# changelog

author: Don Zickus <dzickus@redhat.com> [2.6.18-5.el5]
changelog:
  - x86: /proc/mtrr interface MTRR bug fix (Bhavana Nagendra ) [223821]
  - Revert: bonding: eliminate rtnl assertion spew (Andy Gospodarek ) [210577]
  - ia64: Check for TIO errors on shub2 Altix (George Beshers ) [223529]
  - nfs: Unable to mount more than 1 Secure NFS mount (Steve Dickson ) [220649]


author: Don Zickus <dzickus@redhat.com> [2.6.18-4.el5]
changelog:
  - IPSec: incorrect return code in xfrm_policy_lookup (Eric Paris ) [218591]
  - more kabi whitelist updates (Jon Masters)


author: Don Zickus <dzickus@redhat.com> [2.6.18-3.el5]
changelog:
  - scsi: fix EX8350 panic (stex.ko) (Jun'ichi Nick Nomura ) [220783]
  - Audit: Mask upper bits on 32 bit syscall auditing on ppc64 (Eric Paris ) [213276]


author: Don Zickus <dzickus@redhat.com> [2.6.18-2.el5]
changelog:
  - mm: handle mapping of memory without a struct page backing it (Erik Jacobson ) [221029]
  - rng: check to see if bios locked device (Erik Jacobson ) [221029]
  - sata: support legacy IDE mode of SB600 SATA (Bhavana Nagendra ) [221636]
  - xen: quick fix for Cannot allocate memory (Steven Rostedt ) [217056]
  - XEN: Register PIT handlers to the correct domain (Herbert Xu ) [222520]
  - SATA AHCI: support AHCI class code (Jeff Garzik ) [222674]
  - fix vdso in core dumps (Roland McGrath ) [211744]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.3014.el5]
changelog:
  - XEN: Replace inappropriate domain_crash_synchronous use (Herbert Xu ) [221239]
  - SATA timeout boot message  (Peter Martuccelli ) [222108]
  - Netlabel: off by one and init bug in netlbl_cipsov4_add_common (Eric Paris ) [221648]
  - NetLabel: fix locking issues (Eric Paris ) [221504]
  - mm: fix statistics in vmscan.c (Peter Zijlstra ) [222030]
  - usb: Sun/AMI virtual floppy issue (Pete Zaitcev ) [219628]
  - bonding: eliminate rtnl assertion spew (Andy Gospodarek ) [210577]
  - Xen: Make HVM hypercall table NR_hypercalls entries big. (Herbert Xu ) [221818]
  - xen: Add PACKET_AUXDATA cmsg (Herbert Xu ) [219681]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.3002.el5]
changelog:
  - ppc64: initialization of hotplug memory fixes (Janice M. Girouard ) [220065]
  - GFS2: return error for NULL inode (Russell Cattelan ) [217008]
  - scsi: prevent sym53c1510 from claiming the wrong pci id (Chip Coldwell ) [218623]
  - net: Disable the qla3xxx network driver. (Tom Coughlan ) [221328]
  - xen: Disable CONFIG_IDE_GENERIC (Jarod Wilson ) [220099]
  - sound: add support for STAC9205 codec (John Feeney ) [219494]
  - ipv6: panic when bringing up multiple interfaces (Thomas Graf ) [218039]
  - XFRM Audit: correct xfrm auditing panic (Eric Paris ) [222033]
  - edac: fix /proc/bus/pci/devices to allow X to start (John Feeney ) [219288]
  - x86_64: clear_kernel_mapping: mapping has been split. will leak memory. (Larry Woodman ) [218543]
  - xen: >4G guest fix (Steven Rostedt ) [217770]
  -  fs: listxattr syscall can corrupt user space programs (Eric Sandeen ) [220119]
  - CacheFiles: Fix object struct recycling (David Howells ) [215599]
  - Remove capability requirement to reading cap-bound (Eric Paris ) [219230]
  - disable building ppc64iseries (Don Zickus) [219185]
  - update: utrace fixes (Roland McGrath) [214405 215052 216150 209118]
  - PPC config file changes for IPMI and DTLK (Peter Martuccelli ) [210214]
  - update: Xen: emulate PIT channels for vbios support (Stephen C. Tweedie ) [215647]
  - net: qla3xxx panics when eth1 is sending pings (Konrad Rzeszutek ) [220246]
  - s390: inflate spinlock kabi (Jan Glauber ) [219871]
  - x86: Add panic on unrecovered NMI (Prarit Bhargava ) [220829]
  - ppc64: fix booting kdump env. w/maxcpus=1 on power5 (Jarod Wilson ) [207300]
  - netfilter: iptables stop fails because ip_conntrack cannot unload. (Thomas Graf ) [212839]
  - gfs: Fix gfs2_rename lock ordering (for local filesystem) (Wendy Cheng ) [221237]
  - GFS2: Fix ordering of page disposal vs. glock_dq (Steven Whitehouse ) [220117]
  - xen: fix nosegneg detection (Rik van Riel ) [220675]
  - mm: Fix for shmem_truncate_range() BUG_ON() (Larry Woodman ) [219821]
  - x86_64: enabling lockdep hangs the system (Don Zickus ) [221198]
  - dlm: change some log_error to log_debug (David Teigland ) [221326]
  - dlm: disable debugging output (David Teigland ) [221326]
  - fs: ext2_check_page denial of service (Eric Sandeen ) [217018]
  - CPEI - prevent relocating hotplug irqs (Kei Tokunaga ) [218520]
  - Networking: make inet->is_icsk assignment binary (Eric Paris ) [220482]
  - net: b44: phy reset problem that leads to link flap  (Neil Horman ) [216338]
  - autofs - fix panic on mount fail - missing autofs module update (Ian Kent ) [221118]
  - net: act_gact: division by zero (Thomas Graf ) [218348]
  - ppc64: Avoid panic when taking altivec exceptions from userspace. (David Woodhouse ) [220586]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2961.el5]
changelog:
  - new set of kabi whitelists (Jon Masters) [218682]
  - x86: remove unwinder patches from x86/x86_64 (Don Zickus ) [220238]
  - usb: disable ub and libusual (Pete Zaitcev ) [210026]
  - NetLabel: stricter configuration checking (Eric Paris ) [219393]
  - scsi: fix iscsi sense len handling (Mike Christie ) [217933]
  - Xen: emulate PIT channels for vbios support (Stephen C. Tweedie ) [215647]
  - VM: Fix nasty and subtle race in shared mmap'ed page writeback (Eric Sandeen ) [220963]
  - Audit: Add type for 3rd party, emit key for audit events (Eric Paris ) [217958]
  - NFS: system stall on NFS stress under high memory  pressure (Steve Dickson ) [213137]
  - netfilter: IPv6/IP6Tables Vulnerabilities (Thomas Graf ) [220483]
  - acpi: increase ACPI_MAX_REFERENCE_COUNT (Doug Chapman ) [217741]
  - Race condition in mincore can cause ps -ef to hang (Doug Chapman ) [220480]
  - Call init_timer() for ISDN PPP CCP reset state timer (Marcel Holtmann ) [220163]
  - Race condition concerning VLAPIC interrupts (Bhavana Nagendra ) [213858]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2943.el5]
changelog:
  - CIFS: Explicitly set stat->blksize (Steve Dickson ) [210608]
  - FS-Cache: dueling read/write processes fix (Steve Dickson ) [212831]
  - xen: Use swiotlb mask for coherent mappings too (Herbert Xu ) [216472]
  - ia64: Kexec, Kdump on SGI IA64 NUMA machines fixes (George Beshers ) [219091]
  - splice : Must fully check for fifos (Don Zickus ) [214289]
  - Xen: Fix potential grant entry leaks on error (Herbert Xu ) [217993]
  - e1000: truncated TSO TCP header with 82544, workaround (Herbert Xu ) [206540]
  - scsi: fix bus reset in qla1280 driver (George Beshers ) [219819]
  - scsi: add qla4032 and fix some bugs (Mike Christie ) [213807]
  - XFRM: Config Change Auditing (Eric Paris ) [209520]
  - Xen: ia64 guest networking finally works (Jarod Wilson ) [218895]
  - scsi structs for future known features and fixes (Mike Christie ) [220458]
  - squashfs fixup (Steve Grubb ) [219534]
  - ppc64: DLPAR virtual CPU removal failure - cppr bits (Janice M. Girouard ) [218058]
  - ia64: allow HP ZX1 systems to initalize swiotlb in kdump (Neil Horman ) [220064]
  - export tasklist_lock (David Howells ) [207992]
  - gfs2: Initialization of security/acls (Steven Whitehouse ) [206126]
  - x86: handle _PSS object range corectly in speedstep-centrino (Brian Maly ) [211690]
  - GFS2 change nlink panic (Wendy Cheng ) [215088]
  - scsi: fix oops in iscsi packet transfer path (Mike Christie ) [215381]
  - Fix Emulex lpfc ioctl on PPC (Tom Coughlan ) [219194]
  - Xen: Fix agp on x86_64 under Xen (Stephen C. Tweedie ) [217715]
  - Emulex lpfc update to 8.1.10.2 (Tom Coughlan ) [218243]
  - bluetooth: Add packet size checks for CAPI messages (Marcel Holtmann ) [219139]
  - x86_64: create Calgary boot knob (Konrad Rzeszutek ) [220078]
  - cciss bugfixes (Tom Coughlan ) [185021]
  - ia64: Do not call SN_SAL_SET_CPU_NUMBER twice on cpu 0 on booting (Erik Jacobson ) [219722]
  - scsi: Empty /sys/class/scsi_host/hostX/config  file (Janice M. Girouard ) [210239]
  - refresh: Reduce iommu page size to 4K on 64K page PPC systems (Janice M. Girouard) [212097]
  - update: Xen netback: Reenable TX queueing and drop pkts after timeout (Herbert Xu ) [216441]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2910.el5]
changelog:
  - xen: Update xen paravirt framebuffer to upstream protocol (fixes) (Stephen C. Tweedie ) [218048]
  - xen: Update xen paravirt framebuffer to upstream protocol (Stephen C. Tweedie ) [218048]
  - nfs: disable Solaris NFS_ACL version 2  (Steve Dickson ) [215073]
  - xen: EXPORT_SYMBOL(zap_page_range) needs to be moved (Stephen C. Tweedie ) [218476]
  - ppc64: disable unused drivers that cause oops on insmod/rmmod (Janice M. Girouard ) [206658]
  - scsi: GoVault not accessible due to software reset. (Konrad Rzeszutek ) [215567]
  - GFS2 fix DIO deadlock (Steven Whitehouse ) [212627]
  - dlm: fix lost flags in stub replies (David Teigland ) [218525]
  - CacheFiles: Improve/Fix reference counting (David Howells ) [212844]
  - gfs2: Fails back to readpage() for stuffed files (Steven Whitehouse ) [218966]
  - gfs2: Use try locks in readpages (Steven Whitehouse ) [218966]
  - GFS2 Readpages fix (part 2) (Steven Whitehouse ) [218966]
  - gfs2: Readpages fix  (Steven Whitehouse ) [218966]
  - bonding: Don't release slaves when master is admin down (Herbert Xu ) [215887]
  - x86_64: fix execshield randomization for heap (Brian Maly ) [214548]
  - x86_64: check and enable NXbit support during resume (Vivek Goyal ) [215954]
  - GPL export truncate_complete_page (Eric Sandeen ) [216545]
  - mm: reject corrupt swapfiles earlier (Eric Sandeen ) [213118]
  - QLogic qla2xxx - add missing PCI device IDs (Tom Coughlan ) [219350]
  - mpt fusion bugfix and maintainability improvements (Tom Coughlan ) [213736]
  - scsi: make fc transport removal of target configurable (Mike Christie ) [215797]
  - gfs2: don't try to lockfs after shutdown (Steven Whitehouse ) [215962]
  - xen: emulation for accesses faulting on a page boundary (Stephen C. Tweedie ) [219275]
  - gfs2: dirent format compatible with gfs1 (Steven Whitehouse ) [219266]
  - gfs2: Fix size caclulation passed to the allocator. (Russell Cattelan ) [218950]
  - ia64: PAL_GET_PSTATE implementation (Prarit Bhargava ) [184896]
  - CacheFiles: Handle ENOSPC on create/mkdir better (David Howells) [212844]
  - connector: exessive unaligned access (Erik Jacobson ) [218882]
  - revert: Audit: Add type for 3rd party, emit key for audit events (Eric Paris ) [217958]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2876.el5]
