# changelog

author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.215.9.el5uek]
changelog:
  - oracleasm: Add support for new error return codes from block/SCSI (Martin K. Petersen)  [Orabug: 18438934]


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.215.10.el5uek]
changelog:
  - auditsc: audit_krule mask accesses need bounds checking (Andy Lutomirski)  [Orabug: 19590597]  {CVE-2014-3917}


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.215.11.el5uek]
changelog:
  - ALSA: control: Don't access controls outside of protected regions (Lars-Peter Clausen)  [Orabug: 19817786]  {CVE-2014-4653} {CVE-2014-4654} {CVE-2014-4655} 
  - ALSA: control: Fix replacing user controls (Lars-Peter Clausen)  [Orabug: 19817748]  {CVE-2014-4653} {CVE-2014-4654} {CVE-2014-4655} 
  - kvm: iommu: fix the third parameter of kvm_iommu_put_pages (CVE-2014-3601) (Michael S. Tsirkin)  [Orabug: 19817647]  {CVE-2014-3601} 
  - mm: try_to_unmap_cluster() should lock_page() before mlocking (Vlastimil Babka)  [Orabug: 19817323]  {CVE-2014-3122} 
  - vm: convert fb_mmap to vm_iomap_memory() helper (Linus Torvalds)  [Orabug: 19816563]  {CVE-2013-2596} 
  - vm: add vm_iomap_memory() helper function (Linus Torvalds)  [Orabug: 19816563]  {CVE-2013-2596} 
  - net: sctp: inherit auth_capable on INIT collisions (Daniel Borkmann)  [Orabug: 19816068]  {CVE-2014-5077}


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.215.12.el5uek]
changelog:
  - USB: whiteheat: Added bounds checking for bulk command response (James Forshaw)  [Orabug: 19849335]  {CVE-2014-3185} 
  - HID: fix a couple of off-by-ones (Jiri Kosina)  [Orabug: 19849318]  {CVE-2014-3181} 
  - KVM: x86: Improve thread safety in pit (Andy Honig)  [Orabug: 19905687]  {CVE-2014-3611}


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.215.13.el5uek]
changelog:
  - net: sctp: fix panic on duplicate ASCONF chunks (Daniel Borkmann)  [Orabug: 20010591]  {CVE-2014-3687} 
  - net: sctp: fix skb_over_panic when receiving malformed ASCONF chunks (Daniel Borkmann)  [Orabug: 20010578]  {CVE-2014-3673}


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.215.14.el5uek]
changelog:
  - HID: magicmouse: sanity check report size in raw_event() callback (Jiri Kosina)  [Orabug: 19849355]  {CVE-2014-3181} 
  - ALSA: control: Protect user controls against concurrent access (Lars-Peter Clausen)  [Orabug: 20192542]  {CVE-2014-4652} 
  - target/rd: Refactor rd_build_device_space + rd_release_device_space (Nicholas Bellinger)  [Orabug: 20192517]  {CVE-2014-4027} 
  - media-device: fix infoleak in ioctl media_enum_entities() (Salva Peiró)  [Orabug: 20192501]  {CVE-2014-1739} {CVE-2014-1739} 
  - udf: Avoid infinite loop when processing indirect ICBs (Jan Kara)  [Orabug: 20192449]  {CVE-2014-6410} 
  - ALSA: control: Make sure that id->index does not overflow (Lars-Peter Clausen)  [Orabug: 20192418]  {CVE-2014-4656} 
  - ALSA: control: Handle numid overflow (Lars-Peter Clausen)  [Orabug: 20192376]  {CVE-2014-465} 
  - HID: picolcd: sanity check report size in raw_event() callback (Jiri Kosina)  [Orabug: 20192205]  {CVE-2014-3186} 
  - net: sctp: fix remote memory pressure from excessive queueing (Daniel Borkmann)  [Orabug: 20192059]  {CVE-2014-3688}


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.215.15.el5uek]
changelog:
  - isofs: Fix unbounded recursion when processing relocated directories (Jan Kara)  [Orabug: 20224060]  {CVE-2014-5471} {CVE-2014-5472} 
  - x86_64, traps: Stop using IST for #SS (Andy Lutomirski)  [Orabug: 20224028]  {CVE-2014-9090} {CVE-2014-9322}


author: Maxim Uvarov <maxim.uvarov@oracle.com> [2.6.39-400.22.1.el5uek]
changelog:
  - block: default SCSI command filter does not accomodate commands overlap across device classes (Jamie Iles) [Orabug: 16387137] {CVE-2012-4542} 
  - Merge tag 'v2.6.39-400.21.1#bug16684527' of git://ca-git.us.oracle.com/linux-joejin-public into uek-2.6.39-400_errata (Maxim Uvarov) [Orabug: 16684527] 
  - KVM: x86: Convert MSR_KVM_SYSTEM_TIME to use gfn_to_hva_cache functions (CVE-2013-1797) (Andy Honig) [Orabug: 16711660] {CVE-2013-1797} 
  - Bluetooth: Fix incorrect strncpy() in hidp_setup_hid() (Anderson Lizardo) [Orabug: 16711065] {CVE-2013-0349} 
  - USB: io_ti: Fix NULL dereference in chase_port() (Wolfgang Frisch) [Orabug: 16425358] {CVE-2013-1774} 
  - keys: fix race with concurrent install_user_keyrings() (David Howells) [Orabug: 16493354] {CVE-2013-1792} 
  - KVM: Fix bounds checking in ioapic indirect register reads (CVE-2013-1798) (Andy Honig) [Orabug: 16710951] {CVE-2013-1798} 
  - KVM: x86: fix for buffer overflow in handling of MSR_KVM_SYSTEM_TIME (CVE-2013-1796) (Andy Honig) [Orabug: 16710806] {CVE-2013-1796} 
  - tmpfs: fix use-after-free of mempolicy object (Greg Thelen) [Orabug: 16515833] {CVE-2013-1767} 
  - procfs: do not confuse jiffies with cputime64_t (Andreas Schwab) [Orabug: 16673925] 
  - procfs: do not overflow get_{idle,iowait}_time for nohz (Michal Hocko) [Orabug: 16673925] 
  - xen/evtchn: Handle VIRQ_TIMER before any other hardirq in event loop. (Keir Fraser) [Orabug: 16093126] 
  - Fix device removal NULL pointer dereference (Joe Jin) [Orabug: 16684527] 
  - put stricter guards on queue dead checks (James Bottomley) [Orabug: 16684527]


author: Zhenzhong Duan <zhenzhong.duan@oracle.com> [2.6.39-400.23.1.el5uek]
changelog:
  - Parallel mtrr init between cpus (Zhenzhong Duan) [Orabug: 16777774] 
  - Merge tag 'v2.6.39-400.21.1.16748891' of git://ca-git.us.oracle.com/linux-uek-2.6.39-ofed into uek-2.6.39-400 (Maxim Uvarov) [Orabug: 16748891] 
  - xen-blkfront: use a different scatterlist for each request (Roger Pau Monne) 
  - Fix EN driver to work with newer FWs based on latest mlx4_core (Yuval Shaia) [Orabug: 16748891]


author: Guru Anbalagane <guru.anbalagane@oracle.com> [2.6.39-400.24.1.el5uek]
changelog:
  - perf: Treat attr.config as u64 in perf_swevent_init() (Tommi Rantala) [Orabug: 16808734] {CVE-2013-2094}


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.236.0.el5uek]
changelog:
  - Simple fix to update related dst pmtu in routing table (Shirley Ma)  [Orabug: 19592021]  
  - ipv6: ip6_dst_check needs to check for expired dst_entries (Hannes Frederic Sowa)  [Orabug: 19033899]  
  - ipv6: fix race condition regarding dst->expires and dst->from. (YOSHIFUJI Hideaki / 吉藤英明)  [Orabug: 19033909]  
  - ipv6: recursive check rt->dst.from when call rt6_check_expired (Li RongQing)  [Orabug: 19033915]  
  - ipv6: fix problem with expired dst cache (Gao feng)  [Orabug: 19033921]  
  - ipv6: Kill rt6i_dev and rt6i_expires defines. (David S. Miller)  [Orabug: 19592073]


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.237.0.el5uek]
changelog:
  - block: nvme: Let iostat show nvme device partitions (Santosh Shilimkar)  [Orabug: 19826058]  
  - reboot: rigrate shutdown/reboot to boot cpu (Robin Holt)  [Orabug: 18386007]  
  - CPU hotplug: provide a generic helper to disable/enable CPU hotplug (Srivatsa S. Bhat)  [Orabug: 18386007]


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.239.0.el5uek]
changelog:
  - rds: fix list corruption and tx hang when netfilter is used (shamir rabinovitch)  [Orabug: 18963548]  
  - Revert "ib_cm: reduce latency when destroying large number of ids" (Ajaykumar Hotchandani)  [Orabug: 19959153]  
  - Revert "rds: avoid duplicate connection drops for active bonding" (Ajaykumar Hotchandani)  [Orabug: 19959153]  
  - mlx4_core: change default for mlx4_scale_profile (Chien-Hua Yen)  [Orabug: 19869294]  
  - mlx_core: Change log_num_mtt scaling range (Mukesh Kacker)  [Orabug: 19951718]  
  - mlx4_core: Fix integer overflow issues around MTT table (Yishai Hadas)  [Orabug: 19890202]  
  - mlx4_core: Clean up buddy bitmap allocation (Roland Dreier)  [Orabug: 19810605]  
  - mlx4_core: Allow large mlx4_buddy bitmaps (Yishai Hadas)  [Orabug: 19810605]


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.240.0.el5uek]
changelog:
  - net: sctp: fix panic on duplicate ASCONF chunks (Daniel Borkmann)  [Orabug: 20010591]  {CVE-2014-3687} 
  - net: sctp: fix skb_over_panic when receiving malformed ASCONF chunks (Daniel Borkmann)  [Orabug: 20010578]  {CVE-2014-3673} 
  - genhd: fix leftover might_sleep() in blk_free_devt() (Jens Axboe)  [Orabug: 19889185]  
  - xen/pciback: Restore configuration space when detaching from a guest. (Konrad Rzeszutek Wilk)  [Orabug: 19931428]  
  - x86: xen: Sync the CMOS RTC as well as the Xen wallclock (David Vrabel)  [Orabug: 19932271]  
  - x86: xen: Sync the wallclock when the system time is set (David Vrabel)  [Orabug: 19932271]  
  - timekeeping: Indicate that clock was set in the pvclock gtod notifier (David Vrabel)  [Orabug: 19932271]  
  - timekeeping: Pass flags instead of multiple bools to timekeeping_update() (David Vrabel)  [Orabug: 19932271]  
  - time: export time information for KVM pvclock (Marcelo Tosatti)  [Orabug: 19932271]  
  - xen: Remove clock_was_set() call in the resume path (David Vrabel)  [Orabug: 19932271]  
  - hrtimers: Support resuming with two or more CPUs online (but stopped) (David Vrabel)  [Orabug: 19932271]  
  - x86: Fix vrtc_get_time/set_mmss to use new timespec interface (John Stultz)  [Orabug: 19932271]  
  - x86: Increase precision of x86_platform.get/set_wallclock() (David Vrabel)  [Orabug: 19932271]


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.241.0.el5uek]
changelog:
  - mpt2sas: setpci panic bug fix (Nagarajkumar Narayanan)  [Orabug: 19849933]  
  - o2dlm: fix NULL pointer dereference in o2dlm_blocking_ast_wrapper (Srinivas Eeda)  [Orabug: 19602075]


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.242.0.el5uek]
changelog:
  - This patch only affects the system with Mellanox CX2/3 with SR-IOV enabled. (Chien-Hua Yen)  [Orabug: 19622192]  
  - NVMe: Fix the memory leak with BLKRRPART ioctls (Keith Busch)  [Orabug: 20071659]  
  - Revert "af_unix: Allow credentials to work across user and pid namespaces." (Dan Duval)  [Orabug: 16735268]  
  - Revert "scm: Capture the full credentials of the scm sender." (Dan Duval)  [Orabug: 16735268]


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.243.1.el5uek]
changelog:
  - timekeeping: Indicate that clock was set in the pvclock gtod notifier (David Vrabel)  [Orabug: 20019459]  
  - Revert "timekeeping: Indicate that clock was set in the pvclock gtod notifier" (Jason Luan)  [Orabug: 20019459]


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.246.1.el5uek]
changelog:
  - sched: Fix possible divide by zero in avg_atom() calculation (Mateusz Guzik)  [Orabug: 20148169]  
  - include/linux/math64.h: add div64_ul() (Alex Shi)   
  - deadlock when two nodes are converting same lock from PR to EX and idletimeout closes conn (Tariq Saeed)  [Orabug: 18639535]  
  - bonding: Bond master should reflect slave's features. (Ashish Samant)  [Orabug: 20231825]  
  - x86, fpu: remove the logic of non-eager fpu mem allocation at the first usage (Annie Li)  [Orabug: 20239143]  
  - x86, fpu: remove cpu_has_xmm check in the fx_finit() (Suresh Siddha)  [Orabug: 20239143]  
  - x86, fpu: make eagerfpu= boot param tri-state (Suresh Siddha)  [Orabug: 20239143]  
  - x86, fpu: enable eagerfpu by default for xsaveopt (Suresh Siddha)  [Orabug: 20239143]  
  - x86, fpu: decouple non-lazy/eager fpu restore from xsave (Suresh Siddha)  [Orabug: 20239143]  
  - x86, fpu: use non-lazy fpu restore for processors supporting xsave (Suresh Siddha)  [Orabug: 20239143]  
  - lguest, x86: handle guest TS bit for lazy/non-lazy fpu host models (Suresh Siddha)  [Orabug: 20239143]  
  - x86, fpu: always use kernel_fpu_begin/end() for in-kernel FPU usage (Suresh Siddha)  [Orabug: 20239143]  
  - x86, kvm: use kernel_fpu_begin/end() in kvm_load/put_guest_fpu() (Suresh Siddha)  [Orabug: 20239143]  
  - x86, fpu: remove unnecessary user_fpu_end() in save_xstate_sig() (Suresh Siddha)  [Orabug: 20239143]  
  - raid5: add AVX optimized RAID5 checksumming (Jim Kukunas)  [Orabug: 20239143]  
  - x86, fpu: drop the fpu state during thread exit (Suresh Siddha)  [Orabug: 20239143]  
  - x32: Add a thread flag for x32 processes (H. Peter Anvin)  [Orabug: 20239143]  
  - x86, fpu: Unify signal handling code paths for x86 and x86_64 kernels (Suresh Siddha)  [Orabug: 20239143]  
  - x86, fpu: Consolidate inline asm routines for saving/restoring fpu state (Suresh Siddha)  [Orabug: 20239143]  
  - x86, signal: Cleanup ifdefs and is_ia32, is_x32 (Suresh Siddha)  [Orabug: 20239143]  
  - i387: Split up <asm/i387.h> into exported and internal interfaces (Linus Torvalds)  [Orabug: 20239143]  
  - i387: Uninline the generic FP helpers that we expose to kernel modules (Linus Torvalds)  [Orabug: 20239143]  
  - i387: use 'restore_fpu_checking()' directly in task switching code (Linus Torvalds)  [Orabug: 20239143]  
  - i387: fix up some fpu_counter confusion (Linus Torvalds)  [Orabug: 20239143]


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.246.2.el5uek]
changelog:
  - net: sctp: fix NULL pointer dereference in af->from_addr_param on malformed packet (Daniel Borkmann)  [Orabug: 20425333]  {CVE-2014-7841}


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.247.1.el5uek]
changelog:
  - ib/sdp: fix null dereference of sk->sk_wq in sdp_rx_irq() (Chuck Anderson)  [Orabug: 20070989]  
  - Ensure request structure is not modified after being reused. (Ashish Samant)  [Orabug: 19971490]  
  - ocfs2: quorum: add a log for node not fenced (Junxiao Bi)  [Orabug: 20472045]  
  - ocfs2: o2net: set tcp user timeout to max value (Junxiao Bi)  [Orabug: 20472045]  
  - ocfs2: o2net: don't shutdown connection when idle timeout (Junxiao Bi)  [Orabug: 20472045]  
  - ocfs2: o2dlm: fix a race between purge and master query (Srinivas Eeda)  [Orabug: 20472034]  
  - ocfs2: fix null handle in ocfs2_write_zero_page (Junxiao Bi)  [Orabug: 19632637]  
  - ocfs2: fix deadlock due to wrong locking order (Junxiao Bi)  [Orabug: 19632637]  
  - net: sctp: fix NULL pointer dereference in af->from_addr_param on malformed packet (Daniel Borkmann)  [Orabug: 20425333]  {CVE-2014-7841}


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.248.1.el5uek]
changelog:
  - NVMe: Disable pci before clearing queue (Keith Busch)  [Orabug: 20533100]  
  - x86, fpu: disable eagerfpu by default (Santosh Shilimkar)  [Orabug: 20521543]


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.248.2.el5uek]
changelog:
  - netfilter: conntrack: disable generic tracking for known protocols (Florian Westphal)  [Orabug: 20679630]  {CVE-2014-8160} 
  - mac80211: fix fragmentation code, particularly for encryption (Johannes Berg)  [Orabug: 20673313]  {CVE-2014-8709} 
  - mm: Fix NULL pointer dereference in madvise(MADV_WILLNEED) support (Kirill A. Shutemov)  [Orabug: 20673282]  {CVE-2014-8173} 
  - tracing/syscalls: Ignore numbers outside NR_syscalls' range (Rabin Vincent)  [Orabug: 20673164]  {CVE-2014-7825} {CVE-2014-7826} 
  - tracing/syscalls: Fix perf syscall tracing when syscall_nr == -1 (Will Deacon)  [Orabug: 20673164]  {CVE-2014-7825} {CVE-2014-7826}


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.248.3.el5uek]
changelog:
  - kvm: fix excessive pages un-pinning in kvm_iommu_map error path. (Quentin Casasnovas)  [Orabug: 20687314]  {CVE-2014-3601} {CVE-2014-8369} {CVE-2014-3601} 
  - Revert "mm: Fix NULL pointer dereference in madvise(MADV_WILLNEED) support" (Guangyu Sun)  [Orabug: 20673281]  {CVE-2014-8173}


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.249.1.el5uek]
changelog:
  - pci: move reset-notify field to preserve pci_dev size and offsets (Dan Duval)  [Orabug: 20426076]  
  - ocfs2: fix journal commit deadlock (Junxiao Bi)  [Orabug: 19390111]  
  - loop: inherit queue limits from underlying device (Dave Kleikamp)  [Orabug: 19216610]  
  - block: Introduce blk_set_stacking_limits function (Martin K. Petersen)  [Orabug: 19216610]  
  - kvm: fix excessive pages un-pinning in kvm_iommu_map error path. (Quentin Casasnovas)  [Orabug: 20687314]  {CVE-2014-3601} {CVE-2014-8369} {CVE-2014-3601} 
  - Revert "mm: Fix NULL pointer dereference in madvise(MADV_WILLNEED) support" (Guangyu Sun)  [Orabug: 20673281]  {CVE-2014-8173} 
  - netfilter: conntrack: disable generic tracking for known protocols (Florian Westphal)  [Orabug: 20679630]  {CVE-2014-8160} 
  - mac80211: fix fragmentation code, particularly for encryption (Johannes Berg)  [Orabug: 20673313]  {CVE-2014-8709} 
  - mm: Fix NULL pointer dereference in madvise(MADV_WILLNEED) support (Kirill A. Shutemov)  [Orabug: 20673282]  {CVE-2014-8173} 
  - tracing/syscalls: Ignore numbers outside NR_syscalls' range (Rabin Vincent)  [Orabug: 20673164]  {CVE-2014-7825} {CVE-2014-7826} 
  - tracing/syscalls: Fix perf syscall tracing when syscall_nr == -1 (Will Deacon)  [Orabug: 20673164]  {CVE-2014-7825} {CVE-2014-7826}


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.249.2.el5uek]
changelog:
  - xen-pciback: limit guest control of command register (Jan Beulich)  [Orabug: 20704156]  {CVE-2015-2150} {CVE-2015-2150} 
  - net: sctp: fix slab corruption from use after free on INIT collisions (Daniel Borkmann)  [Orabug: 20780348]  {CVE-2015-1421}


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.249.3.el5uek]
changelog:
  - IB/core: Prevent integer overflow in ib_umem_get address arithmetic (Shachar Raindel)  [Orabug: 20788393]  {CVE-2014-8159} {CVE-2014-8159}


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.249.4.el5uek]
changelog:
  - isofs: Fix unchecked printing of ER records (Jan Kara)  [Orabug: 20930552]  {CVE-2014-9584} 
  - selinux: Permit bounded transitions under NO_NEW_PRIVS or NOSUID. (Stephen Smalley)  [Orabug: 20930502]  {CVE-2014-3215} 
  - Add PR_{GET,SET}_NO_NEW_PRIVS to prevent execve from granting privs (Andy Lutomirski)  [Orabug: 20930518]  {CVE-2014-3215}


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.250.1.el5uek]
changelog:
  - xen/pciback: Don't disable PCI_COMMAND on PCI device reset. (Konrad Rzeszutek Wilk)  [Orabug: 20807440]  {CVE-2015-2150} 
  - xen-blkfront: fix accounting of reqs when migrating (Roger Pau Monne)  [Orabug: 20727114]  
  - Revert "qla2xxx: Ramp down queue depth for attached SCSI devices when driver resources are low." (Chad Dupuis)  [Orabug: 20657415]  
  - x86/xen: allow privcmd hypercalls to be preempted (David Vrabel)  [Orabug: 20618759]  
  - sched: Expose preempt_schedule_irq() (Thomas Gleixner)  [Orabug: 20618759]  
  - isofs: Fix unchecked printing of ER records (Jan Kara)  [Orabug: 20930552]  {CVE-2014-9584} 
  - selinux: Permit bounded transitions under NO_NEW_PRIVS or NOSUID. (Stephen Smalley)  [Orabug: 20930502]  {CVE-2014-3215} 
  - Add PR_{GET,SET}_NO_NEW_PRIVS to prevent execve from granting privs (Andy Lutomirski)  [Orabug: 20930518]  {CVE-2014-3215} 
  - IB/core: Prevent integer overflow in ib_umem_get address arithmetic (Shachar Raindel)  [Orabug: 20788393]  {CVE-2014-8159} {CVE-2014-8159} 
  - xen-pciback: limit guest control of command register (Jan Beulich)  [Orabug: 20704156]  {CVE-2015-2150} {CVE-2015-2150} 
  - net: sctp: fix slab corruption from use after free on INIT collisions (Daniel Borkmann)  [Orabug: 20780348]  {CVE-2015-1421}


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.250.2.el5uek]
changelog:
  - crypto: aesni - fix memory usage in GCM decryption (Stephan Mueller)  [Orabug: 21077389]  {CVE-2015-3331}


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.250.3.el5uek]
changelog:
  - af_unix: dont send SCM_CREDENTIALS by default (Eric Dumazet)  [Orabug: 20604916]  
  - scm: Capture the full credentials of the scm sender (Tim Chen)  [Orabug: 20604916]  
  - af_unix: limit recursion level (Eric Dumazet)  [Orabug: 20604916]  
  - af_unix: Allow credentials to work across user and pid namespaces. (Eric W. Biederman)  [Orabug: 20604916]  
  - scm: Capture the full credentials of the scm sender. (Eric W. Biederman)  [Orabug: 20604916]  
  - BUG_ON(lockres->l_level != DLM_LOCK_EX && !checkpointed) tripped in ocfs2_ci_checkpointed (Tariq Saeed)  [Orabug: 20189959]  
  - sched: Prevent divide by zero when cpu power calculation is 0 (Todd Vierling)  [Orabug: 17936435]


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.250.5.el5uek]
changelog:
  - x86_64, vdso: Fix the vdso address randomization algorithm (Andy Lutomirski)  [Orabug: 21226730]  {CVE-2014-9585} 
  - isofs: Fix infinite looping over CE entries (Jan Kara)  [Orabug: 21225976]  {CVE-2014-9420} 
  - x86_64, switch_to(): Load TLS descriptors before switching DS and ES (Andy Lutomirski)  [Orabug: 21225938]  {CVE-2014-9419}


author: Santosh Shilimkar <santosh.shilimkar@oracle.com> [2.6.39-400.250.6.el5uek]
changelog:
  - x86/asm/entry/64: Remove a bogus 'ret_from_fork' optimization (Andy Lutomirski)  [Orabug: 21308308]  {CVE-2015-2830} 
  - x86, mm/ASLR: Fix stack randomization on 64-bit systems (Hector Marco-Gisbert)  [Orabug: 21307918]  {CVE-2015-1593} {CVE-2015-1593}


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.250.7.el5uek]
changelog:
  - ipv6: Don't reduce hop limit for an interface (D.S. Ljungmark)  [Orabug: 21444791]  {CVE-2015-2922} 
  - ipv4: Missing sk_nulls_node_init() in ping_unhash(). (David S. Miller)  [Orabug: 21444688]  {CVE-2015-3636}


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.250.8.el5uek]
changelog:
  - KVM: x86: SYSENTER emulation is broken (Nadav Amit)  [Orabug: 21502740]  {CVE-2015-0239} {CVE-2015-0239} 
  - x86/tls: Validate TLS entries to protect espfix (Andy Lutomirski)  [Orabug: 20223777]  {CVE-2014-8133} 
  - fs: take i_mutex during prepare_binprm for set[ug]id executables (Jann Horn)  [Orabug: 21502255]  {CVE-2015-3339} 
  - eCryptfs: Remove buggy and unnecessary write in file name decode routine (Michael Halcrow)  [Orabug: 21502066]  {CVE-2014-9683}


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.250.9.el5uek]
changelog:
  - x86, tls: Interpret an all-zero struct user_desc as "no segment" (Andy Lutomirski)  [Orabug: 21514969]  
  - x86, tls, ldt: Stop checking lm in LDT_empty (Andy Lutomirski)  [Orabug: 21514969]


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.250.10.el5uek]
changelog:
  - md: use kzalloc() when bitmap is disabled (Benjamin Randazzo)  [Orabug: 21563042]  {CVE-2015-5697} 
  - netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len (Andrey Vagin)  [Orabug: 21562780]  {CVE-2014-9715}


