (John Feeney) [796825]
  - [net] tg3: fix ipv6 header length computation (John Feeney) [796825]
  - [net] net: fix assignment of 0/1 to bool variables. (John Feeney) [796825]
  - [net] tg3: Break out RSS indir table init and assignment (John Feeney) [796825]
  - [net] tg3: Use mii_advertise_flowctrl (John Feeney) [796825]
  - [net] tg3: Add 57766 ASIC rev support (John Feeney) [796825]
  - [net] tg3: Make the TX BD DMA limit configurable (John Feeney) [796825]
  - [net] tg3: Enable EEE support for capable 10/100 devs (John Feeney) [796825]
  - [net] tg3: Update version to 3.122 (John Feeney) [796825]
  - [net] tg3: Return flowctrl config through ethtool (John Feeney) [796825]
  - [net] tg3: Integrate flowctrl check into AN adv check (John Feeney) [796825]
  - [net] tg3: Save stats across chip resets (John Feeney) [796825]
  - [net] tg3: Remove ethtool stats member from dev struct (John Feeney) [796825]
  - [net] tg3: Restrict large prod ring cap devices (John Feeney) [796825]
  - [net] tg3: Adjust BD replenish thresholds (John Feeney) [796825]
  - [net] tg3: Make 1000Base-X FC resolution look like 1000T (John Feeney) [796825]
  - [net] tg3: Fix advertisement handling (John Feeney) [796825]
  - [net] tg3: Change mii to ethtool advertisement function names (John Feeney) [796825]
  - [net] tg3: Add ethtool to mii advertisment conversion helpers (John Feeney) [796825]
  - [net] tg3: convert some .get_drvinfo routines to strlcpy (John Feeney) [796825]
  - [net] tg3: Update version to 3.121 (John Feeney) [796825]
  - [net] tg3: Eliminate timer race with reset_task (John Feeney) [796825]
  - [net] tg3: Schedule at most one tg3_reset_task run (John Feeney) [796825]
  - [net] tg3: Obtain PCI function number from device (John Feeney) [796825]
  - [net] tg3: Fix irq alloc error cleanup path (John Feeney) [796825]
  - [net] tg3: Fix APE mutex init and use (John Feeney) [796825]
  - [net] tg3: add tx_dropped counter (John Feeney) [796825]
  - [net] tg3: Remove zero assignments of ethtool_ringparam fields (John Feeney) [796825]
  - [net] tg3: Code movement (John Feeney) [796825]
  - [net] tg3: Eliminate tg3_write_sig_post_reset() prototype (John Feeney) [796825]
  - [net] tg3: Eliminate tg3_stop_fw() prototype (John Feeney) [796825]
  - [net] tg3: Add ability to turn off 1shot MSI (John Feeney) [796825]
  - [net] tg3: Remove tp->rx_offset term when unneeded (John Feeney) [796825]
  - [net] tg3: Fix missed MSI workaround (John Feeney) [796825]
  - [net] tg3: Check all adv bits when checking config (John Feeney) [796825]
  - [net] tg3: Update version to 3.120 (John Feeney) [796825]
  - [net] tg3: Add external loopback support to selftest (John Feeney) [796825]
  - [net] add external loopback test in ethtool self test (John Feeney) [796825]
  - [net] tg3: Restructure tg3_test_loopback (John Feeney) [796825]
  - [net] tg3: Pull phy int lpbk setup into separate func (John Feeney) [796825]
  - [net] tg3: Consilidate MAC loopback code (John Feeney) [796825]
  - [net] tg3: Remove dead code (John Feeney) [796825]
  - [net] tg3: Fix NVRAM selftest failures for 5720 devs (John Feeney) [796825]
  - [net] tg3: Fix RSS indirection table distribution (John Feeney) [796825]
  - [net] tg3: remove unnecessary read of PCI_CAP_ID_EXP (John Feeney) [796825]
  - [net] tg3: Migrate phy preprocessor defs to system defs (John Feeney) [796825]
  - [net] tg3: Show flowctrl settings through get_settings() (John Feeney) [796825]
  - [net] tg3: Add more selfboot formats to NVRAM selftest (John Feeney) [796825]
  - [net] tg3: Remove 4G_DMA_BNDRY_BUG flag (John Feeney) [796825]
  - [net] tg3: Remove 40BIT_DMA_LIMIT_BUG (John Feeney) [796825]
  - [net] tg3: remove interrupt.h inclusion from netdevice.h (John Feeney) [796825]
  - [net] Add Fujitsu 1000base-SX PCI ID to tg3 (John Feeney) [796825]
  - [scsi] qla4xxx: v5.02.04.04.05.09-d0. (Chad Dupuis) [796715]
  - [scsi] qla4xxx: Minidump cleanup patch from upstream (Chad Dupuis) [796715]
  - [scsi] qla4xxx: Add change_queue_depth API support (Chad Dupuis) [796715]
  - [scsi] qla4xxx: Diff between fw hung triggered and normal reset. (Chad Dupuis) [796715]
  - [scsi] qla4xxx: Disable gen pause frames with fw hang on ISP82xx (Chad Dupuis) [796715]
  - [scsi] qla4xxx: 82XX: Temperature monitoring for P3P core. (Chad Dupuis) [796715]
  - [scsi] qla4xxx: Rem force poll logic during disabling interrupts (Chad Dupuis) [796715]
  - [scsi] qla4xxx: Correct early completion of pending mbox. (Chad Dupuis) [796715]
  - [scsi] qla4xxx: Proper detection of fw abort err code for ISP82xx (Chad Dupuis) [796715]
  - [virt] use dev_printk when possible (Prarit Bhargava) [839278]
  - [virt] io_apic: only scan the root bus in early PCI quirks (Prarit Bhargava) [839278]
  - [virt] x86/PCI: use dev_printk when possible (Prarit Bhargava) [839278]
  - [virt] irq and pci_ids for Intel DH89xxCC DeviceIDs (Prarit Bhargava) [839278]
  - [virt] hwmon: enable i5k_amb driver to get memory resource (Prarit Bhargava) [839278]
  - [x86_64] Add missing CPU feature flags for AMD Bulldozer (Prarit Bhargava) [839278]
  - [fs] dlm: fix slow rsb search in dir recovery (David Teigland) [753244]
  - [fs] autofs: propogate LOOKUP_DIRECTORY flag only for last comp (Ian Kent) [814418]