changelog:
  - touch softdog during oops (Dave Jones ) [218109]
  - selinux: allow quoted commas for certain catagories in context mounts (Eric Paris ) [211857]
  - xen: oprofile on Intel CORE (Glauber de Oliveira Costa ) [213964]
  - Xen: make ballooning work right (xen part) (Rik van Riel ) [212069]
  - Xen: make ballooning work right (Rik van Riel ) [212069]
  - Xen: HVM crashes on IA32e SMP (Glauber de Oliveira Costa ) [214774]
  - gfs2: Fix uninitialised variable (Steven Whitehouse ) [219212]
  - GFS2: Don't flush everything on fdatasync (Steven Whitehouse ) [218770]
  - Disable PCI mmconf and segmentation on HP xw9300/9400 (Bhavana Nagendra ) [219159]
  - Audit: Add type for 3rd party, emit key for audit events (Eric Paris ) [217958]
  - Fix time skew on Intel Core 2 processors (Prarit Bhargava ) [213050]
  - Xen : Fix for SMP Xen guest slow boot issue on AMD systems (Bhavana Nagendra ) [213138]
  - GFS2: fix mount failure (Josef Whiter ) [218327]
  - cramfs: fix zlib_inflate oops with corrupted image (Eric Sandeen ) [214705]
  - xen: Fix xen swiotlb for b44 module (xen part) (Stephen C. Tweedie ) [216472]
  - xen: Fix xen swiotlb for b44 module (Stephen C. Tweedie ) [216472]
  - scsi: fix stex_intr signature (Peter Zijlstra ) [219370]
  - GFS2: Fix recursive locking in gfs2_permission (Steven Whitehouse ) [218478]
  - GFS2: Fix recursive locking in gfs2_getattr (Steven Whitehouse ) [218479]
  - cifs: Fix mount failure when domain not specified (Steve Dickson ) [218322]
  - GFS2: Fix memory allocation in glock.c (Steven Whitehouse ) [204364]
  - gfs2: Fix journal flush problem (Steven Whitehouse ) [203705]
  - gfs2: Simplify glops functions (Steven Whitehouse ) [203705]
  - gfs2: Fix incorrect fs sync behaviour (Steven Whitehouse ) [203705]
  - fix check_partition routines to continue on errors (David Milburn ) [210234]
  - fix rescan_partitions to return errors properly (David Milburn ) [210234]
  - gfs2: Tidy up bmap & fix boundary bug (Steven Whitehouse ) [218780]
  - Fix bmap to map extents properly (Steven Whitehouse ) [218780]
  - ide-scsi/ide-cdrom module load race fix (Alan Cox ) [207248]
  - dlm: fix receive_request lvb copying (David Teigland ) [214595]
  - dlm: fix send_args lvb copying (David Teigland ) [214595]
  - device-mapper mirroring - fix sync status change (Jonathan Brassow ) [217582]
  - Xen: Copy shared data before verification (Herbert Xu ) [217992]
  - s390: common i/o layer fixes (Jan Glauber ) [217799]
  - Spurious interrups from ESB2 in native mode (Alan Cox ) [212060]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2839.el5]
changelog:
  - Xen: fix xen/ia64/vti panic when config sets maxmem (Aron Griffis ) [214161]
  - Xen: ia64 making it work (Aron Griffis ) [210637]
  - Xen: upstream patches to make Windows Vista work (Steven Rostedt) [214780]
  - enable PCI express hotplug driver (Kei Tokunaga ) [207203]
  - d80211: kABI pre-compatibility (John W. Linville ) [214982]
  - Xen: ia64 kernel unaligned access (Aron Griffis ) [212505]
  - Xen: getting ia64 working; kernel part (Aron Griffis) [210637]
  - Xen: Properly close block frontend on non-existant file (Glauber de Oliveira Costa ) [218037]
  - SHPCHP driver doesn't work if the system was under heavy load (Kei Tokunaga ) [215561]
  - SHPCHP driver doesn't work in poll mode (Kei Tokunaga) [211679]
  - pciehp: free_irq called twice (Kei Tokunaga ) [216940]
  - pciehp: pci_disable_msi() called to early (Kei Tokunaga ) [216939]
  - pciehp: parallel hotplug operations cause kernel panic (Kei Tokunaga ) [216935]
  - pciehp: info messages are confusing (Kei Tokunaga ) [216932]
  - pciehp: Trying to enable already enabled slot disables the slot (Kei Tokunaga ) [216930]
  - CacheFiles: cachefiles_write_page() shouldn't indicate error twice (David Howells) [204570]
  - IPMI - allow multiple Baseboard Management Centers (Konrad Rzeszutek ) [212572]
  - nfs - set correct mode during create operation (Peter Staubach ) [215011]
  - Xen: blkback: Fix potential grant entry leaks on error (Rik van Riel ) [218355]
  - Xen: blkback: Copy shared data before verification (Rik van Riel) [217994]
  - revert: Xen: fix SMP HVM guest timer irq delivery (Rik van Riel ) [213138]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2817.el5]
changelog:
  - Adding in a kabi_whitelist (Jon Masters) [218402]
  - Xen: AMD-V HVM fix for Windows hibernate (Bhavana Nagendra ) [217367]
  - Xen: fix SMP HVM guest timer irq delivery (Rik van Riel ) [213138]
  - NetLabel: bring current with upstream: cleanup/future work (Eric Paris ) [218097]
  - NetLabel: bring current with upstream: performance (Eric Paris ) [218097]
  - NetLabel: bring current with upstream: bugs (Eric Paris ) [218097]
  - TG3 support Broadcom 5756M/5756ME  Controller (John Feeney ) [213204]
  - tg3: BCM5752M crippled after reset (Andy Gospodarek ) [215765]
  - sata ata_piix map values (Geoff Gustafson ) [204684]
  - e1000: Reset all functions after a PCI error (Janice M. Girouard) [211694]
  - prevent /proc/meminfo's HugePages_Rsvd from going negative. (Larry Woodman ) [217910]
  - netlabel: disallow editing of ip options on packets with cipso options (Eric Paris ) [213062]
  - xen netback: Fix wrap to zero in transmit credit scheduler. (Herbert Xu ) [217574]
  - megaraid initialization fix for kdump (Jun'ichi Nick Nomura ) [208451]
  - HFS: return error code in case of error (Eric Paris ) [217009]
  - Xen: fix 2TB overflow in virtual disk driver (Rik van Riel ) [216556]
  - e1000: fix garbled e1000 stats (Neil Horman ) [213939]
  - dlm: use recovery seq number to discard old replies (David Teigland ) [215596]
  - dlm: resend lock during recovery if master not ready (David Teigland ) [215596]
  - dlm: check for incompatible protocol version (David Teigland ) [215596]
  - NetLabel: Do not send audit messages if audit is off (Eric Paris ) [216244]
  - selinux: give correct response to get_peercon() calls (Eric Paris ) [215006]
  - SELinux: Fix oops with non-mls policies (Eric Paris ) [214397]
  - Xen blkback: Fix first_sect check. (Rik van Riel ) [217995]
  - allow the highest frequency if bios think so. (Dave Jones ) [218106]
  - AGP corruption fixes. (Dave Jones ) [218107]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2789.el5]
changelog:
  - Xen: fix vcpu hotplug statistics (Rik van Riel ) [209534]
  - DLPAR and Hotplug not enabled (Janice M. Girouard ) [207732]
  - Reduce iommu page size to 4K on 64K page PPC systems (Janice M. Girouard) [212097]
  - e1000: add (2) device ids (Bruce Allan) [184864]
  - power6: illegal instruction errors during install (Janice M. Girouard) [216972]
  - update_flash is broken across PPC (Janice M. Girouard) [214690]
  - write failure on swapout could corrupt data (Peter Zijlstra) [216194]
  - IBM veth panic when buffer rolls over (Janice M. Girouard ) [214486]
  - Make the x86_64 boot gdt limit exact (Steven Rostedt ) [214736]
  - Xen: make netfront device permanent (Glauber de Oliveira Costa ) [216249]
  - lockdep: fix ide/proc interaction (Peter Zijlstra ) [210678]
  - Xen: fix iSCSI root oops on x86_64 xen domU (Rik van Riel ) [215581]
  - Fix flowi clobbering (Chris Lalancette ) [216944]
  - Enable netpoll/netconsole for ibmveth (Neil Horman ) [211246]
  - dlm: fix size of STATUS_REPLY message (David Teigland ) [215430]
  - dlm: fix add_requestqueue checking nodes list (David Teigland ) [214475]
  - dlm: don't accept replies to old recovery messages (David Teigland ) [215430]
  - x86_64: kdump mptable reservation fix  (Vivek Goyal ) [215417]
  - Add Raritan KVM USB dongle to the USB HID blacklist (John Feeney ) [211446]
  - Fix bogus warning in [un]lock_cpu_hotplug (Prarit Bhargava ) [211301]
  - Xen: Avoid touching the watchdog when gone for too long (Glauber de Oliveira Costa ) [216467]
  - add missing ctcmpc Makefile target (Jan Glauber ) [184608]
  - remove microcode size check for i386 (Geoff Gustafson ) [214798]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2769.el5]
changelog:
  - add the latest 2.6.18.4 security patches (Don Zickus) [217904]
  - revert: mspec failures due to memory.c bad pte problem (Erik Jacobson ) [211854]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2767.el5]
changelog:
  - disable W1 config (Dave Jones ) [216176]
  - Xen netback: Reenable TX queueing and drop pkts after timeout (Herbert Xu ) [216441]
  - Xen: fix profiling (Rik van Riel ) [214886]
  - bnx2: update firmware to correct rx problem in promisc mode (Neil Horman ) [204534]
  - sound-hda: fix typo in patch_realtek.c (John W. Linville) [210691]
  - Fix sys_move_pages when a NULL node list is passed. (Dave Jones ) [214295]
  - proc: readdir race fix (Nobuhiro Tachino ) [211682]
  - device mapper: /sys/block/dm-* entries remain after removal (Milan Broz ) [214905]
  - Fix 64k page table problems on ppc specific ehca driver (Doug Ledford ) [199765]
  - configfs: mutex_lock_nested() fix (Eric Sandeen ) [211506]
  - CIFS: Explicitly set stat->blksize (Eric Sandeen ) [214607]
  - Compute checksum properly in netpoll_send_udp (Chris Lalancette ) [214542]
  - Noisy stack trace by memory hotplug on memory busy system (Kei Tokunaga ) [213066]
  - catch blocks beyond pagecache limit in __getblk_slow (Eric Sandeen ) [214419]
  - xen privcmd: Range-check hypercall index. (Herbert Xu ) [213178]
  - strange messages around booting and acpi-memory-hotplug (Kei Tokunaga) [212231]
  - Fix panic in CPU hotplug on ia64 (Prarit Bhargava ) [213455]
  - Fix spinlock bad magic when removing xennet device (Chris Lalancette ) [211684]
  - netlabel: various error checking cleanups (Eric Paris ) [210425]
  - mspec failures due to memory.c bad pte problem (Erik Jacobson ) [211854]
  - Fix autofs creating bad dentries in NFS mount (David Howells ) [216178]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2747.el5]
changelog:
  - Set HZ to 1000 for kernel and 250 for Xen (Don Zickus) [198594] 
  - Custom Diagnostics kernel module fails to load on RHEL5 (Janice Girouard) [213020] 
  - kernel: FS-Cache: error from cache: -105 (2nd part) (Don Zickus) [214678]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2746.el5]
changelog:
  - configure XPC as a loadable kernel module instead of static (Erik Jacobson) [213903] 
  - kernel BUG at drivers/xen/core/evtchn.c:482! (Glauber de Oliveira Costa) [210672] 
  - IPv6 MRT: 'lockdep' annotation is missing? (Thomas Graf) [209313] 
  - sort PCI device list breadth-first (John Feeney) [209484] 
  - reenable xen pae >4GB patch (Don Zickus)