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.250.11.el5uek]
changelog:
  - udp: fix behavior of wrong checksums (Eric Dumazet)  [Orabug: 21628851]  {CVE-2015-5364} {CVE-2015-5366}


author: Santosh Shilimkar <santosh.shilimkar@oracle.com> [2.6.39-400.256.0.el5uek]
changelog:
  - NFS hangs in __ocfs2_cluster_lock due to race with ocfs2_unblock_lock (Tariq Saeed)  [Orabug: 20933419]  
  - jbd2: fix hung processes in jbd2_journal_lock_updates() (Jan Kara)   
  - rds: make sure base connection is up on both sides (Ajaykumar Hotchandani)  [Orabug: 20011421]


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.257.0.el5uek]
changelog:
  - ipv6: Don't reduce hop limit for an interface (D.S. Ljungmark)  [Orabug: 21444791]  {CVE-2015-2922} 
  - ipv4: Missing sk_nulls_node_init() in ping_unhash(). (David S. Miller)  [Orabug: 21444688]  {CVE-2015-3636} 
  - x86/asm/entry/64: Remove a bogus 'ret_from_fork' optimization (Andy Lutomirski)  [Orabug: 21308308]  {CVE-2015-2830} 
  - x86, mm/ASLR: Fix stack randomization on 64-bit systems (Hector Marco-Gisbert)  [Orabug: 21307918]  {CVE-2015-1593} {CVE-2015-1593}


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.260.1.el5uek]
changelog:
  - block: remove artifical max_hw_sectors cap (Joe Jin)  [Orabug: 21455630]  
  - idr: fix unexpected ID-removal when idr_remove(unallocated_id) (Lai Jiangshan)  [Orabug: 21446790]  
  - idr: remove WARN_ON_ONCE() on negative IDs (Tejun Heo)  [Orabug: 21446790]  
  - ipc,shm: fix shm_file deletion races (Greg Thelen)  [Orabug: 21446790]  
  - rds: avoid call to flush_mrs() in specific condition (Ajaykumar Hotchandani)  [Orabug: 21379403]  
  - rds: print vendor error (Wengang Wang)  [Orabug: 21361643]  
  - Xen-netback: Fix issue caused by using gso_type wrongly (Annie Li)  [Orabug: 21358903]  
  - xen-netback: fix fragments error handling in checksum_setup_ip() (Wei Yongjun)  [Orabug: 21358903]  
  - xen-netback: make sure skb linear area covers checksum field (Paul Durrant)  [Orabug: 21358903]  
  - xen-netback: reset network header before passing skb to checksum funtion (Annie Li)  [Orabug: 21358903]  
  - xen-netback: fix fragment detection in checksum setup (Paul Durrant)  [Orabug: 21358903]  
  - xen-netback: fix gso_prefix check (Paul Durrant)  [Orabug: 21358903]  
  - xen-netback: include definition of csum_ipv6_magic (Andy Whitcroft)  [Orabug: 21358903]  
  - xen-netback: enable IPv6 TCP GSO to the guest (Paul Durrant)  [Orabug: 21358903]  
  - xen-netback: handle IPv6 TCP GSO packets from the guest (Paul Durrant)  [Orabug: 21358903]  
  - xen-netback: Unconditionally set NETIF_F_RXCSUM (Paul Durrant)  [Orabug: 21358903]  
  - xen-netback: add support for IPv6 checksum offload from guest (Paul Durrant)  [Orabug: 21358903]  
  - xen-netback: switch to use skb_partial_csum_set() (Jason Wang)  [Orabug: 21358903]  
  - xen-netback: add support for IPv6 checksum offload to guest (Paul Durrant)  [Orabug: 21358903]  
  - vfs: allow umount to handle mountpoints without revalidating them (Jeff Layton)  [Orabug: 21321002]  
  - rds: rds_ib_device.refcount overflow (Wengang Wang)  [Orabug: 21288594]  
  - sched: Optimize task_sched_runtime() (Peter Zijlstra)  [Orabug: 20739920]  
  - IPoIB: Fix ipoib_hard_header() return value (Doug Ledford)  [Orabug: 18223954]


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.262.1.el5uek]
changelog:
  - udp: fix behavior of wrong checksums (Eric Dumazet)  [Orabug: 21628851]  {CVE-2015-5364} {CVE-2015-5366} 
  - scsi: don't add scsi_device if its already visible (Subhash Jadavani)  [Orabug: 21611207]  
  - NVMe: Don't write cq doorbell on suspended queues (Keith Busch)  [Orabug: 21591104]  
  - IB/ipoib: Potential false positive with peer support for ib-crc-as-csum (Yuval Shaia)  [Orabug: 21350399]  
  - mlx4: indicate memory resource exhaustion (Ajaykumar Hotchandani)  [Orabug: 21097014]  
  - rds: return EMSGSIZE for oversize requests before processing/queueing (Mukesh Kacker)  [Orabug: 21079258]


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.263.1.el5uek]
changelog:
  - af_netlink: force credentials passing [CVE-2012-3520] (Eric Dumazet)  [Orabug: 21591166]  {CVE-2012-3520} 
  - xen/pciback: Don't print scary messages when unsupported by hypervisor. (Konrad Rzeszutek Wilk)  [Orabug: 20642069]  
  - rds_rdma: setup connection before rds_cmsg_send (Wengang Wang)  [Orabug: 20232581]  
  - megaraid_sas : Firmware crash dump feature support (Sumit.Saxena@avagotech.com)  [Orabug: 21620491]


author: Guangyu Sun <guangyu.sun@oracle.com> [2.6.39-400.264.1.el5uek]
changelog:
  - mm/hugetlb: Add locking to region_{add,change,truncate,count} when using shared files with hugepages (Mike Kravetz)  [Orabug: 21561820]


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.264.2.el5uek]
changelog:
  - xen-blkfront: introduce blkfront_gather_backend_features() (Bob Liu)  [Orabug: 21795426]  
  - chmod can cause hang in a cluster (Tariq Saeed)  [Orabug: 21496050]


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.264.4.el5uek]
changelog:
  - xen/blkfront: remove redundant flush_op (Vitaly Kuznetsov)  [Orabug: 21862750]  
  - xen/blkfront: improve protection against issuing unsupported REQ_FUA (Vitaly Kuznetsov)  [Orabug: 21862750]


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.264.6.el5uek]
changelog:
  - mlx4_core: Introduce restrictions for PD update (Ajaykumar Hotchandani)   
  - IPoIB: Drop priv->lock before calling ipoib_send() (Wengang Wang)   
  - IPoIB: serialize changing on tx_outstanding (Wengang Wang)  [Orabug: 21861366]  
  - IB/mlx4: Implement IB_QP_CREATE_USE_GFP_NOIO (Jiri Kosina)   
  - IB: Add a QP creation flag to use GFP_NOIO allocations (Or Gerlitz)   
  - IB: Return error for unsupported QP creation flags (Or Gerlitz)   
  - IB/ipoib: Calculate csum only when skb->ip_summed is CHECKSUM_PARTIAL (Yuval Shaia)  [Orabug: 20873175]


author: Chuck Anderson <chuck.anderson@oracle.com> [2.6.39-400.264.7.el5uek]
changelog:
  - KVM: svm: unconditionally intercept #DB (Paolo Bonzini)  [Orabug: 22333698]  {CVE-2015-8104} {CVE-2015-8104} 
  - KVM: x86: work around infinite loop in microcode when #AC is delivered (Eric Northup)  [Orabug: 22333689]  {CVE-2015-5307} {CVE-2015-5307}


author: Chuck Anderson <chuck.anderson@oracle.com> [2.6.39-400.264.8.el5uek]
changelog:
  - ipc/sem.c: fully initialize sem_array before making it visible (Manfred Spraul)  [Orabug: 22250044]  {CVE-2015-7613} 
  - Initialize msg/shm IPC objects before doing ipc_addid() (Linus Torvalds)  [Orabug: 22250044]  {CVE-2015-7613}


author: Chuck Anderson <chuck.anderson@oracle.com> [2.6.39-400.264.9.el5uek]
changelog:
  - msg_unlock() in wrong spot after applying "Initialize msg/shm IPC objects before doing ipc_addid()" (Chuck Anderson)  [Orabug: 22250044]  {CVE-2015-7613} {CVE-2015-7613}


author: Chuck Anderson <chuck.anderson@oracle.com> [2.6.39-400.264.11.el5uek]
changelog:
  - KVM: x86: Don't report guest userspace emulation error to userspace (Nadav Amit)  [Orabug: 22249615]  {CVE-2010-5313} {CVE-2014-7842}


author: Chuck Anderson <chuck.anderson@oracle.com> [2.6.39-400.264.12.el5uek]
changelog:
  - crypto: add missing crypto module aliases (Mathias Krause)  [Orabug: 22249656]  {CVE-2013-7421} {CVE-2014-9644} 
  - crypto: include crypto- module prefix in template (Kees Cook)  [Orabug: 22249656]  {CVE-2013-7421} {CVE-2014-9644} 
  - crypto: prefix module autoloading with "crypto-" (Kees Cook)  [Orabug: 22249656]  {CVE-2013-7421} {CVE-2014-9644}


author: Chuck Anderson <chuck.anderson@oracle.com> [2.6.39-400.264.13.el5uek]
changelog:
  - KEYS: Don't permit request_key() to construct a new keyring (David Howells)  [Orabug: 22373449]  {CVE-2015-7872}


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.267.0.el5uek]
changelog:
  - x86/xen: properly retrieve NMI reason (Jan Beulich)  [Orabug: 21892076]  
  - x86/mrst: Avoid reporting wrong nmi status (Jacob Pan)  [Orabug: 21892076]  
  - xen: Support 64-bit PV guest receiving NMIs (Konrad Rzeszutek Wilk)  [Orabug: 21892076]  
  - nfsd: fix rare symlink decoding bug (J. Bruce Fields)  [Orabug: 18405506]  
  - ocfs2: __ocfs2_mknod_locked should return error when ocfs2_create_new_inode_locks() failed (Xue jiufei)  [Orabug: 21171285]  
  - NFSv4: Get rid of unnecessary BUG_ON()s (Trond Myklebust)  [Orabug: 21744595]  
  - IPoIB: serialize changing on tx_outstanding (Wengang Wang)  [Orabug: 21861366]  
  - x86/xen: Do not clip xen_e820_map to xen_e820_map_entries when sanitizing map (Malcolm Crossley)   
  - IPoIB: Drop priv->lock before calling ipoib_send() (Wengang Wang)   
  - IB/mlx4: Use vmalloc for WR buffers when needed (Wengang Wang)  [Orabug: 22025569]  
  - mm: move kvfree to mm/util (Wengang Wang)  [Orabug: 22025569]  
  - mlx4_core: Introduce restrictions for PD update (Ajaykumar Hotchandani)   
  - mlx4: Increase SYNC_TPT command timeout (Mukesh Kacker)  [Orabug: 21692254]  
  - IB/ipoib: Calculate csum only when skb->ip_summed is CHECKSUM_PARTIAL (Yuval Shaia)  [Orabug: 20873175]  
  - virtio-net: drop NETIF_F_FRAGLIST (Jason Wang)  [Orabug: 22145599]  {CVE-2015-5156}


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.268.0.el5uek]
changelog:
  - mm/swap.c: reorganize put_compound_page() (Andrew Morton)  [Orabug: 16823432]  
  - mm/hugetlb.c: simplify PageHeadHuge() and PageHuge() (Andrew Morton)  [Orabug: 16823432]  
  - mm: document PageHuge somewhat (Andrew Morton)  [Orabug: 16823432]  
  - mm: hugetlbfs: use __compound_tail_refcounted in __get_page_tail too (Andrea Arcangeli)  [Orabug: 16823432]  
  - mm: tail page refcounting optimization for slab and hugetlbfs (Andrea Arcangeli)  [Orabug: 16823432]  
  - mm: thp: optimize compound_trans_huge (Andrea Arcangeli)  [Orabug: 16823432]  
  - mm: hugetlbfs: move the put/get_page slab and hugetlbfs optimization in a faster path (Andrea Arcangeli)  [Orabug: 16823432]  
  - mm: hugetlb: use get_page_foll() in follow_hugetlb_page() (Andrea Arcangeli)  [Orabug: 16823432]  
  - mm: hugetlbfs: fix hugetlbfs optimization (Andrea Arcangeli)  [Orabug: 16823432]  
  - mm: fix aio performance regression for database caused by THP (Khalid Aziz)  [Orabug: 16823432]  
  - mm: fix slab->page flags corruption (Pravin B Shelar)  [Orabug: 16823432]  
  - IB/mlx4: Implement IB_QP_CREATE_USE_GFP_NOIO (Jiri Kosina)   
  - IB: Add a QP creation flag to use GFP_NOIO allocations (Or Gerlitz)   
  - IB: Return error for unsupported QP creation flags (Or Gerlitz)


author: Chuck Anderson <chuck.anderson@oracle.com> [2.6.39-400.272.0.el5uek]
changelog:
  - rds: print rdma_cm_id while establishing connection (Ajaykumar Hotchandani)  [Orabug: 22315028]  
  - rdma_cm: extend debug for remote mapping (Ajaykumar Hotchandani)  [Orabug: 22315028]  
  - OFED: indicate consistent vendor error (Ajaykumar Hotchandani)  [Orabug: 22308787]  
  - mlx4_core: print device details for PORT event (Ajaykumar Hotchandani)  [Orabug: 22113813]  
  - mlx4_core: enable print for device reset (Ajaykumar Hotchandani)  [Orabug: 22308637]  
  - mlx4_core: correct fmr_reserve() (Ajaykumar Hotchandani)  [Orabug: 22137952]


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.276.1.el5uek]
changelog:
  - block: bump BLK_DEF_MAX_SECTORS to 2560 (Joe Jin)  [Orabug: 22521844]  
  - Revert "block: remove artifical max_hw_sectors cap" (Joe Jin)  [Orabug: 22521844]


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.277.1.el5uek]
changelog:
  - Fix double free iocb->private with AIO DIO (Shirley Ma)  [Orabug: 18794638]  
  - xen/xenbus: Avoid synchronous wait on XenBus stalling shutdown/restart. (Konrad Rzeszutek Wilk)  [Orabug: 18932877]  
  - Increased maximum tape device limit to 1024 in UEK2 (Ritika Srivastava)  [Orabug: 22044668]  
  - qla2xxx: don't treat initial temperature read failure as an error (Dan Duval)  [Orabug: 22098738]  
  - Revert "qla2xxx: Display mailbox failure by default." (Dan Duval)  [Orabug: 22098738]  
  - RDS: Add interface for receive MSG latency trace (Santosh Shilimkar)  [Orabug: 22630078]  
  - RDS: Add support for per socket SO_TIMESTAMP for incoming messages (Santosh Shilimkar)  [Orabug: 22630078]  
  - rds: add infrastructure to find more details for reconnect failure (Ajaykumar Hotchandani)  [Orabug: 21799394]  
  - rds: find connection drop reason (Ajaykumar Hotchandani)  [Orabug: 21799394]


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.278.1.el5uek]
changelog:
  - [SUNRPC]: avoid race between xs_reset_transport and xs_tcp_setup_socket (Wengang Wang)   
  - x86_64: expand kernel stack to 16K (Minchan Kim)  [Orabug: 20920074]  
  - qla2xxx: fix wrongly report "PCI EEH busy" when get_thermal_temp (Vaughan Cao)  [Orabug: 21108318]  
  - RDS/IB: VRPC DELAY / OSS RECONNECT CAUSES 5 MINUTE STALL ON PORT FAILURE (Venkat Venkatsubra)  [Orabug: 21465077]  
  - RDS: Fix the atomicity for congestion map update (Wengang Wang)  [Orabug: 22118109]  
  - RDS: introduce generic {clear,set}_bit_le() (Wengang Wang)  [Orabug: 22118109]  
  - cifs: allow socket to clear and app threads to set tcpStatus CifsNeedReconnect (John Sobecki)  [Orabug: 22203554]  
  - mlx4_vnic: Enable LRO for mlx4_vnic net devices. (Ashish Samant)  [Orabug: 22317936]  
  - mlx4_vnic: Add correct typecasting to pointers. (Ashish Samant)  [Orabug: 22317936]  
  - veth: don’t modify ip_summed; doing so treats packets with bad checksums as good. (Vijay Pandurangan)  [Orabug: 22804574]


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.278.2.el5uek]
changelog:
  - sctp: Prevent soft lockup when sctp_accept() is called during a timeout event (Karl Heiss)  [Orabug: 23222773]  {CVE-2015-8767}


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.278.3.el5uek]
changelog:
  - net: add validation for the socket syscall protocol argument (Hannes Frederic Sowa)  [Orabug: 23267976]  {CVE-2015-8543} {CVE-2015-8543} 
  - ipv6: addrconf: validate new MTU before applying it (Marcelo Leitner)  [Orabug: 23263251]  {CVE-2015-8215} 
  - ext4: avoid hang when mounting non-journal filesystems with orphan list (Theodore Ts'o)  [Orabug: 23262219]  {CVE-2015-7509} 
  - ext4: make orphan functions be no-op in no-journal mode (Anatol Pomozov)  [Orabug: 23262219]  {CVE-2015-7509} 
  - unix: properly account for FDs passed over unix sockets (willy tarreau)  [Orabug: 23262265]  {CVE-2013-4312} {CVE-2013-4312}


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.279.1.el5uek]
changelog:
  - IPoIB: increase send queue size to 4 times (Ajaykumar Hotchandani)  [Orabug: 22287489]  
  - IB/ipoib: Change send workqueue size for CM mode (Ajaykumar Hotchandani)  [Orabug: 22287489]  
  - Avoid 60sec timeout when receiving rtpg sense code 06/00/00 (John Sobecki)  [Orabug: 22336257]  
  - stop recursive fault in print_context_stack after stack overflow (John Sobecki)  [Orabug: 23174777]  
  - IB/security: Restrict use of the write() interface (Jason Gunthorpe)  [Orabug: 23287131]  {CVE-2016-4565} 
  - net: add validation for the socket syscall protocol argument (Hannes Frederic Sowa)  [Orabug: 23267976]  {CVE-2015-8543} {CVE-2015-8543} 
  - ipv6: addrconf: validate new MTU before applying it (Marcelo Leitner)  [Orabug: 23263251]  {CVE-2015-8215} 
  - ext4: avoid hang when mounting non-journal filesystems with orphan list (Theodore Ts'o)  [Orabug: 23262219]  {CVE-2015-7509} 
  - ext4: make orphan functions be no-op in no-journal mode (Anatol Pomozov)  [Orabug: 23262219]  {CVE-2015-7509} 
  - unix: properly account for FDs passed over unix sockets (willy tarreau)  [Orabug: 23262265]  {CVE-2013-4312} {CVE-2013-4312} 
  - sctp: Prevent soft lockup when sctp_accept() is called during a timeout event (Karl Heiss)  [Orabug: 23222773]  {CVE-2015-8767}


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.280.1.el5uek]
changelog:
  - Fix cpu bootup stall with large cpu count (Zhenzhong Duan)  [Orabug: 23481040]  
  - megaraid_sas : Update threshold based reply post host index register (Sumit.Saxena@avagotech.com)  [Orabug: 23536267]


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.283.1.el5uek]
changelog:
  - atl2: Disable unimplemented scatter/gather feature (Ben Hutchings)  [Orabug: 23703990]  {CVE-2016-2117} 
  - mlx4_core: add module parameter to disable background init (Mukesh Kacker)  [Orabug: 23292107]  
  - NFSv4: Don't decode fs_locations if we didn't ask for them... (Trond Myklebust)  [Orabug: 23633714]  
  - mm/slab: Improve performance of slabinfo stats gathering (Aruna Ramakrishna)  [Orabug: 23050884]  
  - offload ib subnet manager port and node get info query handling. (Rama Nichanamatlu)  [Orabug: 22521735]


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.284.1.el5uek]
changelog:
  - rds: schedule local connection activity in proper workqueue (Ajaykumar Hotchandani)  [Orabug: 22819661]  
  - ib_core: make wait_event uninterruptible in ib_flush_fmr_pool() (Avinash Repaka)  [Orabug: 24525022]  
  - net/mlx4: Support shutdown() interface (Ajaykumar Hotchandani)  [Orabug: 24616261]  
  - KEYS: potential uninitialized variable (Dan Carpenter)  [Orabug: 24393863]  {CVE-2016-4470}


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.284.2.el5uek]
changelog:
  - Btrfs: fix truncation of compressed and inlined extents (Divya Indi)  [Orabug: 22307286]  {CVE-2015-8374} 
  - Btrfs: fix file corruption and data loss after cloning inline extents (Divya Indi)  [Orabug: 22307286]  {CVE-2015-8374} 
  - netfilter: x_tables: make sure e->next_offset covers remaining blob size (Florian Westphal)  [Orabug: 24682073]  {CVE-2016-4997} {CVE-2016-4998} 
  - netfilter: x_tables: validate e->target_offset early (Florian Westphal)  [Orabug: 24682071]  {CVE-2016-4997} {CVE-2016-4998}


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.285.1.el5uek]
changelog:
  - netfilter: x_tables: speed up jump target validation (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134} 
  - netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIES (Pablo Neira Ayuso)  [Orabug: 24690302]  {CVE-2016-3134} 
  - netfilter: remove unused comefrom hookmask argument (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134} 
  - netfilter: x_tables: introduce and use xt_copy_counters_from_user (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134} 
  - netfilter: x_tables: do compat validation via translate_table (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134} 
  - netfilter: x_tables: xt_compat_match_from_user doesn't need a retval (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134} 
  - netfilter: ip6_tables: simplify translate_compat_table args (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134} 
  - netfilter: ip_tables: simplify translate_compat_table args (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134} 
  - netfilter: arp_tables: simplify translate_compat_table args (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134} 
  - netfilter: x_tables: don't reject valid target size on some architectures (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134} 
  - netfilter: x_tables: validate all offsets and sizes in a rule (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134} 
  - netfilter: x_tables: check for bogus target offset (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134} 
  - netfilter: x_tables: check standard target size too (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134} 
  - netfilter: x_tables: add compat version of xt_check_entry_offsets (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134} 
  - netfilter: x_tables: assert minimum target size (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134} 
  - netfilter: x_tables: kill check_entry helper (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134} 
  - netfilter: x_tables: add and use xt_check_entry_offsets (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134} 
  - netfilter: x_tables: validate targets of jumps (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134} 
  - netfilter: x_tables: fix unconditional helper (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134} 
  - netfilter: x_tables: validate targets of jumps (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134} 
  - netfilter: x_tables: don't move to non-existent next rule (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134} 
  - netfilter: x_tables: fix unconditional helper (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134} 
  - netfilter: x_tables: check for size overflow (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134} 
  - ocfs2: Fix double put of recount tree in ocfs2_lock_refcount_tree() (Ashish Samant)  [Orabug: 24587406]  
  - TTY: do not reset master's packet mode (Jiri Slaby)  [Orabug: 24569399]  
  - ocfs2: Fix start offset to ocfs2_zero_range_for_truncate() (Ashish Samant)  [Orabug: 24500401]  
  - rds: skip rx/tx work when destroying connection (Wengang Wang)  [Orabug: 24314773]  
  - Revert "IPoIB: serialize changing on tx_outstanding" (Wengang Wang)  [Orabug: 23745787]  
  - xen/events: document behaviour when scanning the start word for events (Dongli Zhang)  [Orabug: 23083945]  
  - xen/events: mask events when changing their VCPU binding (Dongli Zhang)  [Orabug: 23083945]  
  - xen/events: initialize local per-cpu mask for all possible events (Dongli Zhang)  [Orabug: 23083945]  
  - IB/mlx4: Replace kfree with kvfree in mlx4_ib_destroy_srq (Wengang Wang)  [Orabug: 22570922]  
  - NFS: Remove BUG_ON() calls from the generic writeback code (Trond Myklebust)  [Orabug: 22386565]  
  - ocfs2: return non-zero st_blocks for inline data (John Haxby)  [Orabug: 22218262]  
  - oracleasm: Classify device connectivity issues as global errors (Martin K. Petersen)  [Orabug: 21760143]  
  - Btrfs: fix truncation of compressed and inlined extents (Divya Indi)  [Orabug: 22307286]  {CVE-2015-8374} 
  - Btrfs: fix file corruption and data loss after cloning inline extents (Divya Indi)  [Orabug: 22307286]  {CVE-2015-8374} 
  - netfilter: x_tables: make sure e->next_offset covers remaining blob size (Florian Westphal)  [Orabug: 24682073]  {CVE-2016-4997} {CVE-2016-4998} 
  - netfilter: x_tables: validate e->target_offset early (Florian Westphal)  [Orabug: 24682071]  {CVE-2016-4997} {CVE-2016-4998}


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.286.2.el5uek]
changelog:
  - HID: hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (Scott Bauer)  [Orabug: 24798694]  {CVE-2016-5829}


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.287.1.el5uek]
changelog:
  - ecryptfs: forbid opening files without mmap handler (Jann Horn)  [Orabug: 24971919]  {CVE-2016-1583} 
  - RDS: IB: fix panic with handlers running post teardown (Santosh Shilimkar)  [Orabug: 24314773]  
  - ocfs2: improve recovery performance (Junxiao Bi)  [Orabug: 24589532]  
  - ocfs2: call ocfs2_journal_access_di() before  ocfs2_journal_dirty() in ocfs2_write_end_nolock() (Junxiao Bi)  [Orabug: 24606864]  
  - mm, gup: close FOLL MAP_PRIVATE race (Linus Torvalds)  [Orabug: 24928646]  {CVE-2016-5195} 
  - HID: hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (Scott Bauer)  [Orabug: 24798694]  {CVE-2016-5829}