  - [x86] get irq for hpet timer (Prarit Bhargava) [834188]
  - [virt] Make on_a_virt_guest() global (Prarit Bhargava) [834188]
  - [net] virtio: Set correct gso->hdr_len (Thomas Graf) [748332]
  - [net] ipv6: udp: Support hardware checksumming (Thomas Graf) [748332]
  - [net] udpv6: Fix gso_size setting in ip6_ufo_append_data (Thomas Graf) [748332]
  - [fs] ext4: properly dirty split extent nodes (Eric Sandeen) [839770]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-327.el5]
changelog:
  - [fs] nfs: Don't allow multiple mounts on same mntpnt with -o noac (Sachin Prabhu) [839753]
  - [scsi] remove device put from error return path (Tomas Henzl) [768836]
  - [s390] kernel: pfault task state race (Hendrik Brueckner) [831620]
  - [s390] zfcpdump: Implement async sdias event processing (Hendrik Brueckner) [818894]
  - [s390] kernel: kABI workaround for vDSO support (Hendrik Brueckner) [795895]
  - [s390] kernel: Introduce vDSO support (Hendrik Brueckner) [795895]
  - [s390] dasd: add hyper PAV support to DASD device driver (Hendrik Brueckner) [795897]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-326.el5]
changelog:
  - [fs] gfs2: Add kobject release method (Robert S Peterson) [824568]
  - [fs] nfsd: safer initialization order in find_file() (Harshula Jayasuriya) [800758]
  - [fs] nfsd4: remove use of mutex for file_hashtable (Harshula Jayasuriya) [800758]
  - [scsi] bnx2i: Updated version and copyright year (Tomas Henzl) [796827]
  - [scsi] bnx2i: fix the bit manipulation when setting error mask (Tomas Henzl) [796827]
  - [scsi] bnx2i: Fix NULL ptr ref in conn get param (Tomas Henzl) [796827]
  - [scsi] bnx2i: Fixed the override of the error_mask module param (Tomas Henzl) [796827]
  - [net] sfc: Private ioctl to allow reset during online fw update (Michal Schmidt) [833600]
  - [net] sfc: disable RX hash insertion (Michal Schmidt) [833600]
  - [net] sfc: Refill RX rings as soon as space for a batch (Michal Schmidt) [833600]
  - [net] sfc: Fill RX rings completely full, rather than to 95% full (Michal Schmidt) [833600]
  - [net] sfc: Fix missing cleanup in failure path of efx_pci_probe() (Michal Schmidt) [833600]
  - [net] sfc: Do not attempt to flush queues if DMA is disabled (Michal Schmidt) [833600]
  - [net] sfc: Remove efx_channel::last_eventq_read_ptr (Michal Schmidt) [833600]
  - [net] sfc: Run event/IRQ selftest async at interface bring up (Michal Schmidt) [833600]
  - [net] sfc: Encapsulate access to last_irq_cpu in self-test (Michal Schmidt) [833600]
  - [net] sfc: Test all event queues in parallel (Michal Schmidt) [833600]
  - [net] sfc: Raise self-test timeouts (Michal Schmidt) [833600]
  - [net] sfc: Remove TX completions from adaptive IRQ scoring (Michal Schmidt) [833600]
  - [net] sfc: Update comments on efx_rx_packet_gro() (Michal Schmidt) [833600]
  - [net] sfc: Remove redundant function efx_nic_has_mc() (Michal Schmidt) [833600]
  - [net] sfc: Fix assignment of ip_summed for pre-allocated skbs (Michal Schmidt) [833600]
  - [net] sfc: Alloc SRAM between caches at init time (Michal Schmidt) [833600]
  - [net] sfc: Make all CPU/IRQ/channel/queue counts unsigned (Michal Schmidt) [833600]
  - [net] sfc: Make buffer table indices and counts unsigned (Michal Schmidt) [833600]
  - [net] sfc: Disable flow control during flushes (Michal Schmidt) [833600]
  - [net] sfc: Generalise event gen to cover VF-owned event queues (Michal Schmidt) [833600]
  - [net] sfc: Use prop func to test for RX channel in efx_poll (Michal Schmidt) [833600]
  - [net] sfc: Leave interrupts/event queues enabled whenever we can (Michal Schmidt) [833600]
  - [net] sfc: Generate RX fill events based on RX queues (Michal Schmidt) [833600]
  - [net] sfc: Generalise driver event generation (Michal Schmidt) [833600]
  - [net] sfc: Correct MAC filter bitfield definitions (Michal Schmidt) [833600]
  - [net] sfc: Warn if unable to create MTDs (Michal Schmidt) [833600]
  - [net] sfc: Replace some constants with EFX_PAGE_SIZE/EFX_BUF_SIZE (Michal Schmidt) [833600]
  - [net] sfc: Do not retry hardware probe if it schedules a reset (Michal Schmidt) [833600]
  - [net] sfc: Skip RX end-of-batch work on channels w/o an RX queue (Michal Schmidt) [833600]
  - [net] sfc: Use a more sensible cast in efx_rx_buf_offset() (Michal Schmidt) [833600]
  - [net] sfc: Replace is_page and other booleans with a flags field (Michal Schmidt) [833600]
  - [net] sfc: Move end of non-GRO RX path into its own function (Michal Schmidt) [833600]
  - [net] sfc: Make all MAC statistics consistently 64 bits wide (Michal Schmidt) [833600]
  - [net] sfc: Remove redundant 'rc' variable, always set to 0 (Michal Schmidt) [833600]
  - [net] sfc: Minor formatting fixes (Michal Schmidt) [833600]
  - [net] sfc: Use local variables not repeated indirect lookups (Michal Schmidt) [833600]
  - [net] sfc: Remove remnants of on-load self-test (Michal Schmidt) [833600]
  - [net] sfc: Remove obsolete function efx_dev_name() (Michal Schmidt) [833600]
  - [net] sfc: Update the description of SFC_MTD (Michal Schmidt) [833600]
  - [redhat] config-generic: enable CONFIG_SFC_MCDI_MON (Michal Schmidt) [833600]
  - [net] sfc: Add hwmon driver on brds with SFC9000-fam controllers (Michal Schmidt) [833600]