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2744.el5]
changelog:
  - Kernel Panic on Initial boot of guest (Steven Rostedt) [211633] 
  - kernel unable to read partition (device busy) (Peter Zijlstra) [212191] 
  - QEMU always crashes (Don Zickus) [212625] 
  - kernel: FS-Cache: error from cache: -105 (Steve Dickson) [212831] 
  - DLM oops in kref_put when umounting (Patrick Caulfield) [213005] 
  - gfs umount hung, message size too big (Patrick Caulfield) [213289] 
  - CPU hotplug doesn't work trying to BSP offline (Keiichiro Tokunaga) [213324] 
  - status messages ping-pong between unmounted nodes (Dave Teigland) [213682] 
  - res_recover_locks_count not reset when recover_locks is aborted (Dave Teigland) [213684] 
  - disable CONFIG_ISA (Don Zickus)


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2740.el5]
changelog:
  - Remove support for ipw3945 driver (Don Zickus) [195534] 
  - acpiphp will not load due to unknown symbols (Prarit Bhargava) [209506] 
  - Can not install rhel5 b1 on ipr dasd. (Janice Girouard) [210851] 
  - Can't make SCTP connections between Xen guests (Don Zickus) [212550] 
  - eHEA update to support 64K pages for Power6 (Janice Girouard) [212041] 
  - Failure to boot second kernel on HP hardware (Don Zickus) [212578] 
  - dlm deadlock during simultaneous mount attempts (Dave Teigland) [211914] 
  - CMT-eligible ipw2200/2915 driver (John W. Linville) [184862] 
  - CVE-2006-5174 copy_from_user information leak on s390 (Jan Glauber) [213568] 
  - NFSv4: fs_locations support (Steve Dickson) [212352] 
  - [IPv6] irrelevant rules break ipv6 routing. (Thomas Graf) [209354] 
  - [IPv6] blackhole and prohibit rule types not working (Thomas Graf) [210216] 
  - [KEXEC] bad offset in icache instruction crashes Montecito systems (Jarod Wilson) [212643] 
  - assertion "FALSE" failed in gfs/glock.c (Dave Teigland) [211622] 
  - I/O DLPAR and Hotplug not enabled in RHEL5 (Janice Girouard) [207732]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2739.el5]
changelog:
  - SHPCHP driver doesn't work (Keiichiro Tokunaga) [210478] 
  - ext3/jbd panic (Eric Sandeen) [209647] 
  - Oops in nfs_cancel_commit_list (Jeff Layton) [210679] 
  - kernel Soft lockup detected on corrupted ext3 filesystem (Eric Sandeen) [212053] 
  - CIFS doesn't work (Steve Dickson) [211070]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2737.el5]
changelog:
  - Grant table operations unsuitable for guest domains (Rik van Riel) [210489] 
  - AMD-V HVM windows guest boot menu timer issue (Steven Rostedt) [209001] 
  - iflags.h is not upstream (Steve Whitehouse) [211583] 
  - ACPIPHP doesn't work (Keiichiro Tokunaga) [209677] 
  - IBMVSCSI does not correctly reenable the CRQ (Janice Girouard) [211304] 
  - librdmacm-utils failures (Doug Ledford) [210711] 
  - Badness in debug_mutex_unlock at kernel/mutex-debug.c:80 (Janice Girouard) [208500] 
  - Stratus memory tracking functionality needed in RHEL5 (Kimball Murray) [209173, 211604]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2736.el5]
changelog:
  - Can't unload gnbd module, 128 references (Peter Zijlstra) [211905]
  - ddruid does not recognize dasd drives (Peter Zijlstra) [210030]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2732.el5]
changelog:
  - possible recursive locking detected: cachefilesd (David Howells) [204615] 
  - Stratus memory tracking functionality needed in RHEL5 (Kimball Murray) [209173] 
  - nfs handled rpc error incorrectly (Steve Dickson) [207040] 
  - cachefiles: inode count maintance (Steve Dickson) [209434] 
  - mkinitrd: iSCSI root requires crc32c module (Mike Christie) [210232] 
  - implemented sysrq-w to dump all cpus (Larry Woodman) 
  - enable panic_on_oops (Dave Anderson) 
  - re-enable x86_64 stack unwinder fixes (Don Zickus) 
  - disable kernel debug flags (Don Zickus)


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2728.el5]
changelog:
  - Update FC transport and Emulex lpfc Fibre Channel Driver (Tom Coughlan) [207551] 
  - NFSv4 using memory after its freed fix (Steve Dickson) [206996] 
  - GFS2 dirents are 'unkown' type (Steve Whitehouse) [210493] 
  - Cachefs double unlock (Steve Dickson) [210701] 
  - tty locking cleanup (Prarit Bhargava) [210249] 
  - ibmveth fails in kdump boot (Janice Girouard - IBM on-site partner) [199129] 
  - Kpobes backport from 2.6.19-rc1 (Anil S Keshavamurthy) [210555] 
  - Ia64 - kprobe opcode must reside on 16 bytes alignment (Anil S Keshavamurthy) [210552] 
  - GFS2 forgets to unmap pages (Steve Whitehouse) [207764] 
  - DIO needs to avoid using page cache (Jeffrey Moyer) [207061] 
  - megaraid_sas: update (Chip Coldwell) [209463] 
  - NFS data corruption (Steve Dickson) [210071] 
  - page align bss sections on x86_64 (Vivek Goyal) [210499] 
  - blkbk/netbk modules don't load (Aron Griffis) [210070] 
  - blktap does not build on ia64 (Aron Griffis) [208895] 
  - blkbk/netbk modules don't load (Rik van Riel) [202971] 
  - patches from xen-ia64-unstable (Rik van Riel) [210637] 
  - Xen version strings need to reflect exact Red Hat build number (Stephen Tweedie) [211003] 
  - updated to 2.6.18.1 stable series (Don Zickus) 
  - updated execshield patch (Don Zickus) 
  - revert CONFIG_PCI_CALGARY_IOMMU config (Don Zickus) 
  - disable CONFIG_MAMBO (Don Zickus)


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2727.el5]
changelog:
  - I/O errors with dm-multipath when adding new path (Alasdair Kergon) [169302] 
  - Kdump on i386 fails - Second kernel panics (Vivek Goyal) [207598] 
  - patch to qla4xxx for supporting ioctl module (Mike Christie) [207356] 
  - lockdep fixes (Peter Zijlstra) [208165 209135 204767] 
  - printk cleanup (Dave Jones) 
  - spec file cleanup (Dave Jones, Bill Nottingham) 
  - gfs-dlm fix (Patrick Caulfield) 
  - find-provides fix (Jon Masters)


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2726.el5]
changelog:
  - need to disable all cpu frequency scaling drivers in Xen kernel (Rik van Riel) [210336 208942] 
  - radeon hangs DMA when CONFIG_CALGARY_IOMMU is build in kernel. (Konrad Rzeszutek) [210380] 
  - Got Call Trace message when remove veth module (Janice Girouard) [208938] 
  - cannot generate kABI deps unless kernel is installed (Jon Masters) [203926] 
  - ctcmpc driver (Jan Glauber) [184608] 
  - PTRACE_DETACH doesn't deliver signals under utrace. (Aristeu S. Rozanski F.) [207674] 
  - SG_SCATTER_SZ causing Oops during scsi disk microcode update (Doug Ledford) [207146] 
  - ia64 kprobe fixes (David Smith)