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.288.1.el5uek]
changelog:
  - Revert "ecryptfs: forbid opening files without mmap handler" (Brian Maly)  [Orabug: 24971918]  
  - ocfs2: o2hb: fix hb hung time (Junxiao Bi)   
  - ocfs2: o2hb: don't negotiate if last hb fail (Junxiao Bi)   
  - ocfs2: o2hb: add some user/debug log (Junxiao Bi)   
  - ocfs2: o2hb: add NEGOTIATE_APPROVE message (Junxiao Bi)   
  - ocfs2: o2hb: add NEGO_TIMEOUT message (Junxiao Bi)   
  - ocfs2: o2hb: add negotiate timer (Junxiao Bi)


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.290.2.el5uek]
changelog:
  - aacraid: Check size values after double-fetch from user (Dave Carroll)  [Orabug: 25060055]  {CVE-2016-6480} {CVE-2016-6480} 
  - audit: fix a double fetch in audit_log_single_execve_arg() (Paul Moore)  [Orabug: 25059962]  {CVE-2016-6136} 
  - ecryptfs: don't allow mmap when the lower fs doesn't support it (Jeff Mahoney)  [Orabug: 24971918]  {CVE-2016-1583} {CVE-2016-1583} 
  - ALSA: timer: Fix leak in events via snd_timer_user_tinterrupt (Kangjie Lu)  [Orabug: 25059900]  {CVE-2016-4578} 
  - ALSA: timer: Fix leak in events via snd_timer_user_ccallback (Kangjie Lu)  [Orabug: 25059900]  {CVE-2016-4578} 
  - ALSA: timer: Fix leak in SNDRV_TIMER_IOCTL_PARAMS (Kangjie Lu)  [Orabug: 25059755]  {CVE-2016-4569} 
  - Bluetooth: Fix potential NULL dereference in RFCOMM bind callback (Jaganath Kanakkassery)  [Orabug: 25058905]  {CVE-2015-8956} 
  - mm: migrate dirty page without clear_page_dirty_for_io etc (Hugh Dickins)  [Orabug: 25059195]  {CVE-2016-3070}


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.291.1.el5uek]
changelog:
  - RDS: Drop the connection as part of cancel to avoid hangs (Avinash Repaka)  [Orabug: 24951873]  
  - aacraid: Check size values after double-fetch from user (Dave Carroll)  [Orabug: 25060055]  {CVE-2016-6480} {CVE-2016-6480} 
  - audit: fix a double fetch in audit_log_single_execve_arg() (Paul Moore)  [Orabug: 25059962]  {CVE-2016-6136} 
  - ecryptfs: don't allow mmap when the lower fs doesn't support it (Jeff Mahoney)  [Orabug: 24971918]  {CVE-2016-1583} {CVE-2016-1583} 
  - ALSA: timer: Fix leak in events via snd_timer_user_tinterrupt (Kangjie Lu)  [Orabug: 25059900]  {CVE-2016-4578} 
  - ALSA: timer: Fix leak in events via snd_timer_user_ccallback (Kangjie Lu)  [Orabug: 25059900]  {CVE-2016-4578} 
  - ALSA: timer: Fix leak in SNDRV_TIMER_IOCTL_PARAMS (Kangjie Lu)  [Orabug: 25059755]  {CVE-2016-4569} 
  - Bluetooth: Fix potential NULL dereference in RFCOMM bind callback (Jaganath Kanakkassery)  [Orabug: 25058905]  {CVE-2015-8956} 
  - mm: migrate dirty page without clear_page_dirty_for_io etc (Hugh Dickins)  [Orabug: 25059195]  {CVE-2016-3070}


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.292.1.el5uek]
changelog:
  - NVMe: reduce queue depth as workaround for Samsung EPIC SQ errata (Ashok Vairavan)  [Orabug: 25138146]


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.293.1.el5uek]
changelog:
  - logging errors that get masked to EIO inside drivers/block/loop.c (Manjunath Patil)  [Orabug: 21962821]  
  - sched/core: Clear the root_domain cpumasks in init_rootdomain() (Xunlei Pang)  [Orabug: 23518650]  
  - bio allocation failure due to bio_get_nr_vecs() (Darrick J. Wong)  [Orabug: 23852442]  
  - mlx4: avoid ABBA deadlock (Wengang Wang)  [Orabug: 23538548]  
  - mlx4: avoid multiple free on id_map_ent (Wengang Wang)  [Orabug: 25022815]  
  - sctp: validate chunk len before actually using it (Marcelo Ricardo Leitner)  [Orabug: 25142906]  {CVE-2016-9555}


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.293.2.el5uek]
changelog:
  - x86/iopl/64: properly context-switch IOPL on Xen PV (Andy Lutomirski)  [Orabug: 25269184]  {CVE-2016-3157} 
  - net: Fix use after free in the recvmmsg exit path (Arnaldo Carvalho de Melo)  [Orabug: 25298618]  {CVE-2016-7117}


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.294.1.el5uek]
changelog:
  - nvme: Limit command retries (Ashok Vairavan)  [Orabug: 25342947]  
  - tcp: fix use after free in tcp_xmit_retransmit_queue() (Eric Dumazet)  [Orabug: 25374376]  {CVE-2016-6828} 
  - ALSA: pcm : Call kill_fasync() in stream lock (Takashi Iwai)  [Orabug: 25231728]  {CVE-2016-9794} 
  - net: avoid signed overflows for SO_{SND|RCV}BUFFORCE (Eric Dumazet)  [Orabug: 25231758]  {CVE-2016-9793} 
  - KEYS: Fix short sprintf buffer in /proc/keys show function (David Howells)  [Orabug: 25306377]  {CVE-2016-7042} 
  - x86/iopl/64: properly context-switch IOPL on Xen PV (Andy Lutomirski)  [Orabug: 25269184]  {CVE-2016-3157} 
  - net: Fix use after free in the recvmmsg exit path (Arnaldo Carvalho de Melo)  [Orabug: 25298618]  {CVE-2016-7117}


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.294.2.el5uek]
changelog:
  - vfs: read file_handle only once in handle_to_path (Sasha Levin)  [Orabug: 25388709]  {CVE-2015-1420} 
  - crypto: algif_hash - Only export and import on sockets with data (Herbert Xu)  [Orabug: 25417807]  
  - USB: usbfs: fix potential infoleak in devio (Kangjie Lu)  [Orabug: 25462763]  {CVE-2016-4482} 
  - net: fix infoleak in llc (Kangjie Lu)  [Orabug: 25462811]  {CVE-2016-4485} 
  - af_unix: Guard against other == sk in unix_dgram_sendmsg (Rainer Weikusat)  [Orabug: 25464000]  {CVE-2013-7446} 
  - unix: avoid use-after-free in ep_remove_wait_queue (Rainer Weikusat)  [Orabug: 25464000]  {CVE-2013-7446}


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.294.3.el5uek]
changelog:
  - dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Andrey Konovalov)  [Orabug: 25598277]  {CVE-2017-6074}


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.294.4.el5uek]
changelog:
  - tty: n_hdlc: get rid of racy n_hdlc.tbuf (Alexander Popov)  [Orabug: 25696689]  {CVE-2017-2636} 
  - TTY: n_hdlc, fix lockdep false positive (Jiri Slaby)  [Orabug: 25696689]  {CVE-2017-2636} 
  - drivers/tty/n_hdlc.c: replace kmalloc/memset by kzalloc (Fabian Frederick)  [Orabug: 25696689]  {CVE-2017-2636} 
  - list: introduce list_first_entry_or_null (Jiri Pirko)  [Orabug: 25696689]  {CVE-2017-2636} 
  - firewire: net: guard against rx buffer overflows (Stefan Richter)  [Orabug: 25451538]  {CVE-2016-8633} 
  - x86/mm/32: Enable full randomization on i386 and X86_32 (Hector Marco-Gisbert)  [Orabug: 25463929]  {CVE-2016-3672} 
  - x86 get_unmapped_area: Access mmap_legacy_base through mm_struct member (Radu Caragea)  [Orabug: 25463929]  {CVE-2016-3672} 
  - sg_start_req(): make sure that there's not too many elements in iovec (Al Viro)  [Orabug: 25490377]  {CVE-2015-5707} 
  - tcp: take care of truncations done by sk_filter() (Eric Dumazet)  [Orabug: 25507232]  {CVE-2016-8645} 
  - rose: limit sk_filter trim to payload (Willem de Bruijn)  [Orabug: 25507232]  {CVE-2016-8645} 
  - scsi: arcmsr: Buffer overflow in arcmsr_iop_message_xfer() (Dan Carpenter)  [Orabug: 25507330]  {CVE-2016-7425} 
  - x86: bpf_jit: fix compilation of large bpf programs (Alexei Starovoitov)  [Orabug: 25507375]  {CVE-2015-4700} 
  - net: fix a kernel infoleak in x25 module (Kangjie Lu)  [Orabug: 25512417]  {CVE-2016-4580} 
  - USB: digi_acceleport: do sanity checking for the number of ports (Oliver Neukum)  [Orabug: 25512472]  {CVE-2016-3140} 
  - net/llc: avoid BUG_ON() in skb_orphan() (Eric Dumazet)  [Orabug: 25682437]  {CVE-2017-6345}


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.294.5.el5uek]
changelog:
  - net: ping: check minimum size on ICMP header length (Kees Cook)  [Orabug: 25766914]  {CVE-2016-8399} 
  - ipv6: stop sending PTB packets for MTU < 1280 (Hagen Paul Pfeifer)  [Orabug: 25765786]  {CVE-2016-10142} 
  - sg_write()/bsg_write() is not fit to be called under KERNEL_DS (Al Viro)  [Orabug: 25765448]  {CVE-2016-10088} 
  - scsi: sg: check length passed to SG_NEXT_CMD_LEN (peter chang)  [Orabug: 25752011]  {CVE-2017-7187}


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.294.6.el5uek]
changelog:
  - RHEL: complement upstream workaround for CVE-2016-10142. (Quentin Casasnovas)  [Orabug: 25765786]  {CVE-2016-10142} {CVE-2016-10142}


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.294.7.el5uek]
changelog:
  - udp: properly support MSG_PEEK with truncated buffers (Eric Dumazet)  [Orabug: 25874741]  {CVE-2016-10229} 
  - block: fix use-after-free in seq file (Vegard Nossum)  [Orabug: 25877531]  {CVE-2016-7910}


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.295.1.el5uek]
changelog:
  - ocfs2/o2net: o2net_listen_data_ready should do nothing if socket state is not TCP_LISTEN (Tariq Saeed)  [Orabug: 25510857]  
  - IB/CORE: sync the resouce access in fmr_pool (Wengang Wang)  [Orabug: 23750748]  
  - ipv6: Skip XFRM lookup if dst_entry in socket cache is valid (Jakub Sitnicki)  [Orabug: 25534688]  
  - uek-rpm: enable CONFIG_KSPLICE. (Jamie Iles)  [Orabug: 25549845]  
  - ksplice: add sysctls for determining Ksplice features. (Jamie Iles)  [Orabug: 25549845]  
  - signal: protect SIGNAL_UNKILLABLE from unintentional clearing. (Jamie Iles)  [Orabug: 25549845]  
  - KVM: x86: fix emulation of "MOV SS, null selector" (Paolo Bonzini)  [Orabug: 25719676]  {CVE-2017-2583} {CVE-2017-2583} 
  - sctp: avoid BUG_ON on sctp_wait_for_sndbuf (Marcelo Ricardo Leitner)  [Orabug: 25719811]  {CVE-2017-5986} 
  - tcp: avoid infinite loop in tcp_splice_read() (Eric Dumazet)  [Orabug: 25720815]  {CVE-2017-6214} 
  - USB: visor: fix null-deref at probe (Johan Hovold)  [Orabug: 25796604]  {CVE-2016-2782} 
  - ipc/shm: Fix shmat mmap nil-page protection (Davidlohr Bueso)  [Orabug: 25797014]  {CVE-2017-5669} 
  - vhost: actually track log eventfd file (Marc-André Lureau)  [Orabug: 25797056]  {CVE-2015-6252} 
  - xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Andy Whitcroft)  [Orabug: 25814664]  {CVE-2017-7184} 
  - xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Andy Whitcroft)  [Orabug: 25814664]  {CVE-2017-7184} 
  - KEYS: Remove key_type::match in favour of overriding default by match_preparse (David Howells)  [Orabug: 25823965]  {CVE-2017-2647} {CVE-2017-2647} 
  - USB: whiteheat: fix potential null-deref at probe (Johan Hovold)  [Orabug: 25825107]  {CVE-2015-5257} 
  - RDS: fix race condition when sending a message on unbound socket (Quentin Casasnovas)  [Orabug: 25871048]  {CVE-2015-6937} {CVE-2015-6937} 
  - udf: Check path length when reading symlink (Jan Kara)  [Orabug: 25871104]  {CVE-2015-9731} 
  - udf: Treat symlink component of type 2 as / (Jan Kara)  [Orabug: 25871104]  {CVE-2015-9731} 
  - udp: properly support MSG_PEEK with truncated buffers (Eric Dumazet)  [Orabug: 25874741]  {CVE-2016-10229} 
  - block: fix use-after-free in seq file (Vegard Nossum)  [Orabug: 25877531]  {CVE-2016-7910} 
  - RHEL: complement upstream workaround for CVE-2016-10142. (Quentin Casasnovas)  [Orabug: 25765786]  {CVE-2016-10142} {CVE-2016-10142} 
  - net: ping: check minimum size on ICMP header length (Kees Cook)  [Orabug: 25766914]  {CVE-2016-8399} 
  - ipv6: stop sending PTB packets for MTU < 1280 (Hagen Paul Pfeifer)  [Orabug: 25765786]  {CVE-2016-10142} 
  - sg_write()/bsg_write() is not fit to be called under KERNEL_DS (Al Viro)  [Orabug: 25765448]  {CVE-2016-10088} 
  - scsi: sg: check length passed to SG_NEXT_CMD_LEN (peter chang)  [Orabug: 25752011]  {CVE-2017-7187} 
  - tty: n_hdlc: get rid of racy n_hdlc.tbuf (Alexander Popov)  [Orabug: 25696689]  {CVE-2017-2636} 
  - TTY: n_hdlc, fix lockdep false positive (Jiri Slaby)  [Orabug: 25696689]  {CVE-2017-2636} 
  - drivers/tty/n_hdlc.c: replace kmalloc/memset by kzalloc (Fabian Frederick)  [Orabug: 25696689]  {CVE-2017-2636} 
  - list: introduce list_first_entry_or_null (Jiri Pirko)  [Orabug: 25696689]  {CVE-2017-2636} 
  - firewire: net: guard against rx buffer overflows (Stefan Richter)  [Orabug: 25451538]  {CVE-2016-8633} 
  - x86/mm/32: Enable full randomization on i386 and X86_32 (Hector Marco-Gisbert)  [Orabug: 25463929]  {CVE-2016-3672} 
  - x86 get_unmapped_area: Access mmap_legacy_base through mm_struct member (Radu Caragea)  [Orabug: 25463929]  {CVE-2016-3672} 
  - sg_start_req(): make sure that there's not too many elements in iovec (Al Viro)  [Orabug: 25490377]  {CVE-2015-5707} 
  - tcp: take care of truncations done by sk_filter() (Eric Dumazet)  [Orabug: 25507232]  {CVE-2016-8645} 
  - rose: limit sk_filter trim to payload (Willem de Bruijn)  [Orabug: 25507232]  {CVE-2016-8645} 
  - scsi: arcmsr: Buffer overflow in arcmsr_iop_message_xfer() (Dan Carpenter)  [Orabug: 25507330]  {CVE-2016-7425} 
  - x86: bpf_jit: fix compilation of large bpf programs (Alexei Starovoitov)  [Orabug: 25507375]  {CVE-2015-4700} 
  - net: fix a kernel infoleak in x25 module (Kangjie Lu)  [Orabug: 25512417]  {CVE-2016-4580} 
  - USB: digi_acceleport: do sanity checking for the number of ports (Oliver Neukum)  [Orabug: 25512472]  {CVE-2016-3140} 
  - net/llc: avoid BUG_ON() in skb_orphan() (Eric Dumazet)  [Orabug: 25682437]  {CVE-2017-6345} 
  - dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Andrey Konovalov)  [Orabug: 25598277]  {CVE-2017-6074} 
  - vfs: read file_handle only once in handle_to_path (Sasha Levin)  [Orabug: 25388709]  {CVE-2015-1420} 
  - crypto: algif_hash - Only export and import on sockets with data (Herbert Xu)  [Orabug: 25417807]  
  - USB: usbfs: fix potential infoleak in devio (Kangjie Lu)  [Orabug: 25462763]  {CVE-2016-4482} 
  - net: fix infoleak in llc (Kangjie Lu)  [Orabug: 25462811]  {CVE-2016-4485} 
  - af_unix: Guard against other == sk in unix_dgram_sendmsg (Rainer Weikusat)  [Orabug: 25464000]  {CVE-2013-7446} 
  - unix: avoid use-after-free in ep_remove_wait_queue (Rainer Weikusat)  [Orabug: 25464000]  {CVE-2013-7446}


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.295.2.el5uek]
changelog:
  - nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields)  [Orabug: 25986995]  {CVE-2017-7895}


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.296.1.el5uek]
changelog:
  - cifs: adjust sequence number downward after signing NT_CANCEL request (Albert Barbe)   
  - nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields)  [Orabug: 25986995]  {CVE-2017-7895}


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.297.1.el5uek]
changelog:
  - nvme: Handle PM1725 HIL reset (Martin K. Petersen)  [Orabug: 26277602]  
  - dccp/tcp: do not inherit mc_list from parent (Eric Dumazet)  [Orabug: 26108573]  {CVE-2017-8890}


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.297.2.el5uek]
changelog:
  - dm mpath: allow ioctls to trigger pg init (Mikulas Patocka)  [Orabug: 25645229]  
  - xen/manage: Always freeze/thaw processes when suspend/resuming (Ross Lagerwall)  [Orabug: 25795530]  
  - lpfc cannot establish connection with targets that send PRLI under P2P mode (Joe Jin)  [Orabug: 25955028]


author: Brian Maly <brian.maly@oracle.com> [2.6.39-400.297.3.el5uek]
changelog:
  - nfsd: check for oversized NFSv2/v3 arguments (J. Bruce Fields)  [Orabug: 26366024]  {CVE-2017-7645}


author: Neil Horman <nhorman@redhat.com> - 1.101-156.el5
changelog:
  - Fixing ppc64 memory range sizing (bz 220626)
  - Adding doc content to prevent use of vfat/msdos fs as dump targets


author: Jarod Wilson <jwilson@redhat.com> - 1.101-164.el5
changelog:
  - Touch kdump.conf when kernel-kdump is installed to trigger
    proper kdump initrd creation on ppc64 (bz 217908)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-10
changelog:
  - rename krb5.sh and krb5.csh so that they don't overlap (#210623)
  - way-late application of added error info in kadmind.init (#65853)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-11
changelog:
  - update backport of the preauth module interface
  - add proposed patches 4566, 4567
  - add proposed edata reporting interface for KDC
  - add temporary placeholder for module global context fixes


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-14
changelog:
  - apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456)
  - apply fixes from Tom Yu for MITKRB5-SA-2006-003 (CVE-2006-6144) (#218456)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-19
changelog:
  - refrain from killing any lingering members of our child's process group when
    logging that the child process has exited (Jose Plans, #143289)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-20
changelog:
  - temporarily back out %post changes, fix for #143289 for security update
  - add preliminary patch to correct unauthorized access via krb5-aware telnet
    daemon (#229782, CVE-2007-0956)


author: Nalin Dahyabhai <nalin@redhat.com> 1.5-21
changelog:
  - add preliminary patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add preliminary patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> 1.5-25
changelog:
  - add patch to fix buffer overflow and double-free in rpc library (#239073,
    CVE-2007-2442/CVE-2007-2443)


author: Nalin Dahyabhai <nalin@redhat.com> 1.5-28
changelog:
  - add preliminary patch to fix buffer overflow in rpcsec_gss implementation
    in libgssrpc (#250973, CVE-2007-3999) and write through uninitialized
    pointer in kadmind (#250976, CVE-2007-4000)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-10
changelog:
  - add a patch to allow applications to try to use a key with kvno=0, if
    found, in place of the "right" version for a request (Luke Howard, #230379)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-11
changelog:
  - login: change to the user's home directory after dropping privileges,
    not before (#248050)
  - turn off the ldap features


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-14
changelog:
  - make krb5-workstation depend on the PAM configuration file used by login.krb5
  - fix omission of kadmin log file when labeling (#253558)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-17
changelog:
  - ftpd: also do PAM session and credential management when ftp clients use
    strong authentication (#286291)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix storage of delegated krb5 credentials when they've been wrapped up in
    spnego (#436460)
  - return a delegated credential handle even if the application didn't pass a
    location to store the flags which would be used to indicate that credentials
    were delegated (#436465)
  - add patch to fall back to TCP kpasswd servers for kdc-unreachable,
    can't-resolve-server, and response-too-big errors (#436467)
  - use the right sequence numbers when generating password-set/change requests
    for kpasswd servers after the first one (#436468)
  - backport from 1.6.3 to initialize a library-allocated get_init_creds_opt
    structure the same way we would one which was allocated by the calling
    application, to restore kinit's traditional behavior of doing a password
    change right when it detects an expired password (#436470)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-17.el5_1.1
changelog:
  - add preliminary patch to fix use of uninitialized pointer / double-free in
    KDC (CVE-2008-0062,CVE-2008-0063) (#432620, #432621)
  - add backported patch to fix use-after-free in libgssapi_krb5 (CVE-2007-5901)
    (#415321)
  - add backported patch to fix double-free in libgssapi_krb5 (CVE-2007-5971)
    (#415351)
  - add preliminary patch to fix incorrect handling of high-numbered descriptors
    in the RPC library (CVE-2008-0947) (#433596)


author: Bill Nottingham <notting@redhat.com> - 1.2.57.1.5-1
changelog:
  - fix network matching some. Theoretically fixes #212837
  - more SUBCHANNELS related fixing (#204803)


author: Bill Nottingham <notting@redhat.com> - 1.2.57.1.6-1
changelog:
  - don't actively write configurations on s390, as any new devices already have configs (#204803, continued)
  - correctly ignore backup network device configs


author: Bill Nottingham <notting@redhat.com> - 1.2.57.1.9-1
changelog:
  - fix crash on powermac (#216173)
  - fix network configuration for devices that have firmware (#214235)


author: Bill Nottingham <notting@redhat.com> - 1.2.57.1.12-1
changelog:
  - treat qla4xxx devices as HBAs, even if their PCI class is network (#216881)
  - sync translation (#216600)
  - don't leak fds in scsi probe (#214878, #217742)
  - fix segfault (#217818, #217823)


author: Jason Vas Dias<jvdias@redhat.com> - 2:7.1.2-1.fc6
changelog:
  - Upgrade to upstream version 7.1.2
  - fix bug 191433 - Split into -libs and -devel packages
    ( apply .spec file patch from Orion Poplawski <orion@cora.nwra.com> )
  - fix bug 194747 - fix BuildRequires for mock


author: Doug Ledford <dledford@redhat.com> - 2:7.1.2-4.fc6
changelog:
  - Remove Apple Public Source License licensed files from the tarball (they
    aren't used anyway since we aren't the Darwin OS, but the license language
    is problematic for people distributing the files regardless) (bz205998)
  - Fix up file conflicts for lam_build_info.h and lam_config.h (bz205218)


author: Doug Ledford <dledford@redhat.com> - 2:7.1.2-6.fc6
changelog:
  - Fix alternatives setup of mpi.conf in /etc/ld.so.conf.d so we find both
    sets of libs on multilib arches


author: Tom "spot" Callaway <tcallawa@redhat.com> 3.0-32
changelog:
  - move to latest upstream 3.0 tarballs
  - add 8 missing BLAS functions from upstream blas tarball (bz 143340)


author: Jindrich Novy <jnovy@redhat.com> 394-2
changelog:
  - apply better fix for #120916 from Avi Kivity (#177819)
    to avoid flickering when '>' is pressed multiple times


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libFS to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libFS to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-3
changelog:
  - Added "Requires: xorg-x11-proto-devel" to devel package.
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libICE to version 0.99.1 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libICE to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "Requires: xorg-x11-proto-devel"
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libSM to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193421)
  - Replace "makeinstall" with "make install DESTDIR=..."


author: Mike A. Harris <mharris@redhat.com> 1.0.3-2.fc6
changelog:
  - Added libX11-nls-indic-locales-bug185376.patch to add support for various
    indic locales which have now been committed upstream (#185376)


author: Adam Jackson <ajax@redhat.com> 1.0.3-8.el5
changelog:
  - libX11-GB18030.patch: Fix the previous patch to unbreak input for non-UTF8
    locales (BIG5, etc.) (#220040)


author: Mike A. Harris <mharris@redhat.com> 1.0.3-1.fc6
changelog:
  - Updated libX11 to version 1.0.3
  - Remove libX11-1.0.1-setuid.diff as it is included in the 1.0.3 release.
  - Added 'dist' tag to "Release:"


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXScrnSaver to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193424)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-3
changelog:
  - Update build dep to "xorg-x11-proto-devel >= 7.0-9" for scrnsaverproto 1.1
  - Added "Requires: xorg-x11-proto-devel >= 7.0-9" to devel package, to match
    what is listed as required in xscrnsaver.pc


author: Mike A. Harris <mharris@redhat.com> 0.99.1-2
changelog:
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXTrap to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-3
changelog:
  - Added "Requires: xorg-x11-proto-devel" for xtrap.pc
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXau to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193422)
  - Replace "makeinstall" with "make install DESTDIR=..." to fix (#192718)


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Remove package ownership of mandir/libdir/etc.
  - Added "BuildRequires: xorg-x11-proto-devel" needed by xau.pc


author: Mike A. Harris <mharris@redhat.com> 1.0.2-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193423)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Added "BuildRequires: libXt-devel" for (#190169)


author: Mike A. Harris <mharris@redhat.com> 0.3-5
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Added "Requires: xorg-x11-proto-devel >= 7.0-10, libXfixes-devel to devel
    subpackage needed by xcomposite.pc
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.1.5.1-1
changelog:
  - Updated libXcursor to version 1.1.5.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.
  - Added default index.theme file to set BlueCurve as the default cursor theme
    to fix bug (#175532).