  - [net] sfc: Clean up test interrupt handling (Michal Schmidt) [833600]
  - [net] Partly revert 'sfc: Handle serious errors in exactly ...' (Michal Schmidt) [833600]
  - [net] sfc: Remove dep on NAPI polling in efx_test_eventq_irq (Michal Schmidt) [833600]
  - [net] sfc: Correct interrupt timer quantum for Siena (Michal Schmidt) [833600]
  - [net] sfc: Support getting CAPABILITIES from GET_BOARD_CFG res (Michal Schmidt) [833600]
  - [net] sfc: Consistently test DEBUG macro, not EFX_ENABLE_DEBUG (Michal Schmidt) [833600]
  - [net] sfc: Remove efx_nic_type::push_multicast_hash operation (Michal Schmidt) [833600]
  - [net] sfc: Merge efx_mcdi_mac_check_fault/efx_mcdi_get_mac_faults (Michal Schmidt) [833600]
  - [net] sfc: Merge efx_mac_operations into efx_nic_type (Michal Schmidt) [833600]
  - [net] sfc: Hold stats_lock while reading mac_stats (Michal Schmidt) [833600]
  - [net] sfc: Use new names for MC shared memory layout constants (Michal Schmidt) [833600]
  - [net] sfc: Make handling of MC reboot more reliable (Michal Schmidt) [833600]
  - [net] sfc: Remove fallback for invalid permanent MAC address (Michal Schmidt) [833600]
  - [net] sfc: Rename efx_wanted_channels to efx_wanted_parallelism (Michal Schmidt) [833600]
  - [net] sfc: Update MCDI (firmware interface) definitions (Michal Schmidt) [833600]
  - [net] sfc: Remove unnecessary inclusion of header file (Michal Schmidt) [833600]
  - [net] sfc: Const-qualify static data as appropriate (Michal Schmidt) [833600]
  - [net] sfc: Remove parentheses around return expressions (Michal Schmidt) [833600]
  - [net] sfc: Avoid assignment in an if-statement (Michal Schmidt) [833600]
  - [net] sfc: Fix some formatting errors reported by checkpatch (Michal Schmidt) [833600]
  - [net] sfc: fix assignment of 0/1 to bool variables. (Michal Schmidt) [833600]
  - [net] sfc: Use skb_fill_page_desc to simp page buff pass to GRO (Michal Schmidt) [833600]
  - [net] sfc: Remove device ID macros only used once (Michal Schmidt) [833600]
  - [net] sfc: Use kcalloc instead of kzalloc to allocate array (Michal Schmidt) [833600]
  - [net] sfc: Add moduleparam.h to drivers as required. (Michal Schmidt) [833600]
  - [pci] sfc: Add Solarflare vendor ID and SFC4000 device IDs (Michal Schmidt) [833600]
  - [net] sfc: use skb frag size accessors (Michal Schmidt) [833600]
  - [net] sfc: Remove driver assignments of ethtool_ringparam fields (Michal Schmidt) [833600]
  - [net] sfc: Use correct fields of struct ethtool_coalesce (Michal Schmidt) [833600]
  - [net] sfc: Validate IRQ mod params in efx_init_irq_moderation (Michal Schmidt) [833600]
  - [net] sfc: Fix reporting/validation of TX interrupt coalescing (Michal Schmidt) [833600]
  - [net] sfc: Use consistent types for interrupt coalescing params (Michal Schmidt) [833600]
  - [net] sfc: Correct err code for unsupported interrupt coalescing (Michal Schmidt) [833600]
  - [net] sfc: Use 64-bit writes for TX push where possible (Michal Schmidt) [833600]
  - [net] sfc: Remove 'Communications' after 'Solarflare' (Michal Schmidt) [833600]
  - [net] sfc: Remove 'Solarstorm' from Kconfig descriptions (Michal Schmidt) [833600]
  - [net] sfc: Fix Siena mac statistics on big endian platforms (Michal Schmidt) [833600]
  - [net] sfc: Fix mapping of reset reasons and flags to methods (Michal Schmidt) [833600]
  - [net] sfc: Allow resets to be upgraded; use atomic ops for safety (Michal Schmidt) [833600]
  - [net] sfc: Remove unneeded version.h include (Michal Schmidt) [833600]
  - [net] sfc: Remove casts of void * (Michal Schmidt) [833600]
  - [net] sfc: include interrupt.h (Michal Schmidt) [833600]
  - [net] sfc: Add appropriate prefetch.h hdr for prefetch users (Michal Schmidt) [833600]
  - [net] sfc: Don't use enums as a bitmask. (Michal Schmidt) [833600]
  - [net] sfc: Use netif_device_{detach,ttach} around reset/selftest (Michal Schmidt) [833600]
  - [net] sfc: Fix TX queue numbering when separate_tx_channels=1 (Michal Schmidt) [833600]
  - [net] sfc: cleaned data in get_settings (Michal Schmidt) [833600]
  - [net] sfc: Do not use efx_process_channel_now in online self-test (Michal Schmidt) [833600]
  - [net] sfc: Stop the TX queues during loopback self-tests (Michal Schmidt) [833600]
  - [net] sfc: make function tables const (Michal Schmidt) [833600]
  - [net] sfc: Fix common misspellings (Michal Schmidt) [833600]
  - [net] sfc: Move test of rx_checksum_enabled from nic.c to rx.c (Michal Schmidt) [833600]
  - [net] sfc: lower stack usage in efx_ethtool_self_test (Michal Schmidt) [833600]
  - [net] sfc: Bump version to 3.1 (Michal Schmidt) [833600]
  - [net] sfc: Rem config FIFO thresholds for pause frame generation (Michal Schmidt) [833600]
  - [net] sfc: Expose TX push/TSO counters through ethtool statistics (Michal Schmidt) [833600]
  - [net] sfc: Update copyright dates (Michal Schmidt) [833600]
  - [net] sfc: Do not read STAT1.FAULT in efx_mdio_check_mmd() (Michal Schmidt) [833600]
  - [net] sfc: Read MC firmware version when requested via ethtool (Michal Schmidt) [833600]
  - [net] sfc: Reduce size of efx_rx_buffer further (Michal Schmidt) [833600]
  - [net] sfc: Reduce size of efx_rx_buffer by skb and page union (Michal Schmidt) [833600]