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2725.el5]
changelog:
  - Duplicate dput in sysfs_update_file can cause a panic. (Prarit Bhargava) [209454] 
  - Lock issue with 2.6.18-1.2702.el5, NetworkManager and ipw3945 (John W. Linville) [208890] 
  - cpqarray module fails to detect arrays (Chip Coldwell) [205653] 
  - stex.c driver for Promise SuperTrak EX is missing (Jeff Garzik) [209179] 
  - NetLabel does not audit configuration changes (Eric Paris) [208456] 
  - NetLabel has a race problem in the cache (Eric Paris) [209324] 
  - kernel/lockdep.c:1814/trace_hardirqs_on() (Not tainted) for APM (Peter Zijlstra) [209480] 
  -  correct netlabel secid for packets without a known label (Eric Paris) [210032] 
  - IPSec information leak with labeled networking (Eric Paris) [209171] 
  - NetLabel hot-add memory confict pre-beta2 kenrel x86_64 (Konrad Rzeszutek) [208445] 
  - NFS data corruption (Steve Dickson) [210071] 
  - kernel dm multipath: ioctl support (Alasdair Kergon) [207575] 
  - kernel dm: fix alloc_dev error path (Alasdair Kergon) [209660] 
  - kernel dm snapshot: fix invalidation ENOMEM (Alasdair Kergon) [209661] 
  - kernel dm snapshot: chunk_size parameter is not required after creation (Alasdair Kergon) [209840] 
  - kernel dm snapshot: fix metadata error handling (Alasdair Kergon) [209842] 
  - kernel dm snapshot: fix metadata writing when suspending (Alasdair Kergon) [209843] 
  - kernel dm: full snapshot removal attempt causes a seg fault/kernel bug (Alasdair Kergon) [204796] 
  - dm mirror: remove trailing space from table (Alasdair Kergon) [209848] 
  - kernel dm: add uevent change event on resume (Alasdair Kergon) [209849] 
  - kernel dm crypt: Provide a mechanism to clear key while device suspended (Milan Broz) [185471] 
  - kernel dm: use private biosets to avoid deadlock under memory pressure (Alasdair Kergon) [209851] 
  - kernel dm: add feature flags to structures for future kABI compatibility (Alasdair Kergon) [208543] 
  - kernel dm: application visible I/O errors with dm-multipath and queue_if_no_path when adding new path (Alasdair Kergon) [169302] 
  - refresh ia64-kexec-kdump patch (Don Zickus) 
  - update exec-shield patch (Don Zickus) 
  - revert x86 unwinder fixes (Don Zickus)


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2722.el5]
changelog:
  - update utrace patch to fix s390 build problems
  - ia64 hotswap cpu patch fixes to compile under xen
  - ia64 export fixes


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2718.el5]
changelog:
  - Audit Filtering on PPID for = and != is inverted (Eric Paris) [206425] 
  - Adding Hitachi SANRISE entries into SCSI white list (Chip Coldwell) [206532] 
  - forward port of SCSI blacklist from RHEL4 (Chip Coldwell) [208256] 
  - Need to add ALSA support for Broadwater platform (John W. Linville) [184855] 
  - /proc/<pid>/smaps doesn't give any data (Alexander Viro) [208589] 
  - ACPI based CPU hotplug causes kernel panic (Keiichiro Tokunaga) [208487] 
  - New infiniband 12x power driver opensourced from IBM (Janice Girouard) [184791] 
  - iscsi oops when connection creation fails (Mike Christie) [209006] 
  - nommconf work-around still needed for AMD chipsets (Jim Baker) [207396] 
  - ProPack XPMEM exported symbols (Greg Edwards) [206215] 
  - PCI error recovery bug in e100 and e1000 cards (John W. Linville) [208187] 
  - / on raid fails to boot post-install system (Jan Glauber) [196943] 
  - auditctl fails to reject malformed ARCH filter (Eric Paris) [206427] 
  - oom-killer updates (Larry Woodman) [208583] 
  - NFS is revalidating directory entries too often (Steve Dickson) [205454] 
  - kernel-xen cannot reboot (Stephen Tweedie) [209841] 
  - Unsupported FS's in RHEL 5 Beta 1 (Don Zickus) [206486]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2715.el5]
changelog:
  - RDTSCP Support (Bhavana Nagendra) [185057] 
  - s390 kprobe on larl instruction crashes system (Jan Glauber) [205738] 
  - single stepping is broken when kprobes is configured (Jan Glauber) [205739] 
  - autofs kernel patches resulting from Connectathon testing (Ian Kent) [206952] 
  - Include the qla3xxx networking driver (Konrad Rzeszutek) [208182] 
  - overzealous sanity checking in sys_poll() (Chris Snook) [204705] 
  - automounter cannot shutdown when timeout=0 (Ian Kent) [205836] 
  - Rewrite of journaling data commit code (Eric Sandeen) [207739] 
  - qla4xxx soft lockup when ethernet cable disconnected (Mike Christie) [206063] 
  - hypfs_kill_super() check for initialized root inode (Jan Glauber) [207717] 
  - The Matrox graphics driver is not built (Janice Girouard) [207200]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2714.el5]
changelog:
  - Wrong SELinux context prevents hidd from working (David Woodhouse) [204655] 
  - nfs connectathon component basic test 6 fails.... (Steve Dickson) [208637] 
  - unstick STICKY bit to fix suspend/resume (Dave Jones)


author: Don Zickus <dzickus@redhat.com>
changelog:
  - s390 ccs/ccw subsystem does not have proper uevent support (Pete Zaitcev) [199994] 
  - 'Cannot allocate memory' when cat /proc/scsi/scsi (Chip Coldwell) [200299] 
  - Add support for Kirkwood and Kirkwood LP NICs (John W. Linville) [207776] 
  - remove userspace support from qla4xxx (Mike Christie) [206063] 
  - NetLabel interface has changed in the upstream kernels (Eric Paris) [208119] 
  - lockdep fixes (Peter Zijlstra) [208304 204795]


author: Don Zickus <dzickus@redhat.com>
changelog:
  -Multiple routing tables for IPv6 (Thomas Graf) [179612] 
  -bunch of lockdep fixes (Peter Zijlstra) [200520 208294 208293 208292 208290] 
  -rearrange the cachefs patches for easier future maintance (Steve Dickson) 
  -enable some TCP congestion algorithms (David Miller) 
  -add a test patch (Eric Paris)


author: Don Zickus <dzickus@redhat.com>
changelog:
  -Native SAS and SATA device support - SATA/IDE converter (Janice Girouard) [196336] 
  -kernel unaligned access messages in rhel5a1 (Prarit Bhargava) [198572] 
  -problems with LUNs mapped at LUN0 with iscsi and netapp filers (Mike Christie) [205802] 
  -ext3 fails to mount a 16T filesystem due to overflows (Eric Sandeen) [206721] 
  -possible recursive locking detected - swapper/1 (Peter Zijlstra) [203098] 
  -FS-Cache: error from cache: -28 (David Howells) [204614] 
  -aic94xx driver does not recognise SAS drives in x366 (Konrad Rzeszutek) [206526] 
  -Support for 3945 driver (John W. Linville) [195534] 
  -Memory Hotplug fails due to relocatable kernel patches (Vivek Goyal) [207596] 
  -Potential overflow in jbd for filesystems > 8T (Eric Sandeen) [208024] 
  -2,4-node x460 halts during bootup after installation (Konrad Rzeszutek) [203971]


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - Fix PowerPC audit syscall success/failure check (#204927)
  - Remove offsetof() from <linux/stddef.h> (#207569)
  - One line per header in Kbuild files to reduce conflicts
  - Fix visibility of ptrace operations on ppc32
  - Fix ppc32 SECCOMP


author: Dave Jones <davej@redhat.com>
changelog:
  - reiserfs: make sure all dentry refs are released before
    calling kill_block_super
  - Fix up some compile warnings


author: Juan Quintela <quintela@redhat.com>
changelog:
  - xen HV printf rate limit (rostedt).
  - xen HV update to xen-unstable cset11540:9837ff37e354
  - xen-update:
    * linux-2.6 changeset:   34294:dc1d277d06e0
    * linux-2.6-xen-fedora changeset:   36184:47c098fdce14
    * xen-unstable changeset:   11540:9837ff37e354


author: Juan Quintela <quintela@redhat.com>
changelog:
  - xen update to 2.6.18-rc7-git4.
    * linux-2.6 changeset: 34288:3fa5ab23fee7
    * linux-2.6-xen-fedora changeset: 36175:275f8c0b6342
    * xen-unstable changeset: 11486:d8bceca5f07d


author: Juan Quintela <quintela@redhat.com>
changelog:
  - xen update:
    * linux-2.6 changeset: 34228:ea3369ba1e2c
    * linux-2.6-xen-fedora changeset: 36107:47256dbb1583
    * linux-2.6-xen changeset: 22905:d8ae02f7df05
    * xen-unstable changeset: 11460:1ece34466781ec55f41fd29d53f6dafd208ba2fa


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - Implement futex primitives on IA64 and wire up [gs]et_robust_list again
    (patch from Jakub, #206613)


author: Don Zickus <dzickus@redhat.com>
changelog:
  - add include/asm-x86_64/const.h to exported header file list
    used by the x86 relocatable patch (inside include/asm-x86_64/page.h)


author: Don Zickus <dzickus@redhat.com>
changelog:
  - sync up beta1 fixes and patches
     - includes infiniband driver
     - aic9400/adp94xx updates
     - squashfs s390 fix
  - include x86 relocatable patch at end of list
  - some /proc/kcore changes for x86 relocatable kernel


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - 2.6.18rc7-git1
  - header file fixups
  - use correct arch for 'make headers_install' when cross-building


author: Juan Quintela <quintela@redhat.com>
changelog:
  - xenoprof upstream fix.
  - update xen HV to cset 11394.
  - xen update (3hypercall incompatibility included)
  - linux-2.6 changeset: 34073:b1d36669f98d
  - linux-2.6-xen-fedora changeset: 35901:b7112196674e
  - xen-unstable changeset: 11204:5fc1fe79083517824d89309cc618f21302724e29
  - fix ia64 (xen & net xen).


author: Juan Quintela <quintela@redhat.com>
changelog:
  - update xen-hv to cset 11256 (pre 3 hypercall breakage).
  - remove debug=y from HV compilation.
  - xen update (pre 3 hypercall breakage)
    * linux-2.6 changeset: 33957:421a6d428e95
    * linux-2.6-xen-fedora changeset: 35756:78332fcbe5b0
    * xen-unstable changeset: 11251:5fc1fe79083517824d89309cc618f21302724e29
    * get new irqflags code from linux-2.6.tip-xen.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - update xen HV to xen-unstable cset 11251.
  - fix ia64 xen HV compilation.
  - linux xen kernel update:
    * linux-2.6 changeset: 33681:2695586981b9
    * linux-2.6-xen-fedora changeset: 35458:b1b8e00e7a17
    * linux-2.6-xen changeset: 22861:0b726fcb6780
    * xen-unstable changeset: 11204:5fc1fe79083517824d89309cc618f21302724e29


author: Don Zickus <dzickus@redhat.com>
changelog:
  - update utrace
  - more gfs2-dlm fixes
  - fix xen-devel build directory issue
  - add x86, x86_64 relocatable kernel patch for rhel only (davej, forgive my sins)
    - applied xen relocatable cleanup on top of it
  - add ia64 kexec/kdump pieces