author: Mike A. Harris <mharris@redhat.com> 1.1.6-2
changelog:
  - Added "BuildRequires: xorg-x11-proto-devel"
  - Added "Requires: xorg-x11-proto-devel" to devel package, needed by xcursor.pc
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.0.2-1
changelog:
  - Updated libXdamage to version 1.0.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 1.0.2.1-1
changelog:
  - Updated libXdamage to version 1.0.2.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.3-2
changelog:
  - Added "BuildRequires: xorg-x11-proto-devel >= 7.0-1" as xcursor.pc indicates
    "damageproto >= 1.0" is required.
  - Added "Requires: xorg-x11-proto-devel >= 7.0-1, libXfixes-devel" to devel
    package also, as per xcursor.pc
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXdmcp to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: xorg-x11-proto-devel"
  - Added "Requires: xorg-x11-proto-devel" to devel package, needed by xdmcp.pc
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXevie to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Added "Requires: xorg-x11-proto-devel" to devel package, needed by xevie.pc
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXext to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-3
changelog:
  - Added "Requires: xorg-x11-proto-devel >= 7.0-1" to devel package (#173713)
  - Added "libX11-devel" to devel package (#176078)


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 3.0.1-1
changelog:
  - Updated libXfixes to version 3.0.1 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 3.0.1.1-1
changelog:
  - Updated libXfixes to version 3.0.1.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 4.0.1-2
changelog:
  - Added "BuildRequires: xorg-x11-proto-devel >= 7.0-7" for "fixesproto >= 4.0"
  - Added "Requires: xorg-x11-proto-devel >= 7.0-7" for "fixesproto >= 4.0"
    to devel package, needed by xfixes.pc
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.1-3
changelog:
  - Added "BuildRequires: libXau-devel", as twm fails without it, but does not
    check for it with ./configure.  Bug (fdo#5065)


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXfontcache to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.
  - Added new manpages to file manifest.


author: Mike A. Harris <mharris@redhat.com> 1.0.2-2
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..." for (#192720)
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 2.1.8.1-1
changelog:
  - Updated libXft to version 2.1.8.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.
  - Added "Requires: libXrender-devel" to -devel subpackage for (#175465)


author: Mike A. Harris <mharris@redhat.com> 2.1.10
changelog:
  - Updated libXft to version 2.1.10
  - Specify freetype dependencies as >= 2.1.9-1
  - Futureproof builds by adding release number to fontconfig dependencies.


author: Mike A. Harris <mharris@redhat.com> 0.99.1-3
changelog:
  - Added "BuildRequires: libXau-devel", as build fails without it, but does
    not check for it with ./configure.  Bug (fdo#5065)


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXi to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..." for (#192721)
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Added "Requires: xorg-x11-proto-devel" to devel package for xi.pc
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXinerama to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Added "Requires: xorg-x11-proto-devel" to devel for xinerama.pc
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.0.2-2
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Added "Requires: xorg-x11-proto-devel, libX11-devel, libXt-devel" to devel
    subpackage needed by xmu.pc, xmuu.pc
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-4
changelog:
  - Renamed libXp_deprecated rpm macro to "with_devel" to avoid confusion.  This
    library is still deprecated, we just decided to remove the word "deprecated"
    from the package name for library naming consistency.


author: Soren Sandmann <sandmann@redhat.com> - 1.0.0-5
changelog:
  - Moved Print.h, Printstr.h and printproto.pc into the devel package here
    (they used to be in xorg-x11-proto-devel).


author: Soren Sandmann <sandmann@redhat.com> - 1.0.0-6
changelog:
  - Add patch to not check for printproto.pc. (Since it's part of this
    package now, it isn't installed at the time libXp is configured).


author: Soren Sandmann <sandmann@redhat.com> - 1.0.0-6
changelog:
  - Add the proto files directly instead of attempting to build a separate
    tarball. Also remove last traces of printproto-1.0.3.tar.gz


author: Mike A. Harris <mharris@redhat.com> 3.5.4-1
changelog:
  - Updated libXpm to version 3.5.4 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 3.5.4.1-1
changelog:
  - Updated libXpm to version 3.5.4.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.
  - Added "Requires: libX11-devel" to devel subpackage as xpm.h includes various
    X headers. (#174163)
  - Added missing build dep libXau-devel


author: Mike A. Harris <mharris@redhat.com> 3.5.5-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193427)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.1.0.1-1
changelog:
  - Updated libXrandr to version 1.1.0.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.1.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193428)
  - Replace "makeinstall" with "make install DESTDIR=..." for (#192724)
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.9.0.1-1
changelog:
  - Updated libXrender to version 0.9.0.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 0.9.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193429)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXres to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193502)
  - Replace "makeinstall" with "make install DESTDIR=..." for (#192725)
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193503)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Adam Jackson <ajackson@redhat.com> 1.0.2-2
changelog:
  - Added libXt-1.0.2-libsm-fix.patch to remove libSM from the Requires: line
    in the installed pkgconfig file.  Apps should link against libSM if they
    need it, but we shouldn't force them to link against it if they don't.


author: Mike A. Harris <mharris@redhat.com> 1.0.2-3.fc6
changelog:
  - Add the {_datadir}/X11/app-defaults directory to the file manifest, as
    libXt is the canonical owner of the directory.  Discovered in (#198025).


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXtst to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXtst to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193504)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXv to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "Requires: libXext-devel" to libXv-devel subpackage, to avoid all
    packages that depend on libXv-devel from having to manually specify that
    dependency themselves, as it is required by Xv.  (#192167)


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Added "BuildRequires: pkgconfig" for (#193505)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXvMC to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.2-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193506)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Touch XvMCConfig during install phase, and add to file manifest as a ghost
    file, so that it is owned by the package if the user creates it. (#192254)


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXxf86dga to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193507)
  - Replace "makeinstall" with "make install DESTDIR=..." for (#192728)


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXxf86misc to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193508)
  - Replace "makeinstall" with "make install DESTDIR=..." for (#192729)
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXxf86vm to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193509)
  - Use "make install DESTDIR=..." instead of makeinstall macro, to fix (#192731)


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.103-4
changelog:
  - Build the library twice.  Once with the old SONAME and once with the new
    one.  This fixes the wrong SONAME problem by keeping a library around with
    the wrong name (libaio.so.1.0.0) and generating a new one (libaio.so.1.0.1).


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.106-2
changelog:
  - Update to the latest sources, which contain the following change:
    Add a .proc directive for the ia64_aio_raw_syscall macro.  This sounds a lot
    like the previous entry, but that one fixed the __ia64_raw_syscall macro,
    located in syscall-ia64.h.  This macro is in raw_syscall.c, which pretty much
    only exists for ia64.  This bug prevented the package from building with
    newer version of gcc.


author: Florian La Roche <laroche@redhat.com>
changelog:
  - make sure librom1394 is linked to libraw1394 and also
    libavc1394 is linked to librom1394 (also bz 156938)


author: Nalin Dahyabhai <nalin@redhat.com> 2002e-17
changelog:
  - account for the /usr/share/ssl -> /etc/pki/tls move in the patch which
    sets the locations at compile-time (more of #165967)


author: Jonathan Kamens <jik@kamens.brookline.ma.us> 2004g-1
changelog:
  - Upstream version 2004g (#176974)
  - Remove obsolete doc file "WARNING"
  - Remove security patch included in new upstream version
  - Custom flock code no longer necessary; included in upstream


author: Karsten Hopp <karsten@redhat.de> 1.10-24
changelog:
  - added development manpages
  - as there are no manpages for the executables available, added at least
    a FAQ (#172324)


author: Caius Chance <cchance@redhat.com> - 0.3.0-8.el5
changelog:
  - Resolves: rhbz#219431 (Up arrow button in candidate window doesn't work.)
  - Resolves: rhbz#220290 (Candidate list (symbol) page change inaccuracy.)
  - Resolves: rhbz#218565 (Candidate list not cleared before re-display.)
    <<< rhbz#220288 is replaced by rhbz#218565.


author: Doug Ledford <dledford@redhat.com> - 1.1.2-2
changelog:
  - Obsolete the old -devel package (which really was just a static
    lib, no real devel environment, hence the name change to -static)
  - Resolves: bz432769


author: Doug Ledford <dledford@redhat.com> - 1.1.4-1
changelog:
  - Update to 1.1.4 to match OFED 1.3
  - Add a modprobe conf file in /etc/modprobe.d so that the iw_cxgb3 module
    will always be loaded after the cxgb3 net module
  - Related: bz428197


author: Tom Lane <tgl@redhat.com> 0.7.2-1
changelog:
  - Import new libdbi version, splitting libdbi-drivers into a separate SRPM
    so we can track new upstream packaging.


author: David Cantrell <dcantrell@redhat.com> - 1.9-1
changelog:
  - Added IP_STRLEN() macro to ip_addr.h
  - In pumpSetupInterface(), removed return_ok, make close/free calls as
    needed
  - Close and free nic stuff in the right order in pumpSetupInterface()
  - Removed unnecessary relinquish_timeout() calls in pumpSetupInterface()


author: David Cantrell <dcantrell@redhat.com> - 1.10-1
changelog:
  - Make the README file a little more readable
  - Set char pointers to NULL after free() in dhcpv4_control_free()
  - In dhcp4_nic_callback(), set state string for DHC_TIMEDOUT
  - In dhcp6_nic_callback(), set state string for DHC_TIMEDOUT
  - Don't free null pointers in dhcp_nic_va()


author: David Cantrell <dcantrell@redhat.com> - 1.13-1
changelog:
  - Use NULL for pointer initialization rather than 0
  - Code readability cleanups
  - Do not generate Doxygen docs or examples subdir for each build, which
    corrects the multilib RPM conflicts (#210574).


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libdmx to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.2-3
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Added "Requires: xorg-x11-proto-devel" to devel for dmx.pc
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 2.0-1
changelog:
  - Updated libdrm to version 2.0 from dri.sf.net.  This is an ABI incompatible
    release, meaning everything linked to it needs to be recompiled.


author: Mike A. Harris <mharris@redhat.com> 2.0-2
changelog:
  - Replaced the temporary tongue-in-cheek humourous package summary and
    description with the proper package descriptions, as many people didn't get
    the joke, while others felt it was getting old.  Ah well, I had my fun for
    a while anyway.  ;o)


author: Mike A. Harris <mharris@redhat.com> 2.0.1-4
changelog:
  - Added "Exclusivearch: ix86, x86_64, ia64, ppc, alpha, sparc, sparc64" to
    restrict build to DRI-enabled architectures.


author: Matthias Saou <http://freshrpms.net/> 0.104-1
changelog:
  - Update to 0.104 at last (#147311)
  - Include no-exec-stack, pic-fix, amd64reloc and gtk2 patches from Gentoo
    and PLD (merge gcc4 fix to the pic-fix patch).
  - Now build against gtk2 (thanks to the patch above).
  - Exclude static library.


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libfontenc to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-1
changelog:
  - Updated libfontenc to version 1.0.0 from X11R7 RC4
  - Added libfontenc-1.0.0-get-fontdir-from-pkgconfig.patch which now replaces
    libfontenc-0.99.2-use-datadir-for-encodings.patch by using pkgconfig to
    query fontutil.pc for fontdir.
  - Added "BuildRequires: font-utils >= 1.0.0" to find fontutil.pc
  - Removed libfontenc-0.99.2-use-datadir-for-encodings.patch


author: Mike A. Harris <mharris@redhat.com> 1.0.2-2
changelog:
  - Remove package ownership of mandir/libdir/etc.
  - Added "BuildRequires: autoconf" temporarily as long as autoconf is needed


author: Stepan Kasal <skasal@redhat.com> - 2.12.3-2
changelog:
  - Move the pkgconfig file to the devel package.
  - BuildRequire docbook-utils and java-1.4.2-gcj-compat-devel
  - BuildReq gtk2-devel (a temporary workaround).


author: Stepan Kasal <skasal@redhat.com> - 2.12.4-1
changelog:
  - New upstream version.
  - Use the %{?dist} tag.
  - Use `make %{?_smp_mflags}'.
  - The -devel subpackage now requires several -devel packages.
  - Update requires and buildrequires.
  - Remove macros c_pkg_prefix and java_pkg_prefix and the code for optional
    instalation under /opt/frysk prefix.


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-2
changelog:
  - remove file conflicts in libgcrypt-config by making the 64-bit version
    think the libraries are in /usr/lib (which is wrong, but which it also
    prunes from the suggest --libs output, so no harm done, hopefully)


author: Stepan Kasal <skasal@redhat.com> - 2.12.5-1
changelog:
  - New upstream version.
  - Use the %{?dist} tag.
  - Use `make %{?_smp_mflags}'.
  - Move pkgconfig description to -devel subpackage.
  - The -devel subpackage now requires several -devel packages.
  - Update requires and buildrequires.


author: Mike A. Harris <mharris@redhat.com> 2.15.1-3.fc6
changelog:
  - Update utempter dependency and rebuild to ensure new libutempter is used.
  - Change BuildRoot to comply with Fedora packaging guidelines.
  - Change legacy style PreReqs to Requires({pre,post,postun}) style and update


author: Ben Konrath <bkonrath@redhat.com> - 2.12.2-1
changelog:
  - Add -X to src zip and ensure Config.java has the same mod time across
    platforms - needed for multilib.


author: Kristian Høgsberg <krh@redhat.com> 2.12.1-4
changelog:
  - Spec file clean-ups from from Matthias Saou (#172923):
    - Explicitly disable rpath.
    - Exclude static modules from the main package.
    - Exclude static libraries from the devel package (useless).
    - Don't own entire /usr/share/gtk-doc.
    - Remove explicit pre/post /sbin/ldconfig deps (they're automatic with -p).
    - Change PreReqs to more correct Requires.
    - Fix devel summary.
    - Add _smp_mflags to build.


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-3
changelog:
  - give gpg-error-config libdir=@exec_prefix@/lib instead of @libdir@, so that
    it agrees on 32- and 64-bit arches (it suppresses the -L argument if @libdir@
    is /usr/lib, so this should be cleaner than adding a non-standard .pc file
    which upstream developers might inadvertently think they can depend to be on
    every system which provides this library)


author: Stepan Kasal <skasal@redhat.com> - 2.8.6-4
changelog:
  - Fix the source packing: preserve source timestamps and prevent multilib
    conflicts. (#192709)
  - Add BuildRequires: antlr, at least temporarily.


author: Stepan Kasal <skasal@redhat.com> - 2.8.7-1
changelog:
  - Fix multilib conflicts in %{docdir}. (#210566)
  - New upstream version, contains only doc changes.
  - Move development documentation to -devel.


author: Andrew Cagney <cagney@redhat.com> - 2.8.7-2
changelog:
  - Fix Drawwable.c so that regions are eventually free'd using
    gdk_region_destroy, and not g_free. (#210680)


author: Stepan Kasal <skasal@redhat.com> - 2.8.7-3
changelog:
  - Add libgtk-java-no-libdir.patch and do not pack doc/api to resolve
    multilib problems.
  - Resolves: #222726.


author: Doug Ledford <dledford@redhat.com>
changelog:
  - Initial import to RHEL-4 based upon Roland Drier's FC-4 package
  - Add /usr/lib/infiniband as an rpm owned directory and add a
    config entry to /etc/ld.so.conf.d


author: Srinivas Maturi <srinivas.maturi@oracle.com> - 1.1.1-10
changelog:
  - Update tarball from OFED-1.3.1 (20080603)
  - Remove patch libibverbs-madvise.patch, as its in OFED-1.3.1 tarball


author: Doug Ledford <dledford@redhat.com>
changelog:
  - Initial import to RHEL-4 based upon Roland Drier's FC-4 package
  - Add /usr/lib64/infiniband as an rpm owned directory and add a
    config entry to /etc/ld.so.conf.d


author: Doug Ledford <dledford@redhat.com> - 1.1-10
changelog:
  - Update to the OFED 1.3 version of libipathverbs-1.1.tar.gz (there is a 300k
    size difference between the libipathverbs-1.1.tar.gz in the OFED release
    and the file by the same name at openfabrics.org/downloads/...which is
    just insane, they should have different release numbers, but they don't,
    so for anyone to duplicate what I have here, you will need to get the
    libipathverbs-1.1.tar.gz file out of the libipathverbs-1.1-1.ofed1.3 src
    rpm out of the OFED-1.3.tar.gz download at the openfabrics site)
  - Related: bz428197


author: Doug Ledford <dledford@redhat.com> - 1.0-3
changelog:
  - Add a modprobe conf file so that the mlx4 IB driver will get loaded after
    the core driver is loaded
  - Related: bz428197


author: John (J5) Palmieri <johnp@redhat.com> 2.1.1-1
changelog:
  - Update to upstream version 2.1.1
  - Removed libmusicbrainz-2.0.2-missing-return.patch
  - Removed libmusicbrainz-2.0.2-conf.patch


author: Jason Vas Dias <jvdias@redhat.com> 1.0-0.9.pre5
changelog:
  - Allow build to succeed with new gcc / glibc-kernheaders
    (compile failed on __u64 redefinition on x86_64).
  - Add a static /usr/lib/libnl.a library to libnl-devel for
    programs that might need to do a static link to libnl.
    Added after consultation with Christopher Aillon.


author: Jason Vas Dias <jvdias@redhat.com> 1.0-0.9.pre5
changelog:
  - Allow build to succeed with new gcc / glibc-kernheaders
    (compile failed on __u64 redefinition on x86_64).
  - Add a static /usr/lib64/libnl.a library to libnl-devel for
    programs that might need to do a static link to libnl.
    Added after consultation with Christopher Aillon.


author: Luke Macken <lmacken@redhat.com> - 0.4.2-3
changelog:
  - Add upstream patch libnotify-0.4.2-status-icon.patch to emit the correct
    property change notification 'status-icon' instead of 'attach-icon'


author: Christopher Aillon <caillon@redhat.com> - 0.4.2-4
changelog:
  - Add upstream patch (r2899) to correct an invalid assertion when
    creating notifications using status icons


author: Colin Walters <walters@redhat.com> 2:1.1.2-1
changelog:
  - Update to 1.1.2
  - Delete upstreamed libogg-1.1-64bit.patch
  - Delete upstreamed libogg-underquoted.patch


author: Matthias Saou <http://freshrpms.net/> 0.3.5-3
changelog:
  - Sync spec files across branches.
  - Parallel make seems to have worked for 0.3.5 on devel, but just in case...


author: Matthias Saou <http://freshrpms.net/> 0.3.7.1-1
changelog:
  - Update to today's CVS code which should fix the PPC build issue.
  - Include new oil-bugreport tool in the devel package.


author: Will Cohen <wcohen@redhat.com>
changelog:
  - Make sure that CFLAGS in pfmlib/lib/ is used.
  - Separate build and install processes.
  - Clean up the descriptions.


author: Will Cohen <wcohen@redhat.com>
changelog:
  - Avoid pulling in the example ELF executable into /usr/share. (#198001)
  - Mark man pages as documentation.


author: Tom Lane <tgl@redhat.com> 2:1.2.10-7.0.3
changelog:
  - Back-port critical fixes from libpng 1.2.22, primarily to fix CVE-2007-5269
  Resolves: #337521
  - Update License tag and some other obsolete bits in specfile


author: Doug Ledford <dledford@redhat.com> - 1.1.99-10
changelog:
  - Add an epoch back in (evidently when libsdp was part of the openib package
    it had an epoch that was missed when it was split out)
  - Resolves: bz451637


author: Dan Walsh <dwalsh@redhat.com> - 1.33.1-2
changelog:
  - Add James Antill patch for login verification of MLS Levels
  -  MLS ragnes need to be checked, Eg. login/cron. This patch adds infrastructure.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.3-1
changelog:
  - Upgrade to upstream
  	* Merged patch for matchpathcon utility to use file mode information
  	  when available from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.4-1
changelog:
  - Upstream wanted some minor changes, upgrading to keep api the same
  - Upgrade to upstream
  	* Merged selinux_check_securetty_context() and support from Dan Walsh.
  Resolves: #200110


author: Dan Walsh <dwalsh@redhat.com> - 1.6.15-1
changelog:
  - Upgrade to latest from NSA
  	* Merged separate local file contexts patch from Chris PeBenito.
  	* Merged patch to make most copy errors non-fatal from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.16-1
changelog:
  - Upgrade to latest from NSA
  	* Make most copy errors fatal, but allow exceptions for
  	  file_contexts.local, seusers, and netfilter_contexts if
  	  the source file does not exist in the store.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.17-1
changelog:
  - Upgrade to latest from NSA
  	* Merged patch to skip reload if no active store exists and
  	  the store path doesn't match the active store path from Dan Walsh.
  	* Merged patch to not destroy sepol handle on error path of
  	  connect from James Athey.
  	* Merged patch to add genhomedircon path to semanage.conf from
  	  James Athey.


author: Dan Walsh <dwalsh@redhat.com> - 1.9.1-1
changelog:
  - Upgrade to latest from NSA
  	* Merged patch to compile wit -fPIC instead of -fpic from
  	  Manoj Srivastava to prevent hitting the global offest table
  	  limit. Patch changed to include libselinux and libsemanage in
  	  addition to libsepol.


author: Dan Walsh <dwalsh@redhat.com> 1.12.24-1
changelog:
  - Upgrade to latest from NSA
  	* Merged libsepol unit tests from Joshua Brindle.
  	* Merged symtab datum patch from Karl MacMillan.
  	* Merged netfilter contexts support from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.12.25-1
changelog:
  - Upgrade to latest from NSA
  	* Merged conditionally expand neverallows patch from Jeremy Mowery.
  	* Merged refactor expander patch from Jeremy Mowery.


author: Dan Walsh <dwalsh@redhat.com> 1.12.26-1
changelog:
  - Upgrade to latest from NSA
  	* Merged range transition enhancements and user format changes
  	  Darrel Goeddel


author: Dan Walsh <dwalsh@redhat.com> 1.12.27-1
changelog:
  - Upgrade to latest from NSA
  	* Merged mls user and range_transition support in modules
  	  from Darrel Goeddel


author: Dan Walsh <dwalsh@redhat.com> 1.15.1-1
changelog:
  - Upgrade to latest from NSA
  	* Merged fix for version comparison that was preventing range
  	  transition rules from being written for a version 5 base policy
  	  from Darrel Goeddel.


author: Dan Walsh <dwalsh@redhat.com> 1.15.2-1.el5
changelog:
  - Upgrade to latest from NSA
  	* Merged fix from Karl MacMillan for a segfault when linking
  	  non-MLS modules with users in them.


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.8-41
changelog:
  - don't trip over capabilities which end in '^' or '\'
  - don't accept numbers with '8' or '9' in them as valid octal numbers


author: Colin Walters <walters@redhat.com> - 1.0alpha4-1
changelog:
  - New upstream version 1.0alpha4 
  - Remove upstreamed patch libtheora-1.0alpha3-include.patch 
  - Use Theora_I_spec.pdf for spec
  - Add in .pc file (yay! another library sees the light)


author: Matthias Clasen <mclasen@redhat.com>
changelog:
  - Fix several vulnerabilities (CVE-2006-3460 CVE-2006-3461
    CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)


author: Jindrich Novy <jnovy@redhat.com> - 3.8.2-6
changelog:
  - fix CVE-2006-2193, tiff2pdf buffer overflow (#194362)
  - fix typo in man page for tiffset (#186297)
  - use %{?dist}


author: Karsten Hopp <karsten@redhat.de> 1.5.22-1
changelog:
  - update to 1.5.22, most prominent fixes are:
    - Fix 1.5 regression that caused linking a program `-static' to also
      link statically against installed libtool libraries, contrary to
      documented (and actual 1.4.x) behavior.
    - Fix silent failure of `libtoolize --ltdl' if libltdl files not present.


author: Jindrich Novy <jnovy@redhat.com> 0.1.11-1
changelog:
  - 0.1.11
  - require pkgconfig, package libusb.pc
  - fix printf format in linux.c so that libusb can be built with -Werror (default)


author: Jindrich Novy <jnovy@redhat.com> 0.1.11-2
changelog:
  - change device search order, /dev/bus/usb is tried first,
    then /proc/bus/usb, and never try /sys/bus/usb (#178994)


author: Jindrich Novy <jnovy@redhat.com> 0.1.12-3
changelog:
  - use pkg-config calls in libusb-config instead of hardcoded
    defaults to avoid multiarch conflicts (#192714)


author: Miloslav Trmac <mitr@redhat.com> - 0.54.6-1
changelog:
  - Fix bugs in handling of invalid lines in the files and shadow modules
  - Fix pattern matching in lu_*_enumerate_full in the files and shadow modules
  - Add more error reporting, return non-zero exit status on error from utils
  - Use the skeleton directory specified in libuser.conf by Python
    admin.createHome and admin.addUser, add parameter skeleton= to admin.addUser
    (#189984)


author: Dmitry V. Levin <ldv@altlinux.org> 1.1.4-alt1
changelog:
  - Enabled almost all diagnostics supported by gcc and fixed all
    issues found by gcc-3.4.4-alt3.
  - Added FreeBSD support, based on patches from Gentoo/FreeBSD.
  - Makefile:
    + Fixed few portability issues reported by Gentoo developers.
  - libutempter: Linked with -Wl,-z,defs.
  - utempter:
    + Fixed struct utmp initialization on 64-bit architectures
      with 32-bit backwards compatibility enabled (like x86_64).
    + Linked with -Wl,-z,now, i.e., marked it to tell the dynamic
      linker to resolve all symbols when the program is started.
      Suggested by Gentoo developers.


author: Mike A. Harris <mharris@redhat.com> 1.1.4-1.fc6
changelog:
  - Initial build of Dimitry's libutempter replacement for Fedora Core.
  - Reworked the upstream spec file for Fedora packaging compliance.
  - Removed static lib subpackage as we dont ship those.


author: Mike A. Harris <mharris@redhat.com> 1.1.4-2.fc6
changelog:
  - Removed usage of rpm macros inside the spec changelog (#200051)
  - Removed non-UTF-8 chars from changelog.


author: Daniel Veillard <veillard@redhat.com> 0.1.8-7.el5
changelog:
  - release python global interpreter lock when calling libvirt, rhbz#210140
  - return correct os type version for HVM guests when running as non-root, 
    rhbz#214264
  - Resolves: rhbz#210140 rhbz#214264


author: Daniel Veillard <veillard@redhat.com> 0.1.8-8.el5
changelog:
  - fix a structure error when asking the hypervisor for vcpu info, rhbz#217743
    and rhbz#217370
  - Resolves: rhbz#217370 rhbz#217743


author: Daniel Berrange <berrange@redhat.com> 0.1.8-14.el5
changelog:
  - further fix for parallel installation problem of -devel on i386 and x86_64
  - Resolves: rhbz#222730


author: Daniel Berrange <berrange@redhat.com> 0.1.8-15.el5
changelog:
  - re-do the localization patch, so that we don't have to run
    'make update-po', and thus avoid multilib conflicts
  - Resolves: rhbz#224446


author: Daniel Veillard <veillard@redhat.com> - 0.2.3-6.el5
changelog:
  - Fix handling of PVFB configurations
  - Resolves: rhbg#250789
  - Fix config file when using virtual network
  - Resolves: rhbg#251594


author: Daniel Veillard <veillard@redhat.com> - 0.2.3-9.el5
changelog:
  - patch to fix the pvfb vncdisplay port in XML dumps
  - Resolves: rhbz #254188
  - Related: rhbz #250789


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 0.2.3-9.el5_1.1.0.1
changelog:
  - added oracle-enterprise.patch to detect enterprise-release in config.guss
  - Replaced docs/redhat.gif in tarball.


author: Stepan Kasal <skasal@redhat.com> - 0.12.0-0
changelog:
  - New version.
  - Remove libgnomeui{,-devel} and libgnomecanvas{,-devel}; upstream have
    removed them from configure.ac.
  - Try to build on s390x again.


author: Stepan Kasal <skasal@redhat.com> - 0.12.1-1
changelog:
  - New upstream version.
  - Use the %{?dist} tag.
  - Use `make %{?_smp_mflags}'.
  - Move pkgconfig description to -devel subpackage.
  - The -devel subpackage now requires several -devel packages.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libxkbfile to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Ray Strode <rstrode@redhat.com> - 3.0-3
changelog:
  - use long instead of CARD32 to XChangeProperty to fix
    unaligned access problem on ia64 (bug 215027)


author: Matthias Saou <http://freshrpms.net/> 1.0.4-1
changelog:
  - Update to 1.0.4.
  - Update syntax patch.
  - Execute bootstrap if no configure script is found.
  - Don't own entire man? directories.
  - Own data and lib lksctp-tools directories.
  - Move devel libs in _libdir/lksctp-tools/ to devel package.
  - Exclude .la files.
  - Minor spec file cleanups.


author: Phil Knirsch <pknirsch@redhat.com> 2.9.2-1
changelog:
  - Update to lm_sensors-2.9.2
  - Fixed wrong subsys locking (#176965)
  - Removed lm_sensors pwmconfig, has been fixed upstream now


author: Phil Knirsch <pknirsch@redhat.com> 2.10.0-1
changelog:
  - Update to lm_sensors-2.10.0
  - Added missing buildprereq on sysfsutils-devel (#189196)
  - Added missing prereq on chkconfig (#182838)
  - Some fiddling to make it build on latest kernels


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:1.2.13-2jpp_1fc
changelog:
  - Merge spec and patches with latest from JPP.
  - Clean source tar ball off prebuilt jars and classes.
  - Use classpathx-jaf and jms for buildrequires for the time being.