  - [net] sfc: Distinguish queue lookup from test for queue existence (Michal Schmidt) [833600]
  - [net] sfc: change offload_features to u32 (Michal Schmidt) [833600]
  - [net] sfc: Restore the effect of the rss_cpus module parameter (Michal Schmidt) [833600]
  - [net] sfc: Make efx_get_tx_queue() an inline function (Michal Schmidt) [833600]
  - [net] sfc: make pci_restore_state return void (Michal Schmidt) [833600]
  - [net] sfc: Remove unused and comment on removed fields (Michal Schmidt) [833600]
  - [net] sfc: Use default implementation of get_link where possible (Michal Schmidt) [833600]
  - [net] sfc: convert references to LRO to GRO (Michal Schmidt) [833600]
  - [net] sfc: Log start and end of ethtool self-test at INFO level (Michal Schmidt) [833600]
  - [net] sfc: Use TX push whenever adding descriptors to empty queue (Michal Schmidt) [833600]
  - [net] sfc: Remove locking from implementation of efx_writeo_paged (Michal Schmidt) [833600]
  - [net] sfc: Add compile-time checks of paged register writes (Michal Schmidt) [833600]
  - [net] sfc: Remove redundant memory barriers between MMIOs (Michal Schmidt) [833600]
  - [net] sfc: Improve comments on collector behaviour/function usage (Michal Schmidt) [833600]
  - [net] sfc: Use ACCESS_ONCE when copying efx_tx_queue::read_count (Michal Schmidt) [833600]
  - [net] sfc: Reorder struct efx_nic to sep fields by volatility (Michal Schmidt) [833600]
  - [net] sfc: Fix NAPI list corruption during ring reallocation (Michal Schmidt) [833600]
  - [net] sfc: Fix legacy interrupt handler crash (Michal Schmidt) [833600]
  - [net] sfc: Store MAC address from NVRAM in net_device::perm_addr (Michal Schmidt) [833600]
  - [net] sfc: Use current MAC address for WoL filter (Michal Schmidt) [833600]
  - [net] sfc: Update doc to match earlier move of Toeplitz hash key (Michal Schmidt) [833600]
  - [net] sfc: Move xmac_poll_required into struct falcon_nic_data (Michal Schmidt) [833600]
  - [net] sfc: Move Falcon global event handling to falcon.c (Michal Schmidt) [833600]
  - [net] sfc: Move mdio_lock to struct falcon_nic_data (Michal Schmidt) [833600]
  - [net] sfc: Move SPI state to struct falcon_nic_data (Michal Schmidt) [833600]
  - [net] sfc: Remove inclusion of various private header files (Michal Schmidt) [833600]
  - [net] sfc: Expose Falcon BootROM config through MTD, not ethtool (Michal Schmidt) [833600]
  - [net] sfc: Remove broken auto fallback for invalid Falcon config (Michal Schmidt) [833600]
  - [net] sfc: Fix MCDI completion and MC REBOOT/CMDDONE ordering (Michal Schmidt) [833600]
  - [net] sfc: Clear RXIN_SEL when soft-resetting QT2025C (Michal Schmidt) [833600]
  - [net] sfc: Read-to-clear LM87 alarm/interrupt at start of day (Michal Schmidt) [833600]
  - [net] sfc: Distinguish crit and non-crit over-temp conditions (Michal Schmidt) [833600]
  - [net] sfc: Fix condition for no-op in set_phy_flash_cfg() (Michal Schmidt) [833600]
  - [net] sfc: Reduce log level for MCDI error response (Michal Schmidt) [833600]
  - [net] sfc: make functions static (Michal Schmidt) [833600]
  - [net] sfc: return operator cleanup (Michal Schmidt) [833600]
  - [net] sfc: Add support for SFE4003 board and TXC43128 PHY (Michal Schmidt) [833600]
  - [net] sfc: Remove support for SFN4111T, SFT9001 and Falcon GMAC (Michal Schmidt) [833600]
  - [net] sfc: Fix build due to lack of vmalloc.h include. (Michal Schmidt) [833600]
  - [net] sfc: Clean up and correct comments on efx_monitor() (Michal Schmidt) [833600]
  - [net] sfc: Fix order of channel_name array dimensions (Michal Schmidt) [833600]
  - [net] sfc: Allow changing DMA ring sizes dynamically via ethtool (Michal Schmidt) [833600]
  - [net] sfc: Make the dmaq size a run-time setting (Michal Schmidt) [833600]
  - [net] sfc: Allocate each channel separately (Michal Schmidt) [833600]
  - [net] sfc: Refactor channel and queue lookup and iteration (Michal Schmidt) [833600]
  - [net] sfc: Abstract channel and index lookup for RX queues (Michal Schmidt) [833600]
  - [net] sfc: Allocate DMA and event rings using GFP_KERNEL (Michal Schmidt) [833600]
  - [net] sfc: Fix failure paths in efx_probe_port() (Michal Schmidt) [833600]
  - [net] sfc: Remove declarations of functions that no longer exist (Michal Schmidt) [833600]
  - [net] sfc: Accumulate RX_NODESC_DROP count in rx_dropped (Michal Schmidt) [833600]
  - [net] sfc: avoid some skb->ip_summed initializations (Michal Schmidt) [833600]
  - [net] GRO: fix merging a paged skb after non-paged skbs (Michal Schmidt) [833600]
  - [fs] ext3: pass custom EOF to generic_file_llseek_size() (Eric Sandeen) [784191]
  - [fs] ext4: use core vfs llseek code for dir seeks (Eric Sandeen) [784191]
  - [fs] vfs: allow custom EOF in generic_file_llseek code (Eric Sandeen) [784191]
  - [fs] ext4: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [784191]
  - [fs] ext4: improve llseek error handling for large seek offsets (Eric Sandeen) [784191]
  - [fs] ext3: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [784191]
  - [s390/ppc64] add is_compat_task() for s390 and ppc64 (Eric Sandeen) [784191]
  - [fs] vfs: add generic_file_llseek_size (Eric Sandeen) [784191]