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - Update GFS2 patch (from swhiteho)
  - Enable kernel-headers build
  - Enable i386 build _only_ for kernel-headers


author: Don Zickus <dzickus@redhat.com>
changelog:
  - Another lockdep-fix
  - NFS fix for the connectathon test
  - Enable mmtimer for ia64
  - Add support for iscsi qla4xxx


author: Juan Quintela <quintela@redhat.com>
changelog:
  - xen kernel update.
    * linux-2.6 changeset: 33525:dcc321d1340a
    * linux-2.6-xen-fedora changeset: 35247:400b0cf28ee4
    * linux-2.6-xen changeset: 22813:80c2ccf5c330
    * xen-unstable changeset: 11069:0340e579f06544431e915d17596ac144145a077e
  - xen big config update.  Every config option is the same than normal kernel
    except MICROCODE, TCG_TPM & CONFIG_DEBUG_SLAB.
  - disable XEN_FRAMEBUFFER & XEN_KEYBOARD.
  - make sysrq c to "crash" all kernels.


author: Don Zickus <dzickus@redhat.com>
changelog:
  - NFS 64-bit inode support
  - QLogic firmware
  - SELinux support for range transitions
  - EHEA ethernet driver
  - ppc irq mapping fix


author: Roland McGrath <roland@redhat.com>
changelog:
  - New utrace patch:
    - Fix s390 single-step for real this time.
    - Revamp how arch code defines ptrace compatibility.


author: Dave Jones <davej@redhat.com>
changelog:
  - Update to squashfs 3.1 which should fix stack overflows seen
    during installation.
  - Merge framebuffer driver for OLPC.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - enable ia64 xen again.
  - xen kernel-update linux-2.6-xen-fedora cset 35236:70890e6e4a72.
    * fix ia64 compilation problems.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - disable ia64 xen, it doesn't compile.
  - xen HV update cset 11057:4ee64035c0a3
    (newer than that don't compile on ia64).
  - update linux-2.6-xen patch to fix sort_regions on ia64.
  - fix %setup for xen HV to work at xen HV upgrades.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - xen HV update cset 11061:80f364a5662f.
  - xen kernel update
    * linux-2.6-xen-fedora cset
    * linux-2.6-xen cset 22809:d4b3aba8876df169ffd9fac1d17bd88d87eb67c5.
    * xen-unstable 11060:323eb29083e6d596800875cafe6f843b5627d77b
    * Integrate xen virtual frame buffer patch.
    * Enable CONFIG_CRASH on xen.


author: Dave Jones <davej@redhat.com>
changelog:
  - Another lockdep fix for networking.
  - Change some hotplug PCI options.
  - Daily update from GregKH's git tree.
  - Unbreak SMP locking in oprofile.
  - Fix hotplug CPU locking in workqueue creation.
  - K8 EDAC support.
  - IPsec labelling enhancements for MLS
  - Netlabel: CIPSO labeled networking


author: Roland McGrath <roland@redhat.com>
changelog:
  - New utrace patch:
    - fix s390 single-step
    - first third of ia64 support, enable CONFIG_UTRACE (no ptrace yet)


author: Juan Quintela <quintela@anano.mitica>
changelog:
  - Update linux-2.6-xen patch.
    * linux-2.6-xen-fedora cset 34931:a3fda906fb82
    * linux-2.6-xen cset 22777:158b51d317b76ebc94d61c25ad6a01d121dff750
    * xen-unstable cset  10866:4833dc75ce4d08e2adc4c5866b945c930a96f225


author: Jon Masters <jcm@redhat.com>
changelog:
  - Copy .config to include/config/auto.conf to avoid unnecessary "make prepare".
  - This should finally fix #197220.
  - Pulled in patch-2.6.18-rc3-git2.bz2.sign to fix SRPM build failure.


author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.18rc3-git2
  - Readd patch to allow 460800 baud on 16C950 UARTs.
  - Fix backtracing for interrupt stacks


author: Dave Jones <davej@redhat.com>
changelog:
  - s390 kprobes support.
  - Fix oops in libata ata_device_add()
  - Yet more fixes for lockdep triggered bugs.
  - Merge numerous patches from -mm to improve software suspend.
  - Fix incorrect section usage in MCE code that blew up on resume.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - disable blktap for xen-ia64 (don't compile).
  - enable ia64-xen (it compiles, but still don't boot).


author: Juan Quintela <quintela@redhat.com>
changelog:
  - Update xen patch to linux-2.6-xen-fedora cset 34801.
  	* linux-2.6 cset 33175
  	* no linux-2.6-xen updates.
  - Remove xen x86_64 8 cpu limit.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - review all xen related patches.
  - x86_64 dom0, x86_64 domU and i386 domU should work.
  - fix xen i386 dom0 boot (#200382).


author: Juan Quintela <quintela@redhat.com>
changelog:
  - Workaround the huge timeouts problems on xen HV x86.
  - xen update and cleanup/reorgatization of xen patches.


author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.18rc2-git2 & git3
  - Fix PI Futex exit crash.
  - Fix an inotify locking bug.
  - Add device mapper mirroring patches.


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - Patch from jakub to use sysv style hash for VDSO to fix booting
    on ia64 (#199634, #199595)
  - Fix e1000 crc calculation for things to work with xen
  - Update gfs2 patchset


author: Roland McGrath <roland@redhat.com>
changelog:
  - Clean up spec changes for debuginfo generation to cover Xen case.
  - New version of utrace patch, fixes /proc permissions. (#199014)


author: Don Zickus <dzickus@redhat.com>
changelog:
  - Add in support for nfs superblock sharing and cachefs
    patches from David Howells
  - Disable 'make prepare' hack as it is breaking ppc symlinks
  - Added tracking dirty pages patch from Peter Zijlstra
  - Fix for Opteron timer scaling
  - Fix for Calgary pci hang


author: Juan Quintela <quintela@redhat>
changelog:
  - big xen patch.
  - enable xen again.
  - redo xen config.
  - i686 kernel for xen uses PAE now.
  - new xen Hypervisor cset 10711.


author: Jon Masters <jcm@redhat.com>
changelog:
  - Check in new version of kabitool for kernel deps.
  - Fix kabitool for correct location of symvers.
  - Various other fixes when things broke.


author: Dave Jones <davej@redhat.com>
changelog:
  - Support up to 4GB in the 586 kernel again.
  - Drop the FPU optimisation, it may be the reason for
    strange SIGFPE warnings various apps have been getting.


author: Dave Jones <davej@redhat.com>
changelog:
  - Cleaned up a bunch of bogons in the config files.
  - 2.6.18-rc1-git9,git10 & 2.6.18-rc2
  - improvements to linked list debugging.


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - Temporarily disable -headers subpackage until the problems which
    arise from brew not using older package are dealt with.


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - No headers subpackage for noarch build
  - Fix PI-futexes to be properly unlocked on unexpected exit


author: Dave Jones <davej@redhat.com>
changelog:
  - Add sleazy fpu optimisation.   Apps that heavily
    use floating point in theory should get faster.


author: Dave Jones <davej@redhat.com>
changelog:
  - Add lockdep annotate for bdev warning.
  - Enable autofs4 to return fail for revalidate during lookup


author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.17-git10 & git11
  - Enable fake PCI hotplug driver. (#190437)
  - Remove lots of 'modprobe loop's from specfile.


author: Dave Jones <davej@redhat.com>
changelog:
  - Enable profiling for 586 kernels.
  - 2.6.17-git6 & git7
    This required lots of rediffing. SATA suspend, Promise PATA-on-SATA,
    Xen, exec-shield, and more.  Tread carefully, harmful if swallowed etc.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - remove xen0/xenU/xen0-PAE/xenU-PAE packages
  - disable xen PAE kernel for i386 for now
  - create xen-PAE kernel
  - remove %requires xen from xen kernels


author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.17-rc6-git2
  - Add MyMusix PD-205 to the unusual USB quirk list.
  - Silence noisy unimplemented 32bit syscalls on x86-64.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - rebase xen to linux-2.6 cset 27412
  - rebase xen to linux-2.6-xen cset 22608
  - rebase HV cset 10314


author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.17rc6. Special 6/6/6 edition, what could go wrong?
  - Add a kdump kernel for PPC64 (Don Zickus)
  - Enable SCHED_STATS


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-419.el5]
changelog:
  - [net] dccp: Use AF-independent rebuild_header routine (Hannes Frederic Sowa) [1424751]
  - [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424633] {CVE-2017-6074}
  - [redhat] kernel.spec.template: disable autoloading for dccp proto (Hannes Frederic Sowa) [1425177]


author: 17:10:14 +0200 Philipp Reisner <phil@linbit.com>
changelog:
  - drbd (8.0.3-1)
   * Fixed a race condition that could cause us to continue to traverse a bio
     after it was freed. (led to an OOPS)
   * Fixed a race condition that could cause us to use members of an ee, after
     it was freed. (led to various weirdness)
   * Language fixes for the man pages.
   * The drbdsetup commands (events, wait-connect,...) release the lock now.
   * Minor fixes and updates to the user land tools and to the peer outdater.


author: 21:32:39 +0200 Philipp Reisner <phil@linbit.com>
changelog:
  - drbd (8.0.2-1)
   * Removed a bug that could cause an OOPS in drbd_al_to_on_disk_bm()
   * Improved the robustness of the UUID based algorithm that decides
     about the resync direction.
   * Fixed the error handling in case a the open() of a backing
     blockdevice fails.
   * Fixed a race condition that could cause a "drbdadm disconnect" to hang.
   * More verbosity in we can not claim a backing block device.
   * More verbosity and paranoia in the bitmap area.
   * On some vendor kernels 8.0.1 did not load because of kzalloc. fixed.
   * Fault injection can now not only be turned on or off, but can be 
     enabled on a per device basis.
   * Fixed the scripts and files needed to build drbd into a kernel.


author: 10:10:26 +0200 Philipp Reisner <phil@linbit.com>
changelog:
  - drbd (8.0.1-1)
   * Fixed some race conditions that could trigger an OOPS when the loca disk
     failes and DRBD detaches itself from the failing disk.
   * Added a missing call to drbd_try_outdate_peer().
   * LVM's LVs expose ambiguous queue settings. When a RAID-0 (md) PV is
     used the present a segment size of 64k but at the same time allow only
     8 sectors. Fixed DRBD to deal with that fact corretly.
   * New option "always-asbp" to also use the after-after-split-brain-policy
     handlers, even it is not possible to determine from the UUIDs that
     the data of the two nodes was related in the past.
   * More verbosity in case a bio_add_page() fails.
   * Replaced kmalloc()/memset() with kzmalloc(), and a wrapper for older kernls
   * A fast version of drbd_al_to_on_disk_bm(). This is necessary for short
     (even sub-second) switchover times while having large "al-extents" settings.
   * Fixed drbdadm's array overflows (of on stack objects)
   * drbdsetup can now dump its usage in a XML format
   * New init script for gentoo
   * Fixed Typos in the usage of /proc/sysrq-trigger in the example config.