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:1.2.13-3jpp.1
changelog:
  - Re-sync with latest from JPP.
  - Update patch for BZ #157585 to apply cleanly.
  - Partially adopt new naming convention.


author: Tomas Smetana <tsmetana@redhat.com> - 3.7.4-8
changelog:
  - fix #247410 - logrotate does not honor size directive
  - fix #250059 - logrotate manual page bug
  - fix #259281 - logrotates default config rotates wtmp irrationally often


author: Petr Machata <pmachata@redhat.com> - 0.4-1.6
changelog:
  - e_entry patch: use elf's e_entry field instead of looking up _start
    symbol, which failed on stripped binaries.


author: Petr Machata <pmachata@redhat.com> - 0.5-1.0.45svn
changelog:
  - adding upstream (svn) version.  It contains most of patches that we
    already use, and has support for secure PLTs.


author: Petr Machata <pmachata@redhat.com> - 0.5-1.0.45svn.5
changelog:
  - adding .gnu.hash patch to support new ELF hash table section
  - adding testsuite patch to silent some bogus failures


author: Petr Machata <pmachata@redhat.com> - 0.5-5.45svn
changelog:
  - fix plt handling on ppc32 (symval patch)
  - fix attaching to process (attach patch)
  - add fork & exec patches from IBM
  - adjust weak symbol handling (ppc32fc5 patch)


author: Deepak Bhole <dbhole@redhat.com> 1.4.3-1jpp.15
changelog:
  - Resolves: bz222736. Just a rebuild is needed.
  - Added guards around calls to rebuild-gcj-db in post and postun.


author: Akira TAGOH <tagoh@redhat.com> - 4.51-7
changelog:
  - lv-+num-option.patch: applied a patch to allow +num option to jump to the specific line.
  - lv-fastio.patch: applied a patch to improve the performance to read the files.
  - lv-lfs.patch: applied a patch for Lerge File Summit support.


author: Jens Petersen <petersen@redhat.com> - 1.3.1-1
changelog:
  - update to 1.3.1 release
    - rename use_otf and use_anthy macros to with_gui and with_examples
    - build --with-gui=no and replace m17n-lib-1.2.0-core-libs-only.patch
      with m17n-lib-no-gui-headers.patch and m17n-lib-nobuild-examples.patch


author: Mayank Jain <majain@redhat.com> - m17n-lib-1_3_3-1_fc6
changelog:
  - Updated spec file for changes mentioned in RH bug 193524, comment 4
  - Thanks to Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp>


author: Miloslav Trmac <mitr@redhat.com> - 1.4.5-3
changelog:
  - Use the install-info scriptlets recommended in the Fedora Extras wiki
  - Move $RPM_BUILD_ROOT cleaning from %prep to %install


author: Jakub Jelinek <jakub@redhat.com> 3.80-8
changelog:
  - make sure errno for error reporting is not lost accross _() calls
  - report EOF on read pipe differently from read returning < 0 reporting


author: Petr Machata <pmachata@redhat.com> 1:3.80-11
changelog:
  - Applied (five years old) patch from Jonathan Kamens to allow make to
    handle several pattern-specific variables (#52962).

    The patch was changed so that it forces make to process pattern
    specific variables in the same order as they appear in file.
    (Upstream make behaves this way, too.)  This is change from old make
    behavior, which processed the variables in reverse order.  In case
    you used only x=a assignments, this had the effect of using the
    first pattern specific variable that matched.  For x+=a this just
    doesn't work, and it produces absolutely nonintuitive results.

  - (It would be great if make's target-specific variables were handled
    the same way as pattern-specific ones, just without the pattern
    component.  However current handling is documented and considered a
    feature.)


author: Petr Machata <pmachata@redhat.com> - 1:3.81-1
changelog:
  - Upstream 3.81:
    - Contains several backwards incompatible changes.  See NEWS inside
      the source package to find out more.
  - memory patch and error reporting patch were ported to this version.


author: Kristian Høgsberg <krh@redhat.com> - 6.5.1-3.fc6
changelog:
  - Bump xorg-x11-proto-devel BuildRequires to 7.1-8 so we pick up the
    latest GLX_EXT_texture_from_pixmap opcodes.


author: Kristian <krh@redhat.com> - 6.5.1-6.fc6
changelog:
  - Add -fno-strict-aliasing to compiler flags for i965 driver.
  - Add post-6.5.1-i965-fixes.patch backport of i965 fixes from mesa CVS.


author: Jason Vas Dias <jvdias@redhat.com> 1.1.33-3_FC5
changelog:
  - fix bug 162174: prevent uninterruptable hang on exit() when
                    direct line disconnected (kernel bug 164002)
  		  do tcflush(1,TCOFLUSH) before exit() in sig_goodbye()
  	  	  block signals before entering syslog()
    workaround build system 'buffer overflow checks' bug:
                    use memcpy instead of sprintf in record.c, line 53


author: Nalin Dahyabhai <nalin@redhat.com> - 1.1.33-9
changelog:
  - add /usr/sbin/useradd as a prereq for the -sendfax subpackage, because
    we call it during the -sendfax %pre scriptlet (#203266)


author: Peter Jones <pjones@redhat.com> - 5.1.19-1
changelog:
  - Fix booting on non-LVM devices where sysfs uses a '!' in the device path,
    such as cciss.  (#201875, #196360)


author: Jeremy Katz <katzj@redhat.com> - 5.1.19.3-1
changelog:
  - don't create /dev/tty* on s390 (#209204)
  - handle multi-line options (#209447)
  - ensure that scsi devices have stabilized to ensure the rootdev 
    is available (#213039)
  - iscsi tools changed their syntax somewhat (#221088)


author: Axel Thimm <Axel.Thimm@ATrpms.net> - 6.0.0-2
changelog:
  - Rename to mozldap.
  - move configure step to %build section.
  - clean up excessive use of %defines, make more Fedora like.
  - fix mismatching soname issue.
  - generic specfile cosmetics.


author: Rich Megginson <richm@stanfordalumni.org> - 6.0.2-1
changelog:
  - Fixed exports file generation for Solaris and Windows - no effect on linux
  - bumped version to 6.0.2


author: Rich Megginson <rmeggins@redhat.com> - 6.0.4-1
changelog:
  - bump version to 6.0.4 - this version has some memory leak
  - fixes for SASL related code, fixes for control handling with
  - referral chasing, and packaging improvements
  - use -p when installing include files to preserve timestamps


author: Jitka Kudrnacova <jkudrnac@redhat.com> 2.5.4-6
changelog:
  - Fixed page scaling (bug #173276) and modified the manpage
    (the bug was mentioned in the manpage)


author: Jindrich Novy <jnovy@redhat.com> 1.2.18-5
changelog:
  - dead code elimination
  - updated spec link to recent source
  - removed spec link to obsolete URL
  - rebuilt


author: Jindrich Novy <jnovy@redhat.com> 1.2.18-8
changelog:
  - fix type confusion in SCSI_writet(), SCSI_readt(), slow_memcopy()
    and slow_bzero()
  - rebuilt with gcc4


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.4.2.2-1
changelog:
  - update to 1.4.2.2
  - fix directories in manual.txt (#162207)
  - drop bcc patch (#197408)
  - don't package flea


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.4.2.2-3.el5
changelog:
  - fix POP authentication with latest cyrus-sasl (#213271)
  - fix insecure temp file creation on NFS (#213274, CVE-2006-5297)


author: Tom Lane <tgl@redhat.com> 5.0.18-4
changelog:
  - Modify multilib header hack to not break non-RH arches, per bug #181335
  - Remove logrotate script, per bug #180639.
  - Add a new mysql-test RPM to carry the regression test files;
    hack up test scripts as needed to make them run in /usr/share/mysql-test.


author: Tom Lane <tgl@redhat.com> 5.0.22-1
changelog:
  - Update to MySQL 5.0.22 (fixes CVE-2006-2753)
  - Install temporary workaround for gcc bug on s390x (bz #193912)


author: Tom Lane <tgl@redhat.com> 5.0.22-2
changelog:
  - Work around brew's tendency not to clean up failed builds completely,
    by adding code in mysql-testing.patch to kill leftover mysql daemons.


author: Jindrich Novy <jnovy@redhat.com> 0.98.39-1
changelog:
  - update to 0.98.39
  - add BuildRequires ghostscript, texinfo to doc subpackage (#110584)
  - generate also PDF documentation for nasm (#88431)
  - new release fixes CAN-2004-1287 (#143052)


author: Matthias Clasen <mclasen@redhat.com> - 2.16.0-7
changelog:
  - Fix scripts according to the packaging guidelines
  - Require GConf2 for the scripts
  - Require pkgconfig for the -devel package


author: Radek Vokal <rvokal@redhat.com> - 1.84-7
changelog:
  - add dist tag
  - add '-C' option and behaviour for sending CRLFs as line-ending (#203931) <koszorus@reidea.hu>


author: Miroslav Lichvar <mlichvar@redhat.com> 5.5-20
changelog:
  - update to patch 20060701
  - don't strip libraries, chmod +x them
  - move .so links to devel package
  - add gpm-devel to buildrequires
  - spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> 5.5-24.20060715
changelog:
  - modify tgetstr to make screen happy (#202480)
  - use CFLAGS when linking (#199369)
  - change BuildRoot tag to comply with Fedora packaging guidelines


author: Radek Vokal <rvokal@redhat.com> 5.3.1.0-5
changelog:
  - SMUX support is still needed .. will disappear later!
  - static libs should be in devel not libs (#203571)
  - fix lm_sensors issues


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-15
changelog:
  - fix sending SNMPv1 traps on v2 connections (#236933)
  - fix ugly error messages when more interfaces share one IP addr.
    (#223236)
  - build with rpm-devel to support HOST-RESOURCES-MIB::hrSWInstalled
    (#232870)
  - store pid in /var/run/snmpd.pid (240470)
  - fix wrong sprintf in path generation (#240609)
  - fix too verbose snmpassert (#239083)
  - fix perl bulkwalk (#238145)
  - extend ipv6 support of some MIBs (#242483)


author: Jindrich Novy <jnovy@redhat.com> 10.34-6.fc6
changelog:
  - regenerate man pages so that makewhatis isn't confused (#204991)
    (upstream makeman script was broken -> now fixed)


author: Jindrich Novy <jnovy@redhat.com> 10.34-8
changelog:
  - readd pbmtols, author claims it's LGPL (#202519)
  - add .l1 suffixes to tarball names to reflect legal fixes
    in the upstream release with the same NVR


author: Jindrich Novy <jnovy@redhat.com> 10.35-1
changelog:
  - update to 10.35
  - drop .pnmtopng, .rgbtxt patches, fixed upstream
  - sync .xwidfix, .ppmtompeg patches
  - regenerate man pages


author: Petr Rockai <prockai@redhat.com> - 0.52.2-3
changelog:
  - Provide: snack = 0.52.2 instead of plain "snack", so that
    we don't block upgrades of custom "snack" packages. This should
    not break anything. (Hopefully) fixes BR 171415.


author: Petr Rockai <prockai@redhat.com> - 0.52.2-4
changelog:
  - Apply patch by Bill Nottingham (thanks) to improve scrollbar appearance
    (BR 174771).
  - Add -9 to snack's Provides: line (just in case).


author: Petr Rockai <prockai@redhat.com> - 0.52.2-5
changelog:
  - Fix a crash in checkboxtree.c where pressing pgup/pgdown
    on a checkboxtree with less items than its height would
    cause segmentation violation. Consult BR 165347.


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.2-7
changelog:
  - fix checkboxtree positioning
  - make textbox with scrollbar focusable (#83203)
  - turn off cursor when entry terminated form (#86074)
  - handle listbox and checkboxtree focus better (#186053)
  - make default colors more friendly to 8-color terminals (#187545)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.2-9
changelog:
  - fix screen corruption when half of double width character is overwritten
    (#137957) 
  - fix double width character handling in checkboxtree and listbox


author: Karsten Hopp <karsten@redhat.de> 4.03-1
changelog:
  - update to 4.03, this fixes #184286
  - remove duplicate menu entry in 'Internet' (#183056)
  - fix possible tmpdir race condition during build (#158996)


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2:4.11-1.1.0.1
changelog:
  - Alter fad-getad.c to include linux/types.h if it include linux/if_packet.h to
    avoid build problem on RHEL5.


author: Luke Macken <lmacken@redhat.com> - 0.1.0-3
changelog:
  - Add notify-python-0.1.0-attach_to_status_icon.patch to allow the attaching
    notifications to status icons.


author: Kai Engert <kengert@redhat.com> 4.6.1-2
changelog:
  - Do not use -ansi when compiling, because of a compilation
    problem with latest glibc and anonymous unions.
    See also bugzilla.mozilla.org # 322427.


author: Kai Engert <kengert@redhat.com> - 3.11.3-2
changelog:
  - Revert the attempt to require latest NSPR, as it is not yet available
    in the build infrastructure.


author: Bob Relyea <rrelyea@redhat.com> - 3.11.4-5
changelog:
  - handle the case where a smartcard is reset between the time the nss
    prompts for the password and the user enters it.


author: Nalin Dahyabhai <nalin@redhat.com> 0.27-1
changelog:
  - update to 0.27-1:
    - don't attempt to subscribe to all possible messages -- the message bus
      will already route to us messages addressed to us, and if we try for
      more than that we may run afoul of SELinux policy, generating spewage
  - add a build dependency on pkgconfig, for the sake of FC3
  - update docs and comments because D-BUS is now called D-Bus


author: Srinivas Maturi <srinivas.maturi@oracle.com> - 1.3-0.2
changelog:
  - Added patch rhel5u2-build.patch to build in (RH)EL5 U2
  - Add support to build for all kernel flavors for i386/x86_64 arch
  - Add postun section and change package name


author: Srinivas Maturi <srinivas.maturi@oracle.com> - 1.3-1.20080513
changelog:
  - Replaced the tarball from the OFED's ofa-kernel src rpm of 20080513 build
  - Update rhel5u2-build.patch based on this new tarball
  - Update less-verbose-build.patch


author: Srinivas Maturi <srinivas.maturi@oracle.com> - 1.3-1.20080513
changelog:
  - Added ib-bonding.patch based on ib-bonding-0.9.0-24 package from OFED-1.3.1
    to package the ib bonding kernel module in ofa


author: Srinivas Maturi <srinivas.maturi@oracle.com> - 1.3.1-1.20080529
changelog:
  - Replaced the tarball from the OFED's ofa-kernel src rpm of OFED-1.3.1-rc3 build
  - Added patch rdma-fix-failure.patch [richard.frank@oracle.com]
  - Commented ib-bonding.patch


author: Srinivas Maturi <srinivas.maturi@oracle.com> - 1.3.1-2.20080529
changelog:
  - Removed the ib-bonding.patch based on ib-bonding-0.9.0-24 package from OFED
    and added ib-bonding-configure.patch and ib-bonding-source.patch based on
    ib-bonding-0.9.0-25 from OFED-1.3.1-rc3
  - Added kernel-addons-backport-2.6.18-EL5.1.patch to fix build of ib-bonding 
    module for EL5.1 kernels
  - Removed rhel5u2-build.patch as the tarball in ofa-kernel src rpm from
    OFD-1.3.1-rc3 supports EL5.2 kernels


author: Srinivas Maturi <srinivas.maturi@oracle.com> - 1.3.1-2.20080603
changelog:
  - Added these RDS patches from [olaf.kirch@oracle.com]
      rds-poll-comment.patch, rds-send-find-message.patch, rds-rdma-tracked-mapped.patch,
      rdma-error-propagation.patch, rds-ib-ring-vmalloc.patch, rds-bigger-byte-counters.patch
      rds-ib-connection-info.patch, rds-ib-tx-pressure.patch, rds-cancel-notify.patch
      rds-get-mr-fail-stats.patch, and rds-sock-info-inum.patch
  - Replaced the tarball from the OFED's ofa-kernel src rpm of OFED-1.3.1 build


author: Van Okamura <van.okamura@oracle.com> - 1.3.1-3.20080603
changelog:
  - Use updated patches from [olaf.kirch@oracle.com]:
    0001-RDS-Clarify-comment-on-rds_poll.patch
    0002-RDS-introduce-rds_send_get_message.patch
    0003-RDS-Track-whether-RDMA-S-G-list-is-DMA-mapped.patch
    0004-RDS-Another-fix-for-RDMA-signalling.patch
    0005-RDS-Use-vmalloc-in-rds_ib_setup_qp.patch
    0006-RDS-increase-size-of-stats-counters.patch
    0007-RDS-Expose-info-on-IB-connections.patch
    0008-RDS-Extend-IB-connection-info-to-include-settings.patch
    0009-RDS-Wake-up-send-worker-after-TX-queue-full-conditi.patch
    0010-RDS-Send-notification-for-cancelled-RDMA-ops.patch
    0011-RDS-Add-mr_pool_depleted-stats-counter.patch
    0012-RDS-rds-info-k-should-display-inode-number.patch
    0013-RDS-Remote-spurious-variable-name-from-stats.patch
    0014-RDS-Increase-default-FMR-pool-size-to-4K.patch


author: Srinivas Maturi <srinivas.maturi@oracle.com> - 1.3.1-4.20080603
changelog:
  - Comment out/remove this patch:
    0009-RDS-Wake-up-send-worker-after-TX-queue-full-conditi.patch.
    Enabled configure to build srpt module.


author: Andy Grover <andy.grover@oracle.com> - 1.3.1-5.20080603
changelog:
  - Uncomment Patch12
    0009-RDS-Wake-up-send-worker-after-TX-queue-full-conditi.patch
    and add patches
    0015-RDS-Fix-compilation-issue-on-PPC64-and-IA64.patch
    0016-net-rds-Add-support-for-RDMA_CM_EVENT_ADDR_CHANGE-e.patch
    0017-RDS-Fix-race-in-rds_send_xmit.patch
    0018-RDS-IB-silence-harmless-kernel-message.patch
    0019-RDS-IB-Increase-FMR-pool-size-to-4k.patch
    0020-RDS-IB-remove-error-message-on-connection-race.patch
    0021-RDS-IB-Don-t-count-congestion-messages-for-determin.patch
    0022-RDS-IB-Always-set-i_ack_next-in-rds_ib_set_ack.patch
    0023-RDS-Fix-compilation-error.patch


author: Phil Knirsch <pknirsch@redhat.com> - 2.2.4-12.el5
changelog:
  - Moved the .so lib to the devel package (#219242)
  - Added proper multilib requirements for devel package (#219242)


author: Phil Knirsch <pknirsch@redhat.com> - 2.4.1-5
changelog:
  - Had to disable sysfs support due to new libsysfs and incompatible API.
  - Added missing ncurses-devel buildrequires


author: Doug Ledford <dledford@redhat.com> 1.0-10
changelog:
  - Add a logrotate file for /var/log/osm.log to opensm
  - Fix a %post/%postun script problem with dapl


author: Doug Ledford <dledford@redhat.com> 1.1-0.pre1.2
changelog:
  - Bump version numbers on all the packages to allow for updates
    from previous installations
  - Remove arpingib, it's not needed
  - Add ipoibha init script
  - Rename ipoibha.pl ipoibha for ease of use in init script
  - Drop hpage patch set from ./configure invocation


author: Doug Ledford <dledford@redhat.com> 1.1-0.pre1.3
changelog:
  - The bug fix to make the udev rules file correct for udev 095 got lost,
    readd it.
  - Updates from the old OFED 1.0 code didn't grab all the RPMs because I
    forgot to update the libmthca{,-devel} versions so that the reset
    release number wouldn't cause it to match as older instead of newer.


author: Doug Ledford <dledford@redhat.com> 1.1-2
changelog:
  - Remove a dead patch from the src rpm and rebuild
  - Move the ipoibha tools to /usr/sbin instead of /sbin.  Since they
    require perl to run, and perl resides in /usr, it's safe for them
    to be there instead of /sbin


author: Doug Ledford <dledford@redhat.com> 1.1-3
changelog:
  - Make openib, opensm, and ipoibtools Require(post): chkconfig (182845,182846)
  - Make ipoibha script have an interpreter tag
  - Fix the ipoibha script so it uses arping instead of arpingib and
    passes a functional set of arguments
  - Make ipoibha script require an IP broadcast address on the interface
    we are serving in ha mode
  - Make rdma_ping print rdma_ping instead of rping in it's usage output
  - Make rdma_ping only print the usage info once (213171)
  - Update openibd init script to work whether ipath driver is in one module
    or two (212401)


author: Doug Ledford <dledford@redhat.com> 1.1-4
changelog:
  - Change all the scriptlets to be multiline so that they don't cause problems
    on ppc arch
  - Related: #213848, #222227


author: Doug Ledford <dledford@redhat.com> 1.1-5
changelog:
  - Fix an unterminated if statement in the ipoibha init script
  - Disable the ipoibtools package since arping is not yet modified to
    support ipoib interfaces and so the package is guaranteed not to work
  - Resolves: #227396


author: Doug Ledford <dledford@redhat.com> - 1.3-1
changelog:
  - Remove the obsolete of the mstflint package to resolve a circular obsolete
    issue
  - Related: bz451638


author: Tianyue Lan <tianyue.lan@oracle.com> - 0.9.2-9
changelog:
  - the tarball 0.9.2.tar.gz is same as 0.9.0.tar.gz in OFED-1.3.1 (20080603) 
    still using 0.9.2.tar.gz to avoid the rpm update error
  - update specfile for OFED-1.3.1


author: Tim Waugh <twaugh@redhat.com> 1.3.2-20
changelog:
  - Use --enable-splibdir to prevent ambiguity.
  - Move 'install-catalog --remove' to %preun section (bug #60409).


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-2
changelog:
  - New upstream release
  - Include the gethostbyname_r patch so that nss_ldap won't hang
    on recursive attemts to ldap_initialize.