  - [fs] nfsd: vfs_llseek() with 32 or 64 bit offsets (hashes) (Eric Sandeen) [784191]
  - [fs] nfsd: rename 'int access' to 'int may_flags' in nfsd_open() (Eric Sandeen) [784191]
  - [fs] add new FMODE flags: FMODE_32bithash and FMODE_64bithash (Eric Sandeen) [784191]
  - [fs] nfsd4: Remove check for a 32-bit cookie in nfsd4_readdir() (Eric Sandeen) [784191]
  - [net] cxgb3: unify return value of .ndo_set_mac_address (Jay Fenlason) [802609]
  - [net] cxgb3: update firmware version (Jay Fenlason) [802609]
  - [net] cxgb3: Handle NULL dst neighbour in cxgb3_offload.c (Jay Fenlason) [802609]
  - [net] cxgb3: Rework t3_l2t_get to take a dst_entry (Jay Fenlason) [802609]
  - [net] cxgb3: remove inadvertently added rejects from last update (Jay Fenlason) [802609]
  - [net] cxgb3: Remove N/A fw_version dustbunnies from .get_drvinfo (Jay Fenlason) [802609]
  - [net] cxgb3: Use strcpy in .get_drvinfo routines (Jay Fenlason) [802609]
  - [net] cxgb3: add skb frag size accessors (Jay Fenlason) [802609]
  - [net] cxgb3:  Remove zero assignments of ethtool_ringparam fields (Jay Fenlason) [802609]
  - [net] igb: rework igb_poll to better match upstream (Stefan Assmann) [837347]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-325.el5]
changelog:
  - [x86_64] cpa: Fix missing TLB flush problem in change_page_attr() (Frank Arnold) [818333]
  - [block] loop: prevent information leak after failed read (Dave Young) [761416]
  - [char] ipmi: decrease IPMI message trans time in interrupt mode (Shyam Iyer) [797052]
  - [net] qlge: Bumped driver version to 1.00.00.30. (Chad Dupuis) [796738]
  - [net] qlge: Fix memory leak in the process of refill (Chad Dupuis) [796738]
  - [net] qlge: Fixed invalid reference to ip header (Chad Dupuis) [796738]
  - [net] qlge: Updating Schultz LICENSE.qlge file. (Chad Dupuis) [796738]
  - [scsi] don't offline devices with a reservation conflict (David Jeffery) [835660]
  - [virt] prevent acpi_nmi_{enable|disable}() in Xen PV guests (Laszlo Ersek) [835790]
  - [virt] xen/evtchn: clear 2ndary CPU cpu_evtchn_mask after restore (Igor Mammedov) [768350]
  - [virt] netback: use correct index for invalidation (Igor Mammedov) [768350]
  - [virt] x86: refuse to initialize the microcode driver in DomU (Igor Mammedov) [768350]
  - [scsi] libcxgbi: don't print when alloc fails (Rob Evers) [802615]
  - [scsi] cxgb4i: tcp push bit fix (Rob Evers) [802615]
  - [scsi] be2iscsi: Get Initiator Name for the iSCSI_Host (Rob Evers) [796470]
  - [scsi] be2iscsi: Ret async handle of unknown opcode to free list. (Rob Evers) [796470]
  - [scsi] be2iscsi: Check ASYNC PDU Handle corresponds to HDR/DATA (Rob Evers) [796470]
  - [scsi] be2iscsi: Bump the driver Version (Rob Evers) [796470]
  - [scsi] be2iscsi: Update in Copyright information (Rob Evers) [796470]
  - [scsi] be2iscsi: Fix the function return values. (Rob Evers) [796470]
  - [scsi] be2iscsi: Code cleanup, removing the goto statement (Rob Evers) [796470]
  - [scsi] be2iscsi: Fix double free of MCCQ info memory. (Rob Evers) [796470]
  - [scsi] be2iscsi: Set num_cpu = 1 if pci_enable_msix fails (Rob Evers) [796470]
  - [scsi] be2iscsi:Freeing of WRB and SGL Handle in cleanup task (Rob Evers) [796470]
  - [scsi] be2iscsi: WRB Initialization and Failure code path change (Rob Evers) [796470]
  - [scsi] be2iscsi: Fix in ASYNC PDU stitching logic. (Rob Evers) [796470]
  - [scsi] be2iscsi: Fix in the Asynchronous Code Path (Rob Evers) [796470]
  - [scsi] be2iscsi: cleanup a min_t() call (Rob Evers) [796470]
  - [pci] Introduce command line option to disable ARI (Myron Stowe) [832592]
  - [pci] Add missing checks within 'pci_enable_ari()' (Myron Stowe) [832592]
  - [block] virtio: Add 'serial' attribute to virtio-blk devices (Asias He) [816863]
  - [block] virtio: fix request leak. (Asias He) [816863]
  - [block] virtio: Add virtio disk identification support (Asias He) [816863]
  - [fs] nfs: Fix the return value in nfs_page_mkwrite() (Niels de Vos) [818650]
  - [fs] nfs: Optimise nfs_vm_page_mkwrite() (Niels de Vos) [818650]
  - [fs] nfs: Add debugging facility for nfs aops (Niels de Vos) [818650]
  - [fs] nfs: Add the helper nfs_vm_page_mkwrite (Niels de Vos) [818650]
  - [ata] ata_piix: drop merged SCR access use slave_link instead (David Milburn) [810403]
  - [ata] libata: implement slave_link (David Milburn) [810403]
  - [ata] libata: misc updates to prepare for slave link (David Milburn) [810403]
  - [ata] libata: reimplement link iterator (David Milburn) [810403]
  - [ata] libata: make SCR access ops per-link (David Milburn) [810403]
  - [scsi] megaraid_sas: version string update (Tomas Henzl) [796920]
  - [scsi] megaraid_sas: fpRead/{WriteCapable|WriteAcrossStripe} (Tomas Henzl) [796920]
  - [scsi] megaraid_sas: Optimize HostMSIxVectors setting (Tomas Henzl) [796920]
  - [scsi] megaraid_sas: remove poll_mode_io code (Tomas Henzl) [796920]
  - [scsi] megaraid_sas: mask off flags in ioctl path (Tomas Henzl) [796920]
  - [scsi] megaraid_sas: Fix reglockFlags for degraded raid5/6 (Tomas Henzl) [796920]
  - [scsi] megaraid_sas: Add workaround for PERC5/1068 kdump panic (Tomas Henzl) [796920]
  - [scsi] megaraid_sas: Add multiple {MSI-X vector/reply queue} (Tomas Henzl) [796920]