author: 17:30:23 +0200 Philipp Reisner <phil@linbit.com>
changelog:
  - drbd (8.0rc2-1)
   * Added the well known automagiacally adjust drbd_config.h to
     make drbd compile on every by vendor's backports defaced 
     kernel. ( Linux-2.6.x only of course )
   * Fixed races with starting and finishing resync processes 
     while heavy application IO is going on.
   * Ported DRBD to the new crypto API (and added a emulation of the
     now API on top of the old one for older 2.6.x kernels)
   * Code to perform better on ethernet networks with jumbo
     frames.
   * Bugfixes to our request code (race conditions).
   * Every error code that is returned by drbdsetup has a 
     textual description by now.


author: 15:19:10 +0200 Philipp Reisner <phil@linbit.com>
changelog:
  - drbd (8.0rc1-1)
   * The drbd-peer-outdater got updated to work in multi node heartbeat
     clusters. (But we still not suceeded to get this into Heartbeat's
     repository accepted.)
   * Fixed resync decission after a crash in a pri-pri cluster.
   * Implemented the ping-timeout option for "sub-second" failover clusters.
   * Implemented all the "violently" options in the reconnect handling.
   * Updated man pages of drbd.conf and drbdsetup.
   * Removed the "self-claiming" on secondary nodes.
   * Fixed an uncountable number of bugs.


author: 15:20:54 +0200 Philipp Reisner <phil@linbit.com>
changelog:
  - drbd (8.0pre6-1)
   * All panic() calls where removed from DRBD.
   * IO errors while accessing the backing storage device are now handled
     correct.
   * Conflict detection for two primaries is in place and tested.
   * More tracing stuff
   * Lots of bugs found and fixed


author: 22:03:54 +0200 Philipp Reisner <phil@linbit.com>
changelog:
  - drbd (8.0pre5-1)
   * The request code was completely rewritten.
   * The write conflict detection code for primary-primary is currently
     broken, but will be fixed soon.
   * drbdsetup is no longer based on IOCTL but works now via
     netlink/connector.
   * drbd_panic() is on its way out.
   * A runtime configurable tracing framework got added.
   * A lot of effort was put into finding and fixing bugs.


author: 12:04:41 +0200 Philipp Reisner <phil@linbit.com>
changelog:
  - drbd (8.0pre4-1)
   * Added the "drbd-peer-outdater" heartbeat plugin.
   * New ("cluster wide") state changes. (Cluster wide serialisation of
     major state changes, like becomming primary, invalidateing a disk etc...)
   * Write requests are now sent by the worker instead out of the process's
     context that calls make_request().
   * The worker thread no longer gets restarted upon loss of connection.
   * A testsuite developed by students of 'FH Hagenberg' was added.


author: 13:46:18 +0200 Philipp Reisner <phil@linbit.com>
changelog:
  - drbd (8.0pre3-1)
   * Now it works on device mapper (LVM) as well as on "real" block devices.
   * Finally (after years) a sane "drbdadm adjust" imprementation, which is
     really really robust.
   * Fixes for 64bit kernel / 32 bit userland environments
   * Fixes in the sys-v init script
   * Renamed "--do-what-I-say" to "--overwrite-data-of-peer". Hopefully
     people now understand what this option does.


author: 17:53:56 +0200 Philipp Reisner <phil@linbit.com>
changelog:
  - drbd (8.0-pre2-1)
   * removed the "on-disconnect" and "split-brain-fix" config options and
     added the "fencing" config option instead.
   * Updated all manpages to cover drbd-8.0
   * /proc/drbd shows the whole drbd_state_t, as well the logging of state
     changes shows every field of drbd_state_t now.
   * Deactivated most of the TCQ code for now, since it changed again
     in the mainline kernel.
   * Minor other fixes.


author: 11:37:56 +0200 Philipp Reisner <phil@linbit.com>
changelog:
  - drbd (8.0_pre1-1)
   * Removed support for Linux-2.4.x
   * Cleanup of the wire protocol.
   * Added optional peer authentication with a shared secret.
   * Consolidated state changes into a central function.
   * Improved, tunable after-split-brain recovery strategies.
   * Always verify all IDs used in the protocol that are used as pointers.
   * Introduced the "outdate" disk state, and commands for managing it.
   * Introduced the "drbdmeta" command, and require the user to create
     meta-data explicitly.
   * Support for primary/primary (for OCFS2, GFS...)
   * Replaced the sync-groups with the sync-after mechanism.
   * The "common" section in the configuration file.
   * Replaced the generation counters (GCs) with data-generation-UUIDs
   * Improved performance by using Linux-2.6's BIOs with up to 32k per
     IO request. Before we transferred only up to 4k per IO request.
   * A Warning if the disk sizes are more than 10% different.
   * A connection teardown packet to differentiate between a crash
     of the peer and a peer that is shut down gracefully.
   * External imposable SyncPause states, to serialize DRBD's resynchronisation
     with the resynchronisation of backing storage's RAID configurations.
   * Backing storage can be hot added to disk less nodes.
   * Prepared for advanced integration to Heartbeat-2.0
   * Changed internal APIs so that missed writes of the meta-data super
     block are reported as they happen.
   * The http://usage.drbd.org sub project.
   * Rewrote the scanner/parser of drbd.conf. 10 times smaller/faster and
     easier to maintain.
   * Asynchronous meta-data IO [ Code drop from the DRBD+ branch ]


author: Johnny Hughes <johnny@centos.org>
changelog:
  - Initial use in CentOS-5
  - Added paevar and modified paevar, smpvar, xenvar, xdumpvar to follow
    EL5 and not FC6 naming conventions.


author: Miroslav Grepl <mgrepl@redhat.com> - 1.33.4-5.6
changelog:
  - Add
    - selinux_virtual_domain_context_path
    - selinux_virtual_image_context_path
  Resolves:#582612


author: Dan Walsh <dwalsh@redhat.com> - 1.33.4-5.1
changelog:
  - Break out utilities into separate package so rpm -V libselinux will work
  - Stop writing to stderr when matchpathcon has an error
  Resolves: #190314


author: Dan Walsh <dwalsh@redhat.com> - 1.33.4-3
changelog:
  - Fix python selinux module segfault in getfilecon
  - Fix get_default_context_with_level
  Resolves: #224637


author: Dan Walsh <dwalsh@redhat.com> - 1.33.4-1
changelog:
  - Upstream wanted some minor changes, upgrading to keep api the same
  - Upgrade to upstream
  	* Merged selinux_check_securetty_context() and support from Dan Walsh.
  Resolves: #200110


author: Dan Walsh <dwalsh@redhat.com> - 1.33.3-1
changelog:
  - Upgrade to upstream
  	* Merged patch for matchpathcon utility to use file mode information
  	  when available from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.1-2
changelog:
  - Add James Antill patch for login verification of MLS Levels
  -  MLS ragnes need to be checked, Eg. login/cron. This patch adds infrastructure.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.1-1
changelog:
  - Upgrade to latest from NSA
  	* Merged updated flask definitions from Darrel Goeddel.
   	  This adds the context security class, and also adds
  	  the string definitions for setsockcreate and polmatch.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.29-1
changelog:
  - Upgrade to latest from NSA
  	* Merged av_permissions.h update from Steve Grubb,
  	  adding setsockcreate and polmatch definitions.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.27-1
changelog:
  - Upgrade to latest from NSA
  	* Merged patch to not log avc stats upon a reset from Steve Grubb.
  	* Applied patch to revert compat_net setting upon policy load.
  	* Merged file context homedir and local path functions from
  	  Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.25-1
changelog:
  - Upgrade to latest from NSA
  	* Merged file context homedir and local path functions from
  	  Chris PeBenito.
  	* Rework functions that access /proc/pid/attr to access the
  	  per-thread nodes, and unify the code to simplify maintenance.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.24-1
changelog:
  - Upgrade to latest from NSA
  	* Merged return value fix for *getfilecon() from Dan Walsh.
  	* Merged sockcreate interfaces from Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.22-1
changelog:
  - Upgrade to latest from NSA
  	* Merged no-tls-direct-seg-refs patch from Jeremy Katz.
  	* Merged netfilter_contexts support patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.30.19-1
changelog:
  - Upgrade to latest from NSA
  	* Lindent.
  	* Merged {get,set}procattrcon patch set from Eric Paris.
  	* Merged re-base of keycreate patch originally by Michael LeMay from Eric Paris.
  	* Regenerated Flask headers from refpolicy.
  	* Merged patch from Dan Walsh with:
  	  - Added selinux_file_context_{cmp,verify}.
  	  - Added selinux_lsetfilecon_default.
  	  - Delay translation of contexts in matchpathcon.


author: Dan Walsh <dwalsh@redhat.com> 1.30.15-1
changelog:
  - Upgrade to latest from NSA
  	* Merged patch from Dan Walsh with:
  	*   Added selinux_getpolicytype() function.
  	*   Modified setrans code to skip processing if !mls_enabled.
  	* Set errno in the !selinux_mnt case.
  	* Allocate large buffers from the heap, not on stack.
  	  Affects is_context_customizable, selinux_init_load_policy,
  	  and selinux_getenforcemode.


author: Dan Walsh <dwalsh@redhat.com> 1.30.10-1
changelog:
  - Upgrade to latest from NSA
  	* Merged simple setrans client cache from Dan Walsh.
  	  Merged avcstat patch from Russell Coker.
  	* Modified selinux_mkload_policy() to also set /selinux/compat_net
  	  appropriately for the loaded policy.


author: Dan Walsh <dwalsh@redhat.com> 1.30.8-1
changelog:
  - More fixes for translation cache
  - Upgrade to latest from NSA
  	* Added matchpathcon_fini() function to free memory allocated by
  	  matchpathcon_init().


author: Dan Walsh <dwalsh@redhat.com> 1.30.6-1
changelog:
  - Upgrade to latest from NSA
  	* Merged getfscreatecon man page fix from Dan Walsh.
  	* Updated booleans(8) man page to drop references to the old
  	  booleans file and to note that setsebool can be used to set
  	  the boot-time defaults via -P.


author: Dan Walsh <dwalsh@redhat.com> 1.30.5-1
changelog:
  - Upgrade to latest from NSA
  	* Merged fix warnings patch from Karl MacMillan.	
  	* Merged setrans client support from Dan Walsh.
  	  This removes use of libsetrans.
  	* Merged patch to eliminate use of PAGE_SIZE constant from Dan Walsh.
  	* Merged swig typemap fixes from Glauber de Oliveira Costa.