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-3
changelog:
  - Include --enable-multimaster to close
    bz#185821: adding slapd_multimaster to the configure options
  - Upgade guide.html to the correct one for openladp-2.3.27, closing
    bz#190383: openldap 2.3 packages contain the administrator's guide for 2.2
  - Remove the quotes from around the slaptestflags in ldap.init
    This closes one part of
    bz#204593: service ldap fails after having added entries to ldap
  - include __db.* in the list of files to check ownership of in
    ldap.init, as suggested in
    bz#199322: RFE: perform cleanup in ldap.init


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-5
changelog:
  - Include the -getdn patch to close
    bz#214768: CVE-2006-5779 Specially crafted authcid makes OpenLDAP fail an assertion
    Resolves: rhbz#214768


author: Jan Safranek <jsafranek@redhat.com> 2.3.27-6
changelog:
  - Include sals patch to close #230395
  - Include manual bind timeout patch to close #230388
  - Include patch to allow write access to ldap socket to close #237417
  - Fix the upgrade logic so database is not deleted on upgrade (#240834)
  - Fix the memory leak on ACL rules (#241636)
  - Fix initscript return codes (#242665)


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1
changelog:
  - new 2.3.0 (beta1)
  - patch for new rgb.txt location (#174210)
    Thanks to Ville Skyttä for the patch


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.1
changelog:
  - enabled Xft, jpeg and png support
  - patch for missing xft-config
  - dropped duplicate include path in devel package


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.1
changelog:
  - moved mwmrc to /etc/X11/mwm
  - moved bindings to /usr/share/X11
  - fixed paths in man pages containing /usr/X11R6


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.9
changelog:
  - new CVS version 2006-02-02
  - fixed CVE-2005-3964: libUil buffer overflows (#174814)
  - fixed XmList out of bound accesses (#167701)
  - fixed pasting into TextField (#179549)


author: Doug Ledford <dledford@redhat.com> - 1.1-2
changelog:
  - Various lint cleanups
  - Switch to using the standard alternatives mechanism instead of a home
    grown one


author: Doug Ledford <dledford@redhat.com> - 1.1-3
changelog:
  - Don't ghost the mpi.conf file as that means it will get removed when
    you remove 1 out of a number of alternatives based packages
  - Put the .mod file in -devel


author: Doug Ledford <dledford@redhat.com> - 1.1-4
changelog:
  - Make sure the post/preun scripts only add/remove alternatives on initial
    install and final removal, otherwise don't touch.


author: Doug Ledford <dledford@redhat.com> - 1.1-6
changelog:
  - Bump rev to match fc6 rev
  - Fixup some issue with alternatives support
  - Split the 32bit and 64bit libs ld.so.conf.d files into two files so
    multilib or single lib installs both work properly
  - Put libs into their own package
  - Add symlinks to /usr/share/openmpi/bin32 so that opal_wrapper-32
    can be called even if it isn't the currently selected default method in
    the alternatives setup (opal_wrapper needs to be called by mpicc, mpic++,
    etc. in order to determine compile mode from argv[0]).


author: Doug Ledford <dledford@redhat.com> - 1.1-6
changelog:
  - Bump rev to match fc6 rev
  - Fixup some issue with alternatives support
  - Split the 32bit and 64bit libs ld.so.conf.d files into two files so
    multilib or single lib installs both work properly
  - Put libs into their own package
  - Add symlinks to /usr/share/openmpi/bin64 so that opal_wrapper-64
    can be called even if it isn't the currently selected default method in
    the alternatives setup (opal_wrapper needs to be called by mpicc, mpic++,
    etc. in order to determine compile mode from argv[0]).


author: Doug Ledford <dledford@redhat.com> - 1.2.3-1
changelog:
  - Update to latest upstream version
  - Compile against updated openib libraries
  - Add udapl as a transport mechanism
  - Fix file ownership on -libs package
  - Take a swing at solving the multi-install compatibility issues
  - Resolves: bz229298, bz245818


author: Doug Ledford <dledford@redhat.com> - 1.2.5-3
changelog:
  - Openmpi had the same bug as lam in regards to alternatives link management.
    Fix the bug by protecting the uninstall scriptlets from running unless we
    are doing an actual erase of the package.


author: Doug Ledford <dledford@redhat.com> - 1.2.5-4
changelog:
  - Update to use mpi-selector for mpi package runtime priority selection
  - Use mpi-selector change to fix bz433841 for real this time
  - Related: bz428199


author: Doug Ledford <dledford@redhat.com>
changelog:
  - Split the libs out from the programs in case anyone needs 32bit libs
    on 64bit arches
  - Add an init script to start the subnet manager, defaults to off, must
    be enabled on at least one machine in the subnet.


author: Tianyue Lan <tianyue.lan@oracle.com> - 3.1.11-1
changelog:
  - Update the tarballs to OFED-1.3.1 (20080603) and update specfile
  - update opensm.conf,add sldd.sh(SOURCE4)


author: Srinivas Maturi <srinivas.maturi@oracle.com> - 3.1.11-2
changelog:
  - Update release and fix post section in specfile

  - Update the tarballs to OFED-1.3.1 (20080603) and update specfile


author: Ville Skyttä <ville.skytta at iki.fi> - 1.5.2-0.1.pre1
changelog:
  - Fix build dependencies.
  - Require exact version of main package in -devel.
  - Build with dependency tracking disabled.
  - Add %{_datadir}/xml to default search path.
  - Run test suite during build.
  - Add URL tag.
  - Use %find_lang.
  - Cosmetic improvements.


author: Tim Waugh <twaugh@redhat.com> 1.5.2-4
changelog:
  - Give IDs to nodes in the release notes source to prevent releasenotes.html
    having multilib conflicts (bug #210570).


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-6
changelog:
  - improve selinux patch (by Jan Kiszka)
  - upstream patch for buffer append space error (#191940)
  - fixed typo in configure.ac (#198986)
  - added pam_keyinit to pam configuration (#198628)
  - improved error message when askpass dialog cannot grab
    keyboard input (#198332)
  - buildrequires xauth instead of xorg-x11-xauth
  - fixed a few rpmlint warnings


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-7
changelog:
  - dropped old ssh obsoletes
  - call the pam_session_open/close from the monitor when privsep is
    enabled so it is always called as root (patch by Darren Tucker)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-8
changelog:
  - drop the pam-session patch from the previous build (#201341)
  - don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-9
changelog:
  - don't report duplicate syslog messages, use correct local time (#189158)
  - don't allow spnego as gssapi mechanism (from upstream)
  - fixed memleaks found by Coverity (from upstream)
  - allow ip options except source routing (#202856) (patch by HP)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-10
changelog:
  - improve gssapi-no-spnego patch (#208102)
  - CVE-2006-4924 - prevent DoS on deattack detector (#207957)
  - CVE-2006-5051 - don't call cleanups from signal handler (#208459)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-10.1
changelog:
  - CVE-2006-5794 - properly detect failed key verify in monitor (#214642)
  - kill all ssh sessions when stop is called in halt or reboot runlevel (#213008)
  - remove -TERM option from killproc so we don't race on sshd restart (#213490)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-13
changelog:
  - improved pam_session patch so it doesn't regress, the patch is necessary
    for the pam_session_close to be called correctly as uid 0 (#167488)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-7
changelog:
  - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276)
  - fix CVE-2006-2940 - parasitic public keys DoS (#207274)
  - fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
  - fix CVE-2006-4343 - sslv2 client DoS (#206940)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-8.3.1
changelog:
  - fix CVE-2007-3108 - side channel attack on private keys (#322891)
  - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309871)
  - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321211)


author: Will Cohen <wcohen@redhat.com> - 0.9.2-6
changelog:
  - Correct backtrace documentation. Resolves: rhbz#214793.
  - Correct race condition. Resolves: rhbz#220116.


author: Manoj Ramanujan <manoj.ramanujan@oracle.com>
changelog:
  - Fix for cross arch dependency bug 2115
        - Suppress insmod output during install. redirect to logfile
        - Add Vendor tag to RPM spec
        - Moved rollback of config file changes during uninstall from spec file to script


author: Manoj Ramanujan <manoj.ramanujan@oracle.com>
changelog:
  - Incorporated i386 compat-libstdc++-33 dependency
        - Added elfutils-libelf-devel to dependency list


author: Manoj Ramanujan <manoj.ramanujan@oracle.com>
changelog:
  - Added fontconfig >= 2.2.3-7.0.1 fontconfig md5 sum issue fixed in this version
        - Changed release name to 3.el4


author: Manoj Ramanujan <manoj.ramanujan@oracle.com>
changelog:
  - Added unixODBC and unixODBC-devel dependencies
        - Fixed shmmax issue with 32 bit machines with large RAM
        - Made package name changes for el5


author: Manoj Ramanujan <manoj.ramanujan@oracle.com>
changelog:
  - Added enterprise-release dependency to fix el4/5 cross install issue
        - Added /usr/lib/libXtst.so.6 dependency for x86-64 to fix 10.2.0.1 OUI issue
        - Added xorg-x11-xinit dependency. As package is missing in minimum installs
        - Removed fontconfig dependency as issue has been fixed in el5


author: Manoj Ramanujan <manoj.ramanujan@oracle.com>
changelog:
  - Added libaio and libstdc++ 32 bit dependency in spec file for 11g support
        - Fixed parsing issue with RC edited sysctl file and 11g kernel param change in 11g patch


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.7
changelog:
  - No shortcut on Password: in ja locale (#218271)
  - Revert to old euid and not ruid when setting euid in pam_keyinit (#219486)
  - Fix no answer to select_context question (#213812)
  - Rename selinux-namespace patch to namespace-level


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.14
changelog:
  - properly include /var/log/faillog and tallylog as ghosts
    and create them in post script (#209646)


author: Behdad Esfahbod <besfahbo@redhat.com> - 1.14.9-1
changelog:
  - Update to 1.14.9
  - Resolves: #216424, #216850, #211964, #213632
  - Add Thai language engine. (disabled, since there's no libthai)


author: Tim Waugh <twaugh@redhat.com> - 0.6.6-9
changelog:
  - Fixed font-option patch.
  - Adjusted CUPS patch: CUPS invokes the filter with the destination
    printer name in argv[0], not the binary name.
  - CUPS filter lives in CUPS_SERVERBIN, which is /usr/lib/cups on all
    architectures -- not %{_libdir}/cups.


author: Akira TAGOH <tagoh@redhat.com> - 0.6.6-10
changelog:
  - paps-0.6.6-cpilpi.patch: add --cpi and --lpi option to support the characters
    per inch and the lines per inch.
  - paps-cups.patch: add cpi and lpi support.


author: Akira TAGOH <tagoh@redhat.com> - 0.6.6-16
changelog:
  - paps-0.6.6-exitcode.patch: exit immediately with proper exit code
    when unrecoverable error occurs. (#208592)


author: David Cantrell <dcantrell@redhat.com> - 1.7.1-14
changelog:
  - Improve error message returned by _parse_header() on GPT-labeled disks
    so users actually have an idea of how to correct the problem
  - Fix off-by-one error with LastUsableLBA and PartitionEntryLBA overlap
    to prevent possible data corruption when using non-parted GPT editing
    tools


author: David Cantrell <dcantrell@redhat.com> - 1.7.1-16
changelog:
  - Don't throw PED_EXCEPTION_ERROR in ped_geometry_read() if accessing
    sectors outside of partition boundary, since returning false will
    shift ped_geometry_check() to the correct sectors.


author: David Cantrell <dcantrell@redhat.com> - 1.7.1-17
changelog:
  - For init_generic() failures on user-mode Linux block devices, goto
    error_free_arch_specific instead of error_free_dev.


author: Stepan Kasal <skasal@redhat.com> - 6.6-2.5
changelog:
  - Improve the fix for CVE-2006-7224 by updating
    pcre-6.6-CVE-2006-7224.patch and adding pcre-6.4-fix1.patch
    and pcre-6.4-posix.diff
  - Related: #373441


author: Stepan Kasal <skasal@redhat.com> - 6.6-2.7
changelog:
  - Fix the names of the pacthes added in 6.6-2.5:
    mv pcre-6.4-posix.diff pcre-6.6-CVE-2006-7225.patch
    mv pcre-6.4-fix1.patch pcre-6.6-CVE-2006-7226.patch
  - Update pcre-6.6-CVE-2007-1659.patch
  - Update pcre-6.6-CVE-2007-1660.patch
  - Add pcre-6.6-CVE-2006-7230.patch
  - Resolves: #380531


author: Ville Skyttä <ville.skytta at iki.fi> - 1.3.0-1
changelog:
  - 1.3.0, init script and reader.conf updater included upstream.
  - Split developer docs into a -doc subpackage, include API docs.
  - libmusclecard no longer included, split into separate package upstream.


author: Ville Skyttä <ville.skytta at iki.fi> 0.51-8
changelog:
  - Own more installed dirs (#73908).
  - Enable rpmbuild's internal dependency generator, drop unneeded dependencies.
  - Require perl(:MODULE_COMPAT_*).
  - Run tests in the %check section.
  - Fix License, Source0, URL, and Group tags.


author: Jose Pedro Oliveira <jpo@di.uminho.pt> - 1.48-4
changelog:
  - (#154762)
  - License information: GPL or Artistic
  - Removed the Time::HiRes building requirement (see Changes)
  - Removed the empty .bs file
  - Corrected file permissions


author: Robin Norwood <rnorwood@redhat.com> 0.59-2
changelog:
  - Resolves: rhbz#245620
  - Backport patch to fix dn_expand looping issue
  - Backport patch to randomize ID field


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.25-0.fdr.4
changelog:
  - Rename to perl-Net-SSLeay, provide perl-Net_SSLeay for compatibility
    with the rest of the world.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.26-0.fdr.1
changelog:
  - Update to unofficial 1.26 from Peter Behroozi, adds get1_session(),
    enables session caching with IO::Socket::SSL (bug 1859, bug 1860).
  - Bring outdated test14 up to date (bug 1859, test suite still not enabled).


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.30-2
changelog:
  - CVE-2005-0106: patch from Mandriva
    http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:023


author: Ville Skyttä <ville.skytta at iki.fi> - 1.58-1
changelog:
  - #121168
  - Update to 1.58.
  - Require perl(:MODULE_COMPAT_*).
  - Handle ParserDetails.ini parser registration.
  - BuildRequires libxml2-devel.
  - Own installed directories.


author: Jason Vas Dias <jvdias@redhat.com> - 4:5.8.8-6
changelog:
  - Fix bug 191416: make h2ph generate correct code for cpp statements
    like: '#if defined A || defined B'
  - Fix 172396.patch for non-threaded builds


author: Jason Vas Dias <jvdias@redhat.com> - 4:5.8.8-6
changelog:
  - Fix upstream perl bug #38454:
    'rindex corrects for $[ on bytes rather than UTF-8'
    apply upstream patch #27116
  - Fix upstream perl bug 24816:
    'Magic vars seem unsure if they are purely numeric' 
    ( perl -wle 'print $? = $? ^ "3"' -> 'Argument "^C" isn't numeric' )
    apply upstream patch #27391
  - Avoid writing over the input string in the case 'F' in moreswitches.
    apply upstream patch #27426
  - Fix upstream perl bug 34925 - 'overload and rebless' -
    apply upstream patches #27509, #27512
  - Fix upstream perl bug 3038 - '$qr = qr/^a$/m; $x =~ $qr; fails'
    apply upstream patch #27604
  - apply upstream patch #27605 - 'Fix off-by-one in $0 set magic.'
  - Fix upstream perl bug 23141 - '($_) = () fails to set $_ to undef'
    apply upstream patch #27914
  - Fix upstream perl bug #38619 - 
    'Bug in lc and uc (interaction between UTF-8, substr, and lc/uc)'
    apply upstream patch #27329
  - Give users the '-R' option to disable the Red Hat
    module compatibility default search path extension (incpush.patch).


author: Jason Vas Dias <jvdias@redhat.com> - 4:5.8.8-8
changelog:
  - Fix upstream perl bug #34297:
    'utf8 overload stringify bug (utf8 caching maybe)'
    upstream patch #28006 applied


author: Srinivas Maturi <Srinivas.Maturi@oracle.com> - 4:5.8.8-10.0.1.el5_0.2
changelog:
  - Added patch perl-5.8.8-OEL-mock-build.patch to disable lib/Net/t/hostname.t 
    so that build complete successfully in mock env.

   Tue Oct 23 2007 Robin Norwood <rnorwood@redhat.com> - 4:5.8.8-10.el5.2
  - Resolves: bug#323811
  - fix previous patch


author: Will Cohen <wcohen@redhat.com>
changelog:
  - Separate build and install processes.
  - Make sure that $(RPM_OPT_FLAGS) is used.
  - Patches to store return values.
  - Clean up desciption.


author: Joe Orton <jorton@redhat.com> 5.1.6-4.el5
changelog:
  - php-xml provides php-domxml (#215656)
  - fix php-pdo-abi provide (#214281)
  - provide php-zend-abi (#212804)
  - don't Obsolete mod_php
  - fix PDO sqlite TEXT extraction truncate-by-one (#217033)
  - package php{ize,-config} man pages in -devel (#199382)
  - change module subpackages to require php-common not php (#177821)
  - add security fix for CVE-2006-5465 (#216114)


author: Joe Orton <jorton@redhat.com> 5.1.6-6.el5
changelog:
  - add security fixes for: CVE-2007-0906, CVE-2007-0907, 
    CVE-2007-0908, CVE-2007-0909, CVE-2007-0910, CVE-2007-0988 (#229013)


author: Joe Orton <jorton@redhat.com> 5.1.6-9.el5
changelog:
  - add security fix for CVE-2007-1583 (#235016)
  - add security fixes for CVE-2007-0455, CVE-2007-1001 (#235036)


author: Joe Orton <jorton@redhat.com> 5.1.6-12.el5
changelog:
  - add security fix for CVE-2007-1864, SOAP redirect handling issue,
    FTP CRLF injection issue (#235016)


author: Joe Orton <jorton@redhat.com> 5.1.6-13.el5
changelog:
  - add security fixes for CVE-2007-2756, CVE-2007-2872, 
    CVE-2007-3799, CVE-2007-3996, CVE-2007-3998, CVE-2007-4658,
    CVE-2007-4670 (#278411)


author: Joe Orton <jorton@redhat.com> 5.1.4-5
changelog:
  - provide mod_php (#187891)
  - provide php-cli (#192196)
  - use correct LDAP fix (#181518)
  - define _GNU_SOURCE in php_config.h and leave it defined
  - drop (circular) dependency on php-pear


author: Joe Orton <jorton@redhat.com> 5.1.4-8
changelog:
  - Provide php-posix (#194583)
  - only provide php-pcntl from -cli subpackage
  - add missing defattr's (thanks to Matthias Saou)


author: Kristian Høgsberg <krh@redhat.com> 0.5.4-4
changelog:
  - Add patch from Shawn Huang <phuang@redhat.com> to fix selection
    rendering across different fonts (#212142).


author: Tom Lane <tgl@redhat.com> 8.1.3-1
changelog:
  - Update to PostgreSQL 8.1.3 (fixes bug #180617, CVE-2006-0553)
  - Update to jdbc driver build 405
  - Modify multilib header hack to not break non-RH arches, per bug #177564


author: Tom Lane <tgl@redhat.com> 8.1.4-1
changelog:
  - Update to PostgreSQL 8.1.4 (includes fixes for CVE-2006-2313, CVE-2006-2314;
    see bug #192173)
  - Update to PyGreSQL 3.8
  - Suppress noise from chcon, per bug #187744


author: Tom Lane <tgl@redhat.com> 8.1.7-1
changelog:
  - Update to PostgreSQL 8.1.7 to fix CVE-2007-0555, CVE-2007-0556
  Resolves: #225496
  - Sync init script and Makefile.regress with current Fedora scripts


author: Tom Lane <tgl@redhat.com> 8.1.11-1.el5_1.1
changelog:
  - Update to PostgreSQL 8.1.11 to fix CVE-2007-4769, CVE-2007-4772,
    CVE-2007-6067, CVE-2007-6600, CVE-2007-6601
  Resolves: #427137
  - Use tzdata package's data files instead of private copy, so that
    postgresql-server need not be turned for routine timezone updates


author: Tom Lane <tgl@redhat.com> 8.1.1-1
changelog:
  - Update to PostgreSQL 8.1.1
  - Make pg_config.h architecture-independent for multilib installs;
    put the original pg_config.h into pg_config_$ARCH.h


author: Tom Lane <tgl@redhat.com> 8.1.1-3
changelog:
  - fix pg_config.h for 64-bit and ppc platforms
  - update Makefile.regress (needs to --load-language=plpgsql)


author: Tom Lane <tgl@redhat.com> 8.1.2-1
changelog:
  - Update to PostgreSQL 8.1.2
  - Repair extraneous quote in pgtcl configure script ... odd that bash
    didn't use to spit up on this.


author: Tom Lane <tgl@redhat.com> 8.1.405-1jpp
changelog:
  - Split postgresql-jdbc into its own SRPM (at last).
  - Build it from source.  Add support for gcj compilation.


author: Tom Lane <tgl@redhat.com> 08.01.0200-1
changelog:
  - Update to version 08.01.0200.
  - Upstream now calls the library psqlodbcw.so ... add a symlink to avoid
    breaking existing odbc configuration files.


author: Tom Lane <tgl@redhat.com> 08.01.0200-2
changelog:
  - Change library name back to psqlodbc.so, because it appears that upstream
    will revert to that name in next release; no point in thrashing the name.
  - Include documentation files unaccountably omitted before (bug #184158)


author: Karel Zak <kzak@redhat.com> 3.2.7-8
changelog:
  - remove zombie patch (needs more investigation)
  - fix #208100 - top command with '-c' option become not to display list of tasks
  - fix #199174 - top returns with exit code 1 even if no error occurs


author: Karel Zak <kzak@redhat.com> 22.1.03072006cvs-1
changelog:
  - update to new upstream CVS version 
  - enable new fuser version
  - fix fuser return code 
  - fix #183897 - "pstree -a" call results in segmentation fault


author: Jason Vas Dias<jvdias@redhat.com> 3.4.5-4
changelog:
  - fix bug 158303: x86_64 build needs -fPIC
  - fix bug 155785: PVM_ARCH should be LINUX on i386, not LINUXI386
                    add LINUXPPC64 arch to pvmgetarch


author: Matthew Barnes <mbarnes@redhat.com> - 2.10.1-5.el5
changelog:
  - Spec file cleanups to match Fedora.
  - Define a python_sitelib macro for files under site_packages (bug #211806).


author: David Cantrell <dcantrell@redhat.com> - 1.8.0-1
changelog:
  - Bump version to 1.8.0 and require parted >= 1.8.0
  - Remove python-abi Requires line since rpm handles that automatically


author: David Cantrell <dcantrell@redhat.com> - 1.8.1-1
changelog:
  - Rebuild for GNU parted-1.8.1
  - Determine Python version to use in %build so the source RPM is more
    easily moved between distribution releases.
  - Resolves: rhbz#218087


author: David Cantrell <dcantrell@redhat.com> - 1.8.1-2
changelog:
  - Add parted.PedDevice.destroy() call to ped_device_destroy() in libparted.
    Needed to remove cached devices from the device list so future get()
    calls return correct info.
  - Related: rhbz#218861


author: Peter Jones <pjones@redhat.com> - 1.8.1-4
changelog:
  - Flush devices from parted's device cache, or else they become stail when
    devices are renamed (removes destroy() call).
  - Resolves: #219965


author: Zack Cerza <zcerza@redhat.com> - 0.5.4-1
changelog:
  - Remove all Requires
  - Add package versions to this changelog
  - Add new description
  - Use official Fedora Extras BuildRoot
  - Change the group to Development/Languages


author: Mihai Ibanescu <misa@redhat.com> - 2.4.3-15
changelog:
  - Fixed bug #201434 (distutils.sysconfig is confused by the change to make
    python-devel multilib friendly)


author: Konstantin Ryabitsev <icon@linux.duke.edu> - 1.2.6-2
changelog:
  - Use python_sitelib
  - Own the elementtree dir in site-packages
  - BuildRequire python-devel
  - Do not namely require expat
  - Do not use INSTALLED_FILES (safer)
  - Use ghosting for .pyo


author: Paul Nasrat <pnasrat@redhat.com> - 1.1.7-1
changelog:
  - Upgrade to latest upstream 1.1.x series
  - sqlite_prepare fix now upstream
  - Update url information


author: Than Ngo <than@redhat.com> 1:3.3.6-14.el5
changelog:
  - fix #209097, ml_IN font rendering
  - fix #209970, pa font rendering
  - fix #209098, or_IN font rendering 
  - fix #209972, as_IN font rendering
  - fix #209975, bn_IN font rendering
  - fix #211259, te_IN font rendering
  - fix #211436, as_IN font rendering
    thanks Sachin Tawniya, LingNing Zhang for the fixes


author: Than Ngo <than@redhat.com> 1:3.3.6-16.el5
changelog:
  - fix #213718, Missing help file in Qt3 assistant
  - fix #189012, qt settings should be readable for other
  - fix #214570, regression of #209972


author: Than Ngo <than@redhat.com> 1:3.3.6-16.el5
changelog:
  - fix #214371, bn_IN font rendering, incorrect rendering of two special symbols
    when used after certain consonant conjuncts


author: Than Ngo <than@redhat.com> 3.3.6-23
changelog:
  - Resolves: #277011, Qt UTF8 improper character expansion, CVE-2007-0242
  - Resolves: #269141, Qt off by one buffer overflow, CVE-2007-4137


author: Jindrich Novy <jnovy@redhat.com> 5.1-1
changelog:
  - update to readline-5.1
  - apply new proposed upstream patches for 5.1 (001-004)
  - drop "read -e" patch, applied upstream


author: Chris Feist <cfeist@redhat.com> - 2.0.29-1
changelog:
  - Virtual machines are no longer restarted when adding as a managed service
  - Made rgmanager compatible with new libdlm
  - Fixed an error which would cause a node to shutdown if you shutdown while
    processing a relocation request
  - A deadlock was fixed when doing lots of service relocations
  - Resolves: rhbz#248727 rhbz#249758 rhbz#247291 rhbz#249314


author: Chris Feist <cfeist@redhat.com> - 2.0.31-1
changelog:
  - Failed resources and their dependencies are restarted instead of the whole
    service
  - Resolves: rhbz#229650


author: Chris Feist <cfeist@redhat.com> - 2.0.31-1.el5_1.1
changelog:
  - migrate-to-self with vm's is not not allowed
  - clusvcadm no longer ignores the -F and -m options
  - Resolves: rhbz#431520 rhbz#431521


author: Tom Lane <tgl@redhat.com> 4.0-1
changelog:
  - Update pg_filedump to version 4.0, to support PostgreSQL 8.0.
  - Keep pg_crc.c on hand as a plain source file instead of a patch.
    Easier to compare to main PG sources that way.


author: Tom Lane <tgl@redhat.com> 8.1-1
changelog:
  - Update pg_filedump to version 8.1, to support PostgreSQL 8.1.
  - Change version numbering so that major version matches corresponding
    PostgreSQL version.