  - [scsi] megaraid_sas: Add support for 9360/9380 12GB/s controllers (Tomas Henzl) [796920]
  - [scsi] megaraid_sas: Clear FUSION_IN_RESET pre enabling inters (Tomas Henzl) [796920]
  - [scsi] megaraid_sas: Clear state change interrupts (Tomas Henzl) [796920]
  - [scsi] megaraid_sas: Remove some unnecessary code (Tomas Henzl) [796920]
  - [scsi] megaraid_sas: Fix mismatch in mutex lock-unlock (Tomas Henzl) [796920]
  - [scsi] megaraid_sas: Increase default cmds per lun to 256 (Tomas Henzl) [796920]
  - [scsi] megaraid_sas: Cont boot if FW in FAULT at driver load time (Tomas Henzl) [796920]
  - [security] unistd: add __NR_prlimit64 syscall numbers (Frederic Weisbecker) [655194]
  - [security] Fix prlimit64 for suid/sgid processes (Frederic Weisbecker) [655194]
  - [security] rlimits: implement prlimit64 syscall (Frederic Weisbecker) [655194]
  - [security] rlimits: add rlimit64 structure (Frederic Weisbecker) [655194]
  - [security] rlimits: switch more rlimit syscalls to do_prlimit (Frederic Weisbecker) [655194]
  - [security] rlimits: redo do_setrlimit to more generic do_prlimit (Frederic Weisbecker) [655194]
  - [security] rlimits: do security check under task_lock (Frederic Weisbecker) [655194]
  - [security] rlimits: allow setrlimit to non-current tasks (Frederic Weisbecker) [655194]
  - [security] rlimits: split sys_setrlimit (Frederic Weisbecker) [655194]
  - [security] rlimits: ensure rlim_max never grows in sys_setrlimit (Frederic Weisbecker) [655194]
  - [security] rlimits: add task_struct to setrlimit (Frederic Weisbecker) [655194]
  - [net] igbvf driver update (Stefan Assmann) [794926]
  - [net] virtio: get/set UFO, get rx csum via ethtool (Jiri Benc) [748335]
  - [char] ipmi: Increase KCS timeouts (Matthew Garrett) [605727]
  - [pci] fix upstream P2P bridge checks when enabling OBFF and LTR (Myron Stowe) [834708]
  - [net] igb driver update (Stefan Assmann) [794925]
  - [virt] xen: add the CDROM_GET_CAPABILITY ioctl to blkfront (Laszlo Ersek) [604181]
  - [virtio] pci: disallow entering suspend states (Amit Shah) [834511]
  - [fs] ext4: Fix overflow caused by missing cast in ext4_fallocate (Lukas Czerner) [830351]
  - [xen] Fix #GPF injection into compat guests in vm86 code (Igor Mammedov) [837032]
  - [xen] x86: emulate lea with two register operands correctly (Igor Mammedov) [837032]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-324.el5]
changelog:
  - [net] be2net: Disable num_vfs param as SR-IOV not on RHEL5 (Ivan Vecera) [836876]
  - [net] ixgbevf: Set jumbo frames correctly after PF reset (Andy Gospodarek) [794922]
  - [net] ixgbevf: Add support to recognize 100mb link speed (Andy Gospodarek) [794922]
  - [net] ixgbevf: Fix mailbox interrupt ack bug (Andy Gospodarek) [794922]
  - [net] ixgbevf: Prev possible race cond by checking for message (Andy Gospodarek) [794922]
  - [net] ixgbevf: Fix reg defines to handle complex expressions (Andy Gospodarek) [794922]
  - [net] ixgbe: Fix case of Tx Hang in PF with 32 VFs (Andy Gospodarek) [794920]
  - [net] ixgbe: Add param to allow untested and unsafe SFP+ modules (Andy Gospodarek) [794920]
  - [net] ixgbe: add support for new 82599 device. (Andy Gospodarek) [794920]
  - [net] ixgbe: add support for new 82599 device id (Andy Gospodarek) [794920]
  - [net] ixgbe: Reconfigure SR-IOV Init (Andy Gospodarek) [794920]
  - [net] e1000e: use more logging macros when netdev not registered (Dean Nelson) [794921]
  - [net] e1000e: test for valid check_reset_block function pointer (Dean Nelson) [794921]
  - [net] e1000e: fix Rapid Start Technology support for i217 (Dean Nelson) [794921]
  - [net] e1000e: fix typo in def of E1000_CTRL_EXT_FORCE_SMBUS (Dean Nelson) [794921]
  - [net] e1000e: Fix merge conflict (net->net-next) (Dean Nelson) [794921]
  - [net] e1000e: increase version number (Dean Nelson) [794921]
  - [net] e1000e: clear REQ and GNT in EECD (82571 && 82572) (Dean Nelson) [794921]
  - [net] e1000e: enable forced master/slave on 82577 (Dean Nelson) [794921]
  - [net] e1000e: initial support for i217 (Dean Nelson) [794921]
  - [net] e1000e: Rem special case for 82573/82574 ASPM L1 disable (Dean Nelson) [794921]
  - [net] e1000e: Disable ASPM L1 on 82574 (Dean Nelson) [794921]
  - [net] e1000e: Driver workaround for IPv6 Hdr Extension Erratum. (Dean Nelson) [794921]
  - [net] e1000e: Fix intermittent negotiation issue on 82574/82583. (Dean Nelson) [794921]
  - [net] e1000e: cleanup [read|write]_reg_locked PHY ops funcptrs (Dean Nelson) [794921]
  - [net] e1000e: suggest possible workaround to dev hang on 82577/8 (Dean Nelson) [794921]
  - [net] e1000e: fix .ndo_set_rx_mode for 82579 (Dean Nelson) [794921]
  - [net] e1000e: PHY initialization flow changes for 82577/8/9 (Dean Nelson) [794921]
  - [net] e1000e: workaround EEPROM configuration change on 82579 (Dean Nelson) [794921]
  - [net] e1000e: 82579 potential sys hang on stress when ME enabled (Dean Nelson) [794921]
  - [net] e1000e: 82579 packet drop workaround (Dean Nelson) [794921]
  - [net] e1000e: Enable DMA Burst Mode on 82574 by default. (Dean Nelson) [794921]
  - [net] e1000e: Dis Far-End LoopBack after reset on 80003ES2LAN. (Dean Nelson) [794921]
  - [net] e1000e: Fix default inter throttle rate not set in NIC HW (Dean Nelson) [794921]