author: Dan Walsh <dwalsh@redhat.com> 1.30.3-1
changelog:
  - Upgrade to latest from NSA
  	* Added distclean target to Makefile.
  	* Regenerated swig files.
  	* Changed matchpathcon_init to verify that the spec file is
  	  a regular file.
  	* Merged python binding t_output_helper removal patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30-1
changelog:
  - Make some fixes so it will build on RHEL4
  - Upgrade to latest from NSA
  	* Updated version for release.
  	* Altered rpm_execcon fallback logic for permissive mode to also
  	  handle case where /selinux/enforce is not available.


author: Dan Walsh <dwalsh@redhat.com> 1.29.4-1
changelog:
  - Upgrade to latest from NSA
  	* Added format attribute to myprintf in matchpathcon.c and
  	  removed obsoleted rootlen variable in init_selinux_config().


author: Dan Walsh <dwalsh@redhat.com> 1.29.3-1
changelog:
  - Upgrade to latest from NSA
  	* Merged several fixes and improvements from Ulrich Drepper
  	  (Red Hat), including:
  	  - corrected use of getline
  	  - further calls to __fsetlocking for local files
  	  - use of strdupa and asprintf
  	  - proper handling of dirent in booleans code
  	  - use of -z relro
  	  - several other optimizations
  	* Merged getpidcon python wrapper from Dan Walsh (Red Hat).


author: Dan Walsh <dwalsh@redhat.com> 1.29.2-1
changelog:
  - Upgrade to latest from NSA
  	* Merged call to finish_context_translations from Dan Walsh.
  	  This eliminates a memory leak from failing to release memory
  	  allocated by libsetrans.


author: Dan Walsh <dwalsh@redhat.com> 1.27.28-1
changelog:
  - Update to latest from NSA
  	* Added MATCHPATHCON_VALIDATE flag for set_matchpathcon_flags() and
  	  modified matchpathcon implementation to make context validation/
  	  canonicalization optional at matchpathcon_init time, deferring it
  	  to a successful matchpathcon by default unless the new flag is set
  	  by the caller.
  	* Added matchpathcon_init_prefix() interface, and
  	  reworked matchpathcon implementation to support selective
  	  loading of file contexts entries based on prefix matching
  	  between the pathname regex stems and the specified path
  	  prefix (stem must be a prefix of the specified path prefix).


author: Dan Walsh <dwalsh@redhat.com> 1.27.25-1
changelog:
  - Update to latest from NSA
  	* Added -f file_contexts option to matchpathcon util.
  	  Fixed warning message in matchpathcon_init().
  	* Merged Makefile python definitions patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.27.22-1
changelog:
  - Update to latest from NSA
  	* Merged make failure in rpm_execcon non-fatal in permissive mode
  	  patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.27.21-1
changelog:
  - Update to latest from NSA
  	* Added MATCHPATHCON_NOTRANS flag for set_matchpathcon_flags()
  	  and modified matchpathcon_init() to skip context translation
  	  if it is set by the caller.


author: Dan Walsh <dwalsh@redhat.com> 1.27.20-1
changelog:
  - Update to latest from NSA
  	* Added security_canonicalize_context() interface and
  	  set_matchpathcon_canoncon() interface for obtaining
  	  canonical contexts.  Changed matchpathcon internals
  	  to obtain canonical contexts by default.  Provided
  	  fallback for kernels that lack extended selinuxfs context
  	  interface.
  - Patch to not translate mls when calling setfiles


author: Dan Walsh <dwalsh@redhat.com> 1.27.19-1
changelog:
  - Update to latest from NSA
  	* Merged seusers parser changes from Ivan Gyurdiev.
  	* Merged setsebool to libsemanage patch from Ivan Gyurdiev.
  	* Changed seusers parser to reject empty fields.


author: Dan Walsh <dwalsh@redhat.com> 1.27.14-1
changelog:
  - Update to latest from NSA
  	* Merged selinux_path() and selinux_homedir_context_path()
  	  functions from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.12-1
changelog:
  - Update to latest from NSA
  	* Merged get_default_context_with_rolelevel and man pages from
  	  Dan Walsh (Red Hat).
  	* Updated call to sepol_policydb_to_image for sepol changes.
  	* Changed getseuserbyname to ignore empty lines and to handle
  	no matching entry in the same manner as no seusers file.


author: Dan Walsh <dwalsh@redhat.com> 1.27.9-1
changelog:
  - Update to latest from NSA
  	* Changed selinux_mkload_policy to try downgrading the
  	latest policy version available to the kernel-supported version.
  	* Changed selinux_mkload_policy to fall back to the maximum
  	policy version supported by libsepol if the kernel policy version
  	falls outside of the supported range.


author: Dan Walsh <dwalsh@redhat.com> 1.27.7-1
changelog:
  - Update to latest from NSA
  	* Changed getseuserbyname to fall back to the Linux username and
  	NULL level if seusers config file doesn't exist unless 
  	REQUIRESEUSERS=1 is set in /etc/selinux/config.
  	* Moved seusers.conf under $SELINUXTYPE and renamed to seusers.


author: Dan Walsh <dwalsh@redhat.com> 1.27.6-1
changelog:
  - Update to latest from NSA
  	* Added selinux_init_load_policy() function as an even higher level
  	interface for the initial policy load by /sbin/init.  This obsoletes
  	the load_policy() function in the sysvinit-selinux.patch. 
  	* Added selinux_mkload_policy() function as a higher level interface
  	for loading policy than the security_load_policy() interface.


author: Dan Walsh <dwalsh@redhat.com> 1.27.4-1
changelog:
  - Update to latest from NSA
  	* Merged fix for matchpathcon (regcomp error checking) from Johan
  	Fischer.  Also added use of regerror to obtain the error string
  	for inclusion in the error message.


author: Dan Walsh <dwalsh@redhat.com> 1.27.3-1
changelog:
  - Update to latest from NSA
  	* Changed getseuserbyname to not require (and ignore if present)
  	the MLS level in seusers.conf if MLS is disabled, setting *level
  	to NULL in this case.


author: Dan Walsh <dwalsh@redhat.com> 1.25.7-1
changelog:
  - Update from NSA
  	* Merged modified form of patch to avoid dlopen/dlclose by
  	the static libselinux from Dan Walsh.  Users of the static libselinux
  	will not have any context translation by default.


author: Dan Walsh <dwalsh@redhat.com> 1.25.6-1
changelog:
  - Update from NSA
  	* Added public functions to export context translation to
  	users of libselinux (selinux_trans_to_raw_context,
  	selinux_raw_to_trans_context).


author: Dan Walsh <dwalsh@redhat.com> 1.25.4-1
changelog:
  - Update from NSA
  	* Hid translation-related symbols entirely and ensured that 
  	raw functions have hidden definitions for internal use.
  	* Allowed setting NULL via context_set* functions.
  	* Allowed whitespace in MLS component of context.
  	* Changed rpm_execcon to use translated functions to workaround
  	lack of MLS level on upgraded systems.


author: Dan Walsh <dwalsh@redhat.com> 1.25.3-1
changelog:
  * Merged context translation patch, originally by TCS,
  	  with modifications by Dan Walsh (Red Hat).


author: Dan Walsh <dwalsh@redhat.com> 1.25.2-1
changelog:
  - Update from NSA
  	* Merged several fixes for error handling paths in the
  	  AVC sidtab, matchpathcon, booleans, context, and get_context_list
  	  code from Serge Hallyn (IBM).   Bugs found by Coverity.
  	* Removed setupns; migrated to pam.
  	* Merged patches to rename checkPasswdAccess() from Joshua Brindle.
  	  Original symbol is temporarily retained for compatibility until 
  	  all callers are updated.


author: Dan Walsh <dwalsh@redhat.com> 1.23.11-1
changelog:
  - Update from NSA
  	* Merged avcstat and selinux man page from Dan Walsh.
  	* Changed security_load_booleans to process booleans.local 
  	  even if booleans file doesn't exist.


author: Dan Walsh <dwalsh@redhat.com> 1.23.10-1
changelog:
  - Update from NSA
  	* Merged set_selinuxmnt patch from Bill Nottingham (Red Hat).
  	* Rewrote get_ordered_context_list and helpers, including
  	  changing logic to allow variable MLS fields.


author: Dan Walsh <dwalsh@redhat.com> 1.23.4-1
changelog:
  - Update from NSA
  	* Merged fix for set_matchpathcon* functions from Andreas Steinmetz.
  	* Merged fix for getconlist utility from Andreas Steinmetz.


author: Dan Walsh <dwalsh@redhat.com> 1.23.1-1
changelog:
  - Update from NSA
  	* Added set_matchpathcon_flags() function for setting flags
  	  controlling operation of matchpathcon.  MATCHPATHCON_BASEONLY
  	  means only process the base file_contexts file, not 
  	  file_contexts.homedirs or file_contexts.local, and is for use by
  	  setfiles -c.
  	* Updated matchpathcon.3 man page.


author: Dan Walsh <dwalsh@redhat.com> 1.21.10-1
changelog:
  - Update from NSA
  	* Merged matchpathcon patch for file_contexts.homedir from Dan Walsh.
  	* Added selinux_users_path() for path to directory containing
  	  system.users and local.users.


author: Dan Walsh <dwalsh@redhat.com> 1.21.7-1
changelog:
  - Update from NSA
  	* Modified avc_dump_av to explicitly check for any permissions that
  	  cannot be mapped to string names and display them as a hex value.
  	* Regenerated av_permissions.h.


author: Dan Walsh <dwalsh@redhat.com> 1.21.5-1
changelog:
  - Update from NSA
  	* Generalized matchpathcon internals, exported more interfaces,
  	  and moved additional code from setfiles into libselinux so that
  	  setfiles can directly use matchpathcon.


author: Dan Walsh <dwalsh@redhat.com> 1.21.4-1
changelog:
  - Update from NSA
  	* Prevent overflow of spec array in matchpathcon.
  	* Fixed several uses of internal functions to avoid relocations.
  	* Changed rpm_execcon to check is_selinux_enabled() and fallback to
  	  a regular execve if not enabled (or unable to determine due to a lack
  	  of /proc, e.g. chroot'd environment).


author: Dan Walsh <dwalsh@redhat.com> 1.19.4-1
changelog:
  - Update to latest from upstream
  	* Changed matchpathcon to return -1 with errno ENOENT for 
  	  <<none>> entries, and also for an empty file_contexts configuration.


author: Dan Walsh <dwalsh@redhat.com> 1.19.3-1
changelog:
  - Upgrade to upstream
  	* Removed some trivial utils that were not useful or redundant.
  	* Changed BINDIR default to /usr/sbin to match change in Fedora.
  	* Added security_compute_member.
  	* Added man page for setcon.