author: Karel Zak <kzak@redhat.com> 0.17-35
changelog:
  - added support for IPv6 (patch by Jan Pazdziora)
  - fix #198632 - add keyinit instructions to the rsh, rlogin and rexec PAM scripts
    (patch by David Howells)
  - fix #191390 - improve linefeed patch


author: Adam Tkac <atkac redhat com> 0.17-38
changelog:
  - obsoleted netkit-rsh-0.17-nohostcheck.patch
  - r{logind,shd} works when DNS isn't avaliable and -a option isn't
    specified (#222624)
  - removed wrong sentence from rsh-server description


author: Jay Fenlason <fenlason@redhat.com> 2.6.4-3
changelog:
  - Include the -address patch from upstream, to close
    bz#154752 Unable to use --address in client mode


author: Jay Fenlason <fenlason@redhat.com> 2.6.8-2
changelog:
  - New upstream release
  - Use the upstream xattr patch instead of mine.  This closes
    bz#190208 CVE-2006-2083 rsync buffer overflow issue


author: Jay Fenlason <fenlason@redhat.com> 2.6.8-3
changelog:
  - Add my xattrs_bug patch to fix a bug where xattrs don't get sent correctly.
  - Add BuildRequires to make sure libattr-devel and libacl-devel are avaliable
  - replace --with... with --enable... so they actually work
  - Add make, autoconf and gcc to BuildRequires


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-11
changelog:
  - security fixes [CVE-2006-3694]
    - ruby-1.8.4-fix-insecure-dir-operation.patch:
    - ruby-1.8.4-fix-insecure-regexp-modification.patch: fixed the insecure
      operations in the certain safe-level restrictions. (#199538)
    - ruby-1.8.4-fix-alias-safe-level.patch: fixed to not bypass the certain
      safe-level restrictions. (#199543)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-1
changelog:
  - New upstream release.
  - removed the unnecessary patches:
    - ruby-1.8.4-no-eaccess.patch
    - ruby-1.8.4-64bit-pack.patch
    - ruby-1.8.4-fix-insecure-dir-operation.patch
    - ruby-1.8.4-fix-insecure-regexp-modification.patch
    - ruby-1.8.4-fix-alias-safe-level.patch
  - build with --enable-pthread except on ppc.
  - ruby-1.8.5-hash-memory-leak.patch: backported from CVS to fix a memory leak
    on Hash. [ruby-talk:211233]


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-4
changelog:
  - security fix release.
  - ruby-1.8.5-cgi-CVE-2006-5467.patch: fix a CGI multipart parsing bug that
    causes the denial of service. (#212396)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-5
changelog:
  - security fix release.
  - ruby-1.8.5-cgi-CVE-2006-6303.patch: fix a infinite loop with certain HTTP
    request. (#218290)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-5.el5_1.1
changelog:
  - security fix for CVE-2007-5162 and CVE-2007-5770
  - ruby-1.8.5-CVE-2007-5162.patch: fix issues that is insufficient verification
    of SSL certificate. (#320331)
  - Fix the multilib regression issue.


author: Alexander Larsson <alexl@redhat.com> - 2.12.3-1
changelog:
  - update to 2.12.3
  - Fix Xnest dependency with modular X
  - Fix Xsession script being moved in FC5
  - Remove sabayon.schema from doc, as it wasn't in this release


author: <markmc@localhost.localdomain> - 2.12.3-4
changelog:
  - Remove FC4 stuff
  - Add BuildRequires for autoconf and perl-XML-Parser
  - Remove python-abi Requires


author: Alexander Larsson <alexl@redhat.com> - 2.12.3-5
changelog:
  - Rename sabayon-admin user to sabayon (< 8 chars)
  - Use registered uid/gid for user
  - Rename sabayon-admin package to sabayon, sabayon becomes sabayon-apply
  - Add workaround for Xnest crash in rawhide


author: Alexander Larsson <alexl@redhat.com> - 2.12.4-1
changelog:
  - Update to 2.14.4
  - Ghost .pyo files
  - Use a more modern pam file
  - Remove macros from changelog
  - Add usermode dependency
  - Made sabayon symlink relative
  - Add dist tag


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-0.RC3
changelog:
  - New upstream RC release.
  - Update the -logfiles, and -passwd patches for
    3.0.23rc3
  - Include the change to smb.init from Bastien Nocera <bnocera@redhat.com>)
    to close
    bz#182560 Wrong retval for initscript when smbd is dead
  - Update this spec file to build with 3.0.23rc3
  - Remove the -install.mount.smbfs patch, since we don't install
    mount.smbfs any more.


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-2
changelog:
  - New upstream release.
  - Use modified filter-requires-samba.sh from packaging/RHEL/setup/
    to get rid of bogus dependency on perl(Unicode::MapUTF8)
  - Update the -logfiles and -smb.conf patches to work with 3.0.23


author: Jay Fenlason <fenlason@redhat.com> 3.0.23a-3
changelog:
  - Fix the -logfiles patch to close
    bz#199607 Samba compiled with wrong log path.
    bz#199206 smb.conf has incorrect log file path


author: Jay Fenlason <fenlason@redhat.com> 3.0.21b-2
changelog:
  - New upstream version.
  - Since the rawhide kernel has dropped support for smbfs, remove smbmount
    and smbumount.  Users should use mount.cifs instead.
  - Upgrade to 3.0.21b


author: Simo Sorce <ssorce@redhat.com> 3.0.25b-0.el5_1.1
changelog:
  - Security fix for CVE-2007-4138
  - Security fix for CVE-2007-4572
  - Security fix for CVE-2007-5398
  - Multilib Fix
  - resolves: #351501
  - resolves: #350761
  - resolves: #359151
  - resolves: #356851


author: Simo Sorce <ssorce@redhat.com> 3.0.25b-1.el5_1.4
changelog:
  - Security fix for CVE-2007-6015
  - Fix for regression introduced with CVE-2007-4572
  - resolves: #407361
  - resolves: #407081


author: Nils Philippsen <nphilipp@redhat.com> 1.0.17-10
changelog:
  - add pkg-config support, re-write sane-config to use pkg-config to avoid
    multilib problems with conflicting sane-config scripts


author: Nils Philippsen <nphilipp@redhat.com> 1.0.17-13
changelog:
  - split package into sane-backends, -devel, -libs, -programs to work around
    multilib issues (#135172)


author: Nils Philippsen <nphilipp@redhat.com> - 1.0.18-1
changelog:
  - version 1.0.18
  - unify spec file between OS releases
  - update rpath patch
  - remove obsolete newmodels patch
  - use *.desc created udev rules


author: Nils Philippsen <nphilipp@redhat.com> - 1.0.18-2
changelog:
  - remove unneeded programs subpackage
  - clean up docs vs. libs pkg split, mark documentation as %doc


author: Jason Vas Dias <jvdias@redhat.com> - sblim-1-12.EL4
changelog:
  - fix bug 199162: prevent provider_register messages during install
  - fix IBM bug: [Bug 24459]  - RIT95208- 200593: 
    'Update of SBLIM Support for Native LPAR Performance Measurement (BTM req)
    - Mandatory patch on top of 2.1.1 level, fixing repository data corruption'


author: Nalin Dahyabhai <nalin@redhat.com> - sblim-1-13.EL5
changelog:
  - rebuild
  - call sysfs_open_device_path() instead of sysfs_open_device_tree(),
    which is no longer available in libsysfs 2.x, in sblim-gather
  - refrain from including <ansidecl.h> in sblim-wbemcli, because that
    file no longer exists
  - add buildprereq on libsysfs-devel


author: Nalin Dahyabhai <nalin@redhat.com> - sblim-1-16.EL5
changelog:
  - subpackages all include files owned by the pegasus group, so prereq the
    package which creates the group (#209128)


author: Nalin Dahyabhai <nalin@redhat.com> - sblim-1-18.EL5
changelog:
  - correct order of arguments to 'find', to avoid triggering warnings (#216768)
  - incorporate more fixes for errors scanning NFS volumes (sourceforge #1597688
    via #216708)


author: Nalin Dahyabhai <nalin@redhat.com> - sblim-1-20.EL5
changelog:
  - pull in patch to avoid crashes when the data gatherer has insufficient
    privileges (#221005)
  - redirect gather-config.h to an arch-specific file so that different values
    of SIZEOF_LONG and such defined there don't lead to file conflicts on
    multilib architectures (#222170)


author: Jens Petersen <petersen@redhat.com> - 1.4.4-30
changelog:
  - improvements to scim_panel_gtk-menu-recently-used-factories.patch
    - only list up to 5 recently used factories and only when more than 5 in menu
    - keep menu entry of recenty used factory in original place too
    - fix display of English/European entry
  - bring back Ctrl+space hotkey for Japanese and Korean users for backward
    compatibility (#201173)
  - include European keyboard in default factories again to avoid breaking
    deadkey support in XIM apps (lxo, #188357)
  - move scim modules to the main package


author: Jens Petersen <petersen@redhat.com> - 1.4.4-31
changelog:
  - improve scim_panel_gtk-menu-recently-used-factories.patch to handle
    two letter locale and "other"
  - simplify scim_panel_gtk-systray-click-199187.patch to handle switching
    between tray menus better (Qingyu Wang)
  - add scim_backup-default-engine-2letter-locale.patch to improve matching of
    m17n maps (#197058)
  - add scim_utility-Assamese-locale-fix.patch to list Assamese as as_IN


author: Jens Petersen <petersen@redhat.com> - 1.4.4-32
changelog:
  - revert tray icon to a button to get transparency working (#198259)
  - better full/half icons (Andy Fitzsimon)
  - silence remove of old alternatives (#203794)


author: Jens Petersen <petersen@redhat.com> - 1.4.4-33
changelog:
  - update xinput.d script for scim-bridge
  - improvements to menu and full/half width icons (Andy Fitzsimon)


author: Jens Petersen <petersen@redhat.com> - 1.4.4-34
changelog:
  - remove dist tag from xorg-x11-xinit requires (#204154)
  - remove scim-bridge-qt from xinput script for now
  - buildrequire gettext instead of gettext-devel


author: Jens Petersen <petersen@redhat.com> - 1.4.4-35
changelog:
  - reduce tray icon size to 12 to fit button in
    scim_panel_gtk-icon-size-fixes.patch
  - add scim-gtkimm-underline-attrib-206397.patch and
    scim_x11_frontend-underline-attrib-206397.patch from upstream cvs (#206397)
  - make Chinese full/half width icons darker


author: Jens Petersen <petersen@redhat.com> - 1.4.4-36.el5
changelog:
  - replace gtk2 prereq by requires(post) and requires(postun) to workaround
    upgrading errors due to scim-libs being installed before gtk2 gets upgraded
    (#202543)
  - obsolete iiimf-csconv (#211875)
  - improve scim-restart script to also handle scim-bridge (#210450)


author: Jens Petersen <petersen@redhat.com> - 1.4.4-37.el5
changelog:
  - add scim-panel-observe-workarea-xprop.patch to make toolbar respect desktop
    work area (Takuro Ashie, #210448)
  - add scim_x11_frontend-ic-focus-LTC27940-215953.patch to fix XIM focus
    preedit commit issue (IBM Japan, #215953)
  - add scim-fix-unload-segfault.patch to fix xim process segfaulting
    when already running (Shawn Huang, #210449)
  - obsolete also iiimf-emacs and iiimf-le-sun-thai (#211875)


author: Jens Petersen <petersen@redhat.com> - 1.4.4-38.el5
changelog:
  - move dl modules used by im-scim.so back to scim-libs for multilib (#215750)
  - improve scim-restart to also restart xim socket and only kill user's own
    processes (#210450)
  - add scim-1.4.4-gtkimm-key-snooper-off-213796.patch to turn off key snooper in
    im-scim to avoid crashes when clicking during scim gtkimm preedit
    (Shawn Huang, #214128)
  - add Hangul keysym to Korean hotkeys (#212115)


author: Jens Petersen <petersen@redhat.com> - 1.4.4-39.el5
changelog:
  - fix scim-1.4.4-gtkimm-key-snooper-off-213796.patch to a more complete working
    backport from cvs (#214128)


author: Jens Petersen <petersen@redhat.com> - 0.9.3-1
changelog:
  - initial build for Fedora Core
  - update summary and url
  - add xinput.d script for scim one to source


author: Petr Rockai <prockai@redhat.com> - 4.0.2-11
changelog:
  - change the default lockscreen shortcut to ^aX to make
    it harder to hit by accident, as per BR 157821


author: Petr Rockai <prockai@redhat.com> - 4.0.2-14
changelog:
  - put /usr/share/screen into the package (so the package owns the
    directory as well, not only the files below); fixes BR 192852


author: Petr Rockai <prockai@redhat.com> - 4.0.2-15
changelog:
  - bump MAXSTR (string buffer size) to 4k (from 256 bytes), fixes
    status line issues with window list in status line and too many
    windows (and possibly other issues with long strings)


author: Jesse Keating <jkeating@redhat.com> - 4.0.2-16
changelog:
  - Don't use %makeinstall, instead make install.
  - Change DDESTDIR to DESTDIR to do the right thing.
  - Comment out utf patch as it is no longer necessary.
  - Add dist tag
  - Change PreReq to correct Requires(pre), Requires(post), Requires(preun) 
  - Don't use RPM_SOURCE_DIR, reference the source file directly
  - Do the compiling (make) in %build, not %install
  - Don't replace /etc/screenrc if the user has modified it
  - Ditto /etc/pam.d/screen
  - Change the buildroot to follow guidelines


author: Petr Machata <pmachata@redhat.com> - 4.1.5-2
changelog:
  - #185374:
    - Follow symlinks before rename (avoid symlink overwrite)
    - Add -c flag for copy instead of rename (avoid ownership change)


author: Petr Machata <pmachata@redhat.com> - 4.1.5-4
changelog:
  - remove superfluous multibyte processing in str_append for UTF-8
    encoding (thanks Paolo Bonzini, #177246)


author: Thomas Woerner <twoerner@redhat.com> 8.13.5-3
changelog:
  - fixed selinuxenabled path in initscript
  - fixed error handling with sigwait (#137709)
    Thanks to Jonathan Kamens for the patch
  - fixed prereq for cyrus-sasl: now using /usr/sbin/saslauthd
  - appended 'dnl' to cert tags in sendmail.mc


author: Thomas Woerner <twoerner@redhat.com> 8.13.7-1
changelog:
  - new version 8.13.7 (#195282)
  - fixes CVE-2006-1173 (VU#146718): possible denial of service issue caused by
    malformed multipart messages (#195776)


author: Thomas Woerner <twoerner@redhat.com> 8.13.7-3
changelog:
  - using new syntax for access database (#177566)
  - fixed failure message while shutting down sm-client (#119429)
    resolution: stop sm-client before sendmail
  - fixed method to specify persistent queue runners (#126760)
  - removed patch backup files from sendmail-cf tree (#152955)
  - fixed missing dnl on SMART_HOST define (#166680)
  - fixed wrong location of aliases and aliases.db file in aliases man page
    (#166744)
  - enabled CipherList config option for sendmail (#172352)
  - added user chowns for /etc/mail/authinfo.db and move check for cf files
    (#184341)
  - fixed Makefile of vacation (#191396)
    vacation is not included in this sendmail package
  - /var/log/mail now belongs to sendmail (#192850)


author: Nalin Dahyabhai <nalin@redhat.com> 1.18-1
changelog:
  - fix sorting of multiple options so that precedence is determined
    correctly (#178022)
  - prefer authconfig-tui to authconfig, because if we have both, then
    authconfig is just a command-line app  (#178022)
  - actually include the README


author: Nalin Dahyabhai <nalin@redhat.com> 1.19-1
changelog:
  - fix crashers in cases when we find no configuration files (or malformed or
    useless ones) under %{_sysconfdir}/setuptool.d (#211084)


author: Phil Knirsch <pknirsch@redhat.com> 1.17-1
changelog:
  - Update to sg3-utils-1.17
  - Split package up into 3 subpackages: sg3_utils, devel and libs
  - Some minor updates to the specfile


author: Petr Raszyk <praszyk@redhat.com> - 2.0.5-5
changelog:
  - A patch by Bill Nottingham <notting@redhat.com>
    (#174761). slang-LANG.patch
    slang reads automatically sh-env-variable LANG.


author: Miroslav Lichvar <mlichvar@redhat.com> - 2.0.6-1
changelog:
  - update to slang-2.0.6
  - move .so.2 link to main package
  - don't package static library and utf8 link
  - remove requires for libtool and libtermcap
  - rearrange doc files (#191583)


author: Jindrich Novy <jnovy@redhat.com> 0.9.8.1-3
changelog:
  - package contrib subdir because of slrn-conv script (#73451)
  - slrnpull.conf is now %config(noreplace), original config
    won't be overwritten (#56001)
  - include slrnpull man page


author: Jindrich Novy <jnovy@redhat.com> 0.9.8.1-5
changelog:
  - apply official bugfix patches (#164363)
    - fixes slrnpull problem with group containing no headers
    - fixes last character removal editor problem


author: Matthias Clasen <mclasen@redhat.com> - 2.16.0-3
changelog:
  - Backport a number of fixes from 2.16.2 (216821, 216823,
    216824, 216825, 216826, 216828, 216829, 216830)


author: Thomas Woerner <twoerner@redhat.com> 12.17.7-3
changelog:
  - fixed bad link for man/man1/rec.1.gz (#154089)
  - using /usr/include instead of kernel-devel includes


author: Warren Togami <wtogami@redhat.com>
changelog:
  - Options for RHEL4
      * spamc/spamd cannot connect over IPv6 or SSL
      * sa-update is disabled
    The above functionality requires perl modules not included in RHEL4.
    You may still use them if you get those perl modules from elsewhere.
    RHEL5 ships these perl modules.


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 3.1.1-13
changelog:
  - Manual.pdf - file permissions corrected.
  - Included a demo .splintrc file as doc (splintrc.demo == src/.splintrc).


author: Paul Nasrat <pnasrat@redhat.com> - 3.3.6-1
changelog:
  - Update to 3.3.6
  - Fix typo  (#189647)
  - Enable threading fixes (#181298)
  - Conditionalize static library


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE4-2
changelog:
  - upstream fixes:
    * Accept 00:00-24:00 as a valid time specification (upstream BZ #1794)
    * aioDone() could be called twice
    * Squid reconfiguration (upstream BZ #1800)


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE6-2
changelog:
  - added upstream fixes for CVE-2007-0247 - Squid crashes 
    when receiving certain FTP listings
  - Resolves: rhbz#222884


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE6-3
changelog:
  - added upstream fix for #223439 - Responses without Expires get 
    assigned one an hour in the future
  - Resolves: rhbz#223439


author: Ray Strode <rstrode@redhat.com> 0.8-3
changelog:
  - change to new modular X dependencies
  - move configure to build instead of prep
  - use make install DESTDIR=$RPM_BUILD_ROOT instead of
    
    /usr/bin/make \
  	prefix=/var/tmp/startup-notification-root/usr \
  	exec_prefix=/var/tmp/startup-notification-root/usr \
  	bindir=/var/tmp/startup-notification-root/usr/bin \
  	sbindir=/var/tmp/startup-notification-root/usr/sbin \
  	sysconfdir=/var/tmp/startup-notification-root/etc \
  	datadir=/var/tmp/startup-notification-root/usr/share \
  	includedir=/var/tmp/startup-notification-root/usr/include \
  	libdir=/var/tmp/startup-notification-root/usr/lib \
  	libexecdir=/var/tmp/startup-notification-root/usr/libexec \
  	localstatedir=/var/tmp/startup-notification-root/var \
  	sharedstatedir=/var/tmp/startup-notification-root/usr/com \
  	mandir=/var/tmp/startup-notification-root/usr/share/man \
  	infodir=/var/tmp/startup-notification-root/usr/share/info \
    install


author: Ray Strode <rstrode@redhat.com> 0.8-3
changelog:
  - change to new modular X dependencies
  - move configure to build instead of prep
  - use make install DESTDIR=$RPM_BUILD_ROOT instead of
    
    /usr/bin/make \
  	prefix=/var/tmp/startup-notification-root/usr \
  	exec_prefix=/var/tmp/startup-notification-root/usr \
  	bindir=/var/tmp/startup-notification-root/usr/bin \
  	sbindir=/var/tmp/startup-notification-root/usr/sbin \
  	sysconfdir=/var/tmp/startup-notification-root/etc \
  	datadir=/var/tmp/startup-notification-root/usr/share \
  	includedir=/var/tmp/startup-notification-root/usr/include \
  	libdir=/var/tmp/startup-notification-root/usr/lib64 \
  	libexecdir=/var/tmp/startup-notification-root/usr/libexec \
  	localstatedir=/var/tmp/startup-notification-root/var \
  	sharedstatedir=/var/tmp/startup-notification-root/usr/com \
  	mandir=/var/tmp/startup-notification-root/usr/share/man \
  	infodir=/var/tmp/startup-notification-root/usr/share/info \
    install


author: Roland McGrath <roland@redhat.com> - 4.5.12-1
changelog:
  - Fix known syscall recognition for IA32 processes on x86-64 (#158934).
  - Fix bad output for ptrace on x86-64 (#159787).
  - Fix potential buffer overruns (#151570, #159196).
  - Make some diagnostics more consistent (#159308).
  - Update PowerPC system calls.
  - Better printing for Linux aio system calls.
  - Don't truncate statfs64 fields to 32 bits in output (#158243).
  - Cosmetic code cleanups (#159688).


author: Roland McGrath <roland@redhat.com> - 4.5.13-1
changelog:
  - Fix setsockopt decoding on 64-bit (#162449).
  - Fix typos in socket option name strings (#161578).
  - Display more IPV6 socket options by name (#162450).
  - Don't display inappropriate syscalls for -e trace=file (#159340).
  - New selector type -e trace=desc for file-descriptor using calls (#159400).
  - Fix 32-bit old_mmap syscall decoding on x86-64 (#162467, #164215).
  - Fix errors detaching from multithreaded process on interrupt (#161919).
  - Note 4.5.12 fix for crash handling bad signal numbers (#162739).


author: Roland McGrath <roland@redhat.com> - 4.5.14-1
changelog:
  - Fix biarch decoding of socket syscalls (#174354).
  - Fix biarch -e support (#173986).
  - Accept numeric syscalls in -e (#174798).
  - Fix ipc syscall decoding (#164755).
  - Improve msgrcv printing (#164757).
  - Man page updates (#165375).
  - Improve mount syscall printing (#165377).
  - Correct printing of restarting syscalls (#165469).


author: Jakub Jelinek <jakub@redhat.com> - 4.5.14-4
changelog:
  - Fix ia64 syscall decoding (#206768)
  - Fix build with glibc-2.4.90-33 and up on all arches but ia64
  - Fix build against 2.6.18+ headers


author: Roland McGrath <roland@redhat.com> - 4.5.15-1
changelog:
  - biarch fixes (#179740, #192193, #171626, #173050, #218433, #218043)
  - fix -ff -o behavior (#204950, #218435, #193808, #219423)
  - better quotactl printing (#118696)
  - *at, inotify*, pselect6, ppoll and unshare syscalls (#178633, #191275)
  - glibc-2.5 build fixes (#209856)
  - memory corruption fixes (#200621
  - fix race in child setup under -f (#180293)
  - show ipc key values in hex (#198179, #192182)
  - disallow -c with -ff (#187847)
  - Resolves: RHBZ #179740, RHBZ #192193, RHBZ #204950, RHBZ #218435
  - Resolves: RHBZ #193808, RHBZ #219423, RHBZ #171626, RHBZ #173050
  - Resolves: RHBZ #218433, RHBZ #218043, RHBZ #118696, RHBZ #178633
  - Resolves: RHBZ #191275, RHBZ #209856, RHBZ #200621, RHBZ #180293
  - Resolves: RHBZ #198179, RHBZ #198182, RHBZ #187847


author: Fernando Nasser <fnasser@redhat.com> - 0:1.2.9-3jpp
changelog:
  - Remove duplicate macros
  - Fix removal of old struts-el documentation link
  - Create coreonly option


author: Fernando Nasser <fnasser@redhat.com> - 0:1.2.9-3jpp.1
changelog:
  - Merge with upstream for upgrade to 1.2.9
  - Use symlinks instead of actual files in WEB-INF/lib folders
  - Add conditional native compilation


author: Joe Orton <jorton@redhat.com> 1.3.2-2
changelog:
  - update to 1.3.2
  - fix Ruby sitelibdir (Garrick Staples, #191611)
  - own /etc/subversion (#189071)
  - update to psvn.el r19857


author: Karel Zak <kzak@redhat.com> 1.6.8p12-7
changelog:
  - fix #198755 - make login processes (sudo -i) initialise session keyring
    (thanks for PAM config files to David Howells)
  - add IPv6 support (patch by Milan Zazrivec)


author: Doug Ledford <dledford@redhat.com> - 2.0.0-3
changelog:
  - Split the library and devel files out to libsysfs and leave the utils
    in sysfsutils.  This is for multilib arch requirements.