  - [net] e1000e: MSI interrupt test failed, using legacy interrupt (Dean Nelson) [794921]
  - [net] e1000e: cleanup boolean logic (Dean Nelson) [794921]
  - [net] e1000e: cleanup remaining strings split across mult lines (Dean Nelson) [794921]
  - [net] e1000e: issues in Sx on 82577/8/9 (Dean Nelson) [794921]
  - [net] e1000e: cleanup indexed register arrays (Dean Nelson) [794921]
  - [net] e1000e: cleanup NAPI routine (Dean Nelson) [794921]
  - [net] e1000e: Minor comment clean-up. (Dean Nelson) [794921]
  - [net] e1000e: Guarantee descriptor writeback flush success. (Dean Nelson) [794921]
  - [net] e1000e: prev oops when adptr is closed and reset sametime (Dean Nelson) [794921]
  - [net] e1000e: make wired eth driver mess level consistent (rev2) (Dean Nelson) [794921]
  - [net] e1000e: use msleep instead of mdelay (Dean Nelson) [794921]
  - [net] e1000e: cleanup whitespace and indentation (Dean Nelson) [794921]
  - [net] e1000e: cleanup incorrect filename in comment (Dean Nelson) [794921]
  - [net] e1000e: ren e1000e_reload_nvm and call as funcptr (Dean Nelson) [794921]
  - [net] e1000e: cleanup - remove unnecessary variable (Dean Nelson) [794921]
  - [net] e1000e: use true/false for bool, do not assume always true (Dean Nelson) [794921]
  - [net] e1000e: cleanup comment in e1000_hash_mc_addr() (Dean Nelson) [794921]
  - [net] e1000e: ren e1000e_config_collision_dist call as funcptr (Dean Nelson) [794921]
  - [net] e1000e: fix comment in e1000e_set_kmrn_lock_loss_workaround (Dean Nelson) [794921]
  - [net] e1000e: cleanup: call setup_physical_interface func ptr (Dean Nelson) [794921]
  - [net] e1000e: cleanup use of check_reset_block function pointer (Dean Nelson) [794921]
  - [net] e1000e: cleanup use of check_mng_mode function pointer (Dean Nelson) [794921]
  - [net] e1000e: cleanup: ren e1000e_setup_link and call as funcptr (Dean Nelson) [794921]
  - [net] e1000e: cleanup: ren e1000e_id_led_init and call as funcptr (Dean Nelson) [794921]
  - [net] e1000e: cosmetic changes making lines less than 80 chars (Dean Nelson) [794921]
  - [net] e1000e: cosmetic change to boolean comparisons (Dean Nelson) [794921]
  - [net] e1000e: cleanup goto statements exiting without common work (Dean Nelson) [794921]
  - [net] e1000e: fix ret for e1000e_setup_fiber_serdes_link (Dean Nelson) [794921]
  - [net] e1000e: fix ret for e1000_init_hw_ich8lan (Dean Nelson) [794921]
  - [net] e1000e: cleanup: minor whitespace addition (Dean Nelson) [794921]
  - [net] e1000e: cleanup: rem unnecessary variable initializations (Dean Nelson) [794921]
  - [net] e1000e: cleanup: remove unnecessary test and return (Dean Nelson) [794921]
  - [net] e1000e: cleanup: remove unnecessary variable ret_val (Dean Nelson) [794921]
  - [net] e1000e: cleanup: remove unreachable statement (Dean Nelson) [794921]
  - [net] e1000e: fix ret for e1000_set_d3_lplu_state_ich8lan (Dean Nelson) [794921]
  - [net] e1000e: cleanup: always return 0 (Dean Nelson) [794921]
  - [net] e1000e: cleanup: remove assignments just before returning (Dean Nelson) [794921]
  - [net] e1000e: fix ret for e1000_setup_copper_link_80003es2lan (Dean Nelson) [794921]
  - [net] e1000e: fix ret for e1000_cfg_kmrn_10_100_80003es2lan (Dean Nelson) [794921]
  - [net] e1000e: cleanup: rename goto labels to be more meaningful (Dean Nelson) [794921]
  - [net] e1000e: cleanup: consolidate common code using gotos (Dean Nelson) [794921]
  - [net] e1000e: replace '1' with 'true' for boolean get_link_status (Dean Nelson) [794921]
  - [net] e1000e: pass ptr to hw struct for e1000_init_mac_params_XXX (Dean Nelson) [794921]
  - [net] e1000e: use true/false for bool autoneg_false (Dean Nelson) [794921]
  - [net] e1000e: remove unnecessary parentheses (Dean Nelson) [794921]
  - [net] e1000e: remove unnecessary returns from void functions (Dean Nelson) [794921]
  - [net] e1000e: remove test that is always false (Dean Nelson) [794921]
  - [net] e1000e: minor whitespace and indentation cleanup (Dean Nelson) [794921]
  - [net] e1000e: fix sparse warnings with -D__CHECK_ENDIAN__ (Dean Nelson) [794921]
  - [net] e1000e: fix checkpatch warning from MINMAX test (Dean Nelson) [794921]
  - [net] e1000e: cleanup: use {} in all branches of a cond-statement (Dean Nelson) [794921]
  - [net] e1000e: cleanup e1000_init_mac_params_82571() (Dean Nelson) [794921]
  - [net] e1000e: cleanup e1000_init_mac_params_80003es2lan() (Dean Nelson) [794921]
  - [net] e1000e: cleanup - check return values consistently (Dean Nelson) [794921]
  - [net] e1000e: add initializers reported when compiling with W=1 (Dean Nelson) [794921]
  - [net] e1000e: update copyright year (Dean Nelson) [794921]
  - [net] e1000e: split lib.c into three more-appropriate files (Dean Nelson) [794921]
  - [net] e1000e: call er16flash() instead of __er16flash() (Dean Nelson) [794921]
  - [net] e1000e: convert final strncpy() to strlcpy() (Dean Nelson) [794921]
  - [net] e1000e: concat long debug strings which span multiple lines (Dean Nelson) [794921]
  - [net] e1000e: cond restrt autoneg on 8257[789] setting LPLU state (Dean Nelson) [794921]
  - [net] e1000e: inc Rx PBA to prev dropped recv pkts on 82566/82567 (Dean Nelson) [794921]