author: Steve Grubb <sgrubb@redhat.com> 1.18.1-2
changelog:
  - Add patch to make setsebool update bool on disk
  - Make togglesebool have a rollback capability in case it blows up inflight


author: Dan Walsh <dwalsh@redhat.com> 1.17.14-1
changelog:
  - Upgrade to latest  from NSA
  	* Merged setenforce and removable context patch from Dan Walsh.
  	* Merged build fix for alpha from Ulrich Drepper.
  	* Removed copyright/license from selinux_netlink.h - definitions only.


author: Dan Walsh <dwalsh@redhat.com> 1.17.6-1
changelog:
  - Add strcasecmp in selinux_config
  - Update from NSA
  	* Changed avc_has_perm_noaudit to not fail on netlink errors.
  	* Changed avc netlink code to check pid based on patch by Steve Grubb.
  	* Merged second optimization patch from Ulrich Drepper.
  	* Changed matchpathcon to skip invalid file_contexts entries.
  	* Made string tables private to libselinux.
  	* Merged strcat->stpcpy patch from Ulrich Drepper.
  	* Merged matchpathcon man page from Dan Walsh.
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.5-1
changelog:
  - Update from NSA
  	* Merged second optimization patch from Ulrich Drepper.
  	* Changed matchpathcon to skip invalid file_contexts entries.
  	* Made string tables private to libselinux.
  	* Merged strcat->stpcpy patch from Ulrich Drepper.
  	* Merged matchpathcon man page from Dan Walsh.
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.2-1
changelog:
  - Add matchpathcon man page
  - Latest from NSA
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.1-1
changelog:
  - Latest from NSA
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.15.1-1
changelog:
  - Update to latest from NSA
  - Add fix to only get old path if file_context file exists in old location


author: Johnny Hughes <johnny@centos.org> - 2:2.3.3-7.0.1.el5.centos
changelog:
  - Added PGSQL support
  - bumped up the release by adding .0.1 to ensure this package is newer than the one in base


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.3.3-7
changelog:
  - Dropped unnecessary requires
    Resolves: rhbz#915901
  - Backported TLS cache redirection from postfix-2.6
    Resolves: rhbz#977629


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.3.3-5
changelog:
  - Packaged example scripts
    Resolves: rhbz#251677
  - Fixed recipient duplicate elimination
    Resolves: rhbz#474541
  - Compiled with mysql support
    Resolves: rhbz#502412
  - Clarified documentation about reject_invalid_helo_hostname
    Resolves: rhbz#514948
  - Fixed milter communication if single header is larger than 64k
    Resolves: rhbz#617069
  - Improved init script to check for PID
    Resolves: rhbz#645348
  - Fixed mailq, newaliases, sendmail, aliases man pages display
    Resolves: rhbz#664627


author: Thomas Woerner <twoerner@redhat.com> 2:2.3.3-2.2
changelog:
  - fixed postfix privilege problem with symlinks in the mail spool directory
    (CVE-2008-2936)
    Resolves: rhbz#456718


author: Thomas Woerner <twoerner@redhat.com> 2:2.3.2-1
changelog:
  - new version 2.3.2 with major upstream fixes:
    - corrupted queue file after a request to modify a short message header
    - panic after spurious Milter request when a client was rejected
    - maked the Milter more tolerant for redundant "data cleanup" requests
  - applying pflogsumm-conn-delays-dsn-patch from postfix tree to pflogsumm


author: Thomas Woerner <twoerner@redhat.com> 2:2.2.10-1
changelog:
  - new version 2.2.10
  - added option LDAP_DEPRECATED to support deprecated ldap functions for now
  - fixed build without pflogsumm support (#188470)


author: Thomas Woerner <twoerner@redhat.com> 2:2.2.5-2.1
changelog:
  - replaced postconf and postalias call in initscript with newaliases (#156358)
  - fixed initscripts messages (#155774)
  - fixed build problems when sasl is disabled (#164773)
  - fixed pre-definition of mailbox_transport lmtp socket path (#122910)


author: Thomas Woerner <twoerner@redhat.com> 2:2.2.0-1
changelog:
  - new version 2.2.0
  - cleanup of spec file: removed external TLS and IPV6 patches, removed 
    smtp_sasl_proto patch
  - dropped samples directory till there are good examples again (was TLS and
    IPV6)
  - v2.2.0 fixes code problems: #132798 and #137858


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.5-5.1
changelog:
  - fixed open relay bug in postfix ipv6 patch: new version 1.26 (#146731)
  - fixed permissions on doc directory (#147280)
  - integrated fixed fqdn patch from Joseph Dunn (#139983)


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.5-2.2
changelog:
  - automated postalias call in init script
  - removed postconf call from spec file: moved changes into patch


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.5-2
changelog:
  - switched over to system aliases file and database in /etc/ (#117661)
  - new reuires and buildrequires for setup >= 2.5.36-1


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.4-1
changelog:
  - new version 2.1.4
  - new ipv6 and tls+ipv6 patches: 1.25-pf-2.1.4
  - new pfixtls-0.8.18-2.1.3-0.9.7d patch


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.1-3.1
changelog:
  - fixed directory permissions in %doc (#125406)
  - fixed missing spool dirs (#125460)
  - fixed verify problem for aliases.db (#125461)
  - fixed bogus upgrade warning (#125628)
  - more spec file cleanup


author: John Dennis <jdennis@redhat.com> 2:2.0.18-4
changelog:
  - remove version from pflogsumm subpackage, it was resetting the
    version used in the doc directory, fixes bug 119213


author: John Dennis <jdennis@finch.boston.redhat.com> 2:2.0.18-1
changelog:
  - bring source up to upstream release 2.0.18
  - include pflogsumm, fixes bug #68799
  - include smtp-sink, smtp-source man pages, fixes bug #118163


author: John Dennis <jdennis@porkchop.devel.redhat.com>
changelog:
  - set sasl back to v2 for mainline, this is good for fedora and beyond,
    for RHEL3, we'll branch and set set sasl to v1 and turn off ipv6


author: John Dennis <jdennis@porkchop.devel.redhat.com>
changelog:
  - revert back to v1 of sasl because LDAP still links against v1 and we can't 
  - bump revision for build
    have two different versions of the sasl library loaded in one load image at
    the same time. How is that possible? Because the sasl libraries have different 
    names (libsasl.so & libsasl2.so) but export the same symbols :-(
    Fixes bugs 115249 and 111767


author: John Dennis <jdennis@finch.boston.redhat.com> 2:2.0.16-4
changelog:
  - remove mysqlclient prereq, fixes bug 101779
  - remove md5 verification override, this fixes bug 113370. Write parse-postfix-files
    script to generate explicit list of all upstream files with ownership, modes, etc.
    carefully add back in all other not upstream files, files list is hopefully
    rock solid now.


author: John Dennis <jdennis@finch.boston.redhat.com> 2:2.0.16-3
changelog:
  - add zlib-devel build prereq, fixes bug 112822
  - remove copy of resolve.conf into chroot jail, fixes bug 111923


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - upgrade to new 2.0.11 upstream release
  - fix authentication problems
  - rewrite SASL documentation
  - upgrade to use SASL version 2
  - Fix bugs 75439, 81913 90412, 91225, 78020, 90891, 88131


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - upgrade to release 2.0.6
  - remove chroot as this is now the preferred installation according to Wietse Venema, the postfix author


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fix shell in /etc/passwd (#68373)
  - fix documentation in /etc/postfix (#65858)
  - Provides: /usr/bin/newaliases (#66746)
  - fix autorequires by changing /usr/local/bin/perl to /usr/bin/perl in a
    script in %doc (#68852), although I don't think this is necessary anymore


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Fixed missing smtpd.conf file for SASL support and included SASL Postfix
    Red Hat HOWTO (#62505).
  - Included SASL2 support patch (#68800).


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.4-1
changelog:
  - 1.1.4
  - TLS 0.8.4
  - Move postalias run from %post to init script to work around
    anaconda being broken.


author: Nalin Dahyabhai <nalin@redhat.com> 1.1.3-3
changelog:
  - adjust the default postfix-files config file to match the alternatives setup
    by altering the arguments passed to post-install in the %install phase
    (otherwise, it might point to sendmail's binaries, breaking it rather rudely)
  - adjust the post-install script so that it silently uses paths which have been
    modified for use with alternatives, for upgrade cases where the postfix-files
    configuration file isn't overwritten
  - don't forcefully strip files -- that's a build root policy
  - remove hard requirement on openldap, library dependencies take care of it
  - redirect %postun to /dev/null
  - don't remove the postfix user and group when the package is removed


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.3-2
changelog:
  - listen on 127.0.0.1 only by default (#60071)
  - Put config samples in /usr/share/doc/postfix-2.3.3 rather than
    /etc/postfix (#60072)
  - Some spec file cleanups


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.3-1
changelog:
  - 1.1.3, TLS 0.8.3
  - Fix updating
  - Don't run the statistics cron job
  - remove requirement on perl Date::Calc


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.2-1
changelog:
  - Initial Red Hat Linux packaging, based on spec file from
    Simon J Mudd <sjmudd@pobox.com>
  - Changes from that:
    - Set up chroot environment in triggers to make sure we catch glibc errata
    - Remove some hacks to support building on all sorts of distributions at
      the cost of specfile readability
    - Remove postdrop group on deletion


author: Phil Knirsch <pknirsch@redhat.com> 2:3.6.4-5
changelog:
  - Bumped release and rebuilt
  - Removed s390 and s390x again until i get around fixing the bitops related
    stuff (which is borken on big-endian).


author: Tim Powers <timp@redhat.com>
changelog:
  - rebuilt, for some reason the build date for the binary is not
    matching the build date for the SRPM.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update to 3.x.0f, many important fixes in fsck
  - Add missing README (#30556)
  - Use -v2 by default in mkreiserfs (#30556)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - initial RPM
  - changes from base package:
    - Fix a security problem (yet another tmp file issue)
    - Fix an fd leak
    - Get rid of the config.cache file, it contains broken settings
    - Install man pages
    - Fix locations of binaries, installing this stuff to "bin" is
      not really a good idea
    - Fix build on alpha and ia64


author: Robert Scheck <redhat@linuxnetz.de> 2.8.3-1
changelog:
  - Upgrade to 2.8.3 (#196599)
  - Applied Russell Coker's suggested patch to improve the
    performance for SELinux machines significantly (#120622)


author: Jeremy Katz <katzj@redhat.com> - 2.6.13-1
changelog:
  - update to 2.6.13 per request of upstream
  - fixes mount by label of xfs on former raid partition (#122043)


author: Daniel de Kok <daniel@centos.org> 36-2
changelog:
  - Kernel 2.6.18-53.el5 now defines some CPU_.*FROZEN macros, but doesn't
    define others. Modify compatibility macros to check each case.


author: Johnny Hughes <johnny@centos.org> 2.2.46-1
changelog:
  - upgraded to upstream version 2.2.46
  - added e2fsprogs-devel and ncurses-devel as build requirements.