author: David Cantrell <dcantrell@redhat.com> - 3.11-3
changelog:
  - Remove com32/include/time.h and com32/include/sys/times.h
  - Replace CLK_TCK macros with CLOCKS_PER_SEC


author: Frank Ch. Eigler <fche@redhat.com> - 0.5.7-1
changelog:
  - PRs 2511 2453 2307 1813 1944 2497 2538 2476 2568 1341 2058 2220 2437
    1326 2014 2599 2427 2438 2465 1930 2149 2610 2293 2634 2506 2433


author: Peter Vrabec <pvrabec@redhat.com> 2:1.15.1-23
changelog:
  - Fix default ACLs on files problem. Header fixes. root => trusted.
  - Fix NIL termination for ACLs.
  - Fix star/POSIX compat. for ACLs
  - Resolves: #221971
  - all fixes made by james.antill@redhat.com


author: David Cantrell <dcantrell@redhat.com> - 8.4.12-1
changelog:
  - Upgraded to tcl-8.4.12
  - Use ksh rather than bash for the configure script (known bug w/ bash-3.1)
  - Generate HTML docs from source
  - Add in the Tk source for HTML doc generation


author: Jens Petersen <petersen@redhat.com> - 8.3.5-6
changelog:
  - add unversioned symlinks to the static libs (Dave Botsch, 149734)
  - rebuild with gcc 4
    - add tclx-8.3.5-clock_t-gcc4.patch to skip clock_t test in configure
    - buildrequire autoconf213


author: David Cantrell <dcantrell@redhat.com> - 8.4.0-1
changelog:
  - Upgraded to tclx-8.4.0
  - Removed patches that applied to the old build method for tclx
  - Removed Tcl and Tk doc archives


author: MATSUURA Takanori <t-matsuu@estyle.ne.jp> 3.0-28.1.fc6
changelog:
  - fix platex2e_inputs macro
  - fix dupulicated entry of %{_datadir}/texmf/(p)xdvi/XDvi
  - announce update pxdvi to 22.84.10-j1.33


author: Miloslav Trmac <mitr@redhat.com> - 4.8-8
changelog:
  - Ignore scriptlet failures with --excludedocs (#166958)
  - Don't link texindex to zlib, don't pretend to link to zlib statically


author: Miloslav Trmac <mitr@redhat.com> - 4.8-12
changelog:
  - Don't leave around temporary files used by texindex
  - Add missing error handling to texinfo-CAN-2005-3011.patch


author: Jens Petersen <petersen@redhat.com> - 8.4.9-3
changelog:
  - tk-devel requires tcl-devel and xorg-x11-devel instead of XFree86-devel
  - use sed instead of perl for fixing tkConfig.sh
    - buildrequire sed instead of perl
  - buildrequire xorg-x11-devel instead of XFree86-devel
  - rebuild with gcc 4


author: Karsten Hopp <karsten@redhat.de> 0.17.3-3
changelog:
  - don't check for sizeof(long), the result isn't used anywhere and
    causes problems with multilib installs


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:5.5.23-0jpp.1
changelog:
  - Merge 0:5.5.17-8jpp.2 with sources/patches from 5.5.23
  - Build against jakarta-commons-modeler 1.1 with MODELER-15 patch


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:5.5.23-0jpp.1.0.3.el5
changelog:
  - Rebuild since brp-repack-jars has been fixed to not mangle INDEX.LIST files -
    (bug 238139)
  - Resolves: bug 237089


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:5.5.23-0jpp.1.0.4.el5
changelog:
  - Remove erroneous rebuild-gcj-db for javadoc subpackage
  - Add fixes for CVE-2007-2449 and CVE-2007-2450
  - resolves: bug 244846, bug 244816


author: Fernando Nasser <fnasser@redhat.com> - 0:5.5.23-0jpp.3.0.2
changelog:
  From jean-frederic clere <jclere@redhat.com>:
  - Patch for CVE-2007-3382 and CVE-2007-3385
    Resolves: rhbz#254155


author: Than Ngo <than@redhat.com> 3.2.4-14
changelog:
  - fix #191825, buildrequire on imake
  - fix #173748, fig2dev still refers to /usr/X11R6/lib/X11/rgb.txt


author: Lingning Zhang <lizhang@redhat.com> - 3.0.9-20
changelog:
  - add ttmkfdir-3.0.9-encoding-dir.patch to fix bug #173705
  - modify ttmkfdir-3.0.9/Makefile to delete the compiling flag of "ggdb"


author: Lingning Zhang <lizhang@redhat.com> - 3.0.9-20.1
changelog:
  - remove the modifying part of ttmkfdir-3.0.9/Makefile, recover the old Makefile
  - modify ttmkfdir-3.0.9-encoding-dir.patch about Makefile


author: Lingning Zhang <lizhang@redhat.com> - 3.0.9-20.4
changelog:
  - modify "%post" and add "Requires(post)" in ttmkfdir.spec for fixing bug173591, bug207279, bug208122


author: Harald Hoyer <harald@redhat.com> - 095-9
changelog:
  - improved error msg for firmware_helper (bug #206944)
  - added xpram symlink to slram device nodes (bug #205563)
  - removed infiniband rules (bug #206224)
  - use newest path_id script (bug #207139)


author: Harald Hoyer <harald@redhat.com> - 095-14.1.el5
changelog:
  - Do not ignore dm devices completly (rhbz#204157, rhbz#214639)
  - Remove tty devices from udev.nodes (rhbz#209204)
  - Resolves: rhbz#204157, rhbz#214639, rhbz#209204


author: Harald Hoyer <harald@localhost.localdomain> - 095-14.5.el5
changelog:
  - added symlink to /sbin/dasd_id (#219181)
  - added more debugging possibilities (#219621)
  - Resolves: rhbz#219181, rhbz#219621


author: Miloslav Trmac <mitr@redhat.com> 2.2-24
changelog:
  - Don't just delete the original file when destination and current directory
    are on different filesystems


author: Tom Lane <tgl@redhat.com> 2.2.11-2
changelog:
  - Remove Makefiles accidentally included in docs installation (bz #168819)
  - Updates to keep newer libtool code from installing itself as part of package


author: Tom Lane <tgl@redhat.com> 2.2.11-3
changelog:
  - Force update of yac.h because the copy in the distributed tarball does not
    match bison 2.0's numbering of symbols (bz #162676)
  - Include documentation of text-file driver
  - Use private libltdl so we can omit RTLD_GLOBAL from dlopen flags (bz #161399)


author: Tom Lane <tgl@redhat.com> 2.2.11-6
changelog:
  - Patch NO-vs-no discrepancy between aclocal/acinclude and recent autoconf
    versions (not sure if this has been broken for a long time, or was just
    exposed by modular X changeover).
  - Apparently need to require libXt-devel too for modular X.


author: Ivana Varekova <varekova@redhat.com> 5.52-2
changelog:
  - fix bug 180078 - unzip -l causing error
  - fix CVE-2005-4667 - unzip long file name buffer overflow


author: Keshav Sharma <keshav.sharma@oracle.com> 5.10.1-41.0
changelog:
  - Fixed bug - --CHANNEL FILTER BROKEN IN V4.5.5-41.6.EL4 (bug 6044543)
  - updated tar file new GPG keys and changes the version.


author: Keshav Sharma <keshav.sharma@oracle.com> 5.10.1-41.1
changelog:
  - Added new required dependencies.
  - enable installation of /etc/sysconfig/rhn/sources as part of up2date  (oracle-add-sources.patch)
  - fix OS version (oracle-osversion.patch)
  - Fixed gtk depricate calls (oracle-gtk-deprecated.patch)


author: Martin Bacovsky <mbacovsky@redhat.com> 1.86-1
changelog:
  - fix userpasswd - Query window pops up three times if cancelling passwd (#202924)
  - Serbian latin script translation added (#203003)


author: Karel Zak <kzak@redhat.com> 2.13-0.40
changelog:
  - fix Makefile.am in util-linux-2.13-mount-context.patch
  - fix #201343 - pam_securetty requires known user to work
                  (split PAM login configuration to two files)
  - fix #203358 - change location of taskset binary to allow for early affinity work


author: Karel Zak <kzak@redhat.com> 2.13-0.41
changelog:
  - fix #205038 - mount not allowing sloppy option (exports "-s"
    to external /sbin/mount.nfs(4) calls) 
  - fix minor bug in util-linux-2.13-mount-twiceloop.patch
  - fix #188193- util-linux should provide plugin infrastructure for HAL


author: Karel Zak <kzak@redhat.com> 2.13-0.42
changelog:
  - remove obsolete NFS code and patches (we use /sbin/mount.nfs
    and /sbin/umount.nfs from nfs-utils now)
  - move nfs.5 to nfs-utils


author: Karel Zak <kzak@redhat.com> 2.13-0.43
changelog:
  - fix #209911 - losetup.8 updated (use dm-crypt rather than deprecated cryptoloop)
  - fix #210338 - spurious error from '/bin/login -h $PHONENUMBER' (bug in IPv6 patch)
  - fix #208634 - mkswap "works" without warning on a mounted device


author: Karel Zak <kzak@redhat.com> 2.13-0.43.1
changelog:
  - fix #211827 - Can't mount with additional contexts
  - fix #213127 - mount --make-unbindable does not work
  - fix #216489 - SCHED_BATCH option missing in chrt
  - fix #216712 - issues with raw device support
    (disable raw0 usage, move the raw command to /bin, update man page)
  - fix #216664 - we need to the raw script and configuration file


author: Karel Zak <kzak@redhat.com> 2.13-0.43.3
changelog:
  - fix #219569 - smbfs -> cifs (upgrade from -pre6 to -pre7 upstream version)
  - fix #218915 - fdisk -b 4K
  - remove unused patches


author: Karel Zak <kzak@redhat.com> 2.13-0.45
changelog:
  - fix #237659 - add -r option to losetup to create a read-only loop
  - fix #235495 - mount -f does not work with NFS-mounted file system
  - fix #234303 - src.rpm does't build
  - fix #228731 - sfdisk doesn't support DM-MP device (add default heads and sectors)
  - fix #231192 - ipcs is not printing correct values on pLinux
  - fix #245533 - translation files exist, but are not being used


author: Karel Zak <kzak@redhat.com> 2.13-0.45.el5_1.1
changelog:
  - fix #324461 - CVE-2007-5191 util-linux (u)mount doesn't drop
                  privileges properly when calling helpers


author: Peter Vrabec <pvrabec@redhat.com> 1.07-10
changelog:
  - revert fix from 1.07-9
  - fix truncation of values on 32b platforms where statvfs64
    is being called on a large file system (#153259)


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:1.4-5jpp_1fc
changelog:
  - Merge with latest from JPP.
  - Remove fileversion and my_version macros.
  - Remove notexentests patch and replace with a patch to disable
  - failure on tests.


author: Karsten Hopp <karsten@redhat.com> 7.0.109-1
changelog:
  - update to patchlevel 109 to fix some redraw problems
  - fix invisible comments in diff mode (#204042)


author: Daniel Berrange <berrange@redhat.com> - 0.2.6-1.el5
changelog:
  - Updated to match 0.2.6-2 release from FC6 tree (bz 218537)
  - Handle errors when hostname resolution fails to avoid app exiting
  - Make (most) scrollbar policies automatic
  - Set busy cursor while creating new VMs
  - Preference for controlling keygrab policy
  - Added activation of URLs for about dialog
  - Improved error reporting when connecting to HV
  - Don't skip para/full virt wizard step - instead gray out full
    virt option & tell user why
  - Change 'physical' to 'logical' when refering to host CPUs
  - Include hostname in titlebar
  - Disable wizard sensitivity while creating VM


author: Hugh Brock <hbrock@redhat.com> - 0.2.6-3.el5
changelog:
  - Updated memory-setting UI to include a hard upper limit for physical 
    host RAM
  - Added documentation on the page warning that setting virtual host RAM
    too high can exhaust the memory of the machine


author: Hugh Brock <hbrock@redhat.com> - 0.2.6-5.el5
changelog:
  - Add selector for sparse or non-sparse file, defaulting to non-sparse. 
    Add appropriate warnings and progress-bar text. (bz 218996)


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.6-7.el5
changelog:
  - Explicitly drop the libvirt virDomainPtr object when a guest shuts down
    to avoid hanging onto objects in libvirt cache (bz 220036)


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.5-1.el5
changelog:
  - Switch to use python-virtinst instead of python-xeninst due to 
    renaming of original package
  - Disable keyboard accelerators when grabbing mouse to avoid things like
    Ctrl-W closing the local window, instead of remote window bz 210364
  - Fix host memory reporting bz 211281
  - Remove duplicate application menu entry bz 211230
  - Fix duplicated mnemonics (bz 211231)
  - Use a drop down list to remember past URLs (bz 211233)
  - Remove unused help button from preferences dialog (bz 211232)
  - Fix exception when no VNC graphics is defined
  - Force immediate refresh of VMs after creating a new one
  - Improve error reporting if run on a kernel without Xen (bz 211229)
  - More fixes to avoid stuck modifier keys on focus-out (bz 211461)


author: Hugh O. Brock <hbrock@redhat.com> - 0.2.5-2.el5
changelog:
  - Add command-line interface for virt-manager (bz 211553)
  - Make virt-manager exit gtk.main when windows opened from the 
    command-line interface are closed (bz 213782)


author: Hugh O. Brock <hbrock@redhat.com> - 0.4.0-3.el5
changelog:
  - Aggressively free libvirt domain object after it has been deleted. Workaround
    for python's unreliable garbage collection. (rhbz #249094)


author: Karel Zak <kzak@redhat.com> 1.3-20
changelog:
  - #164950 - call account management and credential reinitialization functions
    (patch by Nalin Dahyabhai)


author: Akira TAGOH <tagoh@redhat.com> 0.5.1-12
changelog:
  - rebuilt against the latest openssl.
  - gc6.2-fix-prelink.patch: removed.
  - w3m-fix-vi-prec-num.patch: applied to get the vi-like prefix working.


author: Joe Orton <jorton@redhat.com> 2.01_10-29
changelog:
  - run with -Q from cron (#120913)
  - remove ancient trigger and post scriptlets
  - only read webalizer.conf from $PWD if owner matches user (#158174)


author: Radek Vokál <rvokal@redhat.com> 0.99.3-1
changelog:
  - upgrade to 0.99.3
  - Wireshark 0.99.3 fixes the following vulnerabilities:
  - the SCSI dissector could crash. Versions affected: CVE-2006-4330
  - the IPsec ESP preference parser was susceptible to off-by-one errors. CVE-2006-4331
  - a malformed packet could make the Q.2931 dissector use up available memory. CVE-2006-4333


author: Radek Vokál <rvokal@redhat.com> 0.99.4-1
changelog:
  - upgrade to 0.99.4, fixes multiple security issues (#211993)
  - use dist tag
  - CVE-2006-5468 - The HTTP dissector could dereference a null pointer.
  - CVE-2006-5469 - The WBXML dissector could crash.
  - CVE-2006-5470 - The LDAP dissector (and possibly others) could crash.
  - CVE-2006-4805 - Basic DoS, The XOT dissector could attempt to allocate a large amount of memory and crash.
  - CVE-2006-4574 - Single byte \0 overflow written onto the heap


author: Radek Vokál <rvokal@redhat.com> 0.99.5-1
changelog:
  - multiple security issues fixed (#225781)
  - CVE-2007-0459 - The TCP dissector could hang or crash while reassembling HTTP packets
  - CVE-2007-0459 - The HTTP dissector could crash.
  - CVE-2007-0457 - On some systems, the IEEE 802.11 dissector could crash.
  - CVE-2007-0456 - On some systems, the LLT dissector could crash.


author: Radek Vokál <rvokal@redhat.com> 0.99.6-1
changelog:
  - upgrade to 0.99.6
  - Wireshark could crash when dissecting an HTTP chunked response
  - Wireshark could crash while reading iSeries capture files
  - Wireshark could exhaust system memory while reading a
    malformed DCP ETSI packet
  - Wireshark could loop excessively while reading a malformed SSL packet
  - Resolves: #247623


author: Radek Vokál <rvokal@redhat.com> 0.99.7-1
changelog:
  - upgrade to 0.99.7
  - switch to libsmi from net-snmp
  - disable ADNS due to its lack of Ipv6 support
  - Resolves: #397411


author: Dan Williams <dcbw@redhat.com> - 0.4.8-4
changelog:
  - Add additional BuildRequires #rh181914#
  - Add prereq on chkconfig #rh182905# #rh182906#
  - Own /var/run/wpa_supplicant and /etc/wpa_supplicant #rh183696#


author: Dan Williams <dcbw@redhat.com> - 0.4.8-6
changelog:
  - Add patch to make orinoco happy with WEP keys
  - Enable Prism54-specific driver
  - Disable ipw-specific driver; ipw2x00 should be using WEXT instead


author: Dan Williams <dcbw@redhat.com> - 0.4.8-10
changelog:
  - Add fix for madwifi and WEP (wpa_supplicant/hostap bud #140) (#rh190075#)
  - Fix up madwifi-ng private ioctl()s for r1331 and later
  - Update madwifi headers to r1475


author: Ralph Apel <r.apel at r-apel.de> 0:1.5.2-1jpp
changelog:
  - update to 1.5.2
  - move qname*.jar to /usr/share/java/wsdl4j/qname*.jar
    to make place for qname provided by geronimo-specs


author: Karsten Hopp <karsten@redhat.de> 3.3.4p7-2
changelog:
  - silence chkconfig
  - rpmlint fixes:
   - replace PreReq/BuildPrereq with Requires/BuildRequires
   - move ibm_hosts to %{_sysconfdir}
   - fix end of line encodings in docs


author: Kevin Lyons <kevin.x.lyons@oracle.com> 3.3.4p7-3.el5.1.0.1
changelog:
  - Added patch to prevent incorrect options from being passed to makeconv during build
  - http://bugs.sourcemage.org/show_bug.cgi?id=13490


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:2.7.0-3jpp_1fc
changelog:
  - Merge with latest version from jpp.
  - Undo ExcludeArch since eclipse available for all arch-es.
  - Remove jars from sources for new upstream version.
  - Purge unused patches from previous release.
  - Conditional native compilation with GCJ.
  - Use NVR macros wherever possible.


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:2.7.0-5jpp.1
changelog:
  - Resync with latest from JPP.
  - Partially adopt new naming convention (.1 suffix).
  - Use ln and rm explicitly instead of core-utils in Requires(x).


author: Warren Togami <wtogami@redhat.com> - 1:2.6.6-3
changelog:
  - enable optional spell checking if you install enchant
    because gtkspell is currently unusable (#201116)


author: Jindrich Novy <jnovy@redhat.com> 1.1.3-16
changelog:
  - fix conflicting storage classes that causes build failure with gcc4
  - gcc4 warnfixes
  - create backups for patches
  - drop libtool BuildRequires
  - rebuild with gcc4


author: Jindrich Novy <jnovy@redhat.com>1.1.3-17
changelog:
  - link libxdelta against libedsio (#165978)
  - add support for large files (#155524)
  - port to use glib2 instead of obsolete glib1.2 (#136221)


author: Ludek Smid <lsmid@redhat.com> 1.1.3-19
changelog:
  - libtoolize and autotools are now run during build phase
  - resolved multilib conflict using pkgconfig tool


author: Fernando Nasser <fnasser@redhat.com> - 0:1.2.3-5jpp
changelog:
  - Update objectweb module to match JOnAS 4.6.x
  - Build without demo because JPP 1.7 lacks webwork and xwork


author: Matt Wringe <mringe at redhat.com> - 0:1.2.3-6jpp
changelog:
  - Add conditional native compiling
  - Add missing buildrequires: ant-nodeps and ant-trax
  - Add missing javadoc %ghost symlink


author: Matt Wringe <mwringe at redhat.com> - 0:1.2.3-6jpp_1fc
changelog:
  - Merge with upstream version
  - Remove dependency on maven, use ant instead
  - Natively compile jpackages


author: Matt Wringe <mwringe at redhat.com> - 0:1.2.3-7jpp.1
changelog:
  - Merge with upstream version
  - Remove unnecessary define with_gcj_support
  - Add missing javadoc requires
  - Add missing javadoc postun


author: Rik van Riel <riel@redhat.com> - 3.0.3-18.el5
changelog:
  - add --force option to xenbus device detach code (rhbz#217853)
  - fix keeping track of HVM vnc password (rhbz#218050)


author: Rik van Riel <riel@redhat.com> - 3.0.3-19.el5
changelog:
  - fix memory boundary checking in qemu-dm (rhbz#221119)
  - fix VNC JP106 keyboard handling (rhbz#215778)


author: Rik van Riel <riel@redhat.com> - 3.0.3-20.el5
changelog:
  - fix core dumps of 32 bit guests >2GB RAM (rhbz#215796)
  - write the /local/domain/vm node early in the startup process (rhbz#215269)


author: Rik van Riel <riel@redhat.com> - 3.0.3-21.el5
changelog:
  - make /var/log/xen only readable by root (rhbz#212082)
  - we no longer package /var/xen/dump, so don't mkdir it


author: Rik van Riel <riel@redhat.com> - 3.0.3-25.0.1.el5
changelog:
  - disable qemu monitor mode, for security reasons (rhbz#230295)
  - fix IA64 shadow page table mode (rhbz#230459, rhbz#230331)


author: Chris Lalancette <clalance@redhat.com> - 3.0.3-25.0.4.el5
changelog:
  - QEmu cirrus bitblit bounds check - CVE-2007-1320 (rhbz #296271)
  - QEmu NE2000 overflow check - CVE-2007-1321 (rhbz #296271)
  - Pygrub guest escape - CVE-2007-4993 (rhbz #302821)


author: Rik van Riel <riel@redhat.com> - 3.0.3-17.el5
changelog:
  - enable DMA on HVM virtual cdrom drive (rhbz#218357)
  - new paravirt framebuffer, as merged upstream (rhbz#218050)


author: Ralph Apel <r.apel at r-apel.de> 0:2.7.1-2jpp
changelog:
  - First JPP-1.7 release
  - use tools subdir and give it as java.endorsed.dirs (for java-1.4.2-bea e.g.)


author: Matt Wringe <mwringe at redhat.com> 0:2.7.1-7jpp
changelog:
  - Add conditional native compiling
  - Add missing requires for javadocs
  - Add missing requires for post and preun
  - Update version to 7jpp at Fedora's request


author: Than Ngo <than@redhat.com> 3.2.4-20
changelog:
  - fix #169330, wrong docdir
  - fix #187902, no parameter negotiation for xfig
  - fix #182451, switch xfig's pdf viewer to evince


author: Ralph Apel <r.apel at r-apel.de> 1.0.3-1jpp
changelog:
  - upgrade to 1.0.3
  - just eliminate __GENERATED__ tests because no sources for old xdoclet 
  - add xjavadoc javadoc subpackage


author: Gary Benson <gbenson@redhat.com> - 0:1.0-0.b2.7jpp_3fc
changelog:
  - Build on ia64, ppc64, s390 and s390x.
  - Switch to aot-compile-rpm (also BC-compiles the which jar).


author: Christopher Aillon <caillon@redhat.com> 1.2.9-4
changelog:
  - NSS has been split out of the mozilla package, so require that now
    and update separate_nspr.patch to account for the new NSS as well


author: Adam Jackson <ajackson@redhat.com> 1.6.5-2.fc6
changelog:
  - Update i810 to 1.6.5, should fix DRI.
  - Add kuzdu requires.
  - i810.xinf: Start whitelisting devices over to intel.


author: Adam Jackson <ajackson@redhat.com> 1.6.5-5.fc6
changelog:
  - intel-945gm-lfp-blacklist.patch: Tweak the Apple blacklist to (hopefully)
    correctly distinguish between Mac Mini and Macbook Pro.


author: Adam Jackson <ajackson@redhat.com> 1.6.5-6.fc6
changelog:
  - i810-1.6.5-to-git-20060911.patch: Backport post-1.6.5 fixes from git.
  - i810-match-server-sync-ranges.patch: Make a terrible heuristic in the
    driver match the corresponding terrible heuristic in the server.


author: Adam Jackson <ajackson@redhat.com> 1.6.5-8.fc6
changelog:
  - Change 'Requires: kudzu >= foo' to 'Conflicts: kudzu < foo' since we don't
    actually require kudzu to run.


author: Mike A. Harris <mharris@redhat.com> 1.0.1.2-1
changelog:
  - Updated xorg-x11-drv-keyboard to version 1.0.1.2 from X11R7 RC4
  - Removed 'x' suffix from manpage dirs to match RC4 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1.3-1
changelog:
  - Updated xorg-x11-drv-keyboard to version 1.0.1.3 from X11R7.0
  - Added alpha/sparc/sparc64 to ExclusiveArch list (#176590)


author: Mike A. Harris <mharris@redhat.com> 0.2.1-4
changelog:
  - Updated via.xinf to fix numerous errors an inaccuracies (#195806)
  - Conditionalized DRI support by adding with_dri macro.


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.21
changelog:
  - xserver-1.3.0-pci-bus-count.patch: Fix cases where the VGA adaptor is
    not in the first 128 devices. (#236202)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.22
changelog:
  - xserver-1.1.1-vbe-panelid.patch: Add VBE core call for panel information,
    so we can better handle panels with no EDID. (#237121)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.23
changelog:
  - xserver-1.3.0-xkb-and-loathing.patch: Ignore (not just block) SIGALRM
    around calls to Popen()/Pclose().  Fixes a hang in openoffice when
    opening menus. (#210750)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.25
changelog:
  - xserver-1.1.1-acpi-tokenising-fix.patch: Also expose the builderstring
    as an exported server symbol so external drivers can notice the bugfix.
    (#246175)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.26
changelog:
  - xserver-1.1.1-mmap-{expansion,failure}: Revert, required kernel changes
    not included in 5.1. (#233981)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.26.4
changelog:
  - cve-2007-5760.patch: XFree86-Misc Extension Invalid Array Index Vulnerability
  - cve-2007-5958.patch: Xorg / XFree86 file existence disclosure vulnerability
  - cve-2007-6427.patch: XInput Extension Memory Corruption Vulnerability
  - cve-2007-6428.patch: TOG-CUP Extension Memory Corruption Vulnerability
  - cve-2007-6429.patch: EVI and MIT-SHM Extension Integer Overflow Vulnerability


author: Nils Philippsen <nphilipp@redhat.com> - 0.99-3
changelog:
  - fix medium-definitions patch to not barf on obsolete options in config file
    (#185269, by Aldy Hernandez)


author: Nils Philippsen <nphilipp@redhat.com> - 0.99-5
changelog:
  - re-add desktop file (#170835)
  - use %buildroot consistently
  - add automake, autoconf build requirements


author: Mike A. Harris <mharris@redhat.com> 1:2.1.0-9
changelog:
  - I seem to have just unknowingly won the xsri package in a game of package
    roulette.  I pledge my allegiance to make it the best eye-candy app on the
    desktop for 2005.
  - Rebuilt with gcc 4 for FC4
  - Make rpm install section export RPM_OPT_FLAGS in CFLAGS


author: Lon Hohberger <lhh@redhat.com> 2.3-24
changelog:
  - Extend max file/archive size to 2^32-8193 (4294959103) bytes
  - Include better debugging output for configure script