  - [net] e1000e: ICHx/PCHx LOMs use LPLU NVM state when going to Sx (Dean Nelson) [794921]
  - [net] e1000e: update workaround 82579 intermit disabled in S0->Sx (Dean Nelson) [794921]
  - [net] e1000e: disable Early Receive DMA on ICH LOMs (Dean Nelson) [794921]
  - [net] e1000e: Need to include vmalloc.h (Dean Nelson) [794921]
  - [net] e1000e: 82574/82583 Tx hang workaround (Dean Nelson) [794921]
  - [net] e1000e: use h/w default values for Transmit Control reg (Dean Nelson) [794921]
  - [net] e1000e: use default settings for Tx Inter Packet Gap timer (Dean Nelson) [794921]
  - [net] e1000e: 82579: workaround for link drop issue (Dean Nelson) [794921]
  - [net] e1000e: always set trans descriptor control regs the same (Dean Nelson) [794921]
  - [net] e1000e: default IntMode based on kern config & h/w support (Dean Nelson) [794921]
  - [net] e1000e: re-factor ethtool get/set ring parameter (Dean Nelson) [794921]
  - [net] e1000e: pass ptr to ring struct instead of adapter struct (Dean Nelson) [794921]
  - [net] e1000e: conv head, tail and itr_reg offsets to __iomem ptrs (Dean Nelson) [794921]
  - [net] e1000e: re-enable alternate MAC addr for supported devs (Dean Nelson) [794921]
  - [net] e1000e: fix assignment of 0/1 to bool variables. (Dean Nelson) [794921]
  - [net] e1000e: convert strncpy() to strlcpy() (Dean Nelson) [794921]
  - [net] e1000e: Convert printks to pr_<level> (Dean Nelson) [794921]
  - [net] e1000e: convert to real ndo_set_rx_mode (Dean Nelson) [794921]
  - [net] e1000e: use strlcpy() in place of strncpy() (Dean Nelson) [794921]
  - [net] e1000e: Add module.h (Dean Nelson) [794921]
  - [net] e1000e: fix skb truesize underestimation (Dean Nelson) [794921]
  - [net] e1000e: Remove zero assignment of ethtool_ringparam fields (Dean Nelson) [794921]
  - [net] e1000e: bad short pkts rec'ed when jumbos enabled on 82579 (Dean Nelson) [794921]
  - [net] e1000e: make function tables const (Dean Nelson) [794921]
  - [net] e1000e: convert driver to use extended descriptors (Dean Nelson) [794921]
  - [net] e1000e: remove unnecessary msleep() in e1000e_write_nvm_spi (Dean Nelson) [794921]
  - [net] e1000e: remove EEE module parameter (Dean Nelson) [794921]
  - [net] e1000e: disable EEE support by default (Dean Nelson) [794921]
  - [net] e1000e: enable support for EEE on 82579 (Dean Nelson) [794921]
  - [net] e1000e: convert to use mc helpers (Dean Nelson) [794921]
  - [net] enic: Fix endianness bug. (Stefan Assmann) [796426]
  - [net] enic: Check firmware cap before issuing firmware commands (Stefan Assmann) [796426]
  - [net] bna: Update driver version to 3.0.23.0 (Ivan Vecera) [796494]
  - [net] bna: Function name changes and cleanups (Ivan Vecera) [796494]
  - [net] bna: Remove tx tasklet (Ivan Vecera) [796494]
  - [net] bna: tx rx cleanup fix (Ivan Vecera) [796494]
  - [net] bna: ioc cleanups (Ivan Vecera) [796494]
  - [net] bna: Flash controller ioc pll init fixes (Ivan Vecera) [796494]
  - [net] bna: Serialize smem access during adapter initialization (Ivan Vecera) [796494]
  - [net] bna: Remove boolean comparisons to true/false (Ivan Vecera) [796494]
  - [net] bna: fix err handling of bnad_get_flash_partition_by_offset (Ivan Vecera) [796494]
  - [net] bna: Remove alloc_etherdev error messages (Ivan Vecera) [796494]
  - [net] bna: Remove unnecessary k.alloc/v.alloc OOM messages (Ivan Vecera) [796494]
  - [net] bna: fix sparse warnings/errors (Ivan Vecera) [796494]
  - [net] bna: make ethtool_ops and strings const (Ivan Vecera) [796494]
  - [net] bna: Add debugfs interface. (Ivan Vecera) [796494]
  - [net] bna: Add flash sub-module and ethtool eeprom entry points. (Ivan Vecera) [796494]
  - [net] bna: fix assignment of 0/1 to bool variables. (Ivan Vecera) [796494]
  - [net] bna: Convert MAC_ADDRLEN uses to ETH_ALEN (Ivan Vecera) [796494]
  - [net] bna: convert some .get_drvinfo routines to strlcpy (Ivan Vecera) [796494]
  - [net] qlcnic: Allow a predefined set of capture masks for FW dump (Chad Dupuis) [796733]
  - [net] qlcnic: Adding mac statistics to ethtool. (Chad Dupuis) [796733]
  - [net] qlcnic: Register device in FAILED state. (Chad Dupuis) [796733]
  - [net] qlcnic: Bug fix for LRO (Chad Dupuis) [796733]
  - [net] qlcnic: Added sysfs Node fwdump_state (Chad Dupuis) [796733]
  - [net] qlcnic: Fix API unlock (Chad Dupuis) [796733]
  - [net] qlcnic: Fix firmware abort code check. (Chad Dupuis) [796733]
  - [net] qlcnic: report valid speed/duplex status when link is down (Chad Dupuis) [796733]
  - [net] qlcnic: Stop pause ctrl frames on fw hang. (Chad Dupuis) [796733]
  - [net] qlcnic: Remove alloc_etherdev error messages (Chad Dupuis) [796733]
  - [net] qlcnic: Convert some .get_drvinfo routines to strlcpy (Chad Dupuis) [796733]
  - [net] qlnic: Remove zero assignment of ethtool_ringparam fields (Chad Dupuis) [796733]
  - [net] qlcnic: fix beacon and LED test. (Chad Dupuis) [796733]
  - [net] qlcnic: Updated License file (Chad Dupuis) [796733]
  - [net] qlcnic: updated reset sequence (Chad Dupuis) [796733]
  - [net] qlcnic: reset loopback mode if promiscous mode set fails. (Chad Dupuis) [796733]
  - [net] qlcnic: skip IDC ack check in fw reset path. (Chad Dupuis) [796733]
  - [net] qlcnic: fix external loopback test. (Chad Dupuis) [796733]


